last executing test programs: 4.737659511s ago: executing program 4 (id=6631): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x4000, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x302a0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 4.688555742s ago: executing program 0 (id=6633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000000c0)=r4) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.884780199s ago: executing program 0 (id=6634): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0x3) 3.884508529s ago: executing program 2 (id=6635): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0xc44, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 3.780938512s ago: executing program 1 (id=6637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 3.528541691s ago: executing program 0 (id=6638): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) gettid() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b33"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0xfffffe51) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x100d, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, 0x0, @perf_config_ext={0x2, 0xff}, 0x1e51, 0x1, 0x0, 0x7, 0x4, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 3.511330462s ago: executing program 3 (id=6639): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc) 3.383017276s ago: executing program 1 (id=6640): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, 0x0, 0x17) 3.324894358s ago: executing program 2 (id=6641): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 3.324115748s ago: executing program 4 (id=6642): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="d7", 0xffffff2a}], 0x1}, 0x20004001) close(r4) 3.26240709s ago: executing program 3 (id=6643): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.243585051s ago: executing program 1 (id=6644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000000c0)=r4) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.134759625s ago: executing program 4 (id=6645): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000300)=0x7c02, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xa, 0x28c}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4db}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000000000f8ff070008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000080)=""/89}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f0000000040)=0xffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x894c, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40001) 3.134400905s ago: executing program 2 (id=6646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 2.698261049s ago: executing program 4 (id=6647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.636530402s ago: executing program 4 (id=6648): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x2}, {0x4, 0x2}, {0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.635639512s ago: executing program 1 (id=6649): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 993.278187ms ago: executing program 1 (id=6650): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0x3) 991.063227ms ago: executing program 0 (id=6660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000000c0)=r4) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 939.463339ms ago: executing program 3 (id=6651): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x2, 0x6, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0xffffffbf, 0x7, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 905.93959ms ago: executing program 2 (id=6652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) close(0x3) 664.531608ms ago: executing program 1 (id=6653): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 482.288834ms ago: executing program 2 (id=6654): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, 0x0, 0x17) 424.336636ms ago: executing program 3 (id=6655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000060000000800000040"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 351.384528ms ago: executing program 3 (id=6656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 328.367469ms ago: executing program 0 (id=6657): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 323.083509ms ago: executing program 2 (id=6658): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='1-2:'], 0x31) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='(pu&\"&\t&&') ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @ptr={0xd, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000130000000000000000850000009b000000180100002020702500000000002020247b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) 130.494766ms ago: executing program 3 (id=6659): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xae601, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x16, 0x0, 0x4, 0x2ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x80000, 0x0}, 0x10) 129.950976ms ago: executing program 4 (id=6661): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 0s ago: executing program 0 (id=6662): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x32b1, 0x0, 0x0, 0x0, 0x7ffe}, [@call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5c}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): at+0x20/0x20 [ 1321.616247][T22169] ? inet_diag_dump+0x50/0x50 [ 1321.620911][T22169] ? __inet_diag_dump+0x380/0x380 [ 1321.625921][T22169] sock_diag_rcv_msg+0x3cc/0x5f0 [ 1321.630846][T22169] netlink_rcv_skb+0x1fb/0x450 [ 1321.635599][T22169] ? sock_diag_bind+0xa0/0xa0 [ 1321.640260][T22169] ? netlink_ack+0x1170/0x1170 [ 1321.645017][T22169] ? netlink_deliver_tap+0x2e/0x1b0 [ 1321.650206][T22169] sock_diag_rcv+0x26/0x40 [ 1321.654606][T22169] netlink_unicast+0x74d/0x8d0 [ 1321.659360][T22169] netlink_sendmsg+0x8ad/0xbd0 [ 1321.664133][T22169] ? netlink_getsockopt+0x550/0x550 [ 1321.669318][T22169] ? aa_sock_msg_perm+0x94/0x150 [ 1321.674239][T22169] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1321.679515][T22169] ? security_socket_sendmsg+0x7c/0xa0 [ 1321.684971][T22169] ? netlink_getsockopt+0x550/0x550 [ 1321.690170][T22169] ____sys_sendmsg+0x5be/0x970 [ 1321.694941][T22169] ? __sys_sendmsg_sock+0x30/0x30 [ 1321.699973][T22169] ? __import_iovec+0x315/0x500 [ 1321.704814][T22169] ? import_iovec+0x6f/0xa0 [ 1321.709306][T22169] ___sys_sendmsg+0x2a2/0x360 [ 1321.713975][T22169] ? __sys_sendmsg+0x290/0x290 [ 1321.718744][T22169] ? __lock_acquire+0x7d10/0x7d10 [ 1321.723790][T22169] __se_sys_sendmsg+0x1bb/0x2a0 [ 1321.728625][T22169] ? ct_nmi_exit+0x145/0x1c0 [ 1321.733200][T22169] ? __x64_sys_sendmsg+0x80/0x80 [ 1321.738133][T22169] ? lockdep_hardirqs_on+0x94/0x140 [ 1321.743319][T22169] do_syscall_64+0x4c/0xa0 [ 1321.747726][T22169] ? clear_bhb_loop+0x60/0xb0 [ 1321.752387][T22169] ? clear_bhb_loop+0x60/0xb0 [ 1321.757059][T22169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1321.762960][T22169] RIP: 0033:0x7f936239ce59 [ 1321.767385][T22169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.786982][T22169] RSP: 002b:00007f936331b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1321.795378][T22169] RAX: ffffffffffffffda RBX: 00007f9362615fa0 RCX: 00007f936239ce59 [ 1321.803333][T22169] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1321.811289][T22169] RBP: 00007f936331b090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.819241][T22169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1321.827204][T22169] R13: 00007f9362616038 R14: 00007f9362615fa0 R15: 00007ffed9c0ccf8 [ 1321.835184][T22169] [ 1323.981307][T22194] netlink: 'syz.3.5364': attribute type 12 has an invalid length. [ 1324.001461][T22194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5364'. [ 1327.702334][T22229] netlink: 'syz.1.5377': attribute type 39 has an invalid length. [ 1327.716048][T22232] device bridge0 entered promiscuous mode [ 1327.831346][T22236] netlink: 'syz.0.5389': attribute type 39 has an invalid length. [ 1327.964579][T22243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5381'. [ 1328.005522][T22243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5381'. [ 1328.029324][T22243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5381'. [ 1329.270235][T22281] netlink: 'syz.0.5391': attribute type 39 has an invalid length. [ 1329.379747][T22285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1329.415045][T22285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1329.424984][T22286] netlink: 'syz.1.5393': attribute type 9 has an invalid length. [ 1329.434589][T22286] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5393'. [ 1329.443277][T22285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1329.475133][T22285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1329.607804][T22286] netlink: 'syz.1.5393': attribute type 29 has an invalid length. [ 1330.781370][T22286] netlink: 'syz.1.5393': attribute type 29 has an invalid length. [ 1332.170866][T22307] netlink: 'syz.3.5401': attribute type 39 has an invalid length. [ 1332.950569][T22328] netlink: 'syz.4.5407': attribute type 9 has an invalid length. [ 1332.996973][T22328] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5407'. [ 1333.020160][T22330] netlink: 'syz.1.5406': attribute type 39 has an invalid length. [ 1333.224888][T22328] netlink: 'syz.4.5407': attribute type 29 has an invalid length. [ 1333.238825][T22328] netlink: 'syz.4.5407': attribute type 29 has an invalid length. [ 1333.406059][T22339] netlink: 'syz.3.5409': attribute type 39 has an invalid length. [ 1336.085573][T22380] netlink: 'syz.0.5423': attribute type 39 has an invalid length. [ 1336.444494][T22390] netlink: 'syz.1.5424': attribute type 9 has an invalid length. [ 1336.526168][T22390] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5424'. [ 1336.645265][T22391] netlink: 'syz.1.5424': attribute type 29 has an invalid length. [ 1336.675479][T22391] netlink: 'syz.1.5424': attribute type 29 has an invalid length. [ 1338.985901][T22398] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5426'. [ 1339.001823][T22396] netlink: 'syz.1.5425': attribute type 39 has an invalid length. [ 1339.181640][T22404] netlink: 'syz.2.5428': attribute type 39 has an invalid length. [ 1341.691152][T22413] netlink: 'syz.4.5431': attribute type 39 has an invalid length. [ 1341.924318][T22416] netlink: 'syz.0.5432': attribute type 17 has an invalid length. [ 1341.944462][T22416] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5432'. [ 1342.000290][T22416] device pim6reg1 entered promiscuous mode [ 1342.378850][T22426] netlink: 'syz.0.5435': attribute type 9 has an invalid length. [ 1342.399947][T22426] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5435'. [ 1342.447686][T22427] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5433'. [ 1343.002125][T22437] netlink: 'syz.1.5437': attribute type 39 has an invalid length. [ 1343.299225][T22446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5439'. [ 1343.651344][T22455] netlink: 'syz.2.5440': attribute type 39 has an invalid length. [ 1343.923266][T22459] netlink: 'syz.3.5442': attribute type 39 has an invalid length. [ 1343.995696][T22461] netlink: 'syz.1.5443': attribute type 39 has an invalid length. [ 1344.148263][T22463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5444'. [ 1344.192963][T22463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5444'. [ 1344.274598][T22466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5444'. [ 1347.170510][T22468] netlink: 'syz.4.5446': attribute type 39 has an invalid length. [ 1347.191938][T22463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5444'. [ 1347.278954][T22472] netlink: 'syz.2.5447': attribute type 9 has an invalid length. [ 1347.296752][T22472] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5447'. [ 1347.371430][T22472] netlink: 'syz.2.5447': attribute type 29 has an invalid length. [ 1347.473936][T22472] netlink: 'syz.2.5447': attribute type 29 has an invalid length. [ 1347.730554][T22481] netlink: 'syz.4.5450': attribute type 39 has an invalid length. [ 1347.850629][T22483] netlink: 'syz.2.5449': attribute type 39 has an invalid length. [ 1349.321036][T22505] netlink: 'syz.4.5455': attribute type 39 has an invalid length. [ 1349.566088][T22514] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1349.630509][T22514] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1349.660931][T22516] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1349.710528][T22514] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1349.779125][T22521] netlink: 'syz.0.5461': attribute type 9 has an invalid length. [ 1349.800785][T22521] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5461'. [ 1349.958054][T22525] netlink: 'syz.4.5462': attribute type 39 has an invalid length. [ 1350.031048][T22522] netlink: 'syz.0.5461': attribute type 29 has an invalid length. [ 1350.061773][T22528] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5460'. [ 1350.152361][T22528] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1352.410524][T22573] validate_nla: 8 callbacks suppressed [ 1352.410540][T22573] netlink: 'syz.3.5477': attribute type 39 has an invalid length. [ 1352.481808][T22570] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5474'. [ 1352.679430][T22575] netlink: 'syz.2.5478': attribute type 39 has an invalid length. [ 