last executing test programs: 9.382475971s ago: executing program 2 (id=7073): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r1}, 0xc) (async, rerun: 32) r2 = socket$kcm(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r2, 0x6, 0xe, &(0x7f0000000600), 0xfde7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xfffffffffffffffd}, 0x8600, 0x5, 0x3, 0x6, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x0, 0x2}, {}]}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x71}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x1, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x201, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500), 0x4) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) 6.870223798s ago: executing program 0 (id=7077): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, &(0x7f0000000180), 0x4) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x22, 0x0, 0x24, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xcd4, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0710670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x40000000}, 0x10}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="050000000000000000000000dfffff51b5a4cff2194effffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000200"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000f80)={&(0x7f0000000040)="36c005c77bb04619020a487910d3a7336eec217b84d3cb8008f91382e8458f0f366f76802657524c8c100117d8f94feacc2b8e76d741f486331e04036620cd", &(0x7f00000002c0)=""/191, &(0x7f0000000380)="c36391632dce4bc3eef274178156252872055fd3ae22f9f4b68f2322d00ff19be4a64ee1107e5bdf314951256f597d7613729a07d32109f5bb5da4dfef0acaa1750740069726cb09c995ee2835e10151a99067b1f461f2ae886e2e206e20d8e30ab15d9daca57b903733358efef25c44d0efcc673d5575625aa49721d90c813cda84342f466ee49f693c517086a1b5efa6585dc6ed538da7e41a40a214712e47e6175ee40c10a1e0e608b45148e6125a58", &(0x7f0000000680)="ce9fd0d58b5036ad52d48501fc46548b97194b8b883156eaeacef2decc4ecc5a2aee442377e137ce9e916b75ca915fa540a1fce92611bb04fa80c11bb535e88d7d8297b0aa316ded7128541279c795f98b480d3cac617e1f551cdedd8cdc9da2e7582b171a5fcecae3873778fda4f56bb5f2fc28a46d004a592604e1bc615c22517c374d210845472572f8cff10a4b4e86fed2", 0x101, r7, 0x4}, 0x38) 6.782557092s ago: executing program 2 (id=7078): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000008400000000000000000080"], 0x18}, 0xd1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000b40)=[0x0], &(0x7f0000000b80)=[0x0], 0x0, 0x7b, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@fwd={0x1}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f, 0x0, 0x5f]}}, &(0x7f0000000e40)=""/56, 0x39, 0x38, 0x0, 0xa88}, 0x28) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x4000, 0x0, 0x0, 0x119, 0x0, 0xffffffffffffffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x40) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r4, @ANYRES8=r4], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) (async) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x76, &(0x7f0000000000)=r7, 0x8) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8, 0x9, 0x0, 0x20000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f00)={0xffffffffffffffff, 0xd79, 0x8}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) (async, rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1a, 0x2, 0xa1, 0x10, 0x1401, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) (rerun: 32) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x20, 0xf, 0x401, 0x7, 0x60800, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x13, 0x1, &(0x7f0000000880)=@raw=[@exit], &(0x7f00000009c0)='GPL\x00', 0x80000001, 0xc8, &(0x7f0000000a00)=""/200, 0x41000, 0x11, '\x00', r1, @fallback=0x8, r2, 0x8, &(0x7f0000000ec0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0xa, &(0x7f00000010c0)=[r4, r7, r8, r9, r10, r11, r12, r13], &(0x7f0000001100)=[{0x3, 0x3, 0x2, 0x3}, {0x3, 0x1, 0x5}, {0x2, 0x4, 0xb, 0x4}, {0x3, 0x2, 0x9, 0xc}, {0x3, 0x2, 0x8, 0x4}, {0x4, 0x2, 0x4, 0x7}, {0x2, 0x2, 0x5, 0x7}, {0x3, 0x5, 0xb, 0x1}, {0x3, 0x3, 0x7, 0xc}, {0x0, 0x1, 0xa, 0x7}], 0x10, 0x1}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (rerun: 64) r14 = socket$kcm(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000186900000a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r15 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) (async) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) (async) r16 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x49}, @ldst={0x2, 0x3, 0x0, 0x8, 0x6, 0x8, 0x1}, @generic={0x5, 0x9, 0x2, 0xc98, 0x40}, @jmp={0x5, 0x0, 0x5, 0x1, 0x4, 0xfffffffffffffef4}, @jmp={0x5, 0x1, 0x7, 0x7, 0xa, 0x100, 0x8}, @alu={0x0, 0x1, 0x1, 0x3, 0x8, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x5a, &(0x7f0000000240)=""/90, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x4, 0x5, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0xd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r16, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x8a, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 6.716686995s ago: executing program 1 (id=7079): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="e105302155f16f061d6b92e3523ff7dcc37e0b99bdd7322647cd4cdf8fe9ca83f14cc2ffa89703b672c921982288b4acacea5efdf5d70ff0ad4256f29e05ade97825ebc7f1c5", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="6c5f720d3e3159005c99b0c390aa8bd866e12a278909a7014933ab46166a70877b54bd0b5226dade05efb2a75dd43a21e847b29feda7ed26623cd9618a68756202ca4897c0d3445df2fec99a909792da390039761dce6987cdf2e26be2574e865bbbc1f4568dce596a", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{r1}, &(0x7f0000000400), &(0x7f0000000980)='%pS \x00'}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}, 0x0) 6.41688184s ago: executing program 0 (id=7080): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4ae1559e}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="170000000000000006000000ff"], 0x50) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xc}, 0x80f12, 0x0, 0x0, 0x9, 0x1000, 0x0, 0x107, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r4 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000a080c00", 0x54}], 0x1, 0x0, 0x0, 0x7}, 0x8084) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8924, &(0x7f0000000080)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x29) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000300)=ANY=[@ANYRES8], 0x0, 0x65, 0x62}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', 0x0, r6, 0x1, 0x1, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6, 0xffff, 0x4, 0x4, r7, 0x100, '\x00', r8, r0, 0x4, 0x4, 0x2, 0xb}, 0x50) 6.40271291s ago: executing program 1 (id=7081): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x3}, 0x50) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) r8 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc0189436, 0x2000141a) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$sock(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)='1UB', 0x5dc}], 0x1}, 0x1) sendmsg(r10, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[], 0x98}, 0x20000000) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 5.944629292s ago: executing program 1 (id=7082): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000003}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000027c0)={0x6, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000fdffffff000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000f5ffffffb6020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 5.944048502s ago: executing program 0 (id=7083): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000010c0)={0xffffffffffffffff, &(0x7f0000000000)="2e174994ceef203fc2fa621e38bf27db37b998e7d217a8bd02a2156c21e57c8601961c1ba19bd258d13bd514ab5f9bd5c14ab3813a1ae0af2c3adc7573b58dc073da9a72ebc64c9d0853393d8d06c1a62bd111bb5cf85ca4b462a8777d9021e0c38296906f3a442a3073976b5c67678a21d72c88589aa7b652e25daeb9451c6e59ebe7ddc03edb60a530b97755f6e5e2235cb6441b3d6860a128f894221a4a23863da452ba2ba7dec0f557b87b7175bf97d2", &(0x7f00000000c0)=""/4096}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x403, 0xaaf04684de878bda, 0x4e3, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) 5.817259608s ago: executing program 1 (id=7084): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000280)=""/265, 0x26, 0x109, 0x1}, 0x1f) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x7}, 0x0, 0x8, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f0000000040)=0x8000000000000000, 0x12) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x19, &(0x7f0000000180), 0x4) 5.604352608s ago: executing program 0 (id=7085): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x8042) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8f4c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000003c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000a40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xbfda, '\x00', r6, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xef, 0x0, 0xffffffffffffffff, 0xcc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x200, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r4, 0x58, &(0x7f00000008c0)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000df19d0b500000017df000000950000000000000002c4122be0c61000d5a68cc518220000", @ANYRES32=0x1, @ANYBLOB="00000000040000008f860001fcffffff9500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x53, &(0x7f00000001c0)=""/83, 0x41000, 0x6c, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x10, 0x7ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r5, r7, r8, 0xffffffffffffffff, r1, r9, r10, r11], 0x0, 0x10, 0x98}, 0x94) r12 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_RESET(r12, 0x2403, 0x10000) 5.604145958s ago: executing program 2 (id=7086): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000100)={'some', 0x20, 0x1, 0x20, 0x7}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000001c98000000000000bf980000000000004c080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.486294563s ago: executing program 1 (id=7087): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000080), &(0x7f00000001c0)='%ps \x00'}, 0x20) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x1}, 0x100, 0x0, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu==0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0}, 0x6240, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xd8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="000000000000f4ff000000000016000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000000000000000000801200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) 5.382665788s ago: executing program 2 (id=7088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8, 0x1, 0xd, 0xa79}, {0x900, 0xf, 0x1e, 0x5}, {0x7, 0x5, 0x9}, {0xcb8, 0x3, 0x81, 0x6}, {0x2, 0x0, 0x3, 0x2}, {0x0, 0x1, 0x6, 0x10001}, {0x2, 0xdb, 0x6, 0x7}]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'macvlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000140)) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)=0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={&(0x7f0000000240)="9206573b678eb87bc4fb6f6052a34e76f521f9367d83ce1a8358c48e15b3d70a3f7016b4f6a197d610200a42493c74204e2aa6c65faea0051155497d552dfc324464311a85d7de5395fe13fc64c4f3e517aca7e668acb68b30aaaabb16ee0041a25535207265a328e05392ae387b4c24f37077c22774a87286ac2cf255b76c50936220dddf9086f044170d6c21421376054a4ac804cc69c2f5fd43738b3b2f11a4c1022bd9f84c8b5ad16e868c4400b477476fef7b446394618ce14f9d56d20a660f18b4b1d61b1cc53940e337bf815967b9c8cdd9836e5440b388e378188a837c5e7daebed958b1177095800e904983b70e8c", &(0x7f0000000340)=""/122, &(0x7f00000003c0)="0b901a6dc074e66cd5ec7af1c9d5fdcc1963c83bf51d4a77a1cbd86f863d1d3e261e5dbf86eb1c28e41d3c168cb83d91719efa29e23ccb5feb8b4ab290cf9c", &(0x7f0000000400)='IZ', 0x2, r3}, 0x38) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000500)) r4 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f00000006c0)={&(0x7f0000000540)=@sco, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/51, 0x33}], 0x1, &(0x7f0000000640)=""/90, 0x5a}, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000700)) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000740)) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000007c0)={0x5, &(0x7f0000000780)=[{0x4, 0xa9, 0x6, 0xfff}, {0x40, 0x9, 0x2, 0x80000000}, {0x3c7, 0x80, 0x52, 0x1}, {0x8, 0x7, 0x4, 0x6}, {0xf, 0x3, 0xfc, 0x2}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r4, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@enum64={0x7, 0x6, 0x0, 0x13, 0x1, 0xa, [{0x7, 0xcd, 0x409e}, {0xd, 0x5, 0x8}, {0x9, 0xfffffffa, 0x7}, {0x2, 0x1ff, 0x2}, {0x7, 0x0, 0x10}, {0x1, 0x86, 0x8}]}]}, {0x0, [0x2e, 0x30, 0x61, 0x5f, 0x61]}}, &(0x7f0000000ac0)=""/19, 0x73, 0x13, 0x1, 0x200}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0x7fffffff, 0x0}, 0x8) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c00)=@generic={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xc, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000840)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000880)=""/222, 0x41000, 0x1, '\x00', r6, @fallback=0x3b, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x1, 0xd, 0xff, 0x5}, 0x10, r8, r9, 0x4, &(0x7f0000000c40)=[r3, r3], &(0x7f0000000c80)=[{0x4, 0x4, 0xf, 0x8}, {0x5, 0x4, 0x6, 0x4}, {0x0, 0x1, 0x4, 0x2}, {0x5, 0x4, 0xd, 0xb}], 0x10, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r3, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)=r10}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000e40)={r9, r11}, 0xc) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x4, '\x00', r6, r7, 0x1, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000011c0)={&(0x7f0000000e80)="037560ab54a35671089fefdd25cefd30d1ab9bedc43165e2a6eeeddb5ca68027c072d5414e03e51b186b0657614f5b5c1a9cb534aa78a1c1a68fd2e768ff58b0ce0632daada567e7816ef3b28b1cfd2d758754880e8be2f8d49570f5e6f2ab22a4d671c255d3f606d638ecd7f558b1840086d1c918432ddc98dac29356bfadaa4caa06f83422f15fd875e452d3aaee9617c39758a32cd4081e8a4612", &(0x7f0000000f40)=""/114, &(0x7f0000000fc0)="18bf9270ad304bf7b51c1112cd24b394db1ffe7971fecd5ab913b7f27f80503e7d8d8a70d9d912692a4d6617a764b5bf74278d2170718ab9253f5a6d405b483c5dbd5b3e3449076f4b819fb378cda3d5ab5b796c57208ffc0dc03c8f6d544de053ca6ef11e1945b45549ee6617639726d25eda4ab279d28bd22b55b03688bb3b0691b52a039a1a11613fde2daaa159e32495c4999f3bc1a04824fb07cd36eacaa6f13a107f07594845a34c7b661d403dbc7e7a0ebc37bcc4e7e9ab21c865e00608f8cd2fcca9de7525debe9e866a7cd6641581dd0745f1b6cdb5a4501d166db4588804f7be4f4c0baaa0", &(0x7f00000010c0)="8b72d694ea6351c7f574461c2b036b542f883ee8a2f60fc693d21892296eb7d86c889a31cff132e4afd0035022c15f76f1d4c1dd3474ef568b6f23713251dff54b33f9c2bbeeba477d632e96f3d108d35e543933fc5c16bd94a11aa31df5527a0ada34efe15407fbb6b0bb4a86e351e936ef680e2aefd24286ecaf3f8e43a555", 0x5, r12}, 0x38) r13 = openat$cgroup_ro(r3, &(0x7f0000001200)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@float={0x2, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x61, 0x5f, 0x0, 0x30, 0x61, 0x61, 0x61, 0x5f, 0x5f]}}, &(0x7f0000001280)=""/183, 0x2f, 0xb7, 0x0, 0x8, 0x10000, @value=r13}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x2, 0x5, 0x9, 0x9e9a42b0fce1a1cc, r3, 0x255, '\x00', 0x0, r14, 0x2, 0x1, 0x0, 0xc, @value=r7, @void, @value=r13}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={r5, 0x2, 0x18}, 0xc) 5.155494819s ago: executing program 3 (id=7089): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001140)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000980)='%pS \x00'}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x74802, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xfffffffffffffffc}, 0x0, 0xca, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, 0x0, 0x0) sendmsg$kcm(r7, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d2d, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8000, 0x6}, 0x105101, 0x0, 0x3fd, 0x5, 0x101, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xb) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRES8=r11], 0x12) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r12 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x9f, &(0x7f00000001c0)=""/159, 0x0, 0x0, '\x00', r14, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x5, [@float={0x7, 0x0, 0x0, 0x10, 0xc}, @datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{0x1, 0xa2d2, 0x4}], "71d099"}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x30, 0x2e, 0x41]}}, &(0x7f0000000640)=""/19, 0x5d, 0x13, 0x0, 0x9, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x2e, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x24000000}, @ldst={0x3, 0x1, 0x6, 0x0, 0x8, 0xfffffffffffffffe, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0xf2, &(0x7f00000004c0)=""/242, 0x41000, 0x64, '\x00', r14, 0x1c, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e5fe, r2, 0x2, 0x0, &(0x7f00000006c0)=[{0x1, 0x1, 0x4}, {0x0, 0x4, 0xb, 0x8}], 0x10, 0x10001}, 0x94) 4.567003996s ago: executing program 3 (id=7090): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640f1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4001, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)="1394", 0x2}, {0x0}, {&(0x7f0000000900)}], 0x3}, 0x4051) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x1, 0xd, 0x82, 0x0, 0x58, 0x91, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x57, 0x2, @perf_config_ext={0x401, 0xde}, 0x1e0a, 0x6b7, 0x20e7, 0x9, 0x2, 0x3ff, 0x5, 0x0, 0x3ff, 0x0, 0xad}, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20007ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.20417748s ago: executing program 3 (id=7091): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000003}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000027c0)={0x6, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000fdffffff000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000f5ffffffb6020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.065185807s ago: executing program 3 (id=7092): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x11, 0x2f, 0x0, 0xc) r3 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x2, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f00000001c0)=r1, 0xa1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x92, 0x1, 0x1, 0x61}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x92, 0x1, 0x1, 0x61}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) 556.646394ms ago: executing program 2 (id=7093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000feffffff000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002001000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 556.197054ms ago: executing program 3 (id=7094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d35, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000082000800000200"/20, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r4, @ANYRES32, @ANYRES16=r0], 0x50) (async) socketpair(0x1d, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1252605c1e0000000b0000000400000002000001", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r9, &(0x7f0000000a00)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) close(0xffffffffffffffff) (async) r10 = socket$kcm(0xa, 0x5, 0x0) (async) r11 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x3c, &(0x7f0000000640), 0x4) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x4000, r10}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="001000"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r10, @ANYRESDEC=0x0, @ANYRES8=r5], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) close(0x3) (async) r13 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r13, 0x2405, r13) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) 555.193154ms ago: executing program 1 (id=7095): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="1703db7b1f67dedff1d934dc54d535b737fd41d45608910612bf08c0d7c8ea1fb598e1de9a4f70676ed16b482b46d2021f97316b4c770f1125da6114c32967d2927a622c3ff1aa6d5145d8f54273c866c32bd49dcc23f4aad79a5eaa718154e14b5bd45fd094088032d0258ea2563feb93a3c12fcd6556e2a1b3870d0cdcbef06d86dafe3fc37d3093b63ff39ea1fab4e9fa8d7dd793d0d834c5ebfdbecf7e8153fbb28e3d90bdeede116eeae72aa919b43c371743f349dfe5", 0x0, 0x4}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b40)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000ac0)={0x1, 0x80, 0x7, 0x6, 0x6, 0xad, 0x0, 0x9, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0xa7b0e727432ed02d, @perf_config_ext={0x7}, 0x9000, 0x8, 0x8, 0x0, 0x1, 0x343, 0x2, 0x0, 0x5, 0x0, 0x8}, r1, 0xc, r0, 0x9) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000940)='devices.allow\x00', 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x12200, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'syzkaller1\x00', 0x700}) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x1, 0x101}, 0x0, 0x0, 0x0, 0x0, 0x201, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) 526.811255ms ago: executing program 0 (id=7096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xffffffffffffff5d, 0x0, &(0x7f0000000500)="ff860000000000001c0000000098", 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4004}, 0x50) 375.183332ms ago: executing program 0 (id=7097): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000007f781850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c1c800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 392.5µs ago: executing program 2 (id=7098): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x1, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="7fe87f391400000000000000", @ANYRES32=r1, @ANYBLOB="63a85899861a2cac015feedb6400a7c90ea78df7d5f57a270df22a01d0384d7796e1ca5dec80e2e6e04e1a080051abedbc8ca9d886e2342922bdd765adc912dc24d4d1bab3ddef7ed8973393ff080a93255ae0cd7e91a01e56cb139d96ce9b6711a40000000000000000", @ANYRES64=0x0], 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES8=r5, @ANYRES16=r3, @ANYRES8=r1, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(0xffffffffffffffff) (async, rerun: 64) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) (rerun: 64) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440") r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r10 = socket$kcm(0xa, 0x2, 0x0) (rerun: 64) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 0s ago: executing program 3 (id=7099): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc482, 0x2, 0x0, 0x0, 0x6d50745d}, 0x0, 0x0, r0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff0331684426", 0x0, 0x1c1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x3, 0x2, 0xa1, 0x0, 0x0, 0xeb3, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x5, 0xd}, 0x2005, 0x9, 0x0, 0x1, 0xffffffffffffffff, 0xfe3, 0x65, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000001b00)=@nfc_llcp={0xa, 0x0, 0x200000, 0x0, 0x0, 0x0, "18ea938b1092fe34ca1eeda8daa60a9abde305cbe1656b4d7ab1424dc694f28875f0cede8569287d775dfa00dcddf939cb9b95773506d96096728b8d71cb32"}, 0x80, 0x0}, 0x20000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10000000) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x6, 0x1, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x42028, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x4, 0x10000}, 0x5281, 0x5, 0x5, 0x1, 0x5, 0x3ff, 0x3, 0x0, 0x6, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000280)='&\x00\x00 \x00@\xdf\x00\x00Gf\x9c\xadw\v\xa4\xb7d\xac\xe7\x98\xa8\xb0\xcf\x9bF\xef\xe2\x9f\xaa\xc14\xfb\x86\x0eoW\b\x13\x15\bS\xc4\x85\xf8\x15\xfd\x98\xd9\tb\xf86\xc2T\fX\x82+\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0xad, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="745522a1123fecd4ab33a868014c5f8253a00c2792f5711a425aa31f3ffb8bdfe8f4ae08cd5c8c787db9fda1cc35cba661014d01e25912648db8dce2ac6bde06bf303a4b36fc2dafd10e80e505968d6f1ba5c3cc18248ed9e94412b7e2a98708b04c97c84fd7a2e6ac658eff6d8c071ddc5fb2a8e4b249d653b5eb236ea34c7a4bdbc017fc3c2c896ff0cfa4cdd915b6b3da526756138910", @ANYRES64=r5], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x37, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x2, 0x0, 0x0) r7 = socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x1, 0x830d}, 0x60, 0x2, 0xfffffffe, 0x1, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)}, 0x10021) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d) kernel console output (not intermixed with test programs): idge_slave_1) entered blocking state [ 1098.083829][T22667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.152932][T23889] netlink: 'syz.1.4597': attribute type 4 has an invalid length. [ 1098.710722][ T5787] Bluetooth: hci2: command tx timeout [ 1098.999569][T22680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.234042][T22680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.347305][T22680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.483977][T22680] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.543061][T23642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.686748][T23927] netlink: 'syz.0.4603': attribute type 21 has an invalid length. [ 1099.798067][T23642] veth0_vlan: entered promiscuous mode [ 1099.853934][T21997] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1099.863735][T21997] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1099.873501][T21997] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1099.891673][T21997] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1099.899956][T21997] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1099.908083][T21997] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1099.971277][T23642] veth1_vlan: entered promiscuous mode [ 1100.124087][T23642] veth0_macvtap: entered promiscuous mode [ 1100.146473][T23642] veth1_macvtap: entered promiscuous mode [ 1100.456259][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1100.497020][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.543665][T23642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1100.586876][T23642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1100.649388][T23642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1100.682116][T23642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1100.966864][T23642] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.986435][T23642] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.000321][T23642] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.009587][T23642] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.514327][T23967] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1101.695328][T23986] netlink: 'syz.1.4612': attribute type 13 has an invalid length. [ 1101.704840][T23986] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4612'. [ 1101.771597][T23932] chnl_net:caif_netlink_parms(): no params data found [ 1101.870708][T22662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.904420][T22662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.003110][T21997] Bluetooth: hci1: command tx timeout [ 1102.118499][T22662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.140769][T23998] netlink: 'syz.0.4613': attribute type 3 has an invalid length. [ 1102.148581][T23998] netlink: 'syz.0.4613': attribute type 8 has an invalid length. [ 1102.160008][T22662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.169678][T23998] netlink: 'syz.0.4613': attribute type 6 has an invalid length. [ 1102.179361][T23998] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.4613'. [ 1102.303996][T24005] netlink: 'syz.0.4614': attribute type 3 has an invalid length. [ 1102.342032][T24005] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.4614'. [ 1102.376781][T22680] hsr_slave_0: left promiscuous mode [ 1102.383238][T22680] hsr_slave_1: left promiscuous mode [ 1102.390290][T22680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1102.398565][T22680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1102.412733][T22680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1102.450379][T22680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.466068][T22680] bridge0: port 3(team0) entered disabled state [ 1102.550008][T22680] veth1_macvtap: left promiscuous mode [ 1102.561539][T22680] veth0_macvtap: left promiscuous mode [ 1102.574216][T22680] veth1_vlan: left promiscuous mode [ 1102.591477][T22680] veth0_vlan: left promiscuous mode [ 1103.451004][T24024] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4616'. [ 1103.776087][T22680] team_slave_1 (unregistering): left promiscuous mode [ 1103.786860][T22680] team_slave_1 (unregistering): left allmulticast mode [ 1103.798643][T22680] team0 (unregistering): Port device team_slave_1 removed [ 1103.854893][T22680] team_slave_0 (unregistering): left promiscuous mode [ 1103.864701][T22680] team_slave_0 (unregistering): left allmulticast mode [ 1103.873547][T22680] team0 (unregistering): Port device team_slave_0 removed [ 1103.925691][T22680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.978313][T22680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.081192][T21997] Bluetooth: hci1: command tx timeout [ 1104.355580][T22680] bond0 (unregistering): Released all slaves [ 1104.478374][T23932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.486634][T23932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.496355][T23932] bridge_slave_0: entered allmulticast mode [ 1104.505742][T23932] bridge_slave_0: entered promiscuous mode [ 1104.563089][T23932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.570350][T23932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.605465][T23932] bridge_slave_1: entered allmulticast mode [ 1104.638815][T23932] bridge_slave_1: entered promiscuous mode [ 