1352.690696][T22570] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1353.181020][T22592] netlink: 'syz.1.5485': attribute type 39 has an invalid length. [ 1353.566771][T22602] netlink: 'syz.3.5487': attribute type 39 has an invalid length. [ 1353.640905][T22604] netlink: 'syz.2.5498': attribute type 39 has an invalid length. [ 1354.080022][T22609] netlink: 'syz.4.5490': attribute type 39 has an invalid length. [ 1354.185408][T22611] netlink: 'syz.1.5491': attribute type 39 has an invalid length. [ 1354.571152][T22620] netlink: 'syz.3.5493': attribute type 9 has an invalid length. [ 1354.603366][T22617] netlink: 'syz.2.5504': attribute type 39 has an invalid length. [ 1354.609768][T22620] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5493'. [ 1354.933579][T22631] FAULT_INJECTION: forcing a failure. [ 1354.933579][T22631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1354.977667][T22620] netlink: 'syz.3.5493': attribute type 29 has an invalid length. [ 1354.989858][T22631] CPU: 1 PID: 22631 Comm: syz.4.5496 Not tainted syzkaller #0 [ 1354.997343][T22631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1355.007396][T22631] Call Trace: [ 1355.010661][T22631] [ 1355.013574][T22631] dump_stack_lvl+0x188/0x24e [ 1355.018246][T22631] ? show_regs_print_info+0x12/0x12 [ 1355.023434][T22631] ? load_image+0x400/0x400 [ 1355.027935][T22631] ? __lock_acquire+0x7d10/0x7d10 [ 1355.032985][T22631] should_fail_ex+0x399/0x4d0 [ 1355.037683][T22631] _copy_from_user+0x2c/0x170 [ 1355.042376][T22631] ___sys_sendmsg+0x1c3/0x360 [ 1355.047082][T22631] ? __sys_sendmsg+0x290/0x290 [ 1355.051878][T22631] ? __lock_acquire+0x7d10/0x7d10 [ 1355.056941][T22631] __se_sys_sendmsg+0x1bb/0x2a0 [ 1355.061810][T22631] ? __x64_sys_sendmsg+0x80/0x80 [ 1355.066749][T22631] ? lockdep_hardirqs_on+0x94/0x140 [ 1355.071953][T22631] do_syscall_64+0x4c/0xa0 [ 1355.076385][T22631] ? clear_bhb_loop+0x60/0xb0 [ 1355.081083][T22631] ? clear_bhb_loop+0x60/0xb0 [ 1355.085781][T22631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1355.091689][T22631] RIP: 0033:0x7fc14ed9ce59 [ 1355.096110][T22631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.115705][T22631] RSP: 002b:00007fc14fcd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.124110][T22631] RAX: ffffffffffffffda RBX: 00007fc14f015fa0 RCX: 00007fc14ed9ce59 [ 1355.132072][T22631] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1355.140030][T22631] RBP: 00007fc14fcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.147988][T22631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.155947][T22631] R13: 00007fc14f016038 R14: 00007fc14f015fa0 R15: 00007ffc73b94888 [ 1355.163918][T22631] [ 1355.496921][T22641] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1356.896265][T22681] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1357.370850][T22689] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5518'. [ 1357.523828][T22693] validate_nla: 15 callbacks suppressed [ 1357.523949][T22693] netlink: 'syz.3.5516': attribute type 39 has an invalid length. [ 1357.869689][T22698] netlink: 'syz.1.5519': attribute type 39 has an invalid length. [ 1357.946611][T22689] netlink: 'syz.2.5518': attribute type 29 has an invalid length. [ 1358.013175][T22689] netlink: 'syz.2.5518': attribute type 29 has an invalid length. [ 1358.093042][T22699] delete_channel: no stack [ 1358.145790][T22705] netlink: 15478 bytes leftover after parsing attributes in process `syz.4.5522'. [ 1361.201537][T22724] delete_channel: no stack [ 1361.404006][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.410323][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.508180][T22741] netlink: 'syz.3.5533': attribute type 10 has an invalid length. [ 1361.555832][T22737] netlink: 'syz.1.5531': attribute type 39 has an invalid length. [ 1361.759784][T22748] netlink: 'syz.3.5534': attribute type 9 has an invalid length. [ 1361.807068][T22748] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5534'. [ 1361.942360][T22748] netlink: 'syz.3.5534': attribute type 29 has an invalid length. [ 1362.059050][T22748] netlink: 'syz.3.5534': attribute type 29 has an invalid length. [ 1362.165757][T22760] netlink: 'syz.0.5537': attribute type 39 has an invalid length. [ 1362.666269][T22768] validate_nla: 1 callbacks suppressed [ 1362.666356][T22768] netlink: 'syz.1.5540': attribute type 39 has an invalid length. [ 1362.850206][T22771] netlink: 'syz.2.5541': attribute type 9 has an invalid length. [ 1362.928380][T22771] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5541'. [ 1363.244219][T22771] netlink: 'syz.2.5541': attribute type 29 has an invalid length. [ 1363.256053][T22771] netlink: 'syz.2.5541': attribute type 29 has an invalid length. [ 1363.710598][T22784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1363.750088][T22784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1363.782531][T22787] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1363.829526][T22784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1363.899748][T22790] netlink: 'syz.4.5547': attribute type 39 has an invalid length. [ 1366.447797][T22805] netlink: 'syz.0.5551': attribute type 10 has an invalid length. [ 1366.470546][T22805] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5551'. [ 1367.671630][T22818] netlink: 'syz.0.5556': attribute type 39 has an invalid length. [ 1367.692302][T22819] netlink: 'syz.1.5557': attribute type 9 has an invalid length. [ 1367.722322][T22819] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5557'. [ 1367.854032][T22816] netlink: 'syz.1.5557': attribute type 29 has an invalid length. [ 1367.914030][T22816] netlink: 'syz.1.5557': attribute type 29 has an invalid length. [ 1368.075498][T22828] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5559'. [ 1368.197798][T22828] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5559'. [ 1368.262805][T22830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5559'. [ 1368.302300][T22834] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5559'. [ 1368.322844][T22831] delete_channel: no stack [ 1368.512731][T22841] netlink: 'syz.3.5562': attribute type 39 has an invalid length. [ 1368.610154][T22846] netlink: 'syz.4.5564': attribute type 39 has an invalid length. [ 1368.636852][T22848] netlink: 'syz.2.5565': attribute type 39 has an invalid length. [ 1369.341869][T22865] netlink: 'syz.0.5570': attribute type 3 has an invalid length. [ 1369.374797][T22865] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5570'. [ 1369.455649][T22867] netlink: 'syz.4.5571': attribute type 9 has an invalid length. [ 1369.609521][T22871] netlink: 'syz.2.5572': attribute type 39 has an invalid length. [ 1369.629125][T22867] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5571'. [ 1370.213409][T22878] netlink: 'syz.1.5573': attribute type 39 has an invalid length. [ 1370.431673][T22885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1370.565509][T22885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1370.753281][T22887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1370.782297][T22888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5574'. [ 1371.538312][T22911] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1374.852900][T22921] validate_nla: 6 callbacks suppressed [ 1374.852943][T22921] netlink: 'syz.3.5588': attribute type 9 has an invalid length. [ 1374.890198][T22921] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5588'. [ 1375.180581][T22935] netlink: 'syz.2.5592': attribute type 39 has an invalid length. [ 1375.597550][T22921] netlink: 'syz.3.5588': attribute type 29 has an invalid length. [ 1375.624420][T22921] netlink: 'syz.3.5588': attribute type 29 has an invalid length. [ 1375.783267][T22952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5598'. [ 1375.803206][T22952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5598'. [ 1375.821431][T22956] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5598'. [ 1375.853154][T22952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5598'. [ 1376.159574][T22963] netlink: 'syz.3.5600': attribute type 39 has an invalid length. [ 1376.641553][T22972] device sit0 left promiscuous mode [ 1376.766863][T22971] device sit0 entered promiscuous mode [ 1377.046520][T22982] netlink: 'syz.0.5605': attribute type 39 has an invalid length. [ 1377.275520][T22987] netlink: 'syz.2.5608': attribute type 39 has an invalid length. [ 1377.320058][T22989] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.5610'. [ 1377.373382][T22989] openvswitch: netlink: Key type 386 is out of range max 32 [ 1377.585610][T22996] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1377.646484][T22996] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1377.683738][T23002] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1377.760228][T22996] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5612'. [ 1378.521658][T23033] netlink: 'syz.3.5621': attribute type 39 has an invalid length. [ 1379.486920][T23049] openvswitch: netlink: Key type 386 is out of range max 32 [ 1379.519608][T23052] netlink: 'syz.0.5627': attribute type 33 has an invalid length. [ 1379.557031][T23053] netlink: 'syz.3.5629': attribute type 39 has an invalid length. [ 1379.608081][T23052] openvswitch: netlink: Flow actions attr not present in new flow. [ 1379.904025][T23058] __nla_validate_parse: 8 callbacks suppressed [ 1379.904042][T23058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5631'. [ 1379.947774][T23059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5631'. [ 1379.969469][T23058] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5631'. [ 1380.762787][T23083] device sit0 entered promiscuous mode [ 1381.395998][T23098] netlink: 'syz.3.5640': attribute type 39 has an invalid length. [ 1381.635602][T23108] FAULT_INJECTION: forcing a failure. [ 1381.635602][T23108] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.682183][T23108] CPU: 1 PID: 23108 Comm: syz.3.5643 Not tainted syzkaller #0 [ 1381.689663][T23108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1381.699706][T23108] Call Trace: [ 1381.702975][T23108] [ 1381.705894][T23108] dump_stack_lvl+0x188/0x24e [ 1381.710572][T23108] ? show_regs_print_info+0x12/0x12 [ 1381.715764][T23108] ? load_image+0x400/0x400 [ 1381.720263][T23108] ? __might_sleep+0xd0/0xd0 [ 1381.724845][T23108] ? __lock_acquire+0x7d10/0x7d10 [ 1381.729864][T23108] should_fail_ex+0x399/0x4d0 [ 1381.734536][T23108] should_failslab+0x5/0x20 [ 1381.739028][T23108] slab_pre_alloc_hook+0x59/0x310 [ 1381.744044][T23108] ? tomoyo_encode+0x27e/0x540 [ 1381.748802][T23108] __kmem_cache_alloc_node+0x4f/0x260 [ 1381.754169][T23108] ? tomoyo_encode+0x27e/0x540 [ 1381.758922][T23108] __kmalloc+0xa0/0x240 [ 1381.763076][T23108] tomoyo_encode+0x27e/0x540 [ 1381.767662][T23108] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1381.773290][T23108] ? tomoyo_path_number_perm+0x205/0x650 [ 1381.778914][T23108] tomoyo_path_number_perm+0x22f/0x650 [ 1381.784390][T23108] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1381.789840][T23108] ? ksys_write+0x1c0/0x250 [ 1381.794335][T23108] ? common_file_perm+0x171/0x1c0 [ 1381.799370][T23108] ? __fget_files+0x28/0x4b0 [ 1381.803952][T23108] ? __fget_files+0x28/0x4b0 [ 1381.808540][T23108] security_file_ioctl+0x6c/0xa0 [ 1381.813472][T23108] __se_sys_ioctl+0x48/0x170 [ 1381.818064][T23108] do_syscall_64+0x4c/0xa0 [ 1381.822475][T23108] ? clear_bhb_loop+0x60/0xb0 [ 1381.827150][T23108] ? clear_bhb_loop+0x60/0xb0 [ 1381.831817][T23108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1381.837698][T23108] RIP: 0033:0x7f936239ce59 [ 1381.842106][T23108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1381.861709][T23108] RSP: 002b:00007f936331b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.870109][T23108] RAX: ffffffffffffffda RBX: 00007f9362615fa0 RCX: 00007f936239ce59 [ 1381.878079][T23108] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000004 [ 1381.886044][T23108] RBP: 00007f936331b090 R08: 0000000000000000 R09: 0000000000000000 [ 1381.894005][T23108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1381.901964][T23108] R13: 00007f9362616038 R14: 00007f9362615fa0 R15: 00007ffed9c0ccf8 [ 1381.909939][T23108] [ 1381.922535][T23108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1382.510735][T23114] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.5644'. [ 1382.540791][T23114] openvswitch: netlink: Key type 386 is out of range max 32 [ 1383.095978][T23120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5645'. [ 1383.117646][T23120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5645'. [ 1383.140772][T23120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5645'. [ 1383.203391][T23120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5645'. [ 1383.436173][T23127] netlink: 'syz.0.5647': attribute type 39 has an invalid length. [ 1384.003122][T23145] netlink: 'syz.3.5655': attribute type 39 has an invalid length. [ 1384.974386][T23161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5660'. [ 1385.470451][T23176] netlink: 'syz.2.5663': attribute type 39 has an invalid length. [ 1385.706850][T23172] netlink: 'syz.3.5664': attribute type 25 has an invalid length. [ 1386.179213][T23183] netlink: 'syz.3.5667': attribute type 39 has an invalid length. [ 1387.157737][T23199] netlink: 'syz.4.5670': attribute type 39 has an invalid length. [ 1388.066833][T23225] netlink: 'syz.4.5678': attribute type 39 has an invalid length. [ 1388.491745][T23234] device sit0 left promiscuous mode [ 1388.689945][T23247] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5684'. [ 1389.183007][T23243] device sit0 entered promiscuous mode [ 1389.225160][T23247] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5684'. [ 1389.243092][T23251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5684'. [ 1389.292966][T23252] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5684'. [ 1389.500744][T23265] FAULT_INJECTION: forcing a failure. [ 1389.500744][T23265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1389.518232][T23264] netlink: 'syz.3.5689': attribute type 39 has an invalid length. [ 1389.567860][T23265] CPU: 0 PID: 23265 Comm: syz.1.5688 Not tainted syzkaller #0 [ 1389.575353][T23265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1389.585414][T23265] Call Trace: [ 1389.588706][T23265] [ 1389.591649][T23265] dump_stack_lvl+0x188/0x24e [ 1389.596354][T23265] ? show_regs_print_info+0x12/0x12 [ 1389.601579][T23265] ? load_image+0x400/0x400 [ 1389.606103][T23265] ? __lock_acquire+0x7d10/0x7d10 [ 1389.611151][T23265] should_fail_ex+0x399/0x4d0 [ 1389.615849][T23265] _copy_from_user+0x2c/0x170 [ 1389.620546][T23265] iovec_from_user+0x143/0x360 [ 1389.625335][T23265] __import_iovec+0x6d/0x500 [ 1389.629945][T23265] import_iovec+0x6f/0xa0 [ 1389.634276][T23265] ___sys_sendmsg+0x252/0x360 [ 1389.638958][T23265] ? __sys_sendmsg+0x290/0x290 [ 1389.643730][T23265] ? __lock_acquire+0x7d10/0x7d10 [ 1389.648762][T23265] __se_sys_sendmsg+0x1bb/0x2a0 [ 1389.653611][T23265] ? __x64_sys_sendmsg+0x80/0x80 [ 1389.658554][T23265] ? lockdep_hardirqs_on+0x94/0x140 [ 1389.663742][T23265] do_syscall_64+0x4c/0xa0 [ 1389.668150][T23265] ? clear_bhb_loop+0x60/0xb0 [ 1389.672820][T23265] ? clear_bhb_loop+0x60/0xb0 [ 1389.677489][T23265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1389.683373][T23265] RIP: 0033:0x7f3b92d9ce59 [ 1389.687773][T23265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.707368][T23265] RSP: 002b:00007f3b93c13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.715773][T23265] RAX: ffffffffffffffda RBX: 00007f3b93015fa0 RCX: 00007f3b92d9ce59 [ 1389.723737][T23265] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1389.731695][T23265] RBP: 00007f3b93c13090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.739656][T23265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.747613][T23265] R13: 00007f3b93016038 R14: 00007f3b93015fa0 R15: 00007fffc2f9f428 [ 1389.755580][T23265] [ 1391.185567][T23291] netlink: 'syz.2.5696': attribute type 39 has an invalid length. [ 1391.305230][T23301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1391.382091][T23301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1391.432250][T23303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1391.475507][T23301] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1391.684379][T23310] FAULT_INJECTION: forcing a failure. [ 1391.684379][T23310] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.762253][T23310] CPU: 1 PID: 23310 Comm: syz.0.5703 Not tainted syzkaller #0 [ 1391.769741][T23310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1391.779803][T23310] Call Trace: [ 1391.783091][T23310] [ 1391.786036][T23310] dump_stack_lvl+0x188/0x24e [ 1391.790726][T23310] ? show_regs_print_info+0x12/0x12 [ 1391.795922][T23310] ? load_image+0x400/0x400 [ 1391.800417][T23310] ? __might_sleep+0xd0/0xd0 [ 1391.804994][T23310] ? __lock_acquire+0x7d10/0x7d10 [ 1391.810012][T23310] should_fail_ex+0x399/0x4d0 [ 1391.814683][T23310] should_failslab+0x5/0x20 [ 1391.819180][T23310] slab_pre_alloc_hook+0x59/0x310 [ 1391.824195][T23310] ? apparmor_sk_alloc_security+0x74/0x100 [ 1391.829989][T23310] __kmem_cache_alloc_node+0x4f/0x260 [ 1391.835354][T23310] ? apparmor_sk_alloc_security+0x74/0x100 [ 1391.841149][T23310] kmalloc_trace+0x26/0xe0 [ 1391.845567][T23310] apparmor_sk_alloc_security+0x74/0x100 [ 1391.851190][T23310] security_sk_alloc+0x6a/0xa0 [ 1391.855944][T23310] sk_prot_alloc+0x101/0x210 [ 1391.860524][T23310] ? sk_alloc+0x20/0x340 [ 1391.864766][T23310] sk_alloc+0x36/0x340 [ 1391.868825][T23310] ? bpf_ctx_init+0x163/0x1a0 [ 1391.873491][T23310] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1391.879026][T23310] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1391.884391][T23310] ? __fget_files+0x28/0x4b0 [ 1391.888973][T23310] ? __fget_files+0x43d/0x4b0 [ 1391.893648][T23310] ? cpu_online+0xa0/0xa0 [ 1391.897970][T23310] bpf_prog_test_run+0x31e/0x390 [ 1391.902902][T23310] __sys_bpf+0x62b/0x780 [ 1391.907139][T23310] ? bpf_link_show_fdinfo+0x380/0x380 [ 1391.912511][T23310] ? lock_chain_count+0x20/0x20 [ 1391.917360][T23310] __x64_sys_bpf+0x78/0x90 [ 1391.921769][T23310] do_syscall_64+0x4c/0xa0 [ 1391.926180][T23310] ? clear_bhb_loop+0x60/0xb0 [ 1391.930848][T23310] ? clear_bhb_loop+0x60/0xb0 [ 1391.935517][T23310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1391.941398][T23310] RIP: 0033:0x7faeccb9ce59 [ 1391.945801][T23310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.965408][T23310] RSP: 002b:00007faecdade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1391.973811][T23310] RAX: ffffffffffffffda RBX: 00007faecce15fa0 RCX: 00007faeccb9ce59 [ 1391.981773][T23310] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1391.989729][T23310] RBP: 00007faecdade090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.997685][T23310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1392.005640][T23310] R13: 00007faecce16038 R14: 00007faecce15fa0 R15: 00007fffe8c4d778 [ 1392.013612][T23310] [ 1392.067004][T23314] netlink: 'syz.2.5704': attribute type 39 has an invalid length. [ 1393.222608][T23346] FAULT_INJECTION: forcing a failure. [ 1393.222608][T23346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.273682][T23346] CPU: 1 PID: 23346 Comm: syz.4.5711 Not tainted syzkaller #0 [ 1393.281174][T23346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1393.291225][T23346] Call Trace: [ 1393.294501][T23346] [ 1393.297425][T23346] dump_stack_lvl+0x188/0x24e [ 1393.302106][T23346] ? show_regs_print_info+0x12/0x12 [ 1393.307298][T23346] ? load_image+0x400/0x400 [ 1393.311795][T23346] ? __lock_acquire+0x7d10/0x7d10 [ 1393.316815][T23346] ? snprintf+0xe5/0x140 [ 1393.321051][T23346] should_fail_ex+0x399/0x4d0 [ 1393.325722][T23346] _copy_to_user+0x2c/0x130 [ 1393.330218][T23346] simple_read_from_buffer+0xe3/0x150 [ 1393.335591][T23346] proc_fail_nth_read+0x1a6/0x220 [ 1393.340614][T23346] ? proc_fault_inject_write+0x310/0x310 [ 1393.346243][T23346] ? fsnotify_perm+0x248/0x550 [ 1393.351002][T23346] ? proc_fault_inject_write+0x310/0x310 [ 1393.356626][T23346] vfs_read+0x2de/0xa00 [ 1393.360781][T23346] ? kernel_read+0x1e0/0x1e0 [ 1393.365370][T23346] ? __fget_files+0x28/0x4b0 [ 1393.369958][T23346] ? __fget_files+0x28/0x4b0 [ 1393.374541][T23346] ? __fget_files+0x43d/0x4b0 [ 1393.379216][T23346] ? __fdget_pos+0x2ae/0x360 [ 1393.383798][T23346] ? ksys_read+0x71/0x250 [ 1393.388121][T23346] ksys_read+0x14c/0x250 [ 1393.392360][T23346] ? vfs_write+0xa30/0xa30 [ 1393.396774][T23346] ? lockdep_hardirqs_on+0x94/0x140 [ 1393.401965][T23346] do_syscall_64+0x4c/0xa0 [ 1393.406378][T23346] ? clear_bhb_loop+0x60/0xb0 [ 1393.411046][T23346] ? clear_bhb_loop+0x60/0xb0 [ 1393.415717][T23346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1393.421604][T23346] RIP: 0033:0x7fc14ed5d68e [ 1393.426008][T23346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1393.445605][T23346] RSP: 002b:00007fc14fcd6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1393.454008][T23346] RAX: ffffffffffffffda RBX: 00007fc14fcd76c0 RCX: 00007fc14ed5d68e [ 1393.461969][T23346] RDX: 000000000000000f RSI: 00007fc14fcd70a0 RDI: 0000000000000005 [ 1393.469938][T23346] RBP: 00007fc14fcd7090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.477895][T23346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.485869][T23346] R13: 00007fc14f016038 R14: 00007fc14f015fa0 R15: 00007ffc73b94888 [ 1393.493848][T23346] [ 1393.543422][T23350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5713'. [ 1393.589048][T23350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5713'. [ 1393.641266][T23351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5713'. [ 1393.695423][T23350] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5713'. [ 1393.766074][T23348] netlink: 'syz.2.5712': attribute type 39 has an invalid length. [ 1394.237541][T23363] netlink: 'syz.3.5716': attribute type 39 has an invalid length. [ 1397.551544][T23384] netlink: 'syz.3.5721': attribute type 39 has an invalid length. [ 1398.411032][T23395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1398.424093][T23396] netlink: 'syz.3.5725': attribute type 10 has an invalid length. [ 1398.438690][T23396] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5725'. [ 1399.480421][T23395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1399.490931][T23401] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.5725'. [ 1399.536328][T23411] netlink: 'syz.4.5719': attribute type 10 has an invalid length. [ 1399.644651][T23417] netlink: 'syz.1.5727': attribute type 39 has an invalid length. [ 1404.219115][T23424] netlink: 'syz.3.5729': attribute type 39 has an invalid length. [ 1404.601802][T23446] netlink: 'syz.4.5736': attribute type 39 has an invalid length. [ 1404.938890][T23452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5738'. [ 1404.963319][T23452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5738'. [ 1404.980912][T23452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5738'. [ 1405.040173][T23458] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5738'. [ 1405.220243][T23460] netlink: 'syz.2.5737': attribute type 39 has an invalid length. [ 1405.443906][T23465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1405.481651][T23465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.554779][T23465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.604898][T23465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.639211][T23465] batman_adv: batadv0: Interface deactivated: vlan1 [ 1405.670144][T23465] batman_adv: batadv0: Removing interface: vlan1 [ 1405.701584][T23465] batman_adv: batadv0: Interface deactivated: macvlan1 [ 1405.726950][T23465] batman_adv: batadv0: Removing interface: macvlan1 [ 1406.617636][T23476] netlink: 'syz.1.5745': attribute type 39 has an invalid length. [ 1407.025272][T23489] netlink: 'syz.1.5749': attribute type 39 has an invalid length. [ 1407.791645][T23511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1407.819783][T23511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1407.914825][T23515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1407.969239][T23511] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1410.337165][T23534] netlink: 'syz.2.5756': attribute type 39 has an invalid length. [ 1410.632546][T23542] netlink: 'syz.4.5760': attribute type 39 has an invalid length. [ 1410.804244][T23549] netlink: 'syz.2.5762': attribute type 27 has an invalid length. [ 1410.867848][T23549] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5762'. [ 1410.955635][T23552] netlink: 'syz.0.5763': attribute type 39 has an invalid length. [ 1411.177080][T23549] netlink: 'syz.2.5762': attribute type 10 has an invalid length. [ 1411.381962][T23558] netlink: 'syz.4.5764': attribute type 10 has an invalid length. [ 1411.401027][T23558] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5764'. [ 1412.153747][T23559] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.5764'. [ 1412.163623][T23557] netlink: 'syz.3.5774': attribute type 39 has an invalid length. [ 1412.889865][T23582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1412.961173][T23582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1412.992880][T23583] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1413.022215][T23584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1413.678050][T23604] netlink: 'syz.0.5783': attribute type 39 has an invalid length. [ 1414.350872][T23613] FAULT_INJECTION: forcing a failure. [ 1414.350872][T23613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1414.382282][T23613] CPU: 1 PID: 23613 Comm: syz.1.5775 Not tainted syzkaller #0 [ 1414.389804][T23613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1414.399889][T23613] Call Trace: [ 1414.403192][T23613] [ 1414.406149][T23613] dump_stack_lvl+0x188/0x24e [ 1414.410874][T23613] ? show_regs_print_info+0x12/0x12 [ 1414.416116][T23613] ? load_image+0x400/0x400 [ 1414.420679][T23613] ? __lock_acquire+0x7d10/0x7d10 [ 1414.425770][T23613] should_fail_ex+0x399/0x4d0 [ 1414.430499][T23613] _copy_from_user+0x2c/0x170 [ 1414.435219][T23613] iovec_from_user+0x143/0x360 [ 1414.440032][T23613] __import_iovec+0x6d/0x500 [ 1414.444683][T23613] import_iovec+0x6f/0xa0 [ 1414.449062][T23613] ___sys_sendmsg+0x252/0x360 [ 1414.453801][T23613] ? __sys_sendmsg+0x290/0x290 [ 1414.458669][T23613] ? __lock_acquire+0x7d10/0x7d10 [ 1414.463811][T23613] __se_sys_sendmsg+0x1bb/0x2a0 [ 1414.468709][T23613] ? __x64_sys_sendmsg+0x80/0x80 [ 