1104.790126][T23932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.844603][T23932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.919755][T24037] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4619'. [ 1104.968057][T24037] netlink: 'syz.0.4619': attribute type 7 has an invalid length. [ 1105.031189][T23932] team0: Port device team_slave_0 added [ 1105.072007][T23932] team0: Port device team_slave_1 added [ 1105.298807][T24041] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4620'. [ 1105.632842][T24045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1105.672581][T23932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.712634][T23932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.840265][T23932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.892811][T23932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.920415][T23932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.979634][T23932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.159900][T21997] Bluetooth: hci1: command tx timeout [ 1108.241649][T21997] Bluetooth: hci1: command tx timeout [ 1109.026273][T23932] hsr_slave_0: entered promiscuous mode [ 1109.082453][T24076] netlink: 'syz.0.4624': attribute type 3 has an invalid length. [ 1109.090298][T24076] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4624'. [ 1109.113721][T23932] hsr_slave_1: entered promiscuous mode [ 1109.206089][T24077] netlink: 'syz.0.4624': attribute type 3 has an invalid length. [ 1109.244023][T24077] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4624'. [ 1110.012181][T24108] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4629'. [ 1110.736938][T23932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1110.768725][T23932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1110.937206][T23932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1110.976048][T23932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1111.316932][T23932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.382415][T23932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.401015][T24149] netlink: 'syz.0.4636': attribute type 11 has an invalid length. [ 1111.423449][T22678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.430702][T22678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.431595][T24149] netlink: 187184 bytes leftover after parsing attributes in process `syz.0.4636'. [ 1111.485599][T22680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.492894][T22680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.505773][T24151] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4636'. [ 1111.540364][T24149] netlink: 'syz.0.4636': attribute type 11 has an invalid length. [ 1111.571301][T24151] openvswitch: netlink: Flow key attribute not present in set flow. [ 1111.587898][T24154] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4636'. [ 1111.666323][T23932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1111.677112][T24149] netlink: 187184 bytes leftover after parsing attributes in process `syz.0.4636'. [ 1111.703380][T24154] openvswitch: netlink: Flow key attribute not present in set flow. [ 1112.001873][T24172] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4642'. [ 1112.175304][T23932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.196649][T24179] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4643'. [ 1112.350280][T23932] veth0_vlan: entered promiscuous mode [ 1112.368072][T23932] veth1_vlan: entered promiscuous mode [ 1112.434856][T23932] veth0_macvtap: entered promiscuous mode [ 1112.453645][T23932] veth1_macvtap: entered promiscuous mode [ 1112.486204][T23932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.501509][T23932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.512373][T23932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.525719][T23932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.539505][T23932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.565479][T23932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.578634][T23932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.595255][T23932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.619226][T23932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.637416][T23932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.646359][T23932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.655632][T23932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.788711][T22680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.806970][T22680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.913108][T22676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.932101][T22676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.070674][T24193] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1113.271351][T24203] netlink: 'syz.2.4648': attribute type 3 has an invalid length. [ 1114.217442][T24203] C: renamed from team_slave_0 (while UP) [ 1114.233365][T24203] __nla_validate_parse: 1 callbacks suppressed [ 1114.233392][T24203] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4648'. [ 1114.255962][T24205] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4647'. [ 1114.480963][T24213] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4649'. [ 1114.532754][T24213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1114.648712][T24224] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4654'. [ 1114.774938][T24224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.798239][T24224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.807703][T24234] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4655'. [ 1114.825381][T24224] bond0 (unregistering): Released all slaves [ 1114.831619][T24234] netlink: zone id is out of range [ 1114.836818][T24234] netlink: zone id is out of range [ 1114.857356][T24234] netlink: zone id is out of range [ 1114.880962][T24234] netlink: zone id is out of range [ 1114.890895][T24234] netlink: zone id is out of range [ 1114.907190][T24234] netlink: zone id is out of range [ 1114.919393][T24234] netlink: zone id is out of range [ 1115.182014][T24249] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4661'. [ 1115.467665][T24266] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4675'. [ 1115.557285][T24268] tap0: tun_chr_ioctl cmd 1074025677 [ 1115.574354][T24268] tap0: linktype set to 270 [ 1115.859600][T24277] netlink: 'syz.3.4669': attribute type 9 has an invalid length. [ 1116.077254][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.083902][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.561723][T24293] -: renamed from syzkaller0 [ 1116.669741][T24294] syzkaller0: entered promiscuous mode [ 1119.106012][T24335] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4687'. [ 1119.356132][T24338] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4686'. [ 1119.778594][T24354] netlink: 'syz.2.4692': attribute type 2 has an invalid length. [ 1119.807562][T24354] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4692'. [ 1119.855305][T24354] net_ratelimit: 242 callbacks suppressed [ 1119.855323][T24354] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1119.941748][T24357] netlink: 'syz.2.4692': attribute type 2 has an invalid length. [ 1119.949603][T24357] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4692'. [ 1119.988921][T24357] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1120.379781][T24370] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4696'. [ 1120.412347][T24370] netlink: zone id is out of range [ 1120.436333][T24370] netlink: zone id is out of range [ 1120.454665][T24370] netlink: zone id is out of range [ 1120.475087][T24370] netlink: zone id is out of range [ 1120.491846][T24370] netlink: zone id is out of range [ 1120.516523][T24370] netlink: zone id is out of range [ 1120.537368][T24370] netlink: zone id is out of range [ 1120.559798][T24370] netlink: zone id is out of range [ 1123.128923][T24417] netlink: 'syz.3.4708': attribute type 3 has an invalid length. [ 1123.162263][T24417] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4708'. [ 1123.725138][T24440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.733170][T24440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.766340][T24440] bridge0: entered allmulticast mode [ 1123.831801][T24443] bridge_slave_1: left allmulticast mode [ 1123.894360][T24443] bridge_slave_1: left promiscuous mode [ 1123.902060][T24443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.935182][T24443] bridge_slave_0: left allmulticast mode [ 1123.953763][T24443] bridge_slave_0: left promiscuous mode [ 1123.960236][T24443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.168611][T24449] syzkaller0: entered promiscuous mode [ 1124.174305][T24449] syzkaller0: entered allmulticast mode [ 1124.440746][T24466] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4721'. [ 1124.544617][T24466] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4721'. [ 1127.223184][T24503] netlink: 122292 bytes leftover after parsing attributes in process `syz.2.4728'. [ 1127.463926][T24513] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.4730'. [ 1127.541650][T24515] netlink: 'syz.1.4732': attribute type 10 has an invalid length. [ 1127.549700][T24515] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1127.611448][T24517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.619271][T24517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.648208][T24517] bridge0: entered allmulticast mode [ 1127.714736][T24520] macsec0: entered allmulticast mode [ 1127.791766][T24520] veth1_macvtap: entered allmulticast mode [ 1128.067737][T24527] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4736'. [ 1128.251300][T24525] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1128.438423][T24527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4736'. [ 1128.742150][T24538] C: renamed from team_slave_0 [ 1128.756846][T24538] netlink: 'syz.0.4740': attribute type 3 has an invalid length. [ 1128.794359][T24538] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4740'. [ 1128.839324][T24538] net_ratelimit: 82 callbacks suppressed [ 1128.839344][T24538] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1129.615947][T24558] syzkaller0: entered promiscuous mode [ 1129.644192][T24558] syzkaller0: entered allmulticast mode [ 1131.172759][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1131.183241][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1131.218307][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1131.245833][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1131.256270][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1131.265976][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1133.365465][ T5787] Bluetooth: hci3: command tx timeout [ 1133.590080][T24581] netlink: 17023 bytes leftover after parsing attributes in process `syz.2.4746'. [ 1133.697667][T22667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.811636][T22667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.982734][T22667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.110155][T24607] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4752'. [ 1134.167597][T22667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.363583][T24579] chnl_net:caif_netlink_parms(): no params data found [ 1134.427699][T24614] syzkaller0: entered promiscuous mode [ 1134.433450][T24614] syzkaller0: entered allmulticast mode [ 1134.500991][T22667] tipc: Left network mode [ 1135.437672][ T5787] Bluetooth: hci3: command tx timeout [ 1137.086455][T24579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.106758][T24579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.123935][T24579] bridge_slave_0: entered allmulticast mode [ 1137.138806][T24579] bridge_slave_0: entered promiscuous mode [ 1137.163716][T24579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.202080][T24579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.209418][T24579] bridge_slave_1: entered allmulticast mode [ 1137.232110][T24579] bridge_slave_1: entered promiscuous mode [ 1137.277091][T24644] netlink: 'syz.3.4759': attribute type 1 has an invalid length. [ 1137.288128][T24644] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1137.510788][ T5787] Bluetooth: hci3: command tx timeout [ 1137.577979][T24579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.850467][T24668] mac80211_hwsim hwsim74 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1137.892243][T24579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.909398][T24676] netlink: 'syz.3.4763': attribute type 3 has an invalid length. [ 1137.919592][T24676] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.4763'. [ 1138.265270][T24579] team0: Port device team_slave_0 added [ 1138.275719][T24579] team0: Port device team_slave_1 added [ 1138.308618][T24579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.316317][T24579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.342476][T24579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.383457][T24579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.390489][T24579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1138.418228][T24579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.588354][T24579] hsr_slave_0: entered promiscuous mode [ 1138.598002][T24579] hsr_slave_1: entered promiscuous mode [ 1138.614763][T24579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1138.624724][T24579] Cannot create hsr debugfs directory [ 1138.851825][T24701] netlink: 'syz.0.4767': attribute type 16 has an invalid length. [ 1138.914153][T24701] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4767'. [ 1139.262118][T24709] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4768'. [ 1139.322485][T24711] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4768'. [ 1139.591289][ T5787] Bluetooth: hci3: command tx timeout [ 1139.616876][T24723] netlink: 'syz.0.4770': attribute type 29 has an invalid length. [ 1139.667207][T24723] netlink: 'syz.0.4770': attribute type 29 has an invalid length. [ 1139.841003][T24726] netlink: 'syz.0.4770': attribute type 10 has an invalid length. [ 1139.852543][T24723] netlink: 'syz.0.4770': attribute type 29 has an invalid length. [ 1139.882168][T24729] netlink: 'syz.0.4770': attribute type 29 has an invalid length. [ 1140.048400][T24731] netlink: 'syz.2.4771': attribute type 10 has an invalid length. [ 1140.080206][T22679] wlan1: Trigger new scan to find an IBSS to join [ 1140.154290][T24731] team0: Port device geneve1 added [ 1140.236408][T22667] hsr_slave_0: left promiscuous mode [ 1140.312727][T22667] hsr_slave_1: left promiscuous mode [ 1140.412733][T22667] veth1_vlan: left promiscuous mode [ 1140.418130][T22667] veth0_vlan: left promiscuous mode [ 1142.532284][T24761] netlink: 'syz.3.4780': attribute type 9 has an invalid length. [ 1142.540110][T24761] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4780'. [ 1142.910842][T24741] netlink: 'syz.0.4773': attribute type 3 has an invalid length. [ 1142.920654][T24741] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4773'. [ 1143.008280][T24762] netlink: 'syz.3.4780': attribute type 9 has an invalid length. [ 1143.051170][T22670] wlan1: Trigger new scan to find an IBSS to join [ 1143.113504][T24762] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4780'. [ 1143.487011][T24579] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1143.563214][T24783] syz.0.4785[24783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1143.563568][T24783] syz.0.4785[24783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1143.577225][T24579] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1143.619551][T24579] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1143.664484][T24579] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1143.809313][T24792] Ÿë: port 1(hsr_slave_0) entered blocking state [ 1143.840990][T24792] Ÿë: port 1(hsr_slave_0) entered disabled state [ 1143.869957][T24792] hsr_slave_0: entered allmulticast mode [ 1143.884768][T24792] hsr_slave_0: left allmulticast mode [ 1144.121124][T24801] netlink: 'syz.3.4789': attribute type 10 has an invalid length. [ 1144.146925][T24801] veth1_vlan: entered allmulticast mode [ 1144.280958][T24801] team0: Device veth1_vlan failed to register rx_handler [ 1144.375280][T24579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.446120][T24579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1144.527369][T22680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.534643][T22680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.609403][T22680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.616643][T22680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.641497][T24813] netlink: 'syz.0.4791': attribute type 14 has an invalid length. [ 1144.654364][T24813] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4791'. [ 1145.142289][T24827] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1145.372595][T24579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.611412][T24579] veth0_vlan: entered promiscuous mode [ 1145.678989][T24579] veth1_vlan: entered promiscuous mode [ 1145.862808][T24579] veth0_macvtap: entered promiscuous mode [ 1145.890666][T24579] veth1_macvtap: entered promiscuous mode [ 1145.960106][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.008180][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.038701][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.069018][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.082079][T22670] wlan1: Trigger new scan to find an IBSS to join [ 1146.099705][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.138118][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.170198][T24579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.298436][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.418223][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.451844][T24579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.487775][T24579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.535970][T24579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.787101][T24844] IPv6: pim6reg1: Disabled Multicast RS [ 1146.921474][T24853] netlink: 'syz.2.4796': attribute type 21 has an invalid length. [ 1146.929603][T24852] netlink: 'syz.2.4796': attribute type 21 has an invalid length. [ 1146.951522][T24579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.960306][T24579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.995402][T24579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.004611][T24579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.028004][T22668] wlan1: Creating new IBSS network, BSSID 2a:d8:12:20:79:a1 [ 1148.330692][T24860] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4798'. [ 1148.343046][T24860] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1148.374024][T24874] sctp: [Deprecated]: syz.0.4799 (pid 24874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1148.374024][T24874] Use struct sctp_sack_info instead [ 1148.409276][T22667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.430969][T22667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.704542][T22680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.731449][T22680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.136074][T24882] netlink: 'syz.3.4801': attribute type 10 has an invalid length. [ 1149.412210][T24882] team0: Device ipvlan1 failed to register rx_handler [ 1149.526669][T24895] netlink: 'syz.1.4744': attribute type 3 has an invalid length. [ 1149.569971][T24895] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4744'. [ 1150.255623][T24910] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 1150.270830][T24910] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 1150.678121][T21997] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1150.701295][T21997] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1150.712462][T21997] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1150.723149][T21997] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1150.734755][T21997] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1150.744285][T21997] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1151.488062][T24920] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.4808'. [ 1151.635527][T24917] chnl_net:caif_netlink_parms(): no params data found [ 1151.857313][T24917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.870881][T24917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.889148][T24917] bridge_slave_0: entered allmulticast mode [ 1151.899641][T24917] bridge_slave_0: entered promiscuous mode [ 1151.921826][T24917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.929181][T24917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.951761][T24917] bridge_slave_1: entered allmulticast mode [ 1151.998983][T24917] bridge_slave_1: entered promiscuous mode [ 1152.035853][T24917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.318826][T24917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.437965][T22667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.566401][T24917] team0: Port device team_slave_0 added [ 1152.595110][T24917] team0: Port device team_slave_1 added [ 1152.759027][T22667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.790854][ T5787] Bluetooth: hci4: command tx timeout [ 1153.086650][T24948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4813'. [ 1153.124200][T24948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1153.131604][T24948] IPv6: NLM_F_CREATE should be set when creating new route [ 1153.138909][T24948] IPv6: NLM_F_CREATE should be set when creating new route [ 1153.146235][T24948] IPv6: NLM_F_CREATE should be set when creating new route [ 1153.257090][T24943] netlink: 'syz.3.4813': attribute type 9 has an invalid length. [ 1153.287412][T24943] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4813'. [ 1153.302113][T22667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.331161][T24917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.338190][T24917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.377323][T24917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.627517][T22667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.775827][T24917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.790644][T24917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.824625][T24917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.907977][T24953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1153.915334][T24953] IPv6: NLM_F_CREATE should be set when creating new route [ 1153.922746][T24953] IPv6: NLM_F_CREATE should be set when creating new route [ 1153.930027][T24953] IPv6: NLM_F_CREATE should be set when creating new route [ 1154.058373][T24954] netlink: 'syz.1.4815': attribute type 9 has an invalid length. [ 1154.083841][T24954] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4815'. [ 1154.265135][T24917] hsr_slave_0: entered promiscuous mode [ 1154.286986][T24917] hsr_slave_1: entered promiscuous mode [ 1154.305987][T24917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1154.317451][T24917] Cannot create hsr debugfs directory [ 1154.761085][T24957] netlink: 'syz.1.4815': attribute type 9 has an invalid length. [ 1154.768910][T24957] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4815'. [ 1154.872832][ T5787] Bluetooth: hci4: command tx timeout [ 1155.134065][T22667] tipc: Left network mode [ 1155.835442][T24998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.843222][T24998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.864670][T24998] bridge0: entered allmulticast mode [ 1156.367988][T25010] bridge_slave_1: left allmulticast mode [ 1156.401616][T25010] bridge_slave_1: left promiscuous mode [ 1156.427059][T25010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.538828][T25010] bridge_slave_0: left allmulticast mode [ 1156.571349][T25010] bridge_slave_0: left promiscuous mode [ 1156.582399][T25010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.950712][ T5787] Bluetooth: hci4: command tx timeout [ 1157.810740][T24917] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1157.836448][T24917] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1157.874980][T24917] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1158.010049][T24917] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1158.585147][T25057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4833'. [ 1158.819839][T24917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.860405][T24917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.954422][T25068] bridge_slave_1: left allmulticast mode [ 1158.972068][T25068] bridge_slave_1: left promiscuous mode [ 1158.979351][T25068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.048516][ T5787] Bluetooth: hci4: command tx timeout [ 1159.070253][T25068] bridge_slave_0: left allmulticast mode [ 1159.103231][T25068] bridge_slave_0: left promiscuous mode [ 1159.132248][T25068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.389923][T25081] netlink: 'syz.2.4837': attribute type 27 has an invalid length. [ 1159.421135][T25081] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.4837'. [ 1159.606686][T22679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.614150][T22679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.736494][T22680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.743881][T22680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.764655][T25084] ªªªªªª: renamed from vlan0 (while UP) [ 1160.465229][T22667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.479529][T22667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.492850][T22667] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1160.509099][T22667] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1160.536856][T22667] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1160.561273][T22667] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1160.637419][T22667] veth1_vlan: left promiscuous mode [ 1160.654868][T22667] veth0_vlan: left promiscuous mode [ 1162.169228][T24917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1162.347157][T25130] netlink: 'syz.3.4843': attribute type 12 has an invalid length. [ 1162.682162][T25140] netlink: 'syz.3.4845': attribute type 3 has an invalid length. [ 1162.722487][T25140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4845'. [ 1162.751307][T24917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.919732][T24917] veth0_vlan: entered promiscuous mode [ 1162.941319][T24917] veth1_vlan: entered promiscuous mode [ 1163.036919][T24917] veth0_macvtap: entered promiscuous mode [ 1163.105304][T24917] veth1_macvtap: entered promiscuous mode [ 1163.151111][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.161661][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.173153][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.184479][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.195908][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1163.241218][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.265233][T24917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.292549][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.322068][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.328080][T25153] netlink: 'syz.1.4849': attribute type 27 has an invalid length. [ 1163.343243][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.370805][T25153] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.4849'. [ 1163.381141][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.415017][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1163.456643][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.492621][T24917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.535649][T24917] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.566972][T24917] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.589015][T24917] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.610978][T24917] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.902068][T22657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.917658][T22657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.047334][T22653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.072423][T22653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.173554][T25168] netlink: 'syz.2.4854': attribute type 39 has an invalid length. [ 1165.303661][T25170] netlink: 'syz.1.4855': attribute type 10 has an invalid length. [ 1165.324533][T25175] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4804'. [ 1165.507583][T25170] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1165.792820][T25186] C: renamed from team_slave_0 (while UP) [ 1165.852612][T25186] netlink: 'syz.1.4856': attribute type 4 has an invalid length. [ 1165.894701][T25186] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4856'. [ 1165.914779][T25186] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1166.018030][T25192] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1166.238335][T25199] netlink: 'syz.1.4860': attribute type 10 has an invalid length. [ 1166.308828][T25199] team0: Device hsr_slave_0 failed to register rx_handler [ 1166.338302][T25208] netlink: 'syz.1.4860': attribute type 10 has an invalid length. [ 1166.374361][T25208] team0: Device hsr_slave_0 failed to register rx_handler [ 1166.408324][T25207] netlink: 'syz.0.4859': attribute type 27 has an invalid length. [ 1166.430247][T25206] netlink: 'syz.0.4859': attribute type 27 has an invalid length. [ 1166.929743][T25219] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.4863'. [ 1167.160645][T25221] mac80211_hwsim hwsim79 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1170.144061][T22657] wlan1: Trigger new scan to find an IBSS to join [ 1170.185281][T25239] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4870'. [ 1170.260236][T25239] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4870'. [ 1172.487461][T25261] validate_nla: 1 callbacks suppressed [ 1172.487490][T25261] netlink: 'syz.0.4873': attribute type 13 has an invalid length. [ 1172.552725][T25261] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4873'. [ 1172.645560][T25261] erspan0: refused to change device tx_queue_len [ 1172.691244][T25262] netlink: 'syz.0.4873': attribute type 13 has an invalid length. [ 1172.734040][T25262] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4873'. [ 1172.776867][T25262] erspan0: refused to change device tx_queue_len [ 1173.033712][T22682] wlan1: Trigger new scan to find an IBSS to join [ 1173.073206][T25265] syzkaller0: entered promiscuous mode [ 1173.078791][T25265] syzkaller0: entered allmulticast mode [ 1175.114155][T22655] wlan1: Creating new IBSS network, BSSID 8e:9d:9d:8a:78:16 [ 1176.288453][T25282] netlink: 'syz.1.4878': attribute type 39 has an invalid length. [ 1176.487433][T25298] syzkaller0: entered allmulticast mode [ 1177.367503][T25319] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4882'. [ 1177.520993][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.527419][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.384750][T25329] netlink: 'syz.0.4889': attribute type 10 has an invalid length. [ 1178.463398][T25329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.478977][T25329] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1178.789783][T25348] syzkaller0: entered promiscuous mode [ 1178.796810][T25348] syzkaller0: entered allmulticast mode [ 1179.447932][T22653] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1179.646961][T25347] delete_channel: no stack [ 1180.196846][T25377] netlink: 'syz.2.4900': attribute type 1 has an invalid length. [ 1180.217693][T25377] netlink: 'syz.2.4900': attribute type 3 has an invalid length. [ 1180.237212][T25377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4900'. [ 1180.308806][T25377] netlink: 'syz.2.4900': attribute type 10 has an invalid length. [ 1180.386337][T25377] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4900'. [ 1180.504930][T25379] netlink: 'syz.0.4903': attribute type 9 has an invalid length. [ 1180.521440][T25379] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4903'. [ 1181.482475][T25403] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4912'. [ 1181.494978][T25403] hsr_slave_0: left promiscuous mode [ 1181.502218][T25403] hsr_slave_1: left promiscuous mode [ 1182.984643][T25401] netlink: 'syz.0.4911': attribute type 10 has an invalid length. [ 1182.994181][T25401] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4911'. [ 1184.743776][T25452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4923'. [ 1184.827764][T25452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4923'. [ 1185.507922][T25470] syz.0.4931[25470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.508077][T25470] syz.0.4931[25470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.850197][T25477] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.4934'. [ 1187.081189][T25498] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4940'. [ 1187.338811][T25498] team0: Port device C removed [ 1187.363892][T25498] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1187.790598][T25519] netlink: 'syz.0.4944': attribute type 21 has an invalid length. [ 1187.799173][T25519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4944'. [ 1187.842220][T25519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4944'. [ 1189.003007][T25545] syzkaller0: entered promiscuous mode [ 1189.023322][T25545] syzkaller0: entered allmulticast mode [ 1189.173064][T25541] netlink: 'syz.2.4949': attribute type 1 has an invalid length. [ 1189.190258][T25541] netlink: 'syz.2.4949': attribute type 4 has an invalid length. [ 1189.217490][T25541] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4949'. [ 1190.795455][T25586] netlink: 'syz.2.4961': attribute type 21 has an invalid length. [ 1191.232970][ T5787] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 1191.270107][T25609] netlink: 'syz.3.4965': attribute type 21 has an invalid length. [ 1191.305447][T25609] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4965'. [ 1191.338751][T25609] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4965'. [ 1192.717286][T25619] syzkaller0: entered promiscuous mode [ 1192.726663][T25619] syzkaller0: entered allmulticast mode [ 1196.211308][T25643] netlink: 'syz.0.4973': attribute type 10 has an invalid length. [ 1196.274958][T25643] team0: Port device netdevsim0 added [ 1196.295625][T25644] netlink: 'syz.0.4973': attribute type 10 has an invalid length. [ 1196.369910][T25644] team0: Port device netdevsim0 removed [ 1196.405009][T25644] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1196.588689][T25659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.596415][T25659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.611613][T25659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.619098][T25659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.992236][T25664] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4979'. [ 1197.216734][T25671] netlink: 'syz.3.4981': attribute type 1 has an invalid length. [ 1197.243314][T25671] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.4981'. [ 1197.309992][T25674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4981'. [ 1197.310803][T25671] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4981'. [ 1197.549403][T25684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4984'. [ 1197.624064][T25684] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4984'. [ 1197.806024][T25690] sit0: entered allmulticast mode [ 1197.848671][T25690] sit0: entered promiscuous mode [ 1198.177598][T25698] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4989'. [ 1198.194165][T25698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4989'. [ 1198.711386][T25703] sock: sock_timestamping_bind_phc: sock not bind to device [ 1198.725231][T25703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4990'. [ 1199.609787][T25720] netlink: 'syz.0.4996': attribute type 5 has an invalid length. [ 1199.981533][T25725] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.4998'. [ 1200.769766][T25735] netlink: 'syz.0.5000': attribute type 17 has an invalid length. [ 1202.695814][T25743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1202.708014][T25743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.720916][T25743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1202.728663][T25743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.215186][T25754] sit0: entered allmulticast mode [ 1203.372594][T25760] netlink: 'syz.2.5006': attribute type 15 has an invalid length. [ 1203.401665][T25760] __nla_validate_parse: 1 callbacks suppressed [ 1203.401679][T25760] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5006'. [ 1204.208125][T25785] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5014'. [ 1204.438647][T25787] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5014'. [ 1204.600371][T25792] netlink: 'syz.2.5015': attribute type 10 has an invalid length. [ 1205.088003][T25792] team0: Device wg1 is of different type [ 1205.305504][T25801] netlink: 'syz.0.5018': attribute type 153 has an invalid length. [ 1205.334937][T25801] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5018'. [ 1205.419093][T25802] netlink: 'syz.1.5017': attribute type 2 has an invalid length. [ 1205.428254][T25802] netlink: 'syz.1.5017': attribute type 1 has an invalid length. [ 1205.438859][T25802] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.5017'. [ 1206.011793][T25819] netlink: 'syz.3.5022': attribute type 21 has an invalid length. [ 1206.031714][T25819] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5022'. [ 1211.900448][T25850] netlink: 'syz.1.5029': attribute type 2 has an invalid length. [ 1211.914533][T25850] netlink: 'syz.1.5029': attribute type 8 has an invalid length. [ 1211.922919][T25850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5029'. [ 1211.941536][T25855] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5032'. [ 1212.006318][T25855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1212.027560][T25855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.052221][T25855] bond0 (unregistering): Released all slaves [ 1212.068332][T25850] netlink: 'syz.1.5029': attribute type 2 has an invalid length. [ 1212.089001][T25850] netlink: 'syz.1.5029': attribute type 8 has an invalid length. [ 1212.101056][T25850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5029'. [ 1212.239229][T25861] netlink: 'syz.0.5030': attribute type 10 has an invalid length. [ 1212.250670][T25861] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5030'. [ 1212.488827][T25875] netlink: 'syz.1.5035': attribute type 29 has an invalid length. [ 1212.517626][T25856] syzkaller0: entered promiscuous mode [ 1212.521347][T25877] netlink: 'syz.1.5035': attribute type 29 has an invalid length. [ 1212.534382][T25856] syzkaller0: entered allmulticast mode [ 1212.558369][T25875] netlink: 'syz.1.5035': attribute type 29 has an invalid length. [ 1212.721631][T25882] sock: sock_set_timeout: `syz.1.5037' (pid 25882) tries to set negative timeout [ 1212.898879][ T5787] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 1215.397235][T25912] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5044'. [ 1215.433210][T21997] Bluetooth: hci2: command 0x0406 tx timeout [ 1217.951251][T25946] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1218.033693][T25946] netlink: 'syz.0.5051': attribute type 27 has an invalid length. [ 1218.044804][T25946] netlink: 'syz.0.5051': attribute type 25 has an invalid length. [ 1218.405457][T25955] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5056'. [ 1218.940851][T25989] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.5059'. [ 1219.046509][T25993] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5062'. [ 1219.237942][T25997] netlink: 'syz.1.5064': attribute type 1 has an invalid length. [ 1219.247129][T25997] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1219.483541][T26001] netlink: 'syz.0.5065': attribute type 39 has an invalid length. [ 1220.642720][T26051] netlink: 'syz.2.5076': attribute type 1 has an invalid length. [ 1220.666630][T26051] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1220.841150][T26055] syz.1.5077[26055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1220.841343][T26055] syz.1.5077[26055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1220.984140][T26060] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5077'. [ 1221.045493][T26060] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5077'. [ 1221.082222][T26055] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5077'. [ 1221.107196][T26057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5077'. [ 1221.687674][T26074] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.5081'. [ 1222.079895][T26079] syzkaller0: entered promiscuous mode [ 1222.110666][T26079] syzkaller0: entered allmulticast mode [ 1225.673155][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 1225.688098][T26120] __nla_validate_parse: 1 callbacks suppressed [ 1225.688117][T26120] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.5095'. [ 1225.846021][T26123] netlink: 'syz.1.5096': attribute type 21 has an invalid length. [ 1225.898414][T26120] netlink: 279 bytes leftover after parsing attributes in process `syz.0.5095'. [ 1226.143380][T26141] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5098'. [ 1226.292039][T26141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1226.336348][T26149] netlink: 'syz.0.5100': attribute type 1 has an invalid length. [ 1226.408384][T26149] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5100'. [ 1227.083483][T26164] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5105'. [ 1227.765552][T26184] netlink: 'syz.3.5110': attribute type 29 has an invalid length. [ 1227.781822][T26184] netlink: 'syz.3.5110': attribute type 29 has an invalid length. [ 1228.068230][T26197] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5113'. [ 1228.760434][T26209] sit0: left promiscuous mode [ 1228.883635][T26210] sit0: entered promiscuous mode [ 1228.894033][T26212] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5115'. [ 1229.068787][T26212] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.5115'. [ 1229.388657][T26233] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.5118'. [ 1229.954243][T26242] netlink: 'syz.3.5120': attribute type 21 has an invalid length. [ 1230.489041][T26249] netlink: 'syz.0.5123': attribute type 10 has an invalid length. [ 1230.521312][T26249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5123'. [ 1230.597875][T26253] netlink: 'syz.0.5123': attribute type 2 has an invalid length. [ 1230.760688][T26253] netlink: 'syz.0.5123': attribute type 8 has an invalid length. [ 1230.787304][T26253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5123'. [ 1230.929912][T26251] netlink: 'syz.1.5124': attribute type 10 has an invalid length. [ 1230.964777][T26251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5124'. [ 1231.066412][T26251] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1231.101250][T26251] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.217374][T26251] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1231.550204][T26266] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1231.587829][T26266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1231.781326][T26270] netlink: 'syz.0.5127': attribute type 10 has an invalid length. [ 1231.800210][T26270] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5127'. [ 1231.828493][T26270] batadv_slave_1: entered promiscuous mode [ 1231.862690][T26270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.902910][T26270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.028828][T26277] netlink: 'syz.3.5128': attribute type 7 has an invalid length. [ 1233.709282][T26292] netlink: 'syz.0.5131': attribute type 1 has an invalid length. [ 1233.802191][T26292] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1233.862582][T26294] netlink: 'syz.0.5131': attribute type 19 has an invalid length. [ 1233.912159][T26294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1234.533382][T26307] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.5136'. [ 1234.598462][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5136'. [ 1234.638355][T26317] netlink: 'syz.1.5138': attribute type 1 has an invalid length. [ 1234.656417][T26317] netlink: 'syz.1.5138': attribute type 3 has an invalid length. [ 1234.675985][T26317] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5138'. [ 1236.596152][T26361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.604186][T26361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.640214][T26361] bridge0: entered allmulticast mode [ 1236.681282][T26365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.688593][T26365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.696256][T26365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.703542][T26365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.768799][T26365] bridge0: entered promiscuous mode [ 1236.983851][T26359] netlink: 'syz.1.5147': attribute type 10 has an invalid length. [ 1237.184143][T26359] team0: Device ipvlan1 failed to register rx_handler [ 1238.112305][T26374] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5151'. [ 1238.222815][T26374] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1238.961289][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.967916][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.504444][T26420] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5163'. [ 1239.687324][T26423] Q±6ã×\b‹¡Y­4: renamed from lo [ 1240.539475][T26443] mac80211_hwsim hwsim74 wlan1: entered promiscuous mode [ 1240.549722][T26443] mac80211_hwsim hwsim74 wlan1: entered allmulticast mode [ 1240.596503][T26444] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.5168'. [ 1240.637689][T26444] netlink: 8446 bytes leftover after parsing attributes in process `syz.3.5168'. [ 1241.263129][T26474] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5176'. [ 1241.371369][T26474] openvswitch: netlink: Flow actions attr not present in new flow. [ 1242.283708][T26485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1242.469414][T26490] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5182'. [ 1242.502327][T26493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5183'. [ 1242.735576][T26490] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5182'. [ 1242.824853][T26499] netlink: 'syz.0.5186': attribute type 10 has an invalid length. [ 1243.013116][T26499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.063485][T26499] bridge_slave_1: left allmulticast mode [ 1243.075886][T26499] bridge_slave_1: left promiscuous mode [ 1243.133737][T26499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.402241][T26499] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1243.511330][T26509] mac80211_hwsim hwsim76 ..ãc¤±: renamed from wlan1 (while UP) [ 1244.311519][T26516] tap0: tun_chr_ioctl cmd 1074025681 [ 1244.493937][T26521] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.545560][T26522] tap0: tun_chr_ioctl cmd 1074025681 [ 1247.097078][T26555] sit0: entered allmulticast mode [ 1247.161955][T26555] sit0: entered promiscuous mode [ 1247.627084][T26566] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5202'. [ 1247.656801][T26574] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.5203'. [ 1247.895848][T26583] netlink: 'syz.0.5206': attribute type 27 has an invalid length. [ 1247.937274][T26583] netlink: 'syz.0.5206': attribute type 6 has an invalid length. [ 1247.957772][T26583] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5206'. [ 1248.123348][T26594] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1248.175035][T26594] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1248.214963][T26590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1248.268925][T26592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5210'. [ 1248.450068][T26599] netlink: 'syz.2.5211': attribute type 46 has an invalid length. [ 1248.467544][T26599] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5211'. [ 1248.950424][T26614] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5214'. [ 1249.077001][T26616] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.5215'. [ 1249.309333][T26621] netlink: 'syz.2.5216': attribute type 9 has an invalid length. [ 1249.741135][T26628] netlink: 'syz.1.5218': attribute type 10 has an invalid length. [ 1250.376094][T26628] team0 (unregistering): Port device C removed [ 1250.439254][T26628] team0 (unregistering): Port device team_slave_1 removed [ 1253.071652][T26715] __nla_validate_parse: 1 callbacks suppressed [ 1253.071671][T26715] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5247'. [ 1253.228412][T26722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5250'. [ 1253.305485][T26722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5250'. [ 1253.393334][T26721] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5250'. [ 1253.960740][T26746] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5255'. [ 1254.247625][T26758] syzkaller0: entered promiscuous mode [ 1254.256107][T26758] syzkaller0: entered allmulticast mode [ 1254.986175][T26784] netlink: 'syz.1.5261': attribute type 10 has an invalid length. [ 1255.012676][T26783] netlink: 'syz.1.5261': attribute type 10 has an invalid length. [ 1255.028782][T26784] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.5261'. [ 1255.053519][T26783] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.5261'. [ 1255.069883][T26784] openvswitch: netlink: Flow key attr not present in new flow. [ 1255.091027][T26783] openvswitch: netlink: Flow key attr not present in new flow. [ 1255.629536][T26801] netlink: 'syz.0.5268': attribute type 9 has an invalid length. [ 1255.638167][T26801] netlink: 7679 bytes leftover after parsing attributes in process `syz.0.5268'. [ 1255.961727][T26806] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5270'. [ 1256.390634][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 1257.414715][T26835] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1257.958132][T26849] netlink: 'syz.0.5283': attribute type 3 has an invalid length. [ 1258.379534][T26862] netlink: 'syz.0.5288': attribute type 10 has an invalid length. [ 1258.915454][T26860] ip6tnl0: entered promiscuous mode [ 1258.921343][T26860] ip6tnl0: entered allmulticast mode [ 1258.992624][T26873] netlink: 'syz.3.5289': attribute type 2 has an invalid length. [ 1259.001147][T26873] netlink: 'syz.3.5289': attribute type 8 has an invalid length. [ 1259.009121][T26873] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5289'. [ 1259.026913][T26874] batadv0: entered promiscuous mode [ 1259.290784][T26877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5290'. [ 1259.335271][T26877] netlink: 'syz.0.5290': attribute type 12 has an invalid length. [ 1259.385531][T26877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5290'. [ 1259.455057][T26886] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5290'. [ 1259.485089][T26877] netlink: 'syz.0.5290': attribute type 10 has an invalid length. [ 1259.541242][T26877] team0: Device hsr_slave_0 failed to register rx_handler [ 1259.729181][T26888] sit0: left promiscuous mode [ 1259.985034][T26896] netlink: 'syz.1.5297': attribute type 4 has an invalid length. [ 1260.011065][T26896] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5297'. [ 1260.513492][T26894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5296'. [ 1260.559708][T26903] netlink: 'syz.1.5300': attribute type 16 has an invalid length. [ 1260.610680][T26903] netlink: 'syz.1.5300': attribute type 3 has an invalid length. [ 1260.621939][T26904] netlink: 'syz.0.5296': attribute type 10 has an invalid length. [ 1260.629863][T26904] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5296'. [ 1260.650904][T26903] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5300'. [ 1261.024773][T26916] netlink: 'syz.3.5304': attribute type 6 has an invalid length. [ 1261.054377][T26916] netlink: 'syz.3.5304': attribute type 1 has an invalid length. [ 1261.076153][T26916] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5304'. [ 1261.586141][T26926] netlink: 'syz.2.5307': attribute type 10 has an invalid length. [ 1261.930792][T26926] macvlan0: entered promiscuous mode [ 1261.992405][T26928] netlink: 'syz.2.5307': attribute type 10 has an invalid length. [ 1264.376325][T26971] netlink: 'syz.3.5319': attribute type 33 has an invalid length. [ 1264.384305][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1264.441834][T26971] netlink: 'syz.3.5319': attribute type 33 has an invalid length. [ 1264.489863][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1264.541927][T26971] netlink: 'syz.3.5319': attribute type 33 has an invalid length. [ 1264.608745][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1264.727708][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1264.802555][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1264.832011][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1264.870417][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1264.882487][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1264.893061][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1264.903609][T26971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5319'. [ 1272.107968][T27083] __nla_validate_parse: 55 callbacks suppressed [ 1272.107987][T27083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1272.135013][T27079] syzkaller0: entered promiscuous mode [ 1272.179919][T27079] syzkaller0: entered allmulticast mode [ 1272.219102][T27083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1272.246536][T27081] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.5352'. [ 1272.280903][T27073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1272.309085][T27074] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1272.390278][T27081] validate_nla: 62 callbacks suppressed [ 1272.390298][T27081] netlink: 'syz.1.5352': attribute type 10 has an invalid length. [ 1272.432259][T27081] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5352'. [ 1273.010810][T27093] delete_channel: no stack [ 1273.633178][T27097] netlink: 'syz.1.5355': attribute type 39 has an invalid length. [ 1273.963638][T27105] netlink: 'syz.2.5357': attribute type 5 has an invalid length. [ 1274.126187][T27110] À: port 1(vlan0) entered blocking state [ 1274.154964][T27110] À: port 1(vlan0) entered disabled state [ 1274.178326][T27110] vlan0: entered allmulticast mode [ 1274.194258][T27110] veth0_vlan: entered allmulticast mode [ 1274.217241][T27110] vlan0: entered promiscuous mode [ 1275.041141][T27140] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1275.081109][T27140] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1275.092222][T27140] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1275.112185][T27140] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1276.687998][T27170] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1276.870542][ T5787] Bluetooth: hci4: command 0x0406 tx timeout [ 1279.993586][T27194] __nla_validate_parse: 31 callbacks suppressed [ 1279.993603][T27194] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5377'. [ 1280.030162][T27195] netlink: 158984 bytes leftover after parsing attributes in process `syz.3.5378'. [ 1280.513606][T27214] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5380'. [ 1283.527297][T27224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1283.800432][T27243] syzkaller0: entered promiscuous mode [ 1283.846459][T27243] syzkaller0: entered allmulticast mode [ 1284.073935][T27256] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.5392'. [ 1284.297269][T27262] netlink: 'syz.2.5394': attribute type 9 has an invalid length. [ 1284.308134][T27262] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1286.095767][T27261] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1286.271035][T27267] netlink: 'syz.3.5396': attribute type 21 has an invalid length. [ 1286.427676][T27269] syz.1.5397: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1286.467144][T27269] CPU: 0 PID: 27269 Comm: syz.1.5397 Not tainted syzkaller #0 [ 1286.474694][T27269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1286.484814][T27269] Call Trace: [ 1286.488171][T27269] [ 1286.491145][T27269] dump_stack_lvl+0x18c/0x250 [ 1286.495886][T27269] ? show_regs_print_info+0x20/0x20 [ 1286.501125][T27269] ? load_image+0x420/0x420 [ 1286.505663][T27269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1286.512117][T27269] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1286.518654][T27269] warn_alloc+0x246/0x340 [ 1286.523025][T27269] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1286.529224][T27269] ? zone_watermark_ok_safe+0x230/0x230 [ 1286.534803][T27269] ? kasan_set_track+0x5f/0x70 [ 1286.539615][T27269] ? kasan_set_track+0x4e/0x70 [ 1286.544405][T27269] ? __kasan_kmalloc+0x8f/0xa0 [ 1286.549198][T27269] ? xsk_init_queue+0xad/0x100 [ 1286.554063][T27269] ? xsk_setsockopt+0x4c9/0x750 [ 1286.558949][T27269] ? do_sock_setsockopt+0x175/0x1a0 [ 1286.564176][T27269] ? __x64_sys_setsockopt+0x182/0x200 [ 1286.569589][T27269] __vmalloc_node_range+0x129/0x1320 [ 1286.574951][T27269] ? free_vm_area+0x50/0x50 [ 1286.579509][T27269] vmalloc_user+0x74/0x80 [ 1286.583886][T27269] ? xskq_create+0xbf/0x170 [ 1286.588414][T27269] xskq_create+0xbf/0x170 [ 1286.592779][T27269] xsk_init_queue+0xad/0x100 [ 1286.597408][T27269] xsk_setsockopt+0x4c9/0x750 [ 1286.602121][T27269] ? xsk_poll+0x670/0x670 [ 1286.606481][T27269] ? __fget_files+0x28/0x460 [ 1286.611123][T27269] ? aa_sock_opt_perm+0x74/0x100 [ 1286.616106][T27269] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1286.621689][T27269] ? security_socket_setsockopt+0x7e/0xa0 [ 1286.627438][T27269] ? xsk_poll+0x670/0x670 [ 1286.631804][T27269] do_sock_setsockopt+0x175/0x1a0 [ 1286.636863][T27269] ? __fdget+0x180/0x210 [ 1286.641149][T27269] __x64_sys_setsockopt+0x182/0x200 [ 1286.646391][T27269] do_syscall_64+0x55/0xb0 [ 1286.650845][T27269] ? clear_bhb_loop+0x40/0x90 [ 1286.655561][T27269] ? clear_bhb_loop+0x40/0x90 [ 1286.660275][T27269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1286.666202][T27269] RIP: 0033:0x7f7b1eb9e159 [ 1286.670645][T27269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.690301][T27269] RSP: 002b:00007f7b1fb0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1286.698752][T27269] RAX: ffffffffffffffda RBX: 00007f7b1ee25fa0 RCX: 00007f7b1eb9e159 [ 1286.706755][T27269] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000004a [ 1286.714752][T27269] RBP: 00007f7b1ec3506b R08: 0000000000004a00 R09: 0000000000000000 [ 1286.722754][T27269] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1286.730762][T27269] R13: 00007f7b1ee26038 R14: 00007f7b1ee25fa0 R15: 00007ffe3fa6d8b8 [ 1286.738788][T27269] [ 1286.778064][T27269] Mem-Info: [ 1286.792980][T27269] active_anon:12388 inactive_anon:0 isolated_anon:0 [ 1286.792980][T27269] active_file:18097 inactive_file:40417 isolated_file:0 [ 1286.792980][T27269] unevictable:768 dirty:0 writeback:0 [ 1286.792980][T27269] slab_reclaimable:10686 slab_unreclaimable:99119 [ 1286.792980][T27269] mapped:24015 shmem:1362 pagetables:544 [ 1286.792980][T27269] sec_pagetables:0 bounce:0 [ 1286.792980][T27269] kernel_misc_reclaimable:0 [ 1286.792980][T27269] free:1325185 free_pcp:10026 free_cma:0 [ 1286.848794][T27269] Node 0 active_anon:49552kB inactive_anon:0kB active_file:72388kB inactive_file:161472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96060kB dirty:0kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12908kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no [ 1286.923097][T27269] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1286.979317][T27269] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1287.031086][T27269] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1287.039178][T27269] Node 0 DMA32 free:1391948kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:49400kB inactive_anon:0kB active_file:72388kB inactive_file:160644kB unevictable:1536kB writepending:64kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:26460kB local_pcp:10636kB free_cma:0kB [ 1287.105127][T27269] lowmem_reserve[]: 0 0 0 0 0 [ 1287.134045][T27286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5402'. [ 1287.157930][T27269] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1287.200708][T27269] lowmem_reserve[]: 0 0 0 0 0 [ 1287.233759][T27269] Node 1 Normal free:3893496kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14272kB local_pcp:9280kB free_cma:0kB [ 1287.267496][T27269] lowmem_reserve[]: 0 0 0 0 0 [ 1287.273291][T27269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1287.286668][T27269] Node 0 DMA32: 3146*4kB (UME) 1353*8kB (UME) 1538*16kB (UME) 3822*32kB (UME) 1926*64kB (UME) 831*128kB (UME) 136*256kB (UME) 31*512kB (ME) 35*1024kB (UM) 20*2048kB (ME) 211*4096kB (M) = 1391696kB [ 1287.307081][T27269] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1287.319770][T27269] Node 1 Normal: 272*4kB (UM) 57*8kB (UME) 45*16kB (UME) 203*32kB (UME) 65*64kB (UME) 13*128kB (UME) 4*256kB (UME) 2*512kB (UE) 0*1024kB 1*2048kB (E) 946*4096kB (M) = 3893496kB [ 1287.362857][T27269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.383486][T27269] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1287.401889][T27269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.430722][T27269] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1287.446828][T27269] 59876 total pagecache pages [ 1287.452084][T27269] 0 pages in swap cache [ 1287.456386][T27269] Free swap = 124728kB [ 1287.482658][T27269] Total swap = 124996kB [ 1287.486908][T27269] 2097051 pages RAM [ 1287.491289][T27293] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5405'. [ 1287.506863][T27269] 0 pages HighMem/MovableOnly [ 1287.527453][T27269] 416965 pages reserved [ 1287.551153][T27269] 0 pages cma reserved [ 1288.403898][T27316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5412'. [ 1288.871918][T27330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1288.928881][T27325] netlink: 'syz.3.5415': attribute type 9 has an invalid length. [ 1288.956082][T27325] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1289.228760][T27345] netlink: 'syz.0.5419': attribute type 10 has an invalid length. [ 1289.263908][T27345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5419'. [ 1289.294781][T27346] netlink: 'syz.0.5419': attribute type 2 has an invalid length. [ 1289.308597][T27346] netlink: 'syz.0.5419': attribute type 8 has an invalid length. [ 1289.350282][T27346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5419'. [ 1289.382715][T27348] netlink: 'syz.2.5420': attribute type 7 has an invalid length. [ 1289.774061][T27356] netlink: 'syz.2.5422': attribute type 12 has an invalid length. [ 1289.802856][T27326] netlink: 'syz.3.5415': attribute type 9 has an invalid length. [ 1289.815825][T27356] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5422'. [ 1289.833433][T27326] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5415'. [ 1289.874697][T27356] netlink: 'syz.2.5422': attribute type 10 has an invalid length. [ 1289.889079][T27356] team0: Port device virt_wifi0 added [ 1290.361507][T27369] netlink: 'syz.3.5426': attribute type 21 has an invalid length. [ 1290.411069][T27369] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.5426'. [ 1290.482751][T27376] netlink: 'syz.2.5427': attribute type 3 has an invalid length. [ 1291.132087][T27400] netlink: 'syz.3.5433': attribute type 10 has an invalid length. [ 1291.194815][T27400] team0: Port device macvlan0 added [ 1291.453766][T27417] netlink: 'syz.0.5437': attribute type 9 has an invalid length. [ 1291.476077][T27418] __nla_validate_parse: 1 callbacks suppressed [ 1291.476096][T27418] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.5438'. [ 1291.480667][T27417] netlink: 7679 bytes leftover after parsing attributes in process `syz.0.5437'. [ 1291.484784][T27418] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5438'. [ 1291.567230][T27422] netlink: 'syz.1.5438': attribute type 46 has an invalid length. [ 1291.584202][T27422] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5438'. [ 1291.648326][T27417] netlink: 7679 bytes leftover after parsing attributes in process `syz.0.5437'. [ 1291.779480][T27423] syzkaller0: entered promiscuous mode [ 1291.792657][T27423] syzkaller0: entered allmulticast mode [ 1293.054862][T27432] IPv6: NLM_F_CREATE should be specified when creating new route [ 1293.080843][T27432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1293.088162][T27432] IPv6: NLM_F_CREATE should be set when creating new route [ 1293.095538][T27432] IPv6: NLM_F_CREATE should be set when creating new route [ 1293.102859][T27432] IPv6: NLM_F_CREATE should be set when creating new route [ 1295.357993][T27445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5445'. [ 1295.486490][T27460] validate_nla: 2 callbacks suppressed [ 1295.486508][T27460] netlink: 'syz.2.5449': attribute type 21 has an invalid length. [ 1295.503463][T27460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5449'. [ 1295.540064][T27458] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5449'. [ 1296.524462][T21997] Bluetooth: hci1: unexpected event 0x0f length: 151 > 4 [ 1296.537630][T27519] syzkaller0: entered promiscuous mode [ 1296.559814][T27519] syzkaller0: entered allmulticast mode [ 1296.586035][T27518] netlink: 'syz.3.5464': attribute type 28 has an invalid length. [ 1296.612391][T27518] netlink: 'syz.3.5464': attribute type 4 has an invalid length. [ 1296.639364][T27518] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5464'. [ 1296.700178][T27526] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1296.709405][T27527] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1297.142229][T27539] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1297.266268][T27533] netlink: 'syz.3.5469': attribute type 11 has an invalid length. [ 1297.279112][T27533] netlink: 211440 bytes leftover after parsing attributes in process `syz.3.5469'. [ 1297.297971][T27543] netlink: 'syz.3.5469': attribute type 4 has an invalid length. [ 1297.327050][T27543] netlink: 'syz.3.5469': attribute type 4 has an invalid length. [ 1297.377198][T27543] netlink: 203268 bytes leftover after parsing attributes in process `syz.3.5469'. [ 1298.527538][T27576] netlink: 'syz.1.5480': attribute type 20 has an invalid length. [ 1298.717844][T27580] netlink: 'syz.3.5481': attribute type 4 has an invalid length. [ 1299.459302][T27612] netlink: 'syz.2.5490': attribute type 21 has an invalid length. [ 1299.500679][T27612] netlink: 'syz.2.5490': attribute type 30 has an invalid length. [ 1299.812559][T21997] Bluetooth: hci2: ISO packet for unknown connection handle 2878 [ 1300.416886][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.423945][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.550760][T21997] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1300.563109][T21997] Bluetooth: hci1: Injecting HCI hardware error event [ 1300.572373][T21997] Bluetooth: hci1: hardware error 0x00 [ 1301.008053][T27619] netlink: 'syz.2.5493': attribute type 10 has an invalid length. [ 1301.108912][T27619] team0: Device ipvlan1 failed to register rx_handler [ 1301.727001][T27653] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5501'. [ 1301.745978][T27653] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5501'. [ 1301.783259][T27654] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5501'. [ 1301.886666][T27656] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5501'. [ 1302.485973][T27668] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.5504'. [ 1302.630611][T21997] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1305.013438][T27677] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.5507'. [ 1305.055092][T27685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5508'. [ 1305.065821][T27685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5508'. [ 1305.077431][T27681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5508'. [ 1305.134666][T27688] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1305.193505][T27696] netlink: 'syz.0.5509': attribute type 46 has an invalid length. [ 1305.311178][T27700] netlink: 'syz.3.5511': attribute type 21 has an invalid length. [ 1308.338810][T27724] __nla_validate_parse: 5 callbacks suppressed [ 1308.338829][T27724] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.5518'. [ 1308.537035][T27727] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5519'. [ 1308.554627][T27728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5519'. [ 1308.854836][T27734] netlink: 'syz.1.5520': attribute type 1 has an invalid length. [ 1308.940173][T27734] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5520'. [ 1309.022541][T27741] delete_channel: no stack [ 1309.493720][T27753] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5527'. [ 1310.064204][T27773] netlink: 'syz.3.5535': attribute type 15 has an invalid length. [ 1310.090623][T27773] netlink: 'syz.3.5535': attribute type 7 has an invalid length. [ 1310.344165][T27787] netlink: 'syz.3.5537': attribute type 21 has an invalid length. [ 1310.375071][T27790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5539'. [ 1310.400215][T27787] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1310.493636][T27790] netlink: 'syz.0.5539': attribute type 9 has an invalid length. [ 1310.517438][T27790] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.5539'. [ 1312.273052][T27816] netlink: 'syz.1.5545': attribute type 10 has an invalid length. [ 1312.302333][T27816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5545'. [ 1312.320644][T27816] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1312.327819][T27816] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.372146][T27816] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1312.709059][T21997] Bluetooth: hci3: unexpected event for opcode 0x000b [ 1312.727854][T27830] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.5551'. [ 1312.804982][T27844] netlink: 'syz.0.5551': attribute type 46 has an invalid length. [ 1313.674117][T27876] __nla_validate_parse: 3 callbacks suppressed [ 1313.674129][T27876] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.5564'. [ 1313.689585][T27876] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5564'. [ 1313.740053][T27876] netlink: 'syz.2.5564': attribute type 46 has an invalid length. [ 1313.748760][T27876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5564'. [ 1314.704660][T27891] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 1314.720929][T27891] mac80211_hwsim hwsim75 wlan0: entered allmulticast mode [ 1314.927436][T27901] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5571'. [ 1314.955957][T27901] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1315.289706][T27909] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1315.301062][T27909] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1315.343100][T27912] netlink: 'syz.0.5574': attribute type 46 has an invalid length. [ 1315.352157][T27912] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1315.503341][T27914] netlink: 'syz.2.5576': attribute type 2 has an invalid length. [ 1315.537167][T27914] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5576'. [ 1316.511088][T27928] mac80211_hwsim hwsim73 wlan0: left promiscuous mode [ 1316.533050][T27928] mac80211_hwsim hwsim73 wlan0: left allmulticast mode [ 1316.561715][T27931] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 1316.592964][T27931] mac80211_hwsim hwsim73 wlan0: entered allmulticast mode [ 1316.715305][T21997] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1316.725113][T21997] Bluetooth: hci3: Injecting HCI hardware error event [ 1316.733517][T27628] Bluetooth: hci3: hardware error 0x00 [ 1316.744569][T27939] sctp: [Deprecated]: syz.0.5584 (pid 27939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1316.744569][T27939] Use struct sctp_sack_info instead [ 1316.862177][T27935] netlink: 'syz.1.5585': attribute type 11 has an invalid length. [ 1317.195103][T27955] netlink: 'syz.1.5589': attribute type 6 has an invalid length. [ 1317.221850][T27955] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5589'. [ 1318.870735][T27628] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1319.525378][T27985] mac80211_hwsim hwsim82 wlan0: entered promiscuous mode [ 1319.594152][T27985] mac80211_hwsim hwsim82 wlan0: entered allmulticast mode [ 1321.584874][T28008] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.5598'. [ 1321.643929][T28014] netlink: 'syz.3.5599': attribute type 2 has an invalid length. [ 1321.681387][T28008] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.5598'. [ 1321.773127][T28008] tipc: Started in network mode [ 1321.778269][T28008] tipc: Node identity b, cluster identity 57 [ 1321.860143][T28008] tipc: Node number set to 11 [ 1322.856809][T28018] syzkaller0: entered promiscuous mode [ 1322.910633][T28018] syzkaller0: entered allmulticast mode [ 1324.624277][T28041] netlink: 'syz.0.5606': attribute type 3 has an invalid length. [ 1324.673199][T28041] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5606'. [ 1329.192155][T27978] delete_channel: no stack [ 1329.196997][T27978] delete_channel: no stack [ 1330.474165][T28037] netlink: 'syz.2.5605': attribute type 15 has an invalid length. [ 1330.482392][T28037] netlink: 'syz.2.5605': attribute type 7 has an invalid length. [ 1330.501522][T28051] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5607'. [ 1331.218413][T28076] netlink: 'syz.1.5615': attribute type 21 has an invalid length. [ 1331.250753][T28076] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5615'. [ 1331.275550][T28078] netlink: 'syz.2.5616': attribute type 21 has an invalid length. [ 1331.461374][T28081] netlink: 'syz.1.5615': attribute type 2 has an invalid length. [ 1331.469205][T28081] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5615'. [ 1331.899468][T28095] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.5618'. [ 1332.177312][T28099] netlink: 'syz.1.5622': attribute type 9 has an invalid length. [ 1332.200201][T28099] netlink: 379 bytes leftover after parsing attributes in process `syz.1.5622'. [ 1334.339631][T28148] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.5636'. [ 1334.361876][T28148] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5636'. [ 1334.384027][T28151] netlink: 'syz.3.5636': attribute type 46 has an invalid length. [ 1334.420523][T28151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5636'. [ 1334.617871][T28164] netlink: 'syz.2.5638': attribute type 10 has an invalid length. [ 1334.686678][T28164] netlink: 'syz.2.5638': attribute type 10 has an invalid length. [ 1334.711157][T28164] netlink: 'syz.2.5638': attribute type 10 has an invalid length. [ 1334.983461][T28175] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5639'. [ 1335.483401][T28189] mac80211_hwsim hwsim91 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1335.625147][T28189] validate_nla: 31 callbacks suppressed [ 1335.625164][T28189] netlink: 'syz.2.5645': attribute type 10 has an invalid length. [ 1335.813706][T28198] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.5647'. [ 1335.849412][T28198] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5647'. [ 1335.883933][T28189] team0: Device gre0 is of different type [ 1335.947605][T28195] netlink: 'syz.3.5646': attribute type 10 has an invalid length. [ 1335.969956][T28195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5646'. [ 1335.996249][T28195] dummy0: entered promiscuous mode [ 1336.013441][T28195] dummy0: entered allmulticast mode [ 1336.029887][T28195] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1336.086608][T28200] netlink: 'syz.1.5647': attribute type 46 has an invalid length. [ 1336.120738][T28200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5647'. [ 1336.129658][T28204] netlink: 'syz.0.5648': attribute type 28 has an invalid length. [ 1336.190660][T28203] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5648'. [ 1336.219867][T28204] netlink: 'syz.0.5648': attribute type 29 has an invalid length. [ 1336.267365][T28204] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5648'. [ 1336.297607][T28199] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.5648'. [ 1337.009665][T28216] netlink: 'syz.1.5652': attribute type 22 has an invalid length. [ 1337.076754][T28216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5652'. [ 1337.408323][T28227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1337.822916][T28243] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5659'. [ 1337.847784][T28244] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.5660'. [ 1337.964819][T28249] netlink: 'syz.0.5660': attribute type 46 has an invalid length. [ 1338.789988][T28258] netlink: 'syz.2.5662': attribute type 10 has an invalid length. [ 1338.891747][T28260] netlink: 'syz.3.5664': attribute type 3 has an invalid length. [ 1340.011048][T28275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1340.215407][T28282] netlink: 'syz.2.5672': attribute type 46 has an invalid length. [ 1340.423230][T28276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.016775][T28308] netlink: 'syz.0.5680': attribute type 9 has an invalid length. [ 1342.037097][T28308] __nla_validate_parse: 12 callbacks suppressed [ 1342.037120][T28308] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5680'. [ 1342.301322][T28322] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.5685'. [ 1342.317785][T28322] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5685'. [ 1342.369612][T28323] netlink: 'syz.3.5685': attribute type 46 has an invalid length. [ 1342.375675][T28316] netlink: 'syz.0.5683': attribute type 9 has an invalid length. [ 1342.377704][T28323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5685'. [ 1342.420752][T28316] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5683'. [ 1342.960916][T28342] : renamed from bond0 (while UP) [ 1343.688267][T28349] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5693'. [ 1343.715790][T28349] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1343.926432][T28360] netlink: 'syz.3.5695': attribute type 39 has an invalid length. [ 1343.986257][T28355] netlink: 'syz.1.5694': attribute type 11 has an invalid length. [ 1343.994844][T28355] netlink: 'syz.1.5694': attribute type 1 has an invalid length. [ 1344.013266][T28355] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.5694'. [ 1344.089755][T28364] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.5697'. [ 1344.100597][T28364] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5697'. [ 1344.141374][T28365] netlink: 'syz.2.5697': attribute type 46 has an invalid length. [ 1344.149266][T28365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5697'. [ 1345.422917][T28404] netlink: 'syz.1.5710': attribute type 10 has an invalid length. [ 1345.579612][T28407] netlink: 'syz.2.5709': attribute type 46 has an invalid length. [ 1345.749587][T28419] netlink: 'syz.0.5713': attribute type 1 has an invalid length. [ 1347.133685][T28452] __nla_validate_parse: 11 callbacks suppressed [ 1347.133704][T28452] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5721'. [ 1347.165884][T28452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1347.387048][T28459] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.5723'. [ 1347.396547][T28459] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5723'. [ 1347.459769][T28460] validate_nla: 4 callbacks suppressed [ 1347.459790][T28460] netlink: 'syz.3.5723': attribute type 46 has an invalid length. [ 1347.477856][T28460] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5723'. [ 1349.320528][T28464] syzkaller0: left promiscuous mode [ 1349.331543][T28464] syzkaller0: left allmulticast mode [ 1349.398103][T28475] netlink: 'syz.1.5727': attribute type 10 has an invalid length. [ 1349.952611][T28477] netlink: 'syz.0.5728': attribute type 10 has an invalid length. [ 1349.961169][T28477] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1349.971622][T28478] netlink: 'syz.0.5728': attribute type 10 has an invalid length. [ 1349.979774][T28478] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1350.135755][T28498] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1350.145361][T28498] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1350.197414][T28503] netlink: 'syz.3.5734': attribute type 46 has an invalid length. [ 1350.281193][T28503] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1350.532249][T28508] netlink: 'syz.2.5737': attribute type 9 has an invalid length. [ 1350.543292][T28508] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5737'. [ 1350.915666][T28512] netlink: 'syz.1.5738': attribute type 3 has an invalid length. [ 1351.583982][T28524] netlink: 'syz.1.5741': attribute type 3 has an invalid length. [ 1351.972592][T28537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1352.396010][T28545] __nla_validate_parse: 6 callbacks suppressed [ 1352.396032][T28545] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.5747'. [ 1352.427646][T28545] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5747'. [ 1352.494305][T28535] sit0: entered allmulticast mode [ 1352.523559][T28546] netlink: 'syz.1.5747': attribute type 46 has an invalid length. [ 1352.546179][T28546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5747'. [ 1352.956620][T28556] netlink: 'syz.2.5752': attribute type 5 has an invalid length. [ 1353.417193][T28565] netlink: 'syz.1.5751': attribute type 9 has an invalid length. [ 1353.425411][T28569] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5754'. [ 1353.472581][T28565] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5751'. [ 1353.876587][T28573] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.5756'. [ 1353.885884][T28573] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5756'. [ 1354.116326][T28584] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.5759'. [ 1354.128757][T28584] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5759'. [ 1354.181339][T28587] netlink: 'syz.2.5759': attribute type 46 has an invalid length. [ 1354.200649][T28587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5759'. [ 1354.251432][T28590] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 1354.329253][T28592] ksmbd: Unknown IPC event: 0, ignore. [ 1354.409115][T28596] sctp: [Deprecated]: syz.2.5764 (pid 28596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1354.409115][T28596] Use struct sctp_sack_info instead [ 1355.419425][T28621] netlink: 'syz.0.5772': attribute type 46 has an invalid length. [ 1355.475734][T28617] sit0: left promiscuous mode [ 1356.083195][T28645] openvswitch: netlink: IP tunnel dst address not specified [ 1357.188062][T28666] netlink: 'syz.1.5780': attribute type 9 has an invalid length. [ 1357.428962][T28674] __nla_validate_parse: 9 callbacks suppressed [ 1357.428983][T28674] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5781'. [ 1357.532838][T28674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1358.589722][T28707] netlink: 'syz.1.5791': attribute type 10 has an invalid length. [ 1358.601054][T28707] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1358.649662][T28707] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1358.992848][T28730] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1359.022732][T28730] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1359.424937][T28743] netlink: 'syz.1.5798': attribute type 1 has an invalid length. [ 1359.492267][T28743] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.5798'. [ 1361.685017][T28766] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1361.699156][T28766] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1361.861547][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.867989][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.224835][T28775] netlink: 'syz.2.5811': attribute type 21 has an invalid length. [ 1362.537221][T28777] netlink: 'syz.1.5812': attribute type 3 has an invalid length. [ 1362.560015][T28777] netlink: 'syz.1.5812': attribute type 1 has an invalid length. [ 1362.591728][T28777] netlink: 'syz.1.5812': attribute type 1 has an invalid length. [ 1362.599841][T28777] netlink: 'syz.1.5812': attribute type 2 has an invalid length. [ 1362.642554][T28777] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.5812'. [ 1363.562460][T28784] netlink: 'syz.2.5814': attribute type 29 has an invalid length. [ 1363.688801][T28784] netlink: 'syz.2.5814': attribute type 29 has an invalid length. [ 1363.717593][T28785] netlink: 'syz.2.5814': attribute type 29 has an invalid length. [ 1363.745811][T28786] netlink: 'syz.2.5814': attribute type 29 has an invalid length. [ 1364.177860][T28787] netlink: 'syz.2.5814': attribute type 29 has an invalid length. [ 1364.205426][T28785] netlink: 'syz.2.5814': attribute type 29 has an invalid length. [ 1364.808713][T28810] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.5818'. [ 1365.847516][T28825] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1365.918696][T28820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1366.558525][T28832] netlink: 'syz.2.5824': attribute type 10 has an invalid length. [ 1366.576926][T28832] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5824'. [ 1366.587614][T28832] hsr0: entered promiscuous mode [ 1366.912565][T28840] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5828'. [ 1366.926854][T28840] netlink: get zone limit has 4 unknown bytes [ 1367.690898][T28853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5830'. [ 1368.260694][T28859] netlink: 'syz.0.5834': attribute type 29 has an invalid length. [ 1374.953298][T28859] netlink: 'syz.0.5834': attribute type 29 has an invalid length. [ 1375.000811][T28879] C: renamed from team_slave_0 [ 1375.012407][T28879] netlink: 'syz.3.5836': attribute type 3 has an invalid length. [ 1375.040552][T28879] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5836'. [ 1375.582106][T28895] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5842'. [ 1375.653833][T28897] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.5843'. [ 1375.700071][T28897] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5843'. [ 1376.670760][T28928] tap0: tun_chr_ioctl cmd 2148553947 [ 1376.676574][T28926] tap0: tun_chr_ioctl cmd 1074025677 [ 1376.682989][T28926] tap0: linktype set to 768 [ 1377.213891][T28950] netlink: 'syz.1.5859': attribute type 10 has an invalid length. [ 1377.630119][T28958] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.5862'. [ 1377.744787][T28961] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.5863'. [ 1377.793704][T28961] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.5863'. [ 1377.927773][T28966] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.5865'. [ 1377.939688][T28966] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5865'. [ 1378.015321][T28963] netlink: 'syz.0.5864': attribute type 7 has an invalid length. [ 1378.040682][T28963] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5864'. [ 1378.337810][T28977] netlink: 'syz.3.5870': attribute type 10 has an invalid length. [ 1378.401359][T28977] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1379.075550][T28993] netlink: 'syz.0.5872': attribute type 10 has an invalid length. [ 1379.114155][T28993] openvswitch: netlink: Flow key attr not present in new flow. [ 1379.143803][T28993] netlink: 'syz.0.5872': attribute type 10 has an invalid length. [ 1379.162446][T28993] openvswitch: netlink: Flow key attr not present in new flow. [ 1379.176436][T28993] netlink: 'syz.0.5872': attribute type 10 has an invalid length. [ 1379.184449][T28993] openvswitch: netlink: Flow key attr not present in new flow. [ 1379.195292][T28993] netlink: 'syz.0.5872': attribute type 10 has an invalid length. [ 1379.220579][T28993] openvswitch: netlink: Flow key attr not present in new flow. [ 1379.244628][T28993] netlink: 'syz.0.5872': attribute type 10 has an invalid length. [ 1379.272190][T28993] openvswitch: netlink: Flow key attr not present in new flow. [ 1379.309417][T28993] openvswitch: netlink: Flow key attr not present in new flow. [ 1379.353231][T28993] openvswitch: netlink: Flow key attr not present in new flow. [ 1379.391239][T28993] openvswitch: netlink: Flow key attr not present in new flow. [ 1379.415839][T28993] openvswitch: netlink: Flow key attr not present in new flow. [ 1381.324697][T28971] delete_channel: no stack [ 1381.541193][T29011] __nla_validate_parse: 15 callbacks suppressed [ 1381.541213][T29011] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.5876'. [ 1381.588084][T29010] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1381.622266][T29010] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5877'. [ 1382.197138][T29038] validate_nla: 9 callbacks suppressed [ 1382.197153][T29038] netlink: 'syz.1.5884': attribute type 21 has an invalid length. [ 1382.503982][T29044] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1382.568139][T29053] netlink: 'syz.3.5888': attribute type 1 has an invalid length. [ 1382.586391][T29053] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5888'. [ 1382.604969][T29053] netlink: 'syz.3.5888': attribute type 1 has an invalid length. [ 1382.634564][T29044] syzkaller0: entered promiscuous mode [ 1382.641250][T29044] syzkaller0: entered allmulticast mode [ 1382.990889][T29056] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.5889'. [ 1383.019616][T29056] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5889'. [ 1385.312701][T29061] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.5890'. [ 1385.330643][T29060] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.5898'. [ 1385.339840][T29060] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5898'. [ 1385.476615][T29064] netlink: 'syz.3.5891': attribute type 11 has an invalid length. [ 1385.493441][T29064] netlink: 'syz.3.5891': attribute type 1 has an invalid length. [ 1385.501453][T29064] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1385.544630][T29067] sctp: [Deprecated]: syz.3.5891 (pid 29067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1385.544630][T29067] Use struct sctp_sack_info instead [ 1385.994244][T29084] net_ratelimit: 5 callbacks suppressed [ 1385.994264][T29084] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 1386.265415][T29090] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1386.463057][T29095] netlink: 'syz.1.5903': attribute type 10 has an invalid length. [ 1386.480770][T29095] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1386.487797][T29095] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.518984][T29095] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1388.028182][T29137] __nla_validate_parse: 6 callbacks suppressed [ 1388.028202][T29137] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.5913'. [ 1388.133163][T29139] netlink: 'syz.0.5914': attribute type 12 has an invalid length. [ 1388.166528][T29139] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5914'. [ 1388.375620][T29146] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1388.400612][T29146] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1388.467172][T29148] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5918'. [ 1388.528785][T29150] netlink: 'syz.2.5919': attribute type 21 has an invalid length. [ 1388.582695][T29151] netlink: 'syz.2.5919': attribute type 2 has an invalid length. [ 1388.601729][T29151] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.5919'. [ 1388.997548][T29166] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5923'. [ 1389.625227][T29177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5926'. [ 1389.745676][T29180] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1389.898405][T29189] netlink: 'syz.3.5929': attribute type 3 has an invalid length. [ 1389.913761][T29189] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5929'. [ 1389.945513][T29179] netlink: 'syz.1.5927': attribute type 10 has an invalid length. [ 1390.155911][T29179] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1390.224399][T29184] netlink: 'syz.2.5928': attribute type 3 has an invalid length. [ 1390.606099][T29195] syzkaller0: entered promiscuous mode [ 1390.614575][T29195] syzkaller0: entered allmulticast mode [ 1390.922177][T29203] openvswitch: netlink: IP tunnel dst address not specified [ 1391.633872][T29213] syzkaller0: entered promiscuous mode [ 1391.639460][T29213] syzkaller0: entered allmulticast mode [ 1395.288029][T29223] netlink: 'syz.2.5940': attribute type 39 has an invalid length. [ 1395.992228][T29239] __nla_validate_parse: 3 callbacks suppressed [ 1395.992252][T29239] netlink: 11262 bytes leftover after parsing attributes in process `syz.0.5945'. [ 1396.034916][T29250] netlink: 'syz.1.5947': attribute type 3 has an invalid length. [ 1396.052913][T29250] netlink: 'syz.1.5947': attribute type 6 has an invalid length. [ 1396.064613][T29250] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1396.099305][T29250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1396.108739][T29250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1396.132198][T29250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1396.159103][T29250] netlink: 539 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1396.973664][T29260] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.5950'. [ 1396.999364][T29260] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5950'. [ 1397.229352][T29264] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5952'. [ 1397.253416][T29264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1397.546683][T29270] netlink: 'syz.1.5954': attribute type 29 has an invalid length. [ 1397.619118][T29269] nr0: port 1(hsr0) entered blocking state [ 1397.625785][T29269] nr0: port 1(hsr0) entered disabled state [ 1397.632099][T29269] hsr0: entered allmulticast mode [ 1397.637483][T29269] hsr_slave_0: entered allmulticast mode [ 1397.644319][T29269] hsr_slave_1: entered allmulticast mode [ 1397.655098][T29269] hsr0: entered promiscuous mode [ 1397.665059][T29270] netlink: 'syz.1.5954': attribute type 29 has an invalid length. [ 1398.137484][T29273] netlink: 'syz.1.5954': attribute type 29 has an invalid length. [ 1398.760365][T29301] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5962'. [ 1399.738030][T29303] netlink: 'syz.3.5963': attribute type 10 has an invalid length. [ 1399.946248][T29303] team0: Port device geneve1 added [ 1403.097543][T29319] netlink: 'syz.0.5967': attribute type 14 has an invalid length. [ 1403.123616][T29319] __nla_validate_parse: 1 callbacks suppressed [ 1403.123657][T29319] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5967'. [ 1403.175945][T29322] netlink: 'syz.2.5968': attribute type 29 has an invalid length. [ 1403.189574][T29322] netlink: 'syz.2.5968': attribute type 29 has an invalid length. [ 1403.419159][T29336] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5973'. [ 1403.501395][T29337] netlink: 'syz.2.5972': attribute type 27 has an invalid length. [ 1403.509305][T29337] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1403.543206][T29337] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1404.996173][T29366] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5983'. [ 1405.149508][T29365] delete_channel: no stack [ 1405.160282][T29365] delete_channel: no stack [ 1405.665861][T29390] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5991'. [ 1405.752934][T29393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5993'. [ 1405.774209][T29393] ipvlan1: entered promiscuous mode [ 1405.779664][T29393] ipvlan1: entered allmulticast mode [ 1405.788724][T29393] veth0_vlan: entered allmulticast mode [ 1405.978740][T29401] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.5996'. [ 1406.010978][T29401] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5996'. [ 1407.961643][T29479] netlink: 'syz.1.6016': attribute type 12 has an invalid length. [ 1407.995971][T29479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6016'. [ 1408.006622][T29476] delete_channel: no stack [ 1408.165120][T29484] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6017'. [ 1408.580053][T29510] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6024'. [ 1408.635380][T29514] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6025'. [ 1408.648024][T29514] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6025'. [ 1408.776466][T29517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6026'. [ 1409.023073][T29528] syzkaller0: left promiscuous mode [ 1409.028387][T29528] syzkaller0: left allmulticast mode [ 1412.206199][T29545] netlink: 'syz.0.6042': attribute type 29 has an invalid length. [ 1412.216215][T29545] netlink: 'syz.0.6042': attribute type 29 has an invalid length. [ 1412.226645][T29547] netlink: 'syz.0.6042': attribute type 29 has an invalid length. [ 1412.250178][T29542] netlink: 'syz.0.6042': attribute type 29 has an invalid length. [ 1412.267468][T29542] netlink: 'syz.0.6042': attribute type 29 has an invalid length. [ 1412.300020][T29548] sctp: [Deprecated]: syz.1.6035 (pid 29548) Use of int in maxseg socket option. [ 1412.300020][T29548] Use struct sctp_assoc_value instead [ 1412.451276][T29550] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6036'. [ 1412.751670][T29561] netlink: 'syz.1.6037': attribute type 2 has an invalid length. [ 1412.852911][T29562] : renamed from bond0 (while UP) [ 1412.882908][T29561] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.6037'. [ 1412.946237][T29565] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6038'. [ 1413.059650][T29565] netlink: 'syz.2.6038': attribute type 2 has an invalid length. [ 1413.103558][T29565] netlink: 'syz.2.6038': attribute type 1 has an invalid length. [ 1413.141679][T29565] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6038'. [ 1413.396088][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.396088][T29571] Use struct sctp_assoc_value instead [ 1413.545810][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.545810][T29571] Use struct sctp_assoc_value instead [ 1413.620987][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.620987][T29571] Use struct sctp_assoc_value instead [ 1413.639291][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.639291][T29571] Use struct sctp_assoc_value instead [ 1413.688933][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.688933][T29571] Use struct sctp_assoc_value instead [ 1413.709562][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.709562][T29571] Use struct sctp_assoc_value instead [ 1413.727012][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.727012][T29571] Use struct sctp_assoc_value instead [ 1413.775533][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.775533][T29571] Use struct sctp_assoc_value instead [ 1413.850684][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.850684][T29571] Use struct sctp_assoc_value instead [ 1413.963629][T29571] sctp: [Deprecated]: syz.1.6040 (pid 29571) Use of int in max_burst socket option deprecated. [ 1413.963629][T29571] Use struct sctp_assoc_value instead [ 1414.177694][T29589] netlink: 'syz.2.6046': attribute type 2 has an invalid length. [ 1414.225939][T29587] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.6045'. [ 1414.257371][T29589] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1414.340024][T29593] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1414.374426][T29589] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1414.572800][T29593] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1414.976625][T29606] netlink: 'syz.0.6050': attribute type 3 has an invalid length. [ 1414.984739][T29606] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.6050'. [ 1415.237278][T29609] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.6051'. [ 1416.294305][T29631] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6058'. [ 1416.322715][T29631] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6058'. [ 1417.659132][T29646] mac80211_hwsim hwsim82 wlan0: left promiscuous mode [ 1417.683085][T29646] mac80211_hwsim hwsim82 wlan0: left allmulticast mode [ 1417.731008][T29650] mac80211_hwsim hwsim82 wlan0: entered promiscuous mode [ 1417.756447][T29650] mac80211_hwsim hwsim82 wlan0: entered allmulticast mode [ 1418.189514][T29663] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6067'. [ 1419.692391][T29695] __nla_validate_parse: 2 callbacks suppressed [ 1419.692411][T29695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1419.708287][T29695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1419.860899][T29696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1419.870304][T29696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1420.007972][T29696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1420.107425][T29711] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1420.136424][T29696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1420.141119][T29711] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6082'. [ 1420.309405][T29696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1420.412827][T29720] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6085'. [ 1420.427524][T29720] netlink: get zone limit has 4 unknown bytes [ 1420.641013][T29729] validate_nla: 10 callbacks suppressed [ 1420.641053][T29729] netlink: 'syz.0.6088': attribute type 11 has an invalid length. [ 1420.672885][T29728] mac80211_hwsim hwsim83 wlan1: entered promiscuous mode [ 1420.692092][T29728] mac80211_hwsim hwsim83 wlan1: entered allmulticast mode [ 1421.696355][T29758] netlink: 'syz.1.6097': attribute type 10 has an invalid length. [ 1421.752723][T29758] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1422.006775][T29758] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1422.518698][T29777] netlink: 'syz.1.6100': attribute type 12 has an invalid length. [ 1422.550581][T29777] netlink: 'syz.1.6100': attribute type 49 has an invalid length. [ 1422.564149][T29777] netlink: 'syz.1.6100': attribute type 49 has an invalid length. [ 1422.643411][T29773] netlink: 'syz.1.6100': attribute type 1 has an invalid length. [ 1422.848913][T29781] netlink: 'syz.2.6101': attribute type 10 has an invalid length. [ 1422.878732][T29781] syz_tun: entered promiscuous mode [ 1423.277530][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.284126][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.334627][T29792] syzkaller0: entered promiscuous mode [ 1428.024485][T29808] netlink: 'syz.3.6109': attribute type 40 has an invalid length. [ 1428.238941][T29822] syzkaller0: entered promiscuous mode [ 1428.250347][T29822] syzkaller0: entered allmulticast mode [ 1429.175517][T29859] netlink: 'syz.0.6121': attribute type 10 has an invalid length. [ 1429.187210][T29859] __nla_validate_parse: 7 callbacks suppressed [ 1429.187353][T29859] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6121'. [ 1429.206183][T29859] hsr0: entered promiscuous mode [ 1429.222557][T29859] bridge0: port 2(hsr0) entered blocking state [ 1429.243999][T29859] bridge0: port 2(hsr0) entered disabled state [ 1429.272245][T29859] hsr0: entered allmulticast mode [ 1429.286017][T29859] hsr_slave_0: entered allmulticast mode [ 1429.299812][T29859] hsr_slave_1: entered allmulticast mode [ 1429.370502][T29859] bridge0: port 2(hsr0) entered blocking state [ 1429.377985][T29859] bridge0: port 2(hsr0) entered forwarding state [ 1430.287117][T29895] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6134'. [ 1430.319178][T29895] netlink: 158112 bytes leftover after parsing attributes in process `syz.1.6134'. [ 1430.370280][T29895] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1430.390639][T29895] CPU: 0 PID: 29895 Comm: syz.1.6134 Not tainted syzkaller #0 [ 1430.398196][T29895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1430.408315][T29895] Call Trace: [ 1430.411642][T29895] [ 1430.414633][T29895] dump_stack_lvl+0x18c/0x250 [ 1430.419380][T29895] ? show_regs_print_info+0x20/0x20 [ 1430.424638][T29895] ? load_image+0x420/0x420 [ 1430.429191][T29895] sysfs_warn_dup+0x8e/0xa0 [ 1430.433734][T29895] sysfs_do_create_link_sd+0xc0/0x110 [ 1430.439140][T29895] device_add_class_symlinks+0x1cf/0x240 [ 1430.444810][T29895] device_add+0x4f9/0xc40 [ 1430.449173][T29895] wiphy_register+0x1d99/0x2ac0 [ 1430.454078][T29895] ? cfg80211_event_work+0x40/0x40 [ 1430.459222][T29895] ? minstrel_ht_alloc+0x88a/0x990 [ 1430.464382][T29895] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1430.470485][T29895] ieee80211_register_hw+0x2dd8/0x3b30 [ 1430.476002][T29895] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1430.481603][T29895] ? ieee80211_tasklet_handler+0x20/0x20 [ 1430.487269][T29895] ? lockdep_hardirqs_on+0x98/0x150 [ 1430.492513][T29895] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1430.498722][T29895] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1430.504501][T29895] ? mac80211_hwsim_free+0x220/0x220 [ 1430.509820][T29895] ? rcu_is_watching+0x15/0xb0 [ 1430.514629][T29895] ? kstrndup+0xbd/0x140 [ 1430.518928][T29895] hwsim_new_radio_nl+0xdad/0x1a70 [ 1430.524084][T29895] ? __nla_validate+0x50/0x50 [ 1430.528814][T29895] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1430.535190][T29895] ? __nla_parse+0x40/0x50 [ 1430.539650][T29895] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1430.546026][T29895] genl_family_rcv_msg_doit+0x21a/0x310 [ 1430.551613][T29895] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1430.557545][T29895] ? bpf_lsm_capable+0x9/0x10 [ 1430.562261][T29895] ? security_capable+0x89/0xb0 [ 1430.567161][T29895] genl_rcv_msg+0x611/0x7a0 [ 1430.571713][T29895] ? genl_bind+0x360/0x360 [ 1430.576164][T29895] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1430.582538][T29895] netlink_rcv_skb+0x235/0x4c0 [ 1430.587353][T29895] ? genl_bind+0x360/0x360 [ 1430.591804][T29895] ? netlink_ack+0x1160/0x1160 [ 1430.596610][T29895] ? __lock_acquire+0x7d80/0x7d80 [ 1430.601677][T29895] ? down_read+0x1ac/0x2e0 [ 1430.606137][T29895] genl_rcv+0x28/0x40 [ 1430.610160][T29895] netlink_unicast+0x7b1/0x930 [ 1430.614967][T29895] netlink_sendmsg+0x8d0/0xbf0 [ 1430.619768][T29895] ? netlink_getsockopt+0x590/0x590 [ 1430.624997][T29895] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1430.630587][T29895] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1430.635910][T29895] ? security_socket_sendmsg+0x80/0xa0 [ 1430.641396][T29895] ? netlink_getsockopt+0x590/0x590 [ 1430.646627][T29895] ____sys_sendmsg+0x61b/0x980 [ 1430.651430][T29895] ? __asan_memset+0x22/0x40 [ 1430.656058][T29895] ? __sys_sendmsg_sock+0x30/0x30 [ 1430.661115][T29895] ? __import_iovec+0x5f2/0x850 [ 1430.666008][T29895] ? import_iovec+0x73/0xa0 [ 1430.670554][T29895] ___sys_sendmsg+0x2a6/0x360 [ 1430.675278][T29895] ? __sys_sendmsg+0x2b0/0x2b0 [ 1430.680078][T29895] ? irqentry_enter+0x37/0x50 [ 1430.684813][T29895] __se_sys_sendmsg+0x1d0/0x2c0 [ 1430.689709][T29895] ? perf_trace_preemptirq_template+0x269/0x330 [ 1430.695992][T29895] ? __x64_sys_sendmsg+0x80/0x80 [ 1430.700980][T29895] ? lockdep_hardirqs_on+0x98/0x150 [ 1430.706244][T29895] do_syscall_64+0x55/0xb0 [ 1430.710702][T29895] ? clear_bhb_loop+0x40/0x90 [ 1430.715439][T29895] ? clear_bhb_loop+0x40/0x90 [ 1430.720160][T29895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1430.726087][T29895] RIP: 0033:0x7f7b1eb9e159 [ 1430.730532][T29895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.750191][T29895] RSP: 002b:00007f7b1fb0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1430.758630][T29895] RAX: ffffffffffffffda RBX: 00007f7b1ee25fa0 RCX: 00007f7b1eb9e159 [ 1430.766627][T29895] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1430.774629][T29895] RBP: 00007f7b1ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 1430.782638][T29895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1430.790703][T29895] R13: 00007f7b1ee26038 R14: 00007f7b1ee25fa0 R15: 00007ffe3fa6d8b8 [ 1430.798752][T29895] [ 1431.398766][T29914] syzkaller0: entered promiscuous mode [ 1431.425877][T29914] syzkaller0: entered allmulticast mode [ 1433.994578][T29983] netlink: 'syz.0.6156': attribute type 13 has an invalid length. [ 1434.040496][T29983] netlink: 'syz.0.6156': attribute type 58 has an invalid length. [ 1434.100738][T29983] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6156'. [ 1434.484171][T30001] netlink: 'syz.0.6162': attribute type 2 has an invalid length. [ 1434.516029][T30001] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1435.835872][T30024] netlink: 'syz.1.6169': attribute type 13 has an invalid length. [ 1435.860957][T30024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1435.879000][T30024] syz_tun: refused to change device tx_queue_len [ 1435.897221][T30024] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1435.960818][T30024] netlink: 'syz.1.6169': attribute type 3 has an invalid length. [ 1435.984688][T30020] netlink: 'syz.2.6168': attribute type 10 has an invalid length. [ 1435.996558][T30020] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6168'. [ 1436.016803][T30025] netlink: 'syz.3.6170': attribute type 10 has an invalid length. [ 1436.028466][T30022] netlink: 'syz.1.6169': attribute type 3 has an invalid length. [ 1436.050719][T30024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1436.130745][T30022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6169'. [ 1436.409585][T30025] hsr0: left allmulticast mode [ 1436.424649][T30025] hsr_slave_0: left allmulticast mode [ 1436.444957][T30025] hsr_slave_1: left allmulticast mode [ 1436.484571][T30025] nr0: port 1(hsr0) entered disabled state [ 1437.158451][T30034] syzkaller0: entered promiscuous mode [ 1437.164809][T30034] syzkaller0: entered allmulticast mode [ 1437.176444][T30038] netlink: 'syz.3.6174': attribute type 10 has an invalid length. [ 1437.186657][T30038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6174'. [ 1437.200075][T30038] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1437.329594][T30050] netlink: 'syz.0.6177': attribute type 10 has an invalid length. [ 1437.360282][T30050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6177'. [ 1439.589342][T30060] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6188'. [ 1439.719659][T30068] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6182'. [ 1439.765693][T30071] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6182'. [ 1439.838826][T30063] netlink: 'syz.3.6180': attribute type 10 has an invalid length. [ 1439.863395][T30063] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6180'. [ 1439.955542][T30081] syzkaller0: entered promiscuous mode [ 1439.968446][T30081] syzkaller0: entered allmulticast mode [ 1439.980964][T30081] syzkaller0: left promiscuous mode [ 1439.986408][T30081] syzkaller0: left allmulticast mode [ 1440.286999][T30094] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1440.306137][T30094] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1440.513923][T30101] macvlan0: entered allmulticast mode [ 1440.519389][T30101] veth1_vlan: entered allmulticast mode [ 1440.991771][T30103] syzkaller0: entered promiscuous mode [ 1440.997783][T30103] syzkaller0: entered allmulticast mode [ 1443.789392][T30129] netlink: 'syz.0.6199': attribute type 10 has an invalid length. [ 1443.835947][T30134] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1443.845593][T30134] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1443.986479][T30129] veth1_vlan: entered allmulticast mode [ 1444.075549][T30129] team0: Device veth1_vlan failed to register rx_handler [ 1444.193402][T30137] netlink: 'syz.1.6202': attribute type 39 has an invalid length. [ 1444.530243][T30154] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6208'. [ 1444.635326][T30158] delete_channel: no stack [ 1444.811619][T30173] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6214'. [ 1444.829233][T30173] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6214'. [ 1444.944587][T30182] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.6217'. [ 1445.022510][T30188] sit0: entered promiscuous mode [ 1445.488807][T30209] virt_wifi0: entered promiscuous mode [ 1445.522500][T30209] virt_wifi0: entered allmulticast mode [ 1446.320824][T30217] netlink: 'syz.1.6229': attribute type 21 has an invalid length. [ 1446.340989][T30217] netlink: 'syz.1.6229': attribute type 1 has an invalid length. [ 1446.359968][T30217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6229'. [ 1446.389827][T30221] syzkaller0: entered promiscuous mode [ 1446.399136][T30221] syzkaller0: entered allmulticast mode [ 1446.417374][T30217] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1447.592552][T30247] netlink: 'syz.3.6238': attribute type 3 has an invalid length. [ 1447.605292][T30247] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6238'. [ 1447.658139][T30249] netlink: 'syz.3.6238': attribute type 46 has an invalid length. [ 1449.286883][T30269] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6245'. [ 1449.300090][T30269] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6245'. [ 1449.313507][T30271] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6245'. [ 1449.326559][T30271] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6245'. [ 1449.354533][T30269] netlink: 'syz.3.6245': attribute type 21 has an invalid length. [ 1449.367413][T30269] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.6245'. [ 1449.391393][T30271] netlink: 'syz.3.6245': attribute type 21 has an invalid length. [ 1451.229099][T30301] syz.0.6255[30301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1451.232486][T30301] syz.0.6255[30301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1451.307276][T30304] netlink: 'syz.2.6256': attribute type 16 has an invalid length. [ 1451.333808][T30304] __nla_validate_parse: 1 callbacks suppressed [ 1451.333917][T30304] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1451.394300][T30304] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6256'. [ 1451.586761][T30312] netlink: 'syz.1.6258': attribute type 10 has an invalid length. [ 1451.979959][T30324] netlink: 'syz.1.6262': attribute type 3 has an invalid length. [ 1452.040839][T30324] netlink: 'syz.1.6262': attribute type 1 has an invalid length. [ 1452.070353][T30324] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1455.599900][T30361] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6273'. [ 1455.609569][T30361] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6273'. [ 1456.391458][T30393] netlink: 'syz.3.6282': attribute type 9 has an invalid length. [ 1456.414307][T30393] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1456.683085][T30401] netlink: 'syz.3.6285': attribute type 21 has an invalid length. [ 1456.706251][T30401] IPv6: NLM_F_CREATE should be specified when creating new route [ 1456.730789][T30401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1456.738136][T30401] IPv6: NLM_F_CREATE should be set when creating new route [ 1456.745552][T30401] IPv6: NLM_F_CREATE should be set when creating new route [ 1456.752875][T30401] IPv6: NLM_F_CREATE should be set when creating new route [ 1456.776839][T30406] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6286'. [ 1456.797367][T30406] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6286'. [ 1457.315076][T30417] netlink: 'syz.0.6291': attribute type 8 has an invalid length. [ 1457.665555][T30422] syzkaller0: entered promiscuous mode [ 1457.674244][T30422] syzkaller0: entered allmulticast mode [ 1457.732366][T30423] syzkaller0: entered promiscuous mode [ 1457.738040][T30423] syzkaller0: entered allmulticast mode [ 1462.475400][T30434] netlink: 'syz.2.6296': attribute type 4 has an invalid length. [ 1462.488892][T30437] netlink: 'syz.2.6296': attribute type 10 has an invalid length. [ 1462.497177][T30437] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6296'. [ 1462.559005][T30437] team0: Port device virt_wifi0 removed [ 1462.579370][T30455] netlink: 'syz.1.6303': attribute type 2 has an invalid length. [ 1462.692504][T30461] syz.3.6304[30461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1462.694108][T30461] syz.3.6304[30461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1463.022396][T30478] netlink: 'syz.1.6310': attribute type 46 has an invalid length. [ 1463.042380][T30478] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6310'. [ 1463.123168][T30480] netlink: 'syz.2.6311': attribute type 3 has an invalid length. [ 1463.139432][T30480] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6311'. [ 1463.312529][T30494] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1463.327419][T30494] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1463.383964][T30494] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1463.403932][T30495] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1463.439885][T30492] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6316'. [ 1463.503788][T30494] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6317'. [ 1463.815713][T30508] netlink: 'syz.0.6319': attribute type 2 has an invalid length. [ 1463.878495][T30508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1463.964786][T30508] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1464.521179][T30517] netlink: 'syz.3.6324': attribute type 21 has an invalid length. [ 1464.553552][T30517] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6324'. [ 1466.116398][T30574] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1466.318118][T30589] À: port 1(ªªªªªª) entered blocking state [ 1466.327821][T30589] À: port 1(ªªªªªª) entered disabled state [ 1466.337339][T30589] ªªªªªª: entered allmulticast mode [ 1466.344834][T30589] ªªªªªª: entered promiscuous mode [ 1466.830987][T30612] tap0: tun_chr_ioctl cmd 2148553947 [ 1466.866204][T30612] tap0: tun_chr_ioctl cmd 2148553947 [ 1467.259796][T30632] netlink: 'syz.1.6357': attribute type 10 has an invalid length. [ 1467.292185][T30632] batadv0: left promiscuous mode [ 1467.299496][T30632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.325993][T30639] netlink: 'syz.3.6356': attribute type 3 has an invalid length. [ 1467.335117][T30632] : (slave batadv0): Enslaving as an active interface with an up link [ 1467.364087][T30632] netlink: 'syz.1.6357': attribute type 10 has an invalid length. [ 1467.664197][T30649] __nla_validate_parse: 14 callbacks suppressed [ 1467.664217][T30649] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1467.680849][T30649] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1467.997456][T30655] validate_nla: 31 callbacks suppressed [ 1467.997478][T30655] netlink: 'syz.3.6366': attribute type 46 has an invalid length. [ 1468.015138][T30659] netlink: 'syz.2.6367': attribute type 21 has an invalid length. [ 1468.041889][T30659] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6367'. [ 1468.057643][T30659] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6367'. [ 1468.204745][T30663] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6369'. [ 1468.390538][T30670] netlink: 'syz.1.6371': attribute type 4 has an invalid length. [ 1468.398695][T30670] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.6371'. [ 1468.588073][T30681] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.6374'. [ 1468.597624][T30681] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6374'. [ 1468.601094][T30679] netlink: 'syz.2.6375': attribute type 10 has an invalid length. [ 1469.410671][T30705] syzkaller0: entered promiscuous mode [ 1469.428191][T30705] syzkaller0: entered allmulticast mode [ 1470.579637][T30725] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6387'. [ 1470.589332][T30725] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6387'. [ 1472.873111][T30727] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1472.889700][T30728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1472.932848][T30729] netlink: 'syz.3.6388': attribute type 9 has an invalid length. [ 1472.947738][T30729] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1473.002116][T30731] sock: sock_timestamping_bind_phc: sock not bind to device [ 1473.039726][T30733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6390'. [ 1473.099418][T30736] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1473.110209][T30736] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6391'. [ 1473.426488][T30751] netlink: 'syz.3.6396': attribute type 21 has an invalid length. [ 1473.445563][T30751] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6396'. [ 1473.869301][T30754] syzkaller0: entered promiscuous mode [ 1473.915904][T30754] syzkaller0: entered allmulticast mode [ 1474.228155][T30768] netlink: 'syz.2.6399': attribute type 21 has an invalid length. [ 1474.250630][T30768] netlink: 'syz.2.6399': attribute type 6 has an invalid length. [ 1474.298572][T30768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6399'. [ 1474.407424][T30770] netlink: 'syz.2.6399': attribute type 58 has an invalid length. [ 1474.419454][T30770] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6399'. [ 1474.434764][T30774] netlink: 'syz.1.6400': attribute type 21 has an invalid length. [ 1474.987437][T30794] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1474.997725][T30794] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1478.010218][T30826] __nla_validate_parse: 2 callbacks suppressed [ 1478.010239][T30826] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6417'. [ 1478.077403][T30826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1478.212152][T30832] netlink: 'syz.1.6418': attribute type 10 has an invalid length. [ 1478.495471][T30834] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.6419'. [ 1478.610959][T30836] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6420'. [ 1478.709833][T30842] netlink: 'syz.2.6420': attribute type 1 has an invalid length. [ 1478.727870][T30842] netlink: 'syz.2.6420': attribute type 3 has an invalid length. [ 1478.737688][T30842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6420'. [ 1479.113045][T30852] netlink: 'syz.0.6422': attribute type 10 has an invalid length. [ 1479.140451][T30852] netlink: 160444 bytes leftover after parsing attributes in process `syz.0.6422'. [ 1479.170265][T30852] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1480.265873][T30857] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6424'. [ 1481.316355][T30860] : port 1(ip6gretap0) entered blocking state [ 1481.341175][T30860] : port 1(ip6gretap0) entered disabled state [ 1481.350219][T30860] ip6gretap0: entered allmulticast mode [ 1481.414770][T30860] ip6gretap0: entered promiscuous mode [ 1482.242655][T30891] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.6434'. [ 1482.275264][T30891] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6434'. [ 1482.294082][T30892] netlink: 'syz.1.6432': attribute type 1 has an invalid length. [ 1482.306157][T30892] netlink: 'syz.1.6432': attribute type 3 has an invalid length. [ 1482.322586][T30892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6432'. [ 1482.358774][T30892] netlink: 'syz.1.6432': attribute type 10 has an invalid length. [ 1482.373230][T30892] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6432'. [ 1482.509509][T30898] netlink: 'syz.0.6436': attribute type 3 has an invalid length. [ 1482.853606][T30912] netlink: 'syz.2.6440': attribute type 9 has an invalid length. [ 1482.950978][T30916] netlink: 'syz.2.6440': attribute type 9 has an invalid length. [ 1483.938875][T30935] netlink: 'syz.0.6448': attribute type 153 has an invalid length. [ 1483.975311][T30935] __nla_validate_parse: 3 callbacks suppressed [ 1483.977441][T30935] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.6448'. [ 1484.738517][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.745490][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.137430][T30959] netlink: 'syz.0.6453': attribute type 3 has an invalid length. [ 1485.170564][T30959] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.6453'. [ 1485.687872][T30981] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6459'. [ 1485.730545][T30981] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6459'. [ 1486.725951][T31004] netlink: 'syz.0.6461': attribute type 3 has an invalid length. [ 1486.750439][T31004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6461'. [ 1486.894800][T31006] delete_channel: no stack [ 1487.856426][T31013] netlink: 'syz.1.6465': attribute type 23 has an invalid length. [ 1488.087051][T31029] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.6470'. [ 1488.119831][T31029] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6470'. [ 1489.375791][T31057] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6476'. [ 1489.971243][T31055] : port 1(ip6gretap0) entered blocking state [ 1490.015658][T31055] : port 1(ip6gretap0) entered disabled state [ 1490.024816][T31055] ip6gretap0: entered allmulticast mode [ 1490.117817][T31055] ip6gretap0: entered promiscuous mode [ 1490.429754][T31074] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.6479'. [ 1491.337766][T31081] netlink: 'syz.1.6481': attribute type 2 has an invalid length. [ 1491.377804][T31081] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6481'. [ 1492.081012][T31090] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6483'. [ 1492.101102][T31090] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6483'. [ 1492.430185][T31094] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6484'. [ 1492.639665][T31103] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6488'. [ 1493.068713][T31103] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1493.811884][T31118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6492'. [ 1493.856444][T31118] netlink: 'syz.1.6492': attribute type 3 has an invalid length. [ 1493.880520][T31118] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.6492'. [ 1494.313182][T31136] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.6496'. [ 1495.147688][T31143] netlink: 'syz.2.6499': attribute type 29 has an invalid length. [ 1496.968285][T31140] __nla_validate_parse: 1 callbacks suppressed [ 1496.968303][T31140] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6497'. [ 1497.060545][T31143] netlink: 'syz.2.6499': attribute type 29 has an invalid length. [ 1497.429083][T31166] netlink: 'syz.2.6503': attribute type 17 has an invalid length. [ 1497.454812][T31166] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6503'. [ 1497.502987][T31171] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6504'. [ 1497.535414][T31170] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6505'. [ 1497.602332][T31177] sctp_setsockopt_maxburst: 55 callbacks suppressed [ 1497.602437][T31177] sctp: [Deprecated]: syz.1.6505 (pid 31177) Use of int in max_burst socket option deprecated. [ 1497.602437][T31177] Use struct sctp_assoc_value instead [ 1497.649816][T31176] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6506'. [ 1498.240113][T31181] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.6507'. [ 1498.257786][T31181] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6507'. [ 1498.504036][T31191] netlink: 'syz.3.6511': attribute type 19 has an invalid length. [ 1498.520615][T31191] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6511'. [ 1498.955627][T31216] mac80211_hwsim hwsim79 ..ãc¤±: renamed from wlan1 (while UP) [ 1499.000206][T31215] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6517'. [ 1499.139748][T31215]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.191218][T31215]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.237150][T31215]  (unregistering): (slave ..ãc¤±): Releasing backup interface [ 1499.281857][T31215]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1499.326934][T31215]  (unregistering): (slave batadv0): Releasing backup interface [ 1499.354976][T31215]  (unregistering): Released all slaves [ 1499.625269][T31231] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.6521'. [ 1499.863756][T31233] syzkaller0: entered promiscuous mode [ 1499.879607][T31233] syzkaller0: entered allmulticast mode [ 1499.954846][T31240] netlink: 'syz.2.6524': attribute type 29 has an invalid length. [ 1499.970561][T31240] netlink: 'syz.2.6524': attribute type 3 has an invalid length. [ 1503.893360][T27628] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1504.077922][T31291] __nla_validate_parse: 2 callbacks suppressed [ 1504.077942][T31291] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.6537'. [ 1504.675883][T31319] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1504.685704][T31319] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1504.934296][T31327] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6546'. [ 1505.078107][T31329] netlink: 'syz.1.6547': attribute type 153 has an invalid length. [ 1505.100461][T31329] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.6547'. [ 1505.147366][T31331] veth1_macvtap: left allmulticast mode [ 1505.153268][T31331] veth1_macvtap: left promiscuous mode [ 1505.158791][T31331] macsec0: entered promiscuous mode [ 1505.179104][T31331] macsec0: left allmulticast mode [ 1505.202097][T31331] veth1_macvtap: entered promiscuous mode [ 1505.220520][T31331] macsec0: entered allmulticast mode [ 1505.225903][T31331] veth1_macvtap: entered allmulticast mode [ 1505.455590][T31342] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6553'. [ 1505.531642][T31344] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.6553'. [ 1505.557682][T31344] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.6553'. [ 1505.691855][T31334] delete_channel: no stack [ 1505.782933][T31352] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.6555'. [ 1505.817511][T31350] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.6554'. [ 1506.720956][T31379] can: request_module (can-proto-5) failed. [ 1507.345789][T31401] netlink: 'syz.0.6569': attribute type 10 has an invalid length. [ 1507.449619][T31401] team0: Device wg1 is of different type [ 1507.546402][T31407] netlink: 'syz.2.6572': attribute type 10 has an invalid length. [ 1507.571118][T31407] veth1_vlan: left allmulticast mode [ 1509.459893][T31461] __nla_validate_parse: 3 callbacks suppressed [ 1509.459913][T31461] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6588'. [ 1509.529813][T31461] Ÿë: port 1(gretap0) entered blocking state [ 1509.541823][T31461] Ÿë: port 1(gretap0) entered disabled state [ 1509.548180][T31461] gretap0: entered allmulticast mode [ 1509.581608][T31461] gretap0: entered promiscuous mode [ 1509.618940][T31461] Ÿë: port 2(veth0_to_team) entered blocking state [ 1509.635664][T31461] Ÿë: port 2(veth0_to_team) entered disabled state [ 1509.658391][T31461] veth0_to_team: entered allmulticast mode [ 1509.683014][T31461] veth0_to_team: entered promiscuous mode [ 1511.381150][T31506] netlink: 'syz.0.6601': attribute type 1 has an invalid length. [ 1511.752535][T24565] page_pool_release_retry() stalled pool shutdown 50 inflight 60 sec [ 1511.901000][T31513] netlink: 'syz.2.6603': attribute type 29 has an invalid length. [ 1511.942339][T31513] netlink: 'syz.2.6603': attribute type 29 has an invalid length. [ 1512.496676][T31523] netlink: 'syz.2.6608': attribute type 2 has an invalid length. [ 1512.508120][T31523] netlink: 'syz.2.6608': attribute type 2 has an invalid length. [ 1517.428978][T31571] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6623'. [ 1517.550254][T31584] netlink: 'syz.2.6623': attribute type 10 has an invalid length. [ 1517.817800][T31588] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6628'. [ 1518.039920][T31590] netlink: 'syz.1.6629': attribute type 6 has an invalid length. [ 1518.048624][T31590] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6629'. [ 1518.363174][T31596] netlink: 'syz.3.6631': attribute type 10 has an invalid length. [ 1518.392760][T31596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6631'. [ 1518.422068][T31596] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1519.251546][T31623] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6637'. [ 1521.698147][T31653] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1521.753473][T31658] FAULT_INJECTION: forcing a failure. [ 1521.753473][T31658] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1521.780602][T31653] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1521.801804][T31658] CPU: 1 PID: 31658 Comm: syz.0.6648 Not tainted syzkaller #0 [ 1521.809460][T31658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1521.819586][T31658] Call Trace: [ 1521.822914][T31658] [ 1521.825897][T31658] dump_stack_lvl+0x18c/0x250 [ 1521.830644][T31658] ? show_regs_print_info+0x20/0x20 [ 1521.835904][T31658] ? load_image+0x420/0x420 [ 1521.840470][T31658] ? __might_fault+0xaa/0x120 [ 1521.845201][T31658] ? __lock_acquire+0x7d80/0x7d80 [ 1521.850286][T31658] should_fail_ex+0x394/0x4c0 [ 1521.855028][T31658] _copy_from_user+0x2f/0xe0 [ 1521.859670][T31658] __sys_bpf+0x23e/0x890 [ 1521.863979][T31658] ? bpf_link_show_fdinfo+0x560/0x560 [ 1521.869401][T31658] ? lock_chain_count+0x20/0x20 [ 1521.874294][T31658] __x64_sys_bpf+0x7c/0x90 [ 1521.878740][T31658] do_syscall_64+0x55/0xb0 [ 1521.883196][T31658] ? clear_bhb_loop+0x40/0x90 [ 1521.887909][T31658] ? clear_bhb_loop+0x40/0x90 [ 1521.892632][T31658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.898558][T31658] RIP: 0033:0x7f75f159e159 [ 1521.903002][T31658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.922654][T31658] RSP: 002b:00007f75f2494028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1521.931093][T31658] RAX: ffffffffffffffda RBX: 00007f75f1825fa0 RCX: 00007f75f159e159 [ 1521.939092][T31658] RDX: 0000000000000094 RSI: 00002000000027c0 RDI: 0000000000000005 [ 1521.947090][T31658] RBP: 00007f75f2494090 R08: 0000000000000000 R09: 0000000000000000 [ 1521.955090][T31658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.963084][T31658] R13: 00007f75f1826038 R14: 00007f75f1825fa0 R15: 00007ffe78344a78 [ 1521.971103][T31658] [ 1522.221779][T31663] netlink: 'syz.2.6649': attribute type 10 has an invalid length. [ 1522.253734][T31663] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1522.381295][T31670] netlink: 'syz.0.6652': attribute type 10 has an invalid length. [ 1522.441702][T31670] hsr0: left allmulticast mode [ 1522.446704][T31670] hsr_slave_0: left allmulticast mode [ 1522.482598][T31670] hsr_slave_1: left allmulticast mode [ 1522.509507][T31670] bridge0: port 2(hsr0) entered disabled state [ 1523.011946][T31670] : (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1523.694213][T31697] : renamed from batadv0 (while UP) [ 1523.785677][T31699] netlink: 'syz.1.6661': attribute type 1 has an invalid length. [ 1523.797130][T31705] FAULT_INJECTION: forcing a failure. [ 1523.797130][T31705] name failslab, interval 1, probability 0, space 0, times 1 [ 1523.817652][T31705] CPU: 0 PID: 31705 Comm: syz.3.6660 Not tainted syzkaller #0 [ 1523.825189][T31705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1523.835296][T31705] Call Trace: [ 1523.838624][T31705] [ 1523.841602][T31705] dump_stack_lvl+0x18c/0x250 [ 1523.846351][T31705] ? show_regs_print_info+0x20/0x20 [ 1523.851609][T31705] ? load_image+0x420/0x420 [ 1523.856164][T31705] ? __might_sleep+0xe0/0xe0 [ 1523.860855][T31705] ? __lock_acquire+0x7d80/0x7d80 [ 1523.865952][T31705] ? mark_lock+0x94/0x320 [ 1523.870342][T31705] should_fail_ex+0x394/0x4c0 [ 1523.875199][T31705] should_failslab+0x9/0x20 [ 1523.879761][T31705] slab_pre_alloc_hook+0x59/0x300 [ 1523.884849][T31705] ? __get_vm_area_node+0x125/0x370 [ 1523.890113][T31705] __kmem_cache_alloc_node+0x53/0x250 [ 1523.895546][T31705] ? __get_vm_area_node+0x125/0x370 [ 1523.900837][T31705] kmalloc_node_trace+0x26/0xe0 [ 1523.905754][T31705] __get_vm_area_node+0x125/0x370 [ 1523.910837][T31705] __vmalloc_node_range+0x36f/0x1320 [ 1523.916178][T31705] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1523.921778][T31705] ? mark_lock+0x94/0x320 [ 1523.926156][T31705] ? __lock_acquire+0x1336/0x7d80 [ 1523.931229][T31705] ? aa_get_newest_label+0xfd/0x5c0 [ 1523.936481][T31705] ? free_vm_area+0x50/0x50 [ 1523.941019][T31705] ? end_current_label_crit_section+0x170/0x170 [ 1523.947315][T31705] ? perf_trace_lock+0xfc/0x3b0 [ 1523.952192][T31705] ? verify_lock_unused+0x140/0x140 [ 1523.957424][T31705] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1523.962998][T31705] __vmalloc+0x7a/0x90 [ 1523.967106][T31705] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1523.972679][T31705] bpf_prog_alloc_no_stats+0x46/0x430 [ 1523.978084][T31705] bpf_prog_alloc+0x3d/0x1a0 [ 1523.982704][T31705] bpf_prog_load+0x6b2/0x1610 [ 1523.987424][T31705] ? map_freeze+0x420/0x420 [ 1523.991962][T31705] ? __might_fault+0xaa/0x120 [ 1523.996677][T31705] ? __lock_acquire+0x7d80/0x7d80 [ 1524.001745][T31705] ? file_end_write+0x159/0x250 [ 1524.006635][T31705] ? __might_fault+0xaa/0x120 [ 1524.011337][T31705] ? __might_fault+0xc6/0x120 [ 1524.016040][T31705] ? __might_fault+0xaa/0x120 [ 1524.020746][T31705] ? bpf_lsm_bpf+0x9/0x10 [ 1524.025124][T31705] ? security_bpf+0x7e/0xa0 [ 1524.029661][T31705] __sys_bpf+0x5ba/0x890 [ 1524.033931][T31705] ? bpf_link_show_fdinfo+0x560/0x560 [ 1524.039340][T31705] ? lock_chain_count+0x20/0x20 [ 1524.044225][T31705] __x64_sys_bpf+0x7c/0x90 [ 1524.048673][T31705] do_syscall_64+0x55/0xb0 [ 1524.053163][T31705] ? clear_bhb_loop+0x40/0x90 [ 1524.057866][T31705] ? clear_bhb_loop+0x40/0x90 [ 1524.062584][T31705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1524.068509][T31705] RIP: 0033:0x7f520239e159 [ 1524.072951][T31705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.092585][T31705] RSP: 002b:00007f5203294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1524.101035][T31705] RAX: ffffffffffffffda RBX: 00007f5202625fa0 RCX: 00007f520239e159 [ 1524.109041][T31705] RDX: 0000000000000094 RSI: 00002000000027c0 RDI: 0000000000000005 [ 1524.117040][T31705] RBP: 00007f5203294090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.125048][T31705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.133040][T31705] R13: 00007f5202626038 R14: 00007f5202625fa0 R15: 00007ffc3eaf1d18 [ 1524.141049][T31705] [ 1524.173138][T31699] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.6661'. [ 1524.184252][T31705] syz.3.6660: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1524.206772][T31699] netlink: 'syz.1.6661': attribute type 1 has an invalid length. [ 1524.225747][T31705] CPU: 1 PID: 31705 Comm: syz.3.6660 Not tainted syzkaller #0 [ 1524.233274][T31705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1524.243373][T31705] Call Trace: [ 1524.246702][T31705] [ 1524.249672][T31705] dump_stack_lvl+0x18c/0x250 [ 1524.254408][T31705] ? show_regs_print_info+0x20/0x20 [ 1524.259663][T31705] ? load_image+0x420/0x420 [ 1524.264228][T31705] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1524.270698][T31705] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1524.277264][T31705] warn_alloc+0x246/0x340 [ 1524.281647][T31705] ? __get_vm_area_node+0x125/0x370 [ 1524.286904][T31705] ? zone_watermark_ok_safe+0x230/0x230 [ 1524.292498][T31705] ? rcu_is_watching+0x15/0xb0 [ 1524.297322][T31705] ? __get_vm_area_node+0x356/0x370 [ 1524.302589][T31705] __vmalloc_node_range+0x394/0x1320 [ 1524.307929][T31705] ? mark_lock+0x94/0x320 [ 1524.312314][T31705] ? __lock_acquire+0x1336/0x7d80 [ 1524.317402][T31705] ? aa_get_newest_label+0xfd/0x5c0 [ 1524.322657][T31705] ? free_vm_area+0x50/0x50 [ 1524.327232][T31705] ? end_current_label_crit_section+0x170/0x170 [ 1524.333527][T31705] ? perf_trace_lock+0xfc/0x3b0 [ 1524.338431][T31705] ? verify_lock_unused+0x140/0x140 [ 1524.343694][T31705] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1524.349290][T31705] __vmalloc+0x7a/0x90 [ 1524.353436][T31705] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1524.359039][T31705] bpf_prog_alloc_no_stats+0x46/0x430 [ 1524.364483][T31705] bpf_prog_alloc+0x3d/0x1a0 [ 1524.369130][T31705] bpf_prog_load+0x6b2/0x1610 [ 1524.373881][T31705] ? map_freeze+0x420/0x420 [ 1524.378443][T31705] ? __might_fault+0xaa/0x120 [ 1524.383166][T31705] ? __lock_acquire+0x7d80/0x7d80 [ 1524.388253][T31705] ? file_end_write+0x159/0x250 [ 1524.393170][T31705] ? __might_fault+0xaa/0x120 [ 1524.397909][T31705] ? __might_fault+0xc6/0x120 [ 1524.402637][T31705] ? __might_fault+0xaa/0x120 [ 1524.407367][T31705] ? bpf_lsm_bpf+0x9/0x10 [ 1524.411748][T31705] ? security_bpf+0x7e/0xa0 [ 1524.416316][T31705] __sys_bpf+0x5ba/0x890 [ 1524.420611][T31705] ? bpf_link_show_fdinfo+0x560/0x560 [ 1524.426077][T31705] ? lock_chain_count+0x20/0x20 [ 1524.431026][T31705] __x64_sys_bpf+0x7c/0x90 [ 1524.435496][T31705] do_syscall_64+0x55/0xb0 [ 1524.439963][T31705] ? clear_bhb_loop+0x40/0x90 [ 1524.444695][T31705] ? clear_bhb_loop+0x40/0x90 [ 1524.449434][T31705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1524.455386][T31705] RIP: 0033:0x7f520239e159 [ 1524.459853][T31705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.479556][T31705] RSP: 002b:00007f5203294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1524.488036][T31705] RAX: ffffffffffffffda RBX: 00007f5202625fa0 RCX: 00007f520239e159 [ 1524.496146][T31705] RDX: 0000000000000094 RSI: 00002000000027c0 RDI: 0000000000000005 [ 1524.504182][T31705] RBP: 00007f5203294090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.512211][T31705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.520233][T31705] R13: 00007f5202626038 R14: 00007f5202625fa0 R15: 00007ffc3eaf1d18 [ 1524.528264][T31705] [ 1524.534690][T31705] Mem-Info: [ 1524.537869][T31705] active_anon:27683 inactive_anon:0 isolated_anon:0 [ 1524.537869][T31705] active_file:18235 inactive_file:40506 isolated_file:0 [ 1524.537869][T31705] unevictable:768 dirty:227 writeback:0 [ 1524.537869][T31705] slab_reclaimable:13229 slab_unreclaimable:107218 [ 1524.537869][T31705] mapped:24195 shmem:16609 pagetables:581 [ 1524.537869][T31705] sec_pagetables:0 bounce:0 [ 1524.537869][T31705] kernel_misc_reclaimable:0 [ 1524.537869][T31705] free:1300510 free_pcp:7996 free_cma:0 [ 1524.600944][T31705] Node 0 active_anon:109232kB inactive_anon:0kB active_file:72940kB inactive_file:161828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96780kB dirty:908kB writeback:0kB shmem:63400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12276kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no [ 1524.650567][T31705] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1524.684422][T31705] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.718261][T31705] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1524.725548][T31705] Node 0 DMA32 free:1292160kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:107396kB inactive_anon:0kB active_file:72940kB inactive_file:161000kB unevictable:1536kB writepending:908kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:21916kB local_pcp:10652kB free_cma:0kB [ 1524.763552][T31705] lowmem_reserve[]: 0 0 0 0 0 [ 1524.768505][T31705] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1524.802188][T31710] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6663'. [ 1524.869395][T31705] lowmem_reserve[]: 0 0 0 0 0 [ 1524.881959][T31705] Node 1 Normal free:3894776kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12992kB local_pcp:3968kB free_cma:0kB [ 1524.985818][T31705] lowmem_reserve[]: 0 0 0 0 0 [ 1525.004254][T31705] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1525.062517][T31705] Node 0 DMA32: 131*4kB (UM) 756*8kB (UME) 77*16kB (UME) 1351*32kB (UE) 1449*64kB (UM) 966*128kB (UM) 297*256kB (UME) 35*512kB (UM) 45*1024kB (UME) 24*2048kB (UME) 204*4096kB (M) = 1292188kB [ 1525.108345][T31705] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1525.210954][T31705] Node 1 Normal: 272*4kB (UM) 57*8kB (UME) 45*16kB (UME) 219*32kB (UME) 71*64kB (UME) 14*128kB (UME) 5*256kB (UME) 2*512kB (UE) 0*1024kB 1*2048kB (E) 946*4096kB (M) = 3894776kB [ 1525.251901][T31705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.311501][T31705] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1525.334594][T31705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1525.354721][T31705] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1525.386234][T31705] 68505 total pagecache pages [ 1525.399358][T31705] 0 pages in swap cache [ 1525.413171][T31705] Free swap = 124728kB [ 1525.427739][T31705] Total swap = 124996kB [ 1525.441404][T31705] 2097051 pages RAM [ 1525.454343][T31705] 0 pages HighMem/MovableOnly [ 1525.468917][T31705] 416965 pages reserved [ 1525.482443][T31705] 0 pages cma reserved [ 1525.927086][T31737] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.6669'. [ 1526.000208][T31739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6670'. [ 1526.015648][T31739] netlink: 'syz.3.6670': attribute type 10 has an invalid length. [ 1526.047270][T31739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6670'. [ 1526.066468][T31739] team0: entered promiscuous mode [ 1526.074936][T31739] C: entered promiscuous mode [ 1526.081592][T31739] team_slave_1: entered promiscuous mode [ 1526.089360][T31739] macvlan0: entered promiscuous mode [ 1526.098016][T31739] geneve1: entered promiscuous mode [ 1526.105641][T31739] team0: entered allmulticast mode [ 1526.115125][T31739] C: entered allmulticast mode [ 1526.120581][T31739] team_slave_1: entered allmulticast mode [ 1526.135163][T31739] macvlan0: entered allmulticast mode [ 1526.142316][T31739] geneve1: entered allmulticast mode [ 1526.171289][T31739] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1526.193726][T31742] netlink: 'syz.3.6670': attribute type 12 has an invalid length. [ 1526.205510][T31742] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6670'. [ 1526.502101][T31744] delete_channel: no stack [ 1526.611104][T31752] netlink: 'syz.1.6673': attribute type 10 has an invalid length. [ 1526.733649][T31761] netlink: 'syz.2.6676': attribute type 10 has an invalid length. [ 1526.752328][T31761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6676'. [ 1526.774825][T31761] netlink: 'syz.2.6676': attribute type 10 has an invalid length. [ 1526.793271][T31761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6676'. [ 1526.811422][T31764] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6676'. [ 1527.064055][T31773] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1527.506443][T31783] tun1: tun_chr_ioctl cmd 1074025681 [ 1528.027912][T31806] delete_channel: no stack [ 1529.217409][T31837] netlink: 'syz.0.6696': attribute type 1 has an invalid length. [ 1529.312943][T31837] __nla_validate_parse: 8 callbacks suppressed [ 1529.312962][T31837] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6696'. [ 1529.594055][T31842] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.6698'. [ 1529.630689][T31842] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6698'. [ 1529.679795][T31848] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.6699'. [ 1529.699723][T31848] openvswitch: netlink: Key type 8208 is out of range max 32 [ 1529.898722][T31851] netlink: 'syz.1.6700': attribute type 1 has an invalid length. [ 1529.922328][T31851] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6700'. [ 1530.008251][T31859] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6702'. [ 1530.089307][T31864] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.6705'. [ 1530.098784][T31864] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6705'. [ 1530.113076][T31865] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6702'. [ 1530.175383][T31859] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6702'. [ 1531.708999][T31905] netlink: 'syz.2.6719': attribute type 10 has an invalid length. [ 1532.172548][T31911] IPv6: NLM_F_CREATE should be specified when creating new route [ 1535.048836][T31936] __nla_validate_parse: 7 callbacks suppressed [ 1535.048938][T31936] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6731'. [ 1535.096369][T31936] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1535.429940][T31947] syzkaller0: entered promiscuous mode [ 1535.438353][T31947] syzkaller0: entered allmulticast mode [ 1535.665758][T31965] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1535.800291][T31967] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1535.991745][T31970] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6737'. [ 1538.536625][T31965] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1538.558900][T31970] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1538.577175][T31970] CPU: 0 PID: 31970 Comm: syz.1.6737 Not tainted syzkaller #0 [ 1538.584725][T31970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1538.594834][T31970] Call Trace: [ 1538.598167][T31970] [ 1538.601151][T31970] dump_stack_lvl+0x18c/0x250 [ 1538.605903][T31970] ? show_regs_print_info+0x20/0x20 [ 1538.611169][T31970] ? load_image+0x420/0x420 [ 1538.615759][T31970] sysfs_warn_dup+0x8e/0xa0 [ 1538.620332][T31970] sysfs_do_create_link_sd+0xc0/0x110 [ 1538.625783][T31970] device_add_class_symlinks+0x1cf/0x240 [ 1538.631520][T31970] device_add+0x4f9/0xc40 [ 1538.635915][T31970] wiphy_register+0x1d99/0x2ac0 [ 1538.640873][T31970] ? cfg80211_event_work+0x40/0x40 [ 1538.646062][T31970] ? minstrel_ht_alloc+0x88a/0x990 [ 1538.651252][T31970] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1538.657399][T31970] ieee80211_register_hw+0x2dd8/0x3b30 [ 1538.662942][T31970] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1538.668683][T31970] ? ieee80211_tasklet_handler+0x20/0x20 [ 1538.674382][T31970] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1538.680344][T31970] ? __debug_object_init+0xec/0x450 [ 1538.685610][T31970] ? __asan_memset+0x22/0x40 [ 1538.690264][T31970] ? __hrtimer_init+0x189/0x270 [ 1538.695204][T31970] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1538.701025][T31970] ? mac80211_hwsim_free+0x220/0x220 [ 1538.706395][T31970] ? rcu_is_watching+0x15/0xb0 [ 1538.711238][T31970] ? kstrndup+0xbd/0x140 [ 1538.715577][T31970] hwsim_new_radio_nl+0xdad/0x1a70 [ 1538.720752][T31970] ? __nla_validate+0x50/0x50 [ 1538.725521][T31970] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1538.731913][T31970] ? __nla_parse+0x24/0x50 [ 1538.736424][T31970] ? __nla_parse+0x40/0x50 [ 1538.740923][T31970] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1538.747339][T31970] genl_family_rcv_msg_doit+0x21a/0x310 [ 1538.752961][T31970] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1538.758934][T31970] ? bpf_lsm_capable+0x9/0x10 [ 1538.763663][T31970] ? security_capable+0x89/0xb0 [ 1538.768578][T31970] genl_rcv_msg+0x611/0x7a0 [ 1538.773154][T31970] ? genl_bind+0x360/0x360 [ 1538.777625][T31970] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1538.784022][T31970] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1538.790695][T31970] ? perf_trace_lock+0xfc/0x3b0 [ 1538.795612][T31970] netlink_rcv_skb+0x235/0x4c0 [ 1538.800434][T31970] ? genl_bind+0x360/0x360 [ 1538.804914][T31970] ? netlink_ack+0x1160/0x1160 [ 1538.809773][T31970] ? __lock_acquire+0x7d80/0x7d80 [ 1538.814870][T31970] ? down_read+0x1ac/0x2e0 [ 1538.819370][T31970] genl_rcv+0x28/0x40 [ 1538.823410][T31970] netlink_unicast+0x7b1/0x930 [ 1538.828249][T31970] netlink_sendmsg+0x8d0/0xbf0 [ 1538.833117][T31970] ? netlink_getsockopt+0x590/0x590 [ 1538.838377][T31970] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1538.843987][T31970] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1538.849324][T31970] ? security_socket_sendmsg+0x80/0xa0 [ 1538.854834][T31970] ? netlink_getsockopt+0x590/0x590 [ 1538.860114][T31970] ____sys_sendmsg+0x61b/0x980 [ 1538.864948][T31970] ? __asan_memset+0x22/0x40 [ 1538.869599][T31970] ? __sys_sendmsg_sock+0x30/0x30 [ 1538.874679][T31970] ? __import_iovec+0x5f2/0x850 [ 1538.879599][T31970] ? import_iovec+0x73/0xa0 [ 1538.884168][T31970] ___sys_sendmsg+0x2a6/0x360 [ 1538.888911][T31970] ? __sys_sendmsg+0x2b0/0x2b0 [ 1538.893814][T31970] __se_sys_sendmsg+0x1d0/0x2c0 [ 1538.898734][T31970] ? perf_trace_preemptirq_template+0x269/0x330 [ 1538.905048][T31970] ? __x64_sys_sendmsg+0x80/0x80 [ 1538.910069][T31970] ? lockdep_hardirqs_on+0x98/0x150 [ 1538.915329][T31970] do_syscall_64+0x55/0xb0 [ 1538.919805][T31970] ? clear_bhb_loop+0x40/0x90 [ 1538.924574][T31970] ? clear_bhb_loop+0x40/0x90 [ 1538.929313][T31970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1538.935093][T31988] netlink: 'syz.2.6740': attribute type 29 has an invalid length. [ 1538.935270][T31970] RIP: 0033:0x7f7b1eb9e159 [ 1538.935352][T31970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.967271][T31970] RSP: 002b:00007f7b1fb0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1538.975748][T31970] RAX: ffffffffffffffda RBX: 00007f7b1ee25fa0 RCX: 00007f7b1eb9e159 [ 1538.983782][T31970] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1538.991825][T31970] RBP: 00007f7b1ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 1538.999860][T31970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1539.007864][T31970] R13: 00007f7b1ee26038 R14: 00007f7b1ee25fa0 R15: 00007ffe3fa6d8b8 [ 1539.015940][T31970] [ 1539.083061][T31988] netlink: 'syz.2.6740': attribute type 29 has an invalid length. [ 1539.139234][T31990] netlink: 'syz.2.6740': attribute type 29 has an invalid length. [ 1539.162637][T31991] netlink: 'syz.2.6740': attribute type 29 has an invalid length. [ 1539.195643][T31993] netlink: 'syz.3.6741': attribute type 10 has an invalid length. [ 1539.204169][T31993] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6741'. [ 1539.783440][T31990] netlink: 'syz.2.6740': attribute type 29 has an invalid length. [ 1540.033787][T32007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6746'. [ 1540.242596][T32015] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.6748'. [ 1540.574600][T32020] netlink: 'syz.1.6749': attribute type 3 has an invalid length. [ 1540.609456][T32020] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.6749'. [ 1542.204782][T32023] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6751'. [ 1542.241117][T32023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.291543][T32045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6756'. [ 1542.340453][T32045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6756'. [ 1542.371407][T32049] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6756'. [ 1542.401028][T32045] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6756'. [ 1542.461540][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.526111][T32051] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1542.575679][T32051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.594423][T32045] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6756'. [ 1542.610603][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.636238][T32045] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6756'. [ 1542.646025][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.666837][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.699976][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.727448][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.770148][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.796357][T32045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.946484][T32066] IPv6: NLM_F_CREATE should be specified when creating new route [ 1543.099033][T32069] sit0: entered promiscuous mode [ 1543.298694][T32075] netlink: 'syz.0.6763': attribute type 4 has an invalid length. [ 1543.338787][T32066] netlink: 'syz.0.6763': attribute type 10 has an invalid length. [ 1545.870086][T32117] syzkaller0: entered allmulticast mode [ 1546.155449][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.163128][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.919945][T21997] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 1547.649741][T32160] __nla_validate_parse: 33 callbacks suppressed [ 1547.649761][T32160] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1547.671215][T32160] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1547.715102][T32160] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1547.915727][T32169] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6791'. [ 1547.926080][T32171] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.6793'. [ 1548.098813][T32173] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6794'. [ 1548.233536][T32177] netlink: 'syz.3.6796': attribute type 16 has an invalid length. [ 1548.244831][T32177] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6796'. [ 1548.664827][T32185] syzkaller0: entered promiscuous mode [ 1548.674047][T32185] syzkaller0: entered allmulticast mode [ 1548.778186][T32188] delete_channel: no stack [ 1548.792110][T32188] delete_channel: no stack [ 1548.938465][T32191] delete_channel: no stack [ 1548.955870][T32191] delete_channel: no stack [ 1551.820546][T32202] netlink: 'syz.0.6803': attribute type 21 has an invalid length. [ 1551.834551][T32202] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6803'. [ 1551.856979][T32203] netlink: 'syz.0.6803': attribute type 21 has an invalid length. [ 1551.883254][T32203] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6803'. [ 1552.081136][T32212] netlink: 'syz.1.6806': attribute type 1 has an invalid length. [ 1552.107478][T32217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.734142][T32236] netlink: 'syz.1.6812': attribute type 5 has an invalid length. [ 1552.780206][T32236] ƒ: renamed from tunl0 (while UP) [ 1552.966035][T32247] netlink: 'syz.2.6814': attribute type 21 has an invalid length. [ 1553.069918][T32239] can: request_module (can-proto-4) failed. [ 1553.156578][T32246] netlink: 'syz.3.6815': attribute type 7 has an invalid length. [ 1553.597175][T32257] netlink: 'syz.3.6818': attribute type 2 has an invalid length. [ 1553.624057][T32257] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.6818'. [ 1553.720762][T32259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1555.381090][T32289] syzkaller0: entered promiscuous mode [ 1555.387620][T32289] syzkaller0: entered allmulticast mode [ 1555.475315][T32294] syzkaller0: left promiscuous mode [ 1555.482004][T32294] syzkaller0: left allmulticast mode [ 1556.168852][T32302] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.6831'. [ 1556.185017][T32301] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.6831'. [ 1560.425018][T32316] netlink: 'syz.1.6837': attribute type 4 has an invalid length. [ 1560.480786][T32316] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6837'. [ 1560.645940][T32328] netlink: 'syz.0.6833': attribute type 21 has an invalid length. [ 1560.670784][T32328] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6833'. [ 1560.897666][T32334] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6840'. [ 1560.911349][T32334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6840'. [ 1561.403890][T32367] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.6847'. [ 1561.436728][T32367] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6847'. [ 1562.042515][T32392] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6852'. [ 1563.939173][T32423] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.6860'. [ 1563.958296][T32423] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6860'. [ 1564.286211][T32435] netlink: 'syz.2.6865': attribute type 6 has an invalid length. [ 1564.298901][T32435] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6865'. [ 1565.821085][T27628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1565.834033][T27628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1565.858603][T27628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1565.867686][T27628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1565.882897][T27628] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1565.891659][T27628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1566.001793][T22653] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.028706][T32467] __nla_validate_parse: 3 callbacks suppressed [ 1566.028725][T32467] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6873'. [ 1566.638940][T22653] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.825888][T22653] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.985275][T22653] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.037589][T32484] Ÿë: port 1(hsr_slave_0) entered blocking state [ 1567.060924][T32484] Ÿë: port 1(hsr_slave_0) entered disabled state [ 1567.076069][T32484] hsr_slave_0: entered allmulticast mode [ 1567.092633][T32484] hsr_slave_0: left allmulticast mode [ 1567.432345][T32468] chnl_net:caif_netlink_parms(): no params data found [ 1567.927234][T32507] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6882'. [ 1567.964429][T32468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.990653][T21997] Bluetooth: hci0: command tx timeout [ 1567.999330][T32507] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6882'. [ 1568.030555][T32468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.038815][T32468] bridge_slave_0: entered allmulticast mode [ 1568.070224][T32468] bridge_slave_0: entered promiscuous mode [ 1568.274590][T22653] ip6gretap0 (unregistering): left allmulticast mode [ 1568.286499][T22653] ip6gretap0 (unregistering): left promiscuous mode [ 1568.302864][T22653] : port 1(ip6gretap0) entered disabled state [ 1568.506459][T32468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.528066][T32468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.551242][T32468] bridge_slave_1: entered allmulticast mode [ 1568.574588][T32468] bridge_slave_1: entered promiscuous mode [ 1568.915327][T32523] netlink: 'syz.1.6885': attribute type 49 has an invalid length. [ 1569.077694][T32468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.226904][T32468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.458459][T32468] team0: Port device team_slave_0 added [ 1569.552245][T32468] team0: Port device team_slave_1 added [ 1569.617812][T32468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.625702][T32468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.653806][T32468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.673289][T32542] netlink: 'syz.1.6888': attribute type 10 has an invalid length. [ 1569.717253][T32468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.725918][T32468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.752788][T32468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.970468][T32468] hsr_slave_0: entered promiscuous mode [ 1569.979974][T32468] hsr_slave_1: entered promiscuous mode [ 1569.998231][T32468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1570.014716][T32468] Cannot create hsr debugfs directory [ 1570.070565][T21997] Bluetooth: hci0: command tx timeout [ 1570.365995][T32556] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.6891'. [ 1570.642260][T32562] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.6893'. [ 1570.671404][T32562] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6893'. [ 1572.150520][T21997] Bluetooth: hci0: command tx timeout [ 1572.310740][T18383] page_pool_release_retry() stalled pool shutdown 50 inflight 121 sec [ 1574.043519][T32586] FAULT_INJECTION: forcing a failure. [ 1574.043519][T32586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.070570][T32586] CPU: 1 PID: 32586 Comm: syz.3.6898 Not tainted syzkaller #0 [ 1574.078129][T32586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1574.088242][T32586] Call Trace: [ 1574.091594][T32586] [ 1574.094568][T32586] dump_stack_lvl+0x18c/0x250 [ 1574.099324][T32586] ? show_regs_print_info+0x20/0x20 [ 1574.104584][T32586] ? load_image+0x420/0x420 [ 1574.109151][T32586] ? __might_fault+0xaa/0x120 [ 1574.113917][T32586] ? __lock_acquire+0x7d80/0x7d80 [ 1574.118987][T32586] should_fail_ex+0x394/0x4c0 [ 1574.123705][T32586] _copy_from_user+0x2f/0xe0 [ 1574.128355][T32586] ___sys_sendmsg+0x1c7/0x360 [ 1574.133124][T32586] ? __sys_sendmsg+0x2b0/0x2b0 [ 1574.137978][T32586] ? __lock_acquire+0x7d80/0x7d80 [ 1574.143065][T32586] __se_sys_sendmsg+0x1d0/0x2c0 [ 1574.147957][T32586] ? __x64_sys_sendmsg+0x80/0x80 [ 1574.152943][T32586] ? lockdep_hardirqs_on+0x98/0x150 [ 1574.158178][T32586] do_syscall_64+0x55/0xb0 [ 1574.162629][T32586] ? clear_bhb_loop+0x40/0x90 [ 1574.167349][T32586] ? clear_bhb_loop+0x40/0x90 [ 1574.172061][T32586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1574.177989][T32586] RIP: 0033:0x7f520239e159 [ 1574.182433][T32586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.202065][T32586] RSP: 002b:00007f5203294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.210510][T32586] RAX: ffffffffffffffda RBX: 00007f5202625fa0 RCX: 00007f520239e159 [ 1574.218510][T32586] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1574.226507][T32586] RBP: 00007f5203294090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.234505][T32586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.242502][T32586] R13: 00007f5202626038 R14: 00007f5202625fa0 R15: 00007ffc3eaf1d18 [ 1574.250513][T32586] [ 1574.279651][T21997] Bluetooth: hci0: command tx timeout [ 1574.450665][T32595] netlink: 'syz.0.6899': attribute type 1 has an invalid length. [ 1574.459081][T32595] netlink: 'syz.0.6899': attribute type 3 has an invalid length. [ 1574.493788][T32595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6899'. [ 1575.128955][T32601] mac80211_hwsim hwsim74 wlan1: left promiscuous mode [ 1575.138323][T32601] mac80211_hwsim hwsim74 wlan1: left allmulticast mode [ 1575.189038][T32601] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6903'. [ 1575.334031][T32611] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6904'. [ 1575.514895][T32613] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.6905'. [ 1575.540676][T32613] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6905'. [ 1575.878166][T32468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1575.937828][T32468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1576.043172][T32468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1576.096331][T32468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1576.122484][T32630] FAULT_INJECTION: forcing a failure. [ 1576.122484][T32630] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.150903][T32630] CPU: 0 PID: 32630 Comm: syz.3.6909 Not tainted syzkaller #0 [ 1576.158444][T32630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.168541][T32630] Call Trace: [ 1576.171860][T32630] [ 1576.174821][T32630] dump_stack_lvl+0x18c/0x250 [ 1576.179542][T32630] ? show_regs_print_info+0x20/0x20 [ 1576.184775][T32630] ? load_image+0x420/0x420 [ 1576.189312][T32630] ? __might_sleep+0xe0/0xe0 [ 1576.193936][T32630] ? __lock_acquire+0x7d80/0x7d80 [ 1576.198995][T32630] should_fail_ex+0x394/0x4c0 [ 1576.203720][T32630] should_failslab+0x9/0x20 [ 1576.208262][T32630] slab_pre_alloc_hook+0x59/0x300 [ 1576.213346][T32630] ? __lock_acquire+0x7d80/0x7d80 [ 1576.218403][T32630] kmem_cache_alloc_node+0x5e/0x310 [ 1576.223632][T32630] ? __alloc_skb+0x103/0x2c0 [ 1576.228294][T32630] __alloc_skb+0x103/0x2c0 [ 1576.232783][T32630] netlink_sendmsg+0x66a/0xbf0 [ 1576.237610][T32630] ? netlink_getsockopt+0x590/0x590 [ 1576.242837][T32630] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1576.248413][T32630] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1576.253728][T32630] ? security_socket_sendmsg+0x80/0xa0 [ 1576.259215][T32630] ? netlink_getsockopt+0x590/0x590 [ 1576.264440][T32630] ____sys_sendmsg+0x61b/0x980 [ 1576.269240][T32630] ? __asan_memset+0x22/0x40 [ 1576.273872][T32630] ? __sys_sendmsg_sock+0x30/0x30 [ 1576.278923][T32630] ? __import_iovec+0x5f2/0x850 [ 1576.283810][T32630] ? import_iovec+0x73/0xa0 [ 1576.288367][T32630] ___sys_sendmsg+0x2a6/0x360 [ 1576.293087][T32630] ? __sys_sendmsg+0x2b0/0x2b0 [ 1576.297923][T32630] ? __lock_acquire+0x7d80/0x7d80 [ 1576.302997][T32630] __se_sys_sendmsg+0x1d0/0x2c0 [ 1576.307880][T32630] ? __x64_sys_sendmsg+0x80/0x80 [ 1576.312863][T32630] ? lockdep_hardirqs_on+0x98/0x150 [ 1576.318092][T32630] do_syscall_64+0x55/0xb0 [ 1576.322535][T32630] ? clear_bhb_loop+0x40/0x90 [ 1576.327242][T32630] ? clear_bhb_loop+0x40/0x90 [ 1576.331960][T32630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1576.337883][T32630] RIP: 0033:0x7f520239e159 [ 1576.342365][T32630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.361993][T32630] RSP: 002b:00007f5203294028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1576.370445][T32630] RAX: ffffffffffffffda RBX: 00007f5202625fa0 RCX: 00007f520239e159 [ 1576.378451][T32630] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1576.386448][T32630] RBP: 00007f5203294090 R08: 0000000000000000 R09: 0000000000000000 [ 1576.394468][T32630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1576.402459][T32630] R13: 00007f5202626038 R14: 00007f5202625fa0 R15: 00007ffc3eaf1d18 [ 1576.410475][T32630] [ 1576.692402][T32642] netlink: 'syz.0.6913': attribute type 10 has an invalid length. [ 1576.711581][T32642] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6913'. [ 1576.765273][T32468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.897918][T32468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.963460][T22669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.970723][T22669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.056624][T22650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.064011][T22650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.485718][T32667] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.6918'. [ 1577.540824][T32667] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6918'. [ 1578.215026][T22653] ªªªªªª: left allmulticast mode [ 1578.282072][T22653] ªªªªªª: left promiscuous mode [ 1578.321563][T22653] À: port 1(ªªªªªª) entered disabled state [ 1578.561520][T22653] hsr_slave_0: left promiscuous mode [ 1578.625885][T22653] hsr_slave_1: left promiscuous mode [ 1578.690744][T22653] veth1_vlan: left promiscuous mode [ 1578.696283][T22653] veth0_vlan: left promiscuous mode [ 1579.701965][T22653] team0 (unregistering): Port device geneve1 removed [ 1580.521778][T22653] team0 (unregistering): Port device team_slave_1 removed [ 1581.099878][T32468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.225973][T32731] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6929'. [ 1581.322375][T32731] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6929'. [ 1581.497675][T32737] FAULT_INJECTION: forcing a failure. [ 1581.497675][T32737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.522783][T32737] CPU: 1 PID: 32737 Comm: syz.1.6931 Not tainted syzkaller #0 [ 1581.530324][T32737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1581.540432][T32737] Call Trace: [ 1581.543773][T32737] [ 1581.546784][T32737] dump_stack_lvl+0x18c/0x250 [ 1581.551530][T32737] ? show_regs_print_info+0x20/0x20 [ 1581.556799][T32737] ? load_image+0x420/0x420 [ 1581.561364][T32737] ? __might_fault+0xaa/0x120 [ 1581.566099][T32737] ? __lock_acquire+0x7d80/0x7d80 [ 1581.571219][T32737] should_fail_ex+0x394/0x4c0 [ 1581.575998][T32737] _copy_from_iter+0x1cd/0x1290 [ 1581.580919][T32737] ? rcu_is_watching+0x15/0xb0 [ 1581.585751][T32737] ? copyout_mc+0x70/0x70 [ 1581.590152][T32737] ? __virt_addr_valid+0x10c/0x380 [ 1581.595360][T32737] ? __virt_addr_valid+0x10c/0x380 [ 1581.600523][T32737] ? __virt_addr_valid+0x10c/0x380 [ 1581.605702][T32737] ? __check_object_size+0x4fc/0xa40 [ 1581.611045][T32737] netlink_sendmsg+0x76b/0xbf0 [ 1581.615879][T32737] ? netlink_getsockopt+0x590/0x590 [ 1581.621139][T32737] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1581.626756][T32737] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1581.632105][T32737] ? security_socket_sendmsg+0x80/0xa0 [ 1581.637626][T32737] ? netlink_getsockopt+0x590/0x590 [ 1581.642890][T32737] ____sys_sendmsg+0x61b/0x980 [ 1581.647774][T32737] ? __asan_memset+0x22/0x40 [ 1581.652430][T32737] ? __sys_sendmsg_sock+0x30/0x30 [ 1581.657546][T32737] ? __import_iovec+0x5f2/0x850 [ 1581.662518][T32737] ? import_iovec+0x73/0xa0 [ 1581.667095][T32737] ___sys_sendmsg+0x2a6/0x360 [ 1581.671841][T32737] ? __sys_sendmsg+0x2b0/0x2b0 [ 1581.676696][T32737] ? __lock_acquire+0x7d80/0x7d80 [ 1581.681803][T32737] __se_sys_sendmsg+0x1d0/0x2c0 [ 1581.686727][T32737] ? __x64_sys_sendmsg+0x80/0x80 [ 1581.691759][T32737] ? lockdep_hardirqs_on+0x98/0x150 [ 1581.697012][T32737] do_syscall_64+0x55/0xb0 [ 1581.701486][T32737] ? clear_bhb_loop+0x40/0x90 [ 1581.706230][T32737] ? clear_bhb_loop+0x40/0x90 [ 1581.711003][T32737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1581.716950][T32737] RIP: 0033:0x7f7b1eb9e159 [ 1581.721417][T32737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.741083][T32737] RSP: 002b:00007f7b1fb0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1581.749565][T32737] RAX: ffffffffffffffda RBX: 00007f7b1ee25fa0 RCX: 00007f7b1eb9e159 [ 1581.757600][T32737] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1581.765625][T32737] RBP: 00007f7b1fb0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.773673][T32737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.781693][T32737] R13: 00007f7b1ee26038 R14: 00007f7b1ee25fa0 R15: 00007ffe3fa6d8b8 [ 1581.789744][T32737] [ 1581.797035][T32468] veth0_vlan: entered promiscuous mode [ 1581.854907][T32468] veth1_vlan: entered promiscuous mode [ 1581.983703][T32468] veth0_macvtap: entered promiscuous mode [ 1582.008616][T32468] veth1_macvtap: entered promiscuous mode [ 1582.056333][T32468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1582.071169][T32468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.086363][T32468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.102731][T32468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1582.117683][T32468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.137785][T32468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.184312][T32468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.197261][T32468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.206550][T32468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.215565][T32468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.491493][T22653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.499383][T22653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.522507][T32753] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6937'. [ 1582.533535][T32753] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6937'. [ 1582.579196][T32748] netlink: 'syz.0.6935': attribute type 41 has an invalid length. [ 1582.611091][T32748] netlink: 'syz.0.6935': attribute type 41 has an invalid length. [ 1582.625803][T22650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.650895][T22650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.708458][T32748] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6935'. [ 1583.569553][ T302] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.6940'. [ 1583.589859][ T302] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6940'. [ 1584.393486][ T304] netlink: 'syz.1.6941': attribute type 10 has an invalid length. [ 1584.424837][ T304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6941'. [ 1584.452214][ T304] dummy0: entered promiscuous mode [ 1584.472305][ T304] dummy0: entered allmulticast mode [ 1584.711517][ T304] net_ratelimit: 25 callbacks suppressed [ 1584.711667][ T304] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1585.068001][ T307] FAULT_INJECTION: forcing a failure. [ 1585.068001][ T307] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.090484][ T307] CPU: 0 PID: 307 Comm: syz.1.6942 Not tainted syzkaller #0 [ 1585.097875][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1585.108008][ T307] Call Trace: [ 1585.111356][ T307] [ 1585.114370][ T307] dump_stack_lvl+0x18c/0x250 [ 1585.119145][ T307] ? show_regs_print_info+0x20/0x20 [ 1585.124433][ T307] ? load_image+0x420/0x420 [ 1585.129032][ T307] ? verify_lock_unused+0x140/0x140 [ 1585.134330][ T307] ? perf_trace_lock+0x303/0x3b0 [ 1585.139378][ T307] should_fail_ex+0x394/0x4c0 [ 1585.144177][ T307] should_failslab+0x9/0x20 [ 1585.148774][ T307] slab_pre_alloc_hook+0x59/0x300 [ 1585.153908][ T307] kmem_cache_alloc+0x5a/0x2c0 [ 1585.158774][ T307] ? skb_clone+0x1eb/0x370 [ 1585.163294][ T307] skb_clone+0x1eb/0x370 [ 1585.167635][ T307] __netlink_deliver_tap+0x411/0x7f0 [ 1585.173057][ T307] ? netlink_deliver_tap+0x2e/0x1b0 [ 1585.178344][ T307] netlink_deliver_tap+0x19c/0x1b0 [ 1585.183545][ T307] netlink_unicast+0x77b/0x930 [ 1585.188451][ T307] netlink_sendmsg+0x8d0/0xbf0 [ 1585.193331][ T307] ? netlink_getsockopt+0x590/0x590 [ 1585.198620][ T307] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1585.204252][ T307] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1585.209614][ T307] ? security_socket_sendmsg+0x80/0xa0 [ 1585.215154][ T307] ? netlink_getsockopt+0x590/0x590 [ 1585.220439][ T307] ____sys_sendmsg+0x61b/0x980 [ 1585.225334][ T307] ? __asan_memset+0x22/0x40 [ 1585.230015][ T307] ? __sys_sendmsg_sock+0x30/0x30 [ 1585.235113][ T307] ? __import_iovec+0x5f2/0x850 [ 1585.240085][ T307] ? import_iovec+0x73/0xa0 [ 1585.244699][ T307] ___sys_sendmsg+0x2a6/0x360 [ 1585.249485][ T307] ? __sys_sendmsg+0x2b0/0x2b0 [ 1585.254405][ T307] ? __lock_acquire+0x7d80/0x7d80 [ 1585.259607][ T307] __se_sys_sendmsg+0x1d0/0x2c0 [ 1585.264561][ T307] ? __x64_sys_sendmsg+0x80/0x80 [ 1585.269651][ T307] ? lockdep_hardirqs_on+0x98/0x150 [ 1585.274950][ T307] do_syscall_64+0x55/0xb0 [ 1585.279445][ T307] ? clear_bhb_loop+0x40/0x90 [ 1585.284203][ T307] ? clear_bhb_loop+0x40/0x90 [ 1585.288967][ T307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1585.294946][ T307] RIP: 0033:0x7f7b1eb9e159 [ 1585.299461][ T307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.319169][ T307] RSP: 002b:00007f7b1fb0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1585.327695][ T307] RAX: ffffffffffffffda RBX: 00007f7b1ee25fa0 RCX: 00007f7b1eb9e159 [ 1585.335783][ T307] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1585.343824][ T307] RBP: 00007f7b1fb0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.351868][ T307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.359916][ T307] R13: 00007f7b1ee26038 R14: 00007f7b1ee25fa0 R15: 00007ffe3fa6d8b8 [ 1585.368013][ T307] [ 1586.084044][ T315] netlink: 'syz.2.6945': attribute type 1 has an invalid length. [ 1586.100404][ T315] netlink: 'syz.2.6945': attribute type 4 has an invalid length. [ 1586.108229][ T315] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6945'. [ 1586.220881][ T321] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.6947'. [ 1586.339630][ T325] pim6reg1: entered promiscuous mode [ 1586.347561][ T327] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.6950'. [ 1586.357226][ T325] pim6reg1: entered allmulticast mode [ 1586.368603][ T327] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6950'. [ 1586.469082][ T329] FAULT_INJECTION: forcing a failure. [ 1586.469082][ T329] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.482257][ T329] CPU: 1 PID: 329 Comm: syz.1.6951 Not tainted syzkaller #0 [ 1586.489602][ T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1586.499720][ T329] Call Trace: [ 1586.503036][ T329] [ 1586.505996][ T329] dump_stack_lvl+0x18c/0x250 [ 1586.510711][ T329] ? show_regs_print_info+0x20/0x20 [ 1586.515949][ T329] ? load_image+0x420/0x420 [ 1586.520498][ T329] ? skb_network_protocol+0x529/0x790 [ 1586.525983][ T329] ? perf_trace_lock+0xfc/0x3b0 [ 1586.530872][ T329] should_fail_ex+0x394/0x4c0 [ 1586.535598][ T329] should_failslab+0x9/0x20 [ 1586.540158][ T329] slab_pre_alloc_hook+0x59/0x300 [ 1586.545226][ T329] kmem_cache_alloc+0x5a/0x2c0 [ 1586.550033][ T329] ? skb_clone+0x1eb/0x370 [ 1586.554491][ T329] skb_clone+0x1eb/0x370 [ 1586.558765][ T329] ? dev_queue_xmit_nit+0x204/0xba0 [ 1586.564004][ T329] dev_queue_xmit_nit+0x23f/0xba0 [ 1586.569090][ T329] ? dev_queue_xmit_nit+0x2d/0xba0 [ 1586.574245][ T329] dev_hard_start_xmit+0x150/0x790 [ 1586.579400][ T329] __dev_queue_xmit+0x1be8/0x37e0 [ 1586.584458][ T329] ? __dev_queue_xmit+0x272/0x37e0 [ 1586.589614][ T329] ? netdev_core_pick_tx+0x370/0x370 [ 1586.594939][ T329] ? ref_tracker_alloc+0x347/0x4b0 [ 1586.600082][ T329] ? __copy_skb_header+0xa3/0x4a0 [ 1586.605140][ T329] ? __asan_memcpy+0x40/0x70 [ 1586.609771][ T329] ? __skb_clone+0x5c/0x6c0 [ 1586.614309][ T329] ? __skb_clone+0x446/0x6c0 [ 1586.618935][ T329] ? skb_clone+0x21f/0x370 [ 1586.623392][ T329] __netlink_deliver_tap+0x579/0x7f0 [ 1586.628742][ T329] ? netlink_deliver_tap+0x2e/0x1b0 [ 1586.633982][ T329] netlink_deliver_tap+0x19c/0x1b0 [ 1586.639127][ T329] netlink_unicast+0x77b/0x930 [ 1586.643935][ T329] netlink_sendmsg+0x8d0/0xbf0 [ 1586.648745][ T329] ? netlink_getsockopt+0x590/0x590 [ 1586.653976][ T329] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1586.659560][ T329] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1586.664876][ T329] ? security_socket_sendmsg+0x80/0xa0 [ 1586.670368][ T329] ? netlink_getsockopt+0x590/0x590 [ 1586.675626][ T329] ____sys_sendmsg+0x61b/0x980 [ 1586.680442][ T329] ? __asan_memset+0x22/0x40 [ 1586.685088][ T329] ? __sys_sendmsg_sock+0x30/0x30 [ 1586.690148][ T329] ? __import_iovec+0x5f2/0x850 [ 1586.695050][ T329] ? import_iovec+0x73/0xa0 [ 1586.699601][ T329] ___sys_sendmsg+0x2a6/0x360 [ 1586.704318][ T329] ? __sys_sendmsg+0x2b0/0x2b0 [ 1586.709139][ T329] ? __lock_acquire+0x7d80/0x7d80 [ 1586.714217][ T329] __se_sys_sendmsg+0x1d0/0x2c0 [ 1586.719105][ T329] ? __x64_sys_sendmsg+0x80/0x80 [ 1586.724114][ T329] ? lockdep_hardirqs_on+0x98/0x150 [ 1586.729360][ T329] do_syscall_64+0x55/0xb0 [ 1586.733816][ T329] ? clear_bhb_loop+0x40/0x90 [ 1586.738526][ T329] ? clear_bhb_loop+0x40/0x90 [ 1586.743260][ T329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1586.749208][ T329] RIP: 0033:0x7f7b1eb9e159 [ 1586.753669][ T329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.773314][ T329] RSP: 002b:00007f7b1fb0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.781763][ T329] RAX: ffffffffffffffda RBX: 00007f7b1ee25fa0 RCX: 00007f7b1eb9e159 [ 1586.789766][ T329] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1586.797779][ T329] RBP: 00007f7b1fb0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.805796][ T329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.813807][ T329] R13: 00007f7b1ee26038 R14: 00007f7b1ee25fa0 R15: 00007ffe3fa6d8b8 [ 1586.821827][ T329] [ 1586.975763][ T335] netlink: 'syz.1.6953': attribute type 1 has an invalid length. [ 1586.986223][ T335] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6953'. [ 1587.814994][ T347] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.6958'. [ 1587.872293][ T354] FAULT_INJECTION: forcing a failure. [ 1587.872293][ T354] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.885195][ T354] CPU: 0 PID: 354 Comm: syz.2.6961 Not tainted syzkaller #0 [ 1587.892564][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1587.902702][ T354] Call Trace: [ 1587.906074][ T354] [ 1587.909083][ T354] dump_stack_lvl+0x18c/0x250 [ 1587.913900][ T354] ? show_regs_print_info+0x20/0x20 [ 1587.919184][ T354] ? load_image+0x420/0x420 [ 1587.923829][ T354] should_fail_ex+0x394/0x4c0 [ 1587.928631][ T354] should_failslab+0x9/0x20 [ 1587.933237][ T354] slab_pre_alloc_hook+0x59/0x300 [ 1587.938357][ T354] ? __lock_acquire+0x7d80/0x7d80 [ 1587.943481][ T354] kmem_cache_alloc+0x5a/0x2c0 [ 1587.948304][ T354] ? skb_clone+0x1eb/0x370 [ 1587.952817][ T354] skb_clone+0x1eb/0x370 [ 1587.957124][ T354] ? packet_rcv+0x46a/0x1360 [ 1587.961878][ T354] packet_rcv+0x5a9/0x1360 [ 1587.966377][ T354] ? packet_sock_destruct+0x160/0x160 [ 1587.971832][ T354] dev_queue_xmit_nit+0x5d5/0xba0 [ 1587.976915][ T354] ? dev_queue_xmit_nit+0x2d/0xba0 [ 1587.982110][ T354] dev_hard_start_xmit+0x150/0x790 [ 1587.987325][ T354] __dev_queue_xmit+0x1be8/0x37e0 [ 1587.992420][ T354] ? __dev_queue_xmit+0x272/0x37e0 [ 1587.997634][ T354] ? netdev_core_pick_tx+0x370/0x370 [ 1588.002962][ T354] ? ref_tracker_alloc+0x347/0x4b0 [ 1588.008126][ T354] ? __copy_skb_header+0xa3/0x4a0 [ 1588.013215][ T354] ? __asan_memcpy+0x40/0x70 [ 1588.017864][ T354] ? __skb_clone+0x5c/0x6c0 [ 1588.022458][ T354] ? __skb_clone+0x446/0x6c0 [ 1588.027136][ T354] ? skb_clone+0x21f/0x370 [ 1588.031619][ T354] __netlink_deliver_tap+0x579/0x7f0 [ 1588.037005][ T354] ? netlink_deliver_tap+0x2e/0x1b0 [ 1588.042260][ T354] netlink_deliver_tap+0x19c/0x1b0 [ 1588.047443][ T354] netlink_unicast+0x77b/0x930 [ 1588.052292][ T354] netlink_sendmsg+0x8d0/0xbf0 [ 1588.057138][ T354] ? netlink_getsockopt+0x590/0x590 [ 1588.062408][ T354] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1588.068026][ T354] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1588.073373][ T354] ? security_socket_sendmsg+0x80/0xa0 [ 1588.078886][ T354] ? netlink_getsockopt+0x590/0x590 [ 1588.084152][ T354] ____sys_sendmsg+0x61b/0x980 [ 1588.089003][ T354] ? __asan_memset+0x22/0x40 [ 1588.093654][ T354] ? __sys_sendmsg_sock+0x30/0x30 [ 1588.098727][ T354] ? __import_iovec+0x5f2/0x850 [ 1588.103668][ T354] ? import_iovec+0x73/0xa0 [ 1588.108246][ T354] ___sys_sendmsg+0x2a6/0x360 [ 1588.112999][ T354] ? __sys_sendmsg+0x2b0/0x2b0 [ 1588.117884][ T354] ? __lock_acquire+0x7d80/0x7d80 [ 1588.123041][ T354] __se_sys_sendmsg+0x1d0/0x2c0 [ 1588.127967][ T354] ? __x64_sys_sendmsg+0x80/0x80 [ 1588.133010][ T354] ? lockdep_hardirqs_on+0x98/0x150 [ 1588.138266][ T354] do_syscall_64+0x55/0xb0 [ 1588.142742][ T354] ? clear_bhb_loop+0x40/0x90 [ 1588.147483][ T354] ? clear_bhb_loop+0x40/0x90 [ 1588.152228][ T354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1588.158231][ T354] RIP: 0033:0x7fe94a99e159 [ 1588.162708][ T354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.182364][ T354] RSP: 002b:00007fe94b8ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1588.190845][ T354] RAX: ffffffffffffffda RBX: 00007fe94ac25fa0 RCX: 00007fe94a99e159 [ 1588.198861][ T354] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1588.206880][ T354] RBP: 00007fe94b8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.214903][ T354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.222920][ T354] R13: 00007fe94ac26038 R14: 00007fe94ac25fa0 R15: 00007ffc67c226a8 [ 1588.230992][ T354] [ 1588.515471][ T362] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.6963'. [ 1588.551745][ T362] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6963'. [ 1588.614370][ T364] netlink: 'syz.3.6966': attribute type 10 has an invalid length. [ 1588.649369][ T364] syz_tun: entered promiscuous mode [ 1589.652085][ T366] netlink: 'syz.3.6966': attribute type 10 has an invalid length. [ 1589.777870][ T384] FAULT_INJECTION: forcing a failure. [ 1589.777870][ T384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.796405][ T384] CPU: 1 PID: 384 Comm: syz.3.6971 Not tainted syzkaller #0 [ 1589.803781][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1589.813887][ T384] Call Trace: [ 1589.817211][ T384] [ 1589.820200][ T384] dump_stack_lvl+0x18c/0x250 [ 1589.824948][ T384] ? show_regs_print_info+0x20/0x20 [ 1589.830245][ T384] ? load_image+0x420/0x420 [ 1589.834817][ T384] ? __lock_acquire+0x7d80/0x7d80 [ 1589.839902][ T384] ? snprintf+0xe9/0x140 [ 1589.844221][ T384] should_fail_ex+0x394/0x4c0 [ 1589.848966][ T384] _copy_to_user+0x2f/0xa0 [ 1589.853442][ T384] simple_read_from_buffer+0xe7/0x150 [ 1589.858876][ T384] proc_fail_nth_read+0x1e8/0x260 [ 1589.863947][ T384] ? proc_fault_inject_write+0x360/0x360 [ 1589.869621][ T384] ? fsnotify_perm+0x271/0x5e0 [ 1589.874420][ T384] ? proc_fault_inject_write+0x360/0x360 [ 1589.880095][ T384] vfs_read+0x298/0x990 [ 1589.884286][ T384] ? kernel_read+0x1e0/0x1e0 [ 1589.888904][ T384] ? __fget_files+0x28/0x460 [ 1589.893524][ T384] ? __fget_files+0x3fc/0x460 [ 1589.898243][ T384] ? __fdget_pos+0x2a3/0x330 [ 1589.902886][ T384] ? ksys_read+0x74/0x260 [ 1589.907255][ T384] ksys_read+0x151/0x260 [ 1589.911536][ T384] ? vfs_write+0x9a0/0x9a0 [ 1589.915992][ T384] ? lockdep_hardirqs_on+0x98/0x150 [ 1589.921216][ T384] do_syscall_64+0x55/0xb0 [ 1589.925672][ T384] ? clear_bhb_loop+0x40/0x90 [ 1589.930400][ T384] ? clear_bhb_loop+0x40/0x90 [ 1589.935113][ T384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1589.941039][ T384] RIP: 0033:0x7f520235e98e [ 1589.945485][ T384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1589.965122][ T384] RSP: 002b:00007f5203293fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1589.973564][ T384] RAX: ffffffffffffffda RBX: 00007f52032946c0 RCX: 00007f520235e98e [ 1589.981562][ T384] RDX: 000000000000000f RSI: 00007f52032940a0 RDI: 0000000000000007 [ 1589.989557][ T384] RBP: 00007f5203294090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.997553][ T384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.005558][ T384] R13: 00007f5202626038 R14: 00007f5202625fa0 R15: 00007ffc3eaf1d18 [ 1590.013571][ T384] [ 1591.488995][ T415] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.6979'. [ 1591.500684][ T415] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6979'. [ 1592.109535][ T427] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6984'. [ 1592.513755][ T441] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1592.550662][ T442] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1592.597481][ T441] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1592.865096][ T449] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.6990'. [ 1592.880920][ T449] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6990'. [ 1593.098855][ T457] netlink: 'syz.2.6991': attribute type 1 has an invalid length. [ 1593.132234][ T457] netlink: 'syz.2.6991': attribute type 2 has an invalid length. [ 1593.168341][ T457] netlink: 'syz.2.6991': attribute type 2 has an invalid length. [ 1593.217313][ T457] netlink: 'syz.2.6991': attribute type 3 has an invalid length. [ 1593.291309][ T457] netlink: 'syz.2.6991': attribute type 4 has an invalid length. [ 1593.334494][ T465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6994'. [ 1593.347897][ T457] netlink: 'syz.2.6991': attribute type 5 has an invalid length. [ 1593.393287][ T457] netlink: 'syz.2.6991': attribute type 6 has an invalid length. [ 1593.451179][ T457] netlink: 'syz.2.6991': attribute type 7 has an invalid length. [ 1593.479867][ T457] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1593.623627][ T457] validate_nla: 148 callbacks suppressed [ 1593.623647][ T457] netlink: 'syz.2.6991': attribute type 1 has an invalid length. [ 1593.637710][ T457] netlink: 'syz.2.6991': attribute type 2 has an invalid length. [ 1593.646188][ T457] netlink: 'syz.2.6991': attribute type 2 has an invalid length. [ 1593.659121][ T457] netlink: 'syz.2.6991': attribute type 3 has an invalid length. [ 1593.667608][ T457] netlink: 'syz.2.6991': attribute type 4 has an invalid length. [ 1593.679808][ T457] netlink: 'syz.2.6991': attribute type 5 has an invalid length. [ 1593.688799][ T457] netlink: 'syz.2.6991': attribute type 6 has an invalid length. [ 1593.700008][ T457] netlink: 'syz.2.6991': attribute type 7 has an invalid length. [ 1593.708115][ T457] netlink: 'syz.2.6991': attribute type 9 has an invalid length. [ 1593.717924][ T457] netlink: 'syz.2.6991': attribute type 10 has an invalid length. [ 1594.849401][ T497] sit0: entered promiscuous mode [ 1596.189925][ T510] team0: Device wg1 is of different type [ 1596.565920][ T511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.953328][ T563] __nla_validate_parse: 39 callbacks suppressed [ 1597.953346][ T563] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.7023'. [ 1598.031983][ T563] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7023'. [ 1599.067793][ T575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7029'. [ 1599.142470][ T577] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7030'. [ 1599.160575][ T577] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 1599.369049][ T580] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7031'. [ 1599.496103][T22659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.508202][T27628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1599.519942][T27628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1599.531802][T27628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1599.544068][T27628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1599.552659][T27628] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1599.560201][T27628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1599.663805][ T582] syzkaller0: entered promiscuous mode [ 1599.669366][ T582] syzkaller0: entered allmulticast mode [ 1599.712245][T22659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.845878][T22659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.933259][T22659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.597010][T21997] Bluetooth: hci1: command tx timeout [ 1603.131884][ T583] chnl_net:caif_netlink_parms(): no params data found [ 1603.464579][ T619] syzkaller0: entered promiscuous mode [ 1603.477450][ T619] syzkaller0: entered allmulticast mode [ 1603.675881][T21997] Bluetooth: hci1: command tx timeout [ 1605.750637][T21997] Bluetooth: hci1: command tx timeout [ 1606.451907][ T583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.476161][ T583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.496191][ T583] bridge_slave_0: entered allmulticast mode [ 1606.515397][ T583] bridge_slave_0: entered promiscuous mode [ 1606.527477][ T644] validate_nla: 237 callbacks suppressed [ 1606.527528][ T644] netlink: 'syz.2.7042': attribute type 21 has an invalid length. [ 1606.561429][ T644] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7042'. [ 1606.595621][ T645] netlink: 'syz.2.7042': attribute type 21 has an invalid length. [ 1606.615558][ T645] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7042'. [ 1606.733946][ T583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.750776][ T583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.772156][ T583] bridge_slave_1: entered allmulticast mode [ 1606.793276][ T583] bridge_slave_1: entered promiscuous mode [ 1606.943357][ T583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.012927][ T583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.334801][ T583] team0: Port device team_slave_0 added [ 1607.475379][ T583] team0: Port device team_slave_1 added [ 1607.601674][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.608155][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.685767][ T583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1607.700575][ T583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1607.736969][ T583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1607.771075][ T583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1607.778345][ T583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1607.805337][ T583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1607.833066][T21997] Bluetooth: hci1: command tx timeout [ 1607.946975][ T583] hsr_slave_0: entered promiscuous mode [ 1607.965064][ T583] hsr_slave_1: entered promiscuous mode [ 1610.011464][ T729] netlink: 'syz.0.7056': attribute type 13 has an invalid length. [ 1610.019356][ T729] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7056'. [ 1610.133607][ T729] syz_tun: refused to change device tx_queue_len [ 1610.166408][ T729] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1611.039719][ T583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1611.058294][ T742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7059'. [ 1611.099878][ T583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1611.138232][ T583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1611.167127][ T583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1611.521263][ T760] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7061'. [ 1612.037521][ T583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.344869][ T583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.389715][T14881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.396971][T14881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.422361][ T777] delete_channel: no stack [ 1612.450134][T14881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.457435][T14881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.618042][ T782] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7065'. [ 1612.650613][ T782] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1612.814544][ T792] netlink: 'syz.2.7067': attribute type 29 has an invalid length. [ 1612.857583][ T792] netlink: 'syz.2.7067': attribute type 29 has an invalid length. [ 1612.900257][ T795] netlink: 'syz.2.7067': attribute type 29 has an invalid length. [ 1613.394751][ T583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.547013][ T808] netlink: 'syz.1.7070': attribute type 2 has an invalid length. [ 1613.583156][ T808] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7070'. [ 1613.900106][ T583] veth0_vlan: entered promiscuous mode [ 1613.978691][ T583] veth1_vlan: entered promiscuous mode [ 1614.005950][T22659] vlan0: left allmulticast mode [ 1614.042430][T22659] veth0_vlan: left allmulticast mode [ 1614.070872][T22659] vlan0: left promiscuous mode [ 1614.076086][T22659] À: port 1(vlan0) entered disabled state [ 1614.217103][T22659] hsr_slave_0: left promiscuous mode [ 1614.252967][T22659] hsr_slave_1: left promiscuous mode [ 1614.303116][T22659] veth1_macvtap: left promiscuous mode [ 1614.337436][T22659] veth0_macvtap: left promiscuous mode [ 1614.346582][T22659] veth0_vlan: left promiscuous mode [ 1615.083226][T22659] geneve1 (unregistering): left promiscuous mode [ 1615.090569][T22659] geneve1 (unregistering): left allmulticast mode [ 1615.106501][T22659] team0 (unregistering): Port device geneve1 removed [ 1615.391257][T22659] macvlan0 (unregistering): left promiscuous mode [ 1615.398221][T22659] macvlan0 (unregistering): left allmulticast mode [ 1615.407411][T22659] team0 (unregistering): Port device macvlan0 removed [ 1615.729275][T22659] team_slave_1 (unregistering): left promiscuous mode [ 1615.737911][T22659] team_slave_1 (unregistering): left allmulticast mode [ 1615.747224][T22659] team0 (unregistering): Port device team_slave_1 removed [ 1615.795590][T22659] C (unregistering): left promiscuous mode [ 1615.803491][T22659] C (unregistering): left allmulticast mode [ 1615.814401][T22659] team0 (unregistering): Port device C removed [ 1616.228665][ T819] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.7071'. [ 1616.273239][ T855] netlink: 'syz.1.7076': attribute type 11 has an invalid length. [ 1616.291410][ T855] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7076'. [ 1616.448940][ T583] veth0_macvtap: entered promiscuous mode [ 1616.472247][ T583] veth1_macvtap: entered promiscuous mode [ 1616.563043][ T583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.588717][ T583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.609074][ T583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.635236][ T583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.665577][ T583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1616.708414][ T583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.750454][ T583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.775226][ T583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.786132][ T583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.798283][ T583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1616.819830][ T583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.862507][ T583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.899511][ T583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.920752][ T583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.194801][ T886] wg2: entered promiscuous mode [ 1617.199953][ T886] wg2: entered allmulticast mode [ 1617.254484][T22662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.292984][T22662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.412310][ T9223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.432322][ T9223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.636950][ T900] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.695735][ T905] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.7025'. [ 1617.716149][ T905] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7025'. [ 1617.942748][ T917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1618.015391][ T917] netlink: 'syz.1.7087': attribute type 9 has an invalid length. [ 1618.063426][ T917] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7087'. [ 1622.633821][ T921] netlink: 'syz.1.7087': attribute type 9 has an invalid length. [ 1622.649475][ T921] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7087'. [ 1622.862095][ T963] can: request_module (can-proto-0) failed. [ 1623.108600][ T977] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.7097'. [ 1623.149217][ T977] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.7097'. Connection to 10.128.0.141 closed by remote host. [ 1630.290521][ T9223] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.433587][ T9223] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.544266][ T9223] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.390162][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1633.399241][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1633.407220][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1633.417252][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1633.426232][ T9223] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1633.433994][ T9223] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1634.678813][ T9223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.773493][ T9223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.828602][ T9223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.907869][ T9223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.013275][ T9223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.081136][ T9223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.132500][ T9223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.209327][ T9223] : (slave netdevsim0): Releasing backup interface [ 1635.218692][ T9223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.358276][ T9223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.433230][ T9223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.497531][ T9223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.557320][ T9223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.725330][ T9223] tipc: Left network mode [ 1635.896066][ T9223] ip6gretap0 (unregistering): left allmulticast mode [ 1635.904083][ T9223] ip6gretap0 (unregistering): left promiscuous mode [ 1635.910969][ T9223] : port 1(ip6gretap0) entered disabled state [ 1636.617495][ T9223] gretap0 (unregistering): left allmulticast mode [ 1636.624087][ T9223] gretap0 (unregistering): left promiscuous mode [ 1636.632290][ T9223] Ÿë: port 1(gretap0) entered disabled state [ 1639.210527][ T9223] hsr_slave_0: left promiscuous mode [ 1639.216726][ T9223] hsr_slave_1: left promiscuous mode [ 1639.222808][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1639.230227][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.238186][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.246037][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.253979][ T9223] bridge_slave_1: left allmulticast mode [ 1639.259654][ T9223] bridge_slave_1: left promiscuous mode [ 1639.265406][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.275824][ T9223] bridge_slave_0: left allmulticast mode [ 1639.282108][ T9223] bridge_slave_0: left promiscuous mode [ 1639.287841][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.300185][ T9223] veth0_to_team: left allmulticast mode [ 1639.306148][ T9223] veth0_to_team: left promiscuous mode [ 1639.311913][ T9223] Ÿë: port 2(veth0_to_team) entered disabled state [ 1639.325442][ T9223] hsr_slave_0: left promiscuous mode [ 1639.331764][ T9223] hsr_slave_1: left promiscuous mode [ 1639.337773][ T9223] batman_adv: : Interface deactivated: batadv_slave_0 [ 1639.346246][ T9223] batman_adv: : Removing interface: batadv_slave_0 [ 1639.353803][ T9223] bridge_slave_0: left allmulticast mode [ 1639.359486][ T9223] bridge_slave_0: left promiscuous mode [ 1639.368690][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.382373][ T9223] hsr_slave_0: left promiscuous mode [ 1639.388262][ T9223] hsr_slave_1: left promiscuous mode [ 1639.394741][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1639.402231][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1639.410093][ T9223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.419424][ T9223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1639.427723][ T9223] bridge_slave_1: left allmulticast mode [ 1639.433588][ T9223] bridge_slave_1: left promiscuous mode [ 1639.439309][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.449332][ T9223] bridge_slave_0: left allmulticast mode [ 1639.455399][ T9223] bridge_slave_0: left promiscuous mode [ 1639.461401][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.509595][ T9223] veth1_macvtap: left promiscuous mode [ 1639.521722][ T9223] veth0_macvtap: left promiscuous mode [ 1639.527379][ T9223] veth1_vlan: left promiscuous mode [ 1639.532906][ T9223] veth0_vlan: left promiscuous mode [ 1639.540151][ T9223] veth0_vlan: left promiscuous mode [ 1639.549583][ T9223] veth1_macvtap: left promiscuous mode [ 1639.555256][ T9223] veth0_macvtap: left promiscuous mode [ 1639.561190][ T9223] veth1_vlan: left promiscuous mode [ 1639.566504][ T9223] veth0_vlan: left promiscuous mode [ 1640.374180][ T9223] team0 (unregistering): Port device team_slave_1 removed [ 1640.422189][ T9223] team0 (unregistering): Port device team_slave_0 removed [ 1640.467691][ T9223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.517438][ T9223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.890224][ T9223] bond0 (unregistering): Released all slaves [ 1641.484540][ T9223] team0 (unregistering): Port device team_slave_1 removed [ 1641.533388][ T9223] team0 (unregistering): Port device team_slave_0 removed [ 1641.580197][ T9223]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1641.636796][ T9223]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1641.686774][ T9223]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1641.895536][ T9223]  (unregistering): (slave ): Releasing backup interface [ 1641.998453][ T9223]  (unregistering): Released all slaves [ 1642.604001][ T9223] team0 (unregistering): Port device team_slave_1 removed [ 1642.663594][ T9223] team0 (unregistering): Port device team_slave_0 removed [ 1642.708714][ T9223] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.757937][ T9223] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1643.132556][ T9223] bond0 (unregistering): Released all slaves