1414.473739][T23613] ? lockdep_hardirqs_on+0x94/0x140 [ 1414.478992][T23613] do_syscall_64+0x4c/0xa0 [ 1414.483443][T23613] ? clear_bhb_loop+0x60/0xb0 [ 1414.488151][T23613] ? clear_bhb_loop+0x60/0xb0 [ 1414.492872][T23613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1414.498797][T23613] RIP: 0033:0x7f3b92d9ce59 [ 1414.503240][T23613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.522877][T23613] RSP: 002b:00007f3b93c13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1414.531324][T23613] RAX: ffffffffffffffda RBX: 00007f3b93015fa0 RCX: 00007f3b92d9ce59 [ 1414.539322][T23613] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1414.547320][T23613] RBP: 00007f3b93c13090 R08: 0000000000000000 R09: 0000000000000000 [ 1414.555320][T23613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1414.563317][T23613] R13: 00007f3b93016038 R14: 00007f3b93015fa0 R15: 00007fffc2f9f428 [ 1414.571362][T23613] [ 1414.598330][T23610] netlink: 'syz.4.5773': attribute type 16 has an invalid length. [ 1414.611259][T23610] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1414.620718][T23610] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1414.675967][T23615] netlink: 'syz.2.5772': attribute type 39 has an invalid length. [ 1414.886407][T23624] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5779'. [ 1414.931016][T23624] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.5779'. [ 1418.055784][T23638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5782'. [ 1418.089780][T23638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5782'. [ 1418.122548][T23640] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5782'. [ 1418.159151][T23638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5782'. [ 1418.433490][T23645] validate_nla: 1 callbacks suppressed [ 1418.433578][T23645] netlink: 'syz.1.5786': attribute type 39 has an invalid length. [ 1418.702752][T23652] netlink: 'syz.4.5790': attribute type 39 has an invalid length. [ 1419.173309][T23667] netlink: 'syz.4.5793': attribute type 27 has an invalid length. [ 1422.283507][T23689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5798'. [ 1422.292744][T23689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5798'. [ 1422.312254][T23689] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5798'. [ 1422.652312][T23694] netlink: 'syz.4.5800': attribute type 39 has an invalid length. [ 1422.872117][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.878434][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.435215][T23708] netlink: 'syz.1.5803': attribute type 39 has an invalid length. [ 1423.533243][T23714] netlink: 'syz.0.5804': attribute type 39 has an invalid length. [ 1424.024444][T23723] netlink: 'syz.2.5807': attribute type 27 has an invalid length. [ 1424.160852][T23728] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5809'. [ 1424.191164][T23723] bond0: (slave bond_slave_0): Releasing backup interface [ 1424.588904][T23728] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5809'. [ 1424.619275][T23731] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5809'. [ 1428.179922][T23749] netlink: 'syz.4.5816': attribute type 39 has an invalid length. [ 1428.629154][T23771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5822'. [ 1428.631243][T23766] netlink: 'syz.3.5819': attribute type 39 has an invalid length. [ 1428.689081][T23773] netlink: 'syz.0.5824': attribute type 39 has an invalid length. [ 1428.722471][T23771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5822'. [ 1431.148894][T23776] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5822'. [ 1431.577220][T23793] netlink: 'syz.1.5827': attribute type 39 has an invalid length. [ 1433.110984][T23816] netlink: 'syz.3.5832': attribute type 39 has an invalid length. [ 1436.744094][T23831] netlink: 'syz.0.5839': attribute type 39 has an invalid length. [ 1437.530753][T23849] netlink: 'syz.1.5843': attribute type 39 has an invalid length. [ 1438.307572][T23866] netlink: 'syz.0.5847': attribute type 39 has an invalid length. [ 1439.602819][T23880] device sit0 left promiscuous mode [ 1440.522441][T23882] device sit0 entered promiscuous mode [ 1440.652606][T23887] netlink: 'syz.1.5851': attribute type 27 has an invalid length. [ 1441.260770][T23909] netlink: 'syz.1.5856': attribute type 39 has an invalid length. [ 1441.762455][T23922] netlink: 'syz.3.5859': attribute type 39 has an invalid length. [ 1442.570122][T23941] netlink: 'syz.4.5862': attribute type 39 has an invalid length. [ 1443.971349][T23967] device sit0 left promiscuous mode [ 1444.212192][T23971] device sit0 entered promiscuous mode [ 1444.500638][T23974] netlink: 'syz.2.5871': attribute type 39 has an invalid length. [ 1444.520900][T23977] netlink: 'syz.1.5872': attribute type 39 has an invalid length. [ 1444.754066][T23983] FAULT_INJECTION: forcing a failure. [ 1444.754066][T23983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.783293][T23983] CPU: 0 PID: 23983 Comm: syz.2.5874 Not tainted syzkaller #0 [ 1444.790780][T23983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1444.800846][T23983] Call Trace: [ 1444.804137][T23983] [ 1444.807078][T23983] dump_stack_lvl+0x188/0x24e [ 1444.811783][T23983] ? show_regs_print_info+0x12/0x12 [ 1444.817003][T23983] ? load_image+0x400/0x400 [ 1444.821525][T23983] ? __lock_acquire+0x7d10/0x7d10 [ 1444.826569][T23983] ? __virt_addr_valid+0x188/0x540 [ 1444.831704][T23983] should_fail_ex+0x399/0x4d0 [ 1444.836392][T23983] _copy_from_user+0x2c/0x170 [ 1444.841069][T23983] bpf_test_init+0xde/0x140 [ 1444.845573][T23983] bpf_prog_test_run_xdp+0x484/0xf10 [ 1444.850860][T23983] ? dev_put+0x80/0x80 [ 1444.854927][T23983] ? dev_put+0x80/0x80 [ 1444.858988][T23983] bpf_prog_test_run+0x31e/0x390 [ 1444.863923][T23983] __sys_bpf+0x62b/0x780 [ 1444.868157][T23983] ? bpf_link_show_fdinfo+0x380/0x380 [ 1444.873532][T23983] ? lock_chain_count+0x20/0x20 [ 1444.878379][T23983] __x64_sys_bpf+0x78/0x90 [ 1444.882787][T23983] do_syscall_64+0x4c/0xa0 [ 1444.887197][T23983] ? clear_bhb_loop+0x60/0xb0 [ 1444.891863][T23983] ? clear_bhb_loop+0x60/0xb0 [ 1444.896532][T23983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1444.902415][T23983] RIP: 0033:0x7f35a819ce59 [ 1444.906821][T23983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1444.926413][T23983] RSP: 002b:00007f35a90cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1444.934819][T23983] RAX: ffffffffffffffda RBX: 00007f35a8415fa0 RCX: 00007f35a819ce59 [ 1444.942781][T23983] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1444.950742][T23983] RBP: 00007f35a90cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.958704][T23983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.966663][T23983] R13: 00007f35a8416038 R14: 00007f35a8415fa0 R15: 00007ffe883beba8 [ 1444.974635][T23983] [ 1445.543918][T24001] netlink: 'syz.2.5877': attribute type 39 has an invalid length. [ 1446.461875][T24019] netlink: 'syz.2.5884': attribute type 39 has an invalid length. [ 1446.644958][T24021] netlink: 'syz.3.5885': attribute type 2 has an invalid length. [ 1446.738862][T24027] device sit0 left promiscuous mode [ 1447.607142][T24030] netlink: 'syz.2.5889': attribute type 39 has an invalid length. [ 1447.644398][T24031] device sit0 entered promiscuous mode [ 1447.746661][T24047] netlink: 'syz.0.5892': attribute type 39 has an invalid length. [ 1449.628484][T24089] netlink: 'syz.4.5900': attribute type 39 has an invalid length. [ 1450.506581][T24096] netlink: 'syz.1.5902': attribute type 2 has an invalid length. [ 1452.612854][T24133] netlink: 'syz.0.5915': attribute type 27 has an invalid length. [ 1453.170369][T24133] bond0: (slave bond_slave_0): Releasing backup interface [ 1453.539022][T24140] netlink: 'syz.2.5916': attribute type 39 has an invalid length. [ 1453.613898][T24147] netlink: 'syz.3.5917': attribute type 39 has an invalid length. [ 1456.884966][T24164] netlink: 'syz.0.5922': attribute type 2 has an invalid length. [ 1457.275897][T24187] netlink: 'syz.1.5928': attribute type 39 has an invalid length. [ 1457.935329][T24213] netlink: 'syz.1.5934': attribute type 27 has an invalid length. [ 1458.298960][T24220] netlink: 'syz.0.5936': attribute type 27 has an invalid length. [ 1458.599988][T24225] netlink: 'syz.1.5938': attribute type 39 has an invalid length. [ 1458.851962][T24229] netlink: 212908 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1458.895043][T24229] netlink: zone id is out of range [ 1459.825571][T24243] netlink: 'syz.2.5943': attribute type 39 has an invalid length. [ 1460.278948][T24257] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5951'. [ 1460.437681][T24265] netlink: 'syz.2.5950': attribute type 27 has an invalid length. [ 1460.737026][T24273] netlink: 'syz.4.5953': attribute type 39 has an invalid length. [ 1460.945241][T24275] netlink: 'syz.3.5952': attribute type 27 has an invalid length. [ 1461.134381][T24275] bond0: (slave bond_slave_0): Releasing backup interface [ 1462.027348][T24294] netlink: 'syz.3.5960': attribute type 39 has an invalid length. [ 1462.075985][T24296] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5962'. [ 1462.645731][T24306] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5965'. [ 1462.745132][T24303] netlink: 'syz.3.5964': attribute type 27 has an invalid length. [ 1463.042410][T24317] netlink: 'syz.2.5968': attribute type 39 has an invalid length. [ 1463.698007][T24329] netlink: 'syz.0.5981': attribute type 27 has an invalid length. [ 1463.887155][T24331] netlink: 'syz.4.5971': attribute type 27 has an invalid length. [ 1464.083645][T24333] netlink: 'syz.2.5974': attribute type 39 has an invalid length. [ 1464.577352][T13963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1464.586801][T13963] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1464.603996][T13963] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1464.611789][T13963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1464.619717][T13963] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1464.627506][T13963] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1465.601720][T24359] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.5982'. [ 1465.845141][T24346] chnl_net:caif_netlink_parms(): no params data found [ 1466.002825][T24370] netlink: 'syz.2.5985': attribute type 39 has an invalid length. [ 1466.267687][T24346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.283748][T24346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.301013][T24346] device bridge_slave_0 entered promiscuous mode [ 1466.342578][T24346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.356416][T24346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.373747][T24346] device bridge_slave_1 entered promiscuous mode [ 1466.453287][T24346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.466388][T24380] netlink: 'syz.4.5986': attribute type 27 has an invalid length. [ 1466.483475][T24346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.607808][T24346] team0: Port device team_slave_0 added [ 1466.686431][T13963] Bluetooth: hci5: command 0x0409 tx timeout [ 1466.707799][T24346] team0: Port device team_slave_1 added [ 1466.826287][T24387] netlink: 'syz.3.5991': attribute type 39 has an invalid length. [ 1466.843377][T24385] netlink: 'syz.2.5989': attribute type 27 has an invalid length. [ 1466.944398][T24346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.954531][T24346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.994750][T24346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1467.041847][T24346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.056024][T24346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.100947][T24346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.259085][T24346] device hsr_slave_0 entered promiscuous mode [ 1467.268335][T24346] device hsr_slave_1 entered promiscuous mode [ 1467.377628][T15069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.752904][T15069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.888170][T24400] netlink: 'syz.2.5993': attribute type 39 has an invalid length. [ 1468.249107][T15069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.480137][T15069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.751021][T24410] device syzkaller0 entered promiscuous mode [ 1468.772319][T13963] Bluetooth: hci5: command 0x041b tx timeout [ 1470.847879][T13963] Bluetooth: hci5: command 0x040f tx timeout [ 1472.655493][T24440] netlink: 'syz.0.6010': attribute type 39 has an invalid length. [ 1472.704281][T24449] netlink: 'syz.3.6002': attribute type 27 has an invalid length. [ 1472.932385][T13963] Bluetooth: hci5: command 0x0419 tx timeout [ 1473.452783][T24346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1473.474089][T24346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1473.564728][T24346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1473.587023][T24346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1473.739549][T24479] netlink: 'syz.3.6005': attribute type 39 has an invalid length. [ 1473.997725][T24346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1474.555121][T24487] netlink: 'syz.0.6008': attribute type 27 has an invalid length. [ 1475.183740][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1475.216235][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1475.276690][T24346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.753436][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1475.770694][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1475.799855][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.807416][ T7717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.842805][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1475.887325][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1475.948149][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.955313][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.082396][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1476.120379][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1476.136945][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1476.191640][T24507] netlink: 'syz.0.6013': attribute type 27 has an invalid length. [ 1476.382772][T15069] device veth0_to_team left promiscuous mode [ 1476.389126][T15069] Ÿë: port 1(veth0_to_team) entered disabled state [ 1476.477941][T15069] device hsr_slave_0 left promiscuous mode [ 1476.562661][T15069] device bridge_slave_1 left promiscuous mode [ 1476.570197][T15069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.641319][T15069] device bridge_slave_0 left promiscuous mode [ 1476.685720][T15069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.072469][T15069] device veth1_macvtap left promiscuous mode [ 1477.078811][T15069] device veth1_vlan left promiscuous mode [ 1477.129123][T15069] device veth0_vlan left promiscuous mode [ 1481.895512][T15069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.346669][T15069] bond0 (unregistering): Released all slaves [ 1482.501825][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1482.514157][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1482.534259][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1482.546909][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1482.561590][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1482.636767][T24527] netlink: 'syz.3.6016': attribute type 39 has an invalid length. [ 1482.662785][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1482.681103][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1482.691735][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1482.710122][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1482.723312][T24346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1483.204601][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1483.213802][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1483.225933][T24346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1483.249159][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1483.259419][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1483.296265][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1483.306789][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1483.319450][T24346] device veth0_vlan entered promiscuous mode [ 1483.333633][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1483.382289][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1483.456551][T24346] device veth1_vlan entered promiscuous mode [ 1483.479755][T24346] device veth0_macvtap entered promiscuous mode [ 1483.508265][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1483.516399][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1483.526508][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1483.535741][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1483.545776][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1483.604174][T24346] device veth1_macvtap entered promiscuous mode [ 1483.648794][T24346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1483.661497][T24346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1483.689193][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1483.704533][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1483.754280][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1483.789627][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1483.842754][T24346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.860077][T24346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.887644][T24346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.924756][T24346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.291912][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.298415][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.577767][ T7717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.588997][ T7717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.614177][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1484.688649][T15058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.697431][T15058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.707721][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1485.316402][T24572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.330017][T24572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.340345][T24572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.372179][T24572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.753164][T24577] netlink: 'syz.3.6025': attribute type 39 has an invalid length. [ 1485.887941][T24579] netlink: 'syz.0.6027': attribute type 39 has an invalid length. [ 1485.906310][T21960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1485.919129][T21960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1485.927507][T21960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1485.936641][T21960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1485.949562][T21960] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1485.961615][T21960] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1486.271089][T24592] netlink: 'syz.4.6031': attribute type 27 has an invalid length. [ 1486.856291][T15069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.906310][T24580] chnl_net:caif_netlink_parms(): no params data found [ 1486.976034][T15069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.145698][T15069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.299510][T15069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.357652][T24580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.365082][T24580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.373477][T24580] device bridge_slave_0 entered promiscuous mode [ 1487.407859][T24580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.415214][T24580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.433074][T24580] device bridge_slave_1 entered promiscuous mode [ 1487.530748][T24580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.552767][T24580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.684048][T24580] team0: Port device team_slave_0 added [ 1487.715680][T24580] team0: Port device team_slave_1 added [ 1487.901214][T24580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1487.929931][T24580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1487.989292][T24580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.013837][T24580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.026542][T24580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1488.042319][T13963] Bluetooth: hci2: command 0x0409 tx timeout [ 1488.080019][T24580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.271766][T24580] device hsr_slave_0 entered promiscuous mode [ 1488.313912][T24580] device hsr_slave_1 entered promiscuous mode [ 1488.344066][T24580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1488.351652][T24580] Cannot create hsr debugfs directory [ 1488.997609][T24654] netlink: 'syz.3.6039': attribute type 39 has an invalid length. [ 1489.772054][T24664] netlink: 'syz.3.6042': attribute type 39 has an invalid length. [ 1490.122122][T13963] Bluetooth: hci2: command 0x041b tx timeout [ 1490.848957][T24580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1490.872808][T24580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1490.891084][T15069] device veth0_to_team left promiscuous mode [ 1490.903085][T15069] Ÿë: port 1(veth0_to_team) entered disabled state [ 1490.953501][T15069] device hsr_slave_0 left promiscuous mode [ 1490.968979][T15069] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.987901][T15069] device bridge_slave_0 left promiscuous mode [ 1490.996745][T15069] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.039258][T15069] device veth1_macvtap left promiscuous mode [ 1491.045907][T15069] device veth1_vlan left promiscuous mode [ 1491.051820][T15069] device veth0_vlan left promiscuous mode [ 1491.944592][T15069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1492.142337][T15069] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1492.165831][T15069] bond0 (unregistering): Released all slaves [ 1492.202087][T13963] Bluetooth: hci2: command 0x040f tx timeout [ 1492.273046][T24580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1492.281596][T24580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1492.419713][T24580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.461575][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1492.470472][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1492.482757][T24580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.503479][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1492.523949][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1492.533708][T15067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.540799][T15067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.549972][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1492.576674][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1492.605796][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1492.616176][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.623316][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.638983][T24687] netlink: 'syz.4.6044': attribute type 39 has an invalid length. [ 1492.661779][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1492.756580][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1492.776837][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1492.785651][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1492.794067][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1492.803820][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1492.812524][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1492.820872][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1492.829974][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1492.838690][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1492.856828][T24692] netlink: 'syz.1.6045': attribute type 39 has an invalid length. [ 1492.875847][T24692] device veth0_macvtap left promiscuous mode [ 1492.906132][T24580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1492.933865][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1494.284034][T13963] Bluetooth: hci2: command 0x0419 tx timeout [ 1494.756720][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1494.774662][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1494.827805][T24580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.908012][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1494.923995][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1494.964908][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1494.974333][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1494.988616][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1494.996727][T15065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1495.008500][T24580] device veth0_vlan entered promiscuous mode [ 1495.027247][T24580] device veth1_vlan entered promiscuous mode [ 1495.051621][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1495.059779][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1495.068948][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1495.078353][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1495.096924][T24580] device veth0_macvtap entered promiscuous mode [ 1495.105548][T24580] device veth1_macvtap entered promiscuous mode [ 1495.127869][T24580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.136186][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1495.144240][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1495.152114][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1495.160567][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1495.171859][T24580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.192403][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1495.201033][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1495.218874][T24580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.227670][T24580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.237427][T24580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.247564][T24580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.311757][T15065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.328409][T15065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.343646][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1495.376979][T15058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.389453][T15058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.399520][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1496.111309][T24732] netlink: 'syz.0.6052': attribute type 39 has an invalid length. [ 1496.215855][T24728] netlink: 'syz.1.6051': attribute type 39 has an invalid length. [ 1496.678231][T24728] device hsr_slave_1 left promiscuous mode [ 1497.290985][T24744] netlink: 'syz.2.6056': attribute type 39 has an invalid length. [ 1497.349010][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1497.361605][T21960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1497.371050][T21960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1497.385644][T21960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1497.396893][T21960] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1497.410284][T21960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1497.479765][T24744] device veth0_macvtap left promiscuous mode [ 1498.583094][T15065] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.942803][T15065] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.030636][T15065] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.226167][T15065] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.349075][T24759] netlink: 'syz.2.6059': attribute type 27 has an invalid length. [ 1499.482174][T13963] Bluetooth: hci1: command 0x0409 tx timeout [ 1499.549283][T24759] bond0: (slave bond_slave_0): Releasing backup interface [ 1499.773367][T24743] chnl_net:caif_netlink_parms(): no params data found [ 1500.290525][T24743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.332113][T24743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.353586][T24743] device bridge_slave_0 entered promiscuous mode [ 1500.410731][T24773] netlink: 'syz.2.6060': attribute type 27 has an invalid length. [ 1500.588190][T24743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.606169][T24743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.625613][T24743] device bridge_slave_1 entered promiscuous mode [ 1501.146167][T24780] netlink: 'syz.1.6061': attribute type 39 has an invalid length. [ 1501.299575][T24743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.356486][T24743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.469460][T24743] team0: Port device team_slave_0 added [ 1501.477844][T24743] team0: Port device team_slave_1 added [ 1501.562589][T13963] Bluetooth: hci1: command 0x041b tx timeout [ 1501.666515][T24743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.716084][T24743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1501.884561][T24743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1502.104552][T24743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1502.111722][T24743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.308733][T24743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.596115][T24797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1502.637431][T24797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.788092][T24797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1502.854073][T24797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.410969][T24743] device hsr_slave_0 entered promiscuous mode [ 1503.429068][T24743] device hsr_slave_1 entered promiscuous mode [ 1503.470576][T24743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1503.517049][T24743] Cannot create hsr debugfs directory [ 1503.645154][T13963] Bluetooth: hci1: command 0x040f tx timeout [ 1504.094033][T24815] netlink: 'syz.3.6068': attribute type 39 has an invalid length. [ 1504.275550][T24824] netlink: 'syz.1.6070': attribute type 27 has an invalid length. [ 1504.435234][T24824] bond0: (slave bond_slave_0): Releasing backup interface [ 1504.626573][T24828] netlink: 'syz.3.6071': attribute type 39 has an invalid length. [ 1504.714402][T15065] device veth0_to_team left promiscuous mode [ 1504.727008][T15065] Ÿë: port 1(veth0_to_team) entered disabled state [ 1504.753304][T15065] device hsr_slave_0 left promiscuous mode [ 1504.766760][T15065] device bridge_slave_1 left promiscuous mode [ 1504.787079][T15065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.809851][T15065] device bridge_slave_0 left promiscuous mode [ 1504.836304][T15065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.884044][T15065] device veth1_macvtap left promiscuous mode [ 1505.314850][T15065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1505.531135][T15065] bond0 (unregistering): Released all slaves [ 1505.722235][T13963] Bluetooth: hci1: command 0x0419 tx timeout [ 1506.374692][T24852] netlink: 'syz.3.6074': attribute type 39 has an invalid length. [ 1506.395110][T24743] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1506.435633][T24743] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1506.484947][T24743] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1506.537510][T24743] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1506.963646][T24743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.049146][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1507.073943][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1507.126111][T24743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.155522][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1507.166031][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1507.213893][T15067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.220998][T15067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.314682][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1507.328508][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1507.376928][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1507.404269][T15067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.411383][T15067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1507.443625][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1507.463471][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1507.529634][T24882] netlink: 'syz.1.6079': attribute type 39 has an invalid length. [ 1507.603307][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1507.639995][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1507.700664][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1507.762818][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1507.823064][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1507.846090][T24881] netlink: 'syz.3.6080': attribute type 39 has an invalid length. [ 1507.889660][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1507.912650][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1507.937548][T24743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1507.964959][T24743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1508.012620][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1508.032286][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1508.272253][T24901] netlink: 'syz.3.6083': attribute type 27 has an invalid length. [ 1508.486973][T24909] netlink: 'syz.2.6084': attribute type 39 has an invalid length. [ 1508.994050][T24927] netlink: 'syz.1.6086': attribute type 27 has an invalid length. [ 1509.107907][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1509.132790][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1509.178970][T24743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.056295][T24956] netlink: 'syz.3.6092': attribute type 39 has an invalid length. [ 1510.255593][T24958] netlink: 'syz.1.6091': attribute type 39 has an invalid length. [ 1510.654605][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1510.677263][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1510.909698][T24972] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6094'. [ 1510.971509][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1510.995128][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1511.121700][T24976] netlink: 'syz.3.6095': attribute type 39 has an invalid length. [ 1511.205966][T24743] device veth0_vlan entered promiscuous mode [ 1511.236053][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1511.247743][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1511.307551][T24743] device veth1_vlan entered promiscuous mode [ 1511.436490][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1511.455779][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1511.593839][T24743] device veth0_macvtap entered promiscuous mode [ 1511.697018][T24743] device veth1_macvtap entered promiscuous mode [ 1511.754092][T24743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.761395][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1511.813961][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1511.834991][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1511.869042][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1511.910154][T24743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.184967][T25001] netlink: 'syz.2.6100': attribute type 3 has an invalid length. [ 1512.244650][T25001] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6100'. [ 1514.941144][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1514.953298][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1514.976305][T24743] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.996102][T24743] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.017533][T24743] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.049079][T24743] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.079380][T25010] netlink: 'syz.0.6102': attribute type 39 has an invalid length. [ 1515.152640][T25016] netlink: 'syz.3.6103': attribute type 27 has an invalid length. [ 1515.268861][T15058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.308860][T15058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.348155][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1515.448217][T15058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.462059][T15058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.490018][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1516.279848][T25037] netlink: 'syz.1.6106': attribute type 27 has an invalid length. [ 1517.313425][T25061] netlink: 'syz.1.6112': attribute type 27 has an invalid length. [ 1517.555766][T13963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1517.567826][T13963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1517.575726][T13963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1517.587435][T13963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1517.595440][T13963] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1517.603533][T13963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1518.417438][T15065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.475893][T25093] netlink: 'syz.3.6115': attribute type 39 has an invalid length. [ 1518.548734][T15065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1518.610050][T25066] chnl_net:caif_netlink_parms(): no params data found [ 1518.667730][T25095] Ÿë: port 1(veth0_to_team) entered blocking state [ 1518.683329][T25095] Ÿë: port 1(veth0_to_team) entered disabled state [ 1518.701208][T25095] device veth0_to_team entered promiscuous mode [ 1518.731906][T25097] netlink: 'syz.4.6116': attribute type 39 has an invalid length. [ 1518.759244][T25097] device veth0_macvtap left promiscuous mode [ 1519.037871][T15065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.332322][T25101] netlink: 'syz.1.6117': attribute type 39 has an invalid length. [ 1519.495502][T15065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.642509][T21960] Bluetooth: hci3: command 0x0409 tx timeout [ 1519.901066][T25109] netlink: 'syz.4.6118': attribute type 39 has an invalid length. [ 1520.011397][T25109] device hsr_slave_1 left promiscuous mode [ 1520.138190][T25066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.153151][T25066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.168148][T25066] device bridge_slave_0 entered promiscuous mode [ 1520.199598][T25066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.209285][T25066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.217558][T25066] device bridge_slave_1 entered promiscuous mode [ 1520.278125][T25112] netlink: 'syz.2.6119': attribute type 27 has an invalid length. [ 1520.358934][T25066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.403800][T25066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1520.476891][T25066] team0: Port device team_slave_0 added [ 1520.605885][T25066] team0: Port device team_slave_1 added [ 1520.728473][T25123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1520.739854][T25123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.759597][T25123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1520.774057][T25123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1521.062111][T25066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.078057][T25066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.126161][T25066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.227193][T25066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.238260][T25066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1521.345703][T25066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.545373][T25134] netlink: 'syz.4.6123': attribute type 27 has an invalid length. [ 1521.706336][T25134] bond0: (slave bond_slave_0): Releasing backup interface [ 1521.732163][T13963] Bluetooth: hci3: command 0x041b tx timeout [ 1521.960336][T25066] device hsr_slave_0 entered promiscuous mode [ 1521.976072][T25066] device hsr_slave_1 entered promiscuous mode [ 1521.989359][T25066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1521.998211][T25066] Cannot create hsr debugfs directory [ 1523.103076][T25174] netlink: 'syz.3.6132': attribute type 27 has an invalid length. [ 1523.223939][T25173] netlink: 'syz.1.6131': attribute type 39 has an invalid length. [ 1523.300155][T15065] device veth0_to_team left promiscuous mode [ 1523.338957][T15065] Ÿë: port 1(veth0_to_team) entered disabled state [ 1523.397107][T15065] device hsr_slave_0 left promiscuous mode [ 1523.465914][T15065] device bridge_slave_1 left promiscuous mode [ 1523.485380][T15065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.524208][T15065] device bridge_slave_0 left promiscuous mode [ 1523.533196][T15065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.615362][T15065] device veth1_macvtap left promiscuous mode [ 1523.802105][T13963] Bluetooth: hci3: command 0x040f tx timeout [ 1524.182211][T15065] team0 (unregistering): Port device geneve1 removed [ 1524.736508][T15065] team0 (unregistering): Port device team_slave_1 removed [ 1524.786935][T15065] team0 (unregistering): Port device team_slave_0 removed [ 1524.837374][T15065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.186699][T15065] bond0 (unregistering): Released all slaves [ 1525.600418][T25066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1525.630325][T25200] netlink: 'syz.3.6136': attribute type 27 has an invalid length. [ 1525.674120][T25066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1525.715173][T25066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1525.781540][T25066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1525.883232][T13963] Bluetooth: hci3: command 0x0419 tx timeout [ 1526.185595][T25210] netlink: 'syz.3.6137': attribute type 39 has an invalid length. [ 1526.339771][T25066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.366619][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1526.431429][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1526.460825][T25066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.500032][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1526.559459][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1526.683208][T15071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.690314][T15071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.003488][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1527.014308][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1527.073203][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1527.126220][T15071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.133375][T15071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.196992][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1527.246257][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1527.297182][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1527.353517][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1527.386190][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1527.530425][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1527.556654][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1527.684760][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1527.703718][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1527.733742][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1527.790654][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1527.828511][T25066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1528.681447][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1528.697359][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1528.840652][T25066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.853533][T25249] Ÿë: port 1(veth0_to_team) entered blocking state [ 1528.862864][T25249] Ÿë: port 1(veth0_to_team) entered disabled state [ 1528.881844][T25249] device veth0_to_team entered promiscuous mode [ 1528.967709][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1528.983200][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1529.045515][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1529.060647][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1529.080879][T25066] device veth0_vlan entered promiscuous mode [ 1529.179654][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1529.199390][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1529.237135][T25066] device veth1_vlan entered promiscuous mode [ 1529.397313][T25261] netlink: 'syz.1.6144': attribute type 39 has an invalid length. [ 1529.453688][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1529.472446][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1529.502484][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1529.543973][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1529.624660][T25066] device veth0_macvtap entered promiscuous mode [ 1529.682209][T25066] device veth1_macvtap entered promiscuous mode [ 1529.791742][T25066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.820955][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1529.830581][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1529.914434][T25066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.939734][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1529.972553][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1530.053250][T25066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.073618][T25066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.104469][T25066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.127503][T25066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.522649][T15071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.530517][T15071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.599078][ T7719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1530.715195][ T7719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.727668][ T7719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.746768][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1531.098515][T25297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1531.112498][T25297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.166934][T25297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.184147][T25297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1532.267954][T25317] Ÿë: port 1(veth0_to_team) entered blocking state [ 1532.296572][T25317] Ÿë: port 1(veth0_to_team) entered disabled state [ 1532.323658][T25317] device veth0_to_team entered promiscuous mode [ 1532.364332][T25320] netlink: 'syz.0.6158': attribute type 39 has an invalid length. [ 1532.436488][T25320] device veth0_macvtap left promiscuous mode [ 1532.964317][T25328] netlink: 'syz.2.6159': attribute type 39 has an invalid length. [ 1533.693810][T25339] netlink: 'syz.0.6162': attribute type 39 has an invalid length. [ 1534.433579][T25346] netlink: 'syz.3.6163': attribute type 39 has an invalid length. [ 1538.209378][T25380] device veth1_macvtap left promiscuous mode [ 1538.274933][T25382] device veth1_macvtap entered promiscuous mode [ 1538.326093][T25382] device macsec0 entered promiscuous mode [ 1538.499486][T25387] netlink: 'syz.4.6172': attribute type 10 has an invalid length. [ 1538.514693][T25387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6172'. [ 1538.573585][T25387] device ipvlan1 entered promiscuous mode [ 1538.607195][T25387] bridge0: port 3(ipvlan1) entered blocking state [ 1538.642103][T25387] bridge0: port 3(ipvlan1) entered disabled state [ 1538.673280][T25387] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1538.801252][T25390] netlink: 'syz.2.6175': attribute type 27 has an invalid length. [ 1542.467714][T25408] netlink: 'syz.4.6180': attribute type 39 has an invalid length. [ 1542.961123][T25417] netlink: 'syz.3.6184': attribute type 39 has an invalid length. [ 1543.503136][T25428] netlink: 'syz.4.6187': attribute type 27 has an invalid length. [ 1544.316149][T25445] Ÿë: port 1(veth0_to_team) entered blocking state [ 1544.350863][T25445] Ÿë: port 1(veth0_to_team) entered disabled state [ 1544.456928][T25445] device veth0_to_team entered promiscuous mode [ 1544.539132][T25453] netlink: 'syz.4.6196': attribute type 39 has an invalid length. [ 1544.940195][T25461] netlink: 'syz.2.6198': attribute type 39 has an invalid length. [ 1545.400436][T25474] netlink: 'syz.1.6202': attribute type 27 has an invalid length. [ 1545.731633][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.738120][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.966383][T21960] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1545.981514][T21960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1545.993519][T21960] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1546.001634][T21960] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1546.012583][T21960] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1546.020424][T21960] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1546.737732][T15065] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.829146][T25485] chnl_net:caif_netlink_parms(): no params data found [ 1546.879815][T25508] netlink: 'syz.0.6213': attribute type 27 has an invalid length. [ 1547.003754][T25508] bond0: (slave bond_slave_0): Releasing backup interface [ 1547.164033][T15065] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.259818][T15065] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.377947][T15065] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.528586][T25485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.538656][T25485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.547469][T25485] device bridge_slave_0 entered promiscuous mode [ 1547.609092][T25485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.622370][T25485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.630439][T25485] device bridge_slave_1 entered promiscuous mode [ 1547.701629][T25485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.719106][T25485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.866147][T25485] team0: Port device team_slave_0 added [ 1547.893678][T25485] team0: Port device team_slave_1 added [ 1547.960343][T25485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.982189][T25485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.028746][T25485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.041754][T25524] netlink: 'syz.0.6223': attribute type 2 has an invalid length. [ 1548.056922][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6223'. [ 1548.132258][T21960] Bluetooth: hci4: command 0x0409 tx timeout [ 1548.235037][T25485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.252126][T25485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.286695][T25485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.357768][T25528] netlink: 'syz.2.6215': attribute type 39 has an invalid length. [ 1548.525742][T25485] device hsr_slave_0 entered promiscuous mode [ 1548.545275][T25485] device hsr_slave_1 entered promiscuous mode [ 1548.553551][T25485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1548.561130][T25485] Cannot create hsr debugfs directory [ 1548.577255][T25534] netlink: 'syz.0.6216': attribute type 27 has an invalid length. [ 1549.101576][T25548] netlink: 'syz.0.6219': attribute type 27 has an invalid length. [ 1549.834568][T25574] device wlan1 entered promiscuous mode [ 1550.195380][T25586] netlink: 'syz.1.6227': attribute type 27 has an invalid length. [ 1550.204847][T21960] Bluetooth: hci4: command 0x041b tx timeout [ 1550.448936][T15065] device veth0_to_team left promiscuous mode [ 1550.479093][T15065] Ÿë: port 1(veth0_to_team) entered disabled state [ 1550.500958][T15065] device hsr_slave_0 left promiscuous mode [ 1550.576161][T15065] device bridge_slave_1 left promiscuous mode [ 1550.593693][T15065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.623645][T15065] device bridge_slave_0 left promiscuous mode [ 1550.629845][T15065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.761645][T15065] device veth1_macvtap left promiscuous mode [ 1552.283969][T21960] Bluetooth: hci4: command 0x040f tx timeout [ 1553.547830][T15065] team0 (unregistering): Port device geneve1 removed [ 1553.761262][T15065] team0 (unregistering): Port device team_slave_1 removed [ 1553.801385][T15065] team0 (unregistering): Port device team_slave_0 removed [ 1553.835979][T15065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1554.028239][T15065] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1554.053860][T15065] team0 (unregistering): Port device bond0 removed [ 1554.079972][T15065] bond0 (unregistering): Released all slaves [ 1554.185747][T25602] netlink: 'syz.4.6231': attribute type 39 has an invalid length. [ 1554.198428][T25485] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1554.251874][T25485] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1554.296168][T25485] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1554.354133][T25485] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1554.362299][T21960] Bluetooth: hci4: command 0x0419 tx timeout [ 1554.556740][T25616] netlink: 'syz.4.6234': attribute type 27 has an invalid length. [ 1554.567556][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1554.597419][T25615] netlink: 'syz.2.6236': attribute type 2 has an invalid length. [ 1554.678778][T25485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1554.745108][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1554.776534][T15058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1554.800715][T25485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.853124][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1554.867888][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1554.920482][T15069] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.927659][T15069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.967085][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1555.014786][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1555.056654][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1555.165022][T15069] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.172246][T15069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.320492][T25644] netlink: 'syz.4.6243': attribute type 39 has an invalid length. [ 1555.404894][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1555.438698][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1555.523549][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1555.556354][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1555.601546][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1555.632343][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1555.730902][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1555.747285][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1555.767012][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1555.777875][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1555.793301][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1555.812985][T25485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1555.826745][T25632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6241'. [ 1557.112431][T25669] netlink: 'syz.0.6246': attribute type 39 has an invalid length. [ 1557.153505][T25672] device veth1_macvtap left promiscuous mode [ 1557.166014][T25672] device macsec0 left promiscuous mode [ 1557.273078][T25485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1557.307233][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1557.373383][T15071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1557.516790][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1557.544364][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1557.669155][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1557.687316][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1557.723946][T25485] device veth0_vlan entered promiscuous mode [ 1557.838583][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1557.852603][T24883] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1557.936898][T25485] device veth1_vlan entered promiscuous mode [ 1558.035589][T25692] netlink: 'syz.4.6252': attribute type 27 has an invalid length. [ 1558.361097][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1558.417204][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1558.536960][T25485] device veth0_macvtap entered promiscuous mode [ 1558.571085][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1558.592823][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1558.628864][T15069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1558.965348][T25485] device veth1_macvtap entered promiscuous mode [ 1559.125981][T25485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1559.233574][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1559.244377][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1559.265169][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1559.309036][T25707] netlink: 'syz.4.6253': attribute type 39 has an invalid length. [ 1559.321241][T25708] netlink: 'syz.1.6254': attribute type 5 has an invalid length. [ 1559.361773][T25485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.386894][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1559.404399][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1559.439912][T25485] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.449216][T25485] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.458435][T25485] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.477429][T25485] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.626198][T15071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.673398][T15071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.732499][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1559.765304][T15067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.805108][T15067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.836234][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1563.513347][T25747] netlink: 'syz.1.6264': attribute type 27 has an invalid length. [ 1563.537595][T25759] netlink: 'syz.0.6266': attribute type 39 has an invalid length. [ 1563.636155][T25759] device hsr_slave_1 left promiscuous mode [ 1563.776655][T25767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6271'. [ 1563.842394][T25768] Ÿë: port 1(veth0_to_team) entered blocking state [ 1563.849252][T25768] Ÿë: port 1(veth0_to_team) entered disabled state [ 1563.858441][T25768] device veth0_to_team entered promiscuous mode [ 1566.681630][T25779] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6276'. [ 1566.988178][T25800] netlink: 'syz.3.6282': attribute type 39 has an invalid length. [ 1567.262717][T25800] device hsr_slave_1 left promiscuous mode [ 1567.469512][T25810] netlink: 'syz.2.6284': attribute type 11 has an invalid length. [ 1567.540516][T25801] netlink: 'syz.0.6280': attribute type 27 has an invalid length. [ 1567.568296][T25810] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6284'. [ 1567.581258][T25811] FAULT_INJECTION: forcing a failure. [ 1567.581258][T25811] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.706048][T25811] CPU: 0 PID: 25811 Comm: syz.2.6284 Not tainted syzkaller #0 [ 1567.713542][T25811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1567.723609][T25811] Call Trace: [ 1567.726898][T25811] [ 1567.729834][T25811] dump_stack_lvl+0x188/0x24e [ 1567.734534][T25811] ? show_regs_print_info+0x12/0x12 [ 1567.739748][T25811] ? load_image+0x400/0x400 [ 1567.744265][T25811] ? __might_sleep+0xd0/0xd0 [ 1567.748869][T25811] ? __lock_acquire+0x7d10/0x7d10 [ 1567.753914][T25811] ? trace_event_raw_event_lock+0x250/0x250 [ 1567.759830][T25811] should_fail_ex+0x399/0x4d0 [ 1567.764524][T25811] should_failslab+0x5/0x20 [ 1567.769038][T25811] slab_pre_alloc_hook+0x59/0x310 [ 1567.774078][T25811] ? sk_prot_alloc+0xe7/0x210 [ 1567.778772][T25811] __kmem_cache_alloc_node+0x4f/0x260 [ 1567.784161][T25811] ? sk_prot_alloc+0xe7/0x210 [ 1567.788849][T25811] __kmalloc+0xa0/0x240 [ 1567.793025][T25811] sk_prot_alloc+0xe7/0x210 [ 1567.797538][T25811] ? sk_alloc+0x20/0x340 [ 1567.801796][T25811] sk_alloc+0x36/0x340 [ 1567.805876][T25811] ? bpf_ctx_init+0x163/0x1a0 [ 1567.810564][T25811] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1567.816119][T25811] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1567.821500][T25811] ? __fget_files+0x28/0x4b0 [ 1567.826104][T25811] ? __fget_files+0x43d/0x4b0 [ 1567.830800][T25811] ? cpu_online+0xa0/0xa0 [ 1567.835140][T25811] bpf_prog_test_run+0x31e/0x390 [ 1567.840102][T25811] __sys_bpf+0x62b/0x780 [ 1567.844360][T25811] ? bpf_link_show_fdinfo+0x380/0x380 [ 1567.849760][T25811] ? lock_chain_count+0x20/0x20 [ 1567.854633][T25811] __x64_sys_bpf+0x78/0x90 [ 1567.859065][T25811] do_syscall_64+0x4c/0xa0 [ 1567.863496][T25811] ? clear_bhb_loop+0x60/0xb0 [ 1567.868189][T25811] ? clear_bhb_loop+0x60/0xb0 [ 1567.872879][T25811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1567.878785][T25811] RIP: 0033:0x7fc354d9ce59 [ 1567.883210][T25811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.902827][T25811] RSP: 002b:00007fc352fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1567.911251][T25811] RAX: ffffffffffffffda RBX: 00007fc355016180 RCX: 00007fc354d9ce59 [ 1567.919220][T25811] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 1567.927188][T25811] RBP: 00007fc352fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1567.935150][T25811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1567.943109][T25811] R13: 00007fc355016218 R14: 00007fc355016180 R15: 00007ffc5c5752c8 [ 1567.951082][T25811] [ 1568.131823][T25806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1568.378012][T25818] netlink: 'syz.4.6287': attribute type 39 has an invalid length. [ 1572.303118][T25861] netlink: 'syz.0.6298': attribute type 27 has an invalid length. [ 1572.456120][T25873] FAULT_INJECTION: forcing a failure. [ 1572.456120][T25873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.535158][T25873] CPU: 1 PID: 25873 Comm: syz.4.6301 Not tainted syzkaller #0 [ 1572.542647][T25873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1572.552711][T25873] Call Trace: [ 1572.555999][T25873] [ 1572.558940][T25873] dump_stack_lvl+0x188/0x24e [ 1572.563642][T25873] ? show_regs_print_info+0x12/0x12 [ 1572.568864][T25873] ? load_image+0x400/0x400 [ 1572.573397][T25873] ? __lock_acquire+0x7d10/0x7d10 [ 1572.578448][T25873] should_fail_ex+0x399/0x4d0 [ 1572.583142][T25873] _copy_from_user+0x2c/0x170 [ 1572.587839][T25873] ____sys_sendmsg+0x30a/0x970 [ 1572.592644][T25873] ? __sys_sendmsg_sock+0x30/0x30 [ 1572.597691][T25873] ? __import_iovec+0x315/0x500 [ 1572.602566][T25873] ? import_iovec+0x6f/0xa0 [ 1572.607088][T25873] ___sys_sendmsg+0x2a2/0x360 [ 1572.611792][T25873] ? __sys_sendmsg+0x290/0x290 [ 1572.616618][T25873] __se_sys_sendmsg+0x1bb/0x2a0 [ 1572.621494][T25873] ? __x64_sys_sendmsg+0x80/0x80 [ 1572.626467][T25873] ? lockdep_hardirqs_on+0x94/0x140 [ 1572.631685][T25873] do_syscall_64+0x4c/0xa0 [ 1572.636121][T25873] ? clear_bhb_loop+0x60/0xb0 [ 1572.640815][T25873] ? clear_bhb_loop+0x60/0xb0 [ 1572.645516][T25873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1572.651433][T25873] RIP: 0033:0x7f4037d9ce59 [ 1572.655867][T25873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.675486][T25873] RSP: 002b:00007f4038bf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1572.683916][T25873] RAX: ffffffffffffffda RBX: 00007f4038015fa0 RCX: 00007f4037d9ce59 [ 1572.691899][T25873] RDX: 0000000000008021 RSI: 00002000000017c0 RDI: 0000000000000006 [ 1572.699887][T25873] RBP: 00007f4038bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.707877][T25873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.715863][T25873] R13: 00007f4038016038 R14: 00007f4038015fa0 R15: 00007ffcd96bdbb8 [ 1572.723862][T25873] [ 1573.056648][T25881] netlink: 'syz.0.6302': attribute type 39 has an invalid length. [ 1573.531345][T25893] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6306'. [ 1573.793701][T25902] netlink: 'syz.4.6310': attribute type 10 has an invalid length. [ 1576.674714][T25902] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1576.705510][T25906] netlink: 'syz.1.6311': attribute type 39 has an invalid length. [ 1577.019348][T25916] netlink: 'syz.4.6313': attribute type 27 has an invalid length. [ 1577.147411][T25915] netlink: 'syz.2.6312': attribute type 39 has an invalid length. [ 1577.943252][T25915] device hsr_slave_1 left promiscuous mode [ 1578.517881][T25925] netlink: 'syz.4.6320': attribute type 39 has an invalid length. [ 1578.913252][T25936] netlink: 'syz.1.6321': attribute type 1 has an invalid length. [ 1579.136983][T25936] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1581.728885][T25954] netlink: 'syz.4.6327': attribute type 39 has an invalid length. [ 1582.086345][T25960] netlink: 'syz.3.6328': attribute type 27 has an invalid length. [ 1584.313235][T25960] bond0: (slave bond_slave_0): Releasing backup interface [ 1584.485083][T25965] FAULT_INJECTION: forcing a failure. [ 1584.485083][T25965] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.506004][T25965] CPU: 0 PID: 25965 Comm: syz.0.6330 Not tainted syzkaller #0 [ 1584.513495][T25965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1584.523561][T25965] Call Trace: [ 1584.526851][T25965] [ 1584.529797][T25965] dump_stack_lvl+0x188/0x24e [ 1584.534494][T25965] ? sctp_sendmsg+0x15b0/0x2940 [ 1584.539365][T25965] ? ___sys_sendmsg+0x2a2/0x360 [ 1584.544239][T25965] ? show_regs_print_info+0x12/0x12 [ 1584.549445][T25965] ? load_image+0x400/0x400 [ 1584.553952][T25965] should_fail_ex+0x399/0x4d0 [ 1584.558621][T25965] should_failslab+0x5/0x20 [ 1584.563113][T25965] slab_pre_alloc_hook+0x59/0x310 [ 1584.568138][T25965] ? sctp_add_bind_addr+0x89/0x350 [ 1584.573246][T25965] __kmem_cache_alloc_node+0x4f/0x260 [ 1584.578612][T25965] ? sctp_add_bind_addr+0x89/0x350 [ 1584.583721][T25965] kmalloc_trace+0x26/0xe0 [ 1584.588141][T25965] sctp_add_bind_addr+0x89/0x350 [ 1584.593074][T25965] sctp_copy_local_addr_list+0x311/0x4e0 [ 1584.598702][T25965] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1584.604416][T25965] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1584.610477][T25965] ? sctp_v4_is_any+0x31/0x50 [ 1584.615145][T25965] ? sctp_copy_one_addr+0x93/0x660 [ 1584.620252][T25965] sctp_bind_addr_copy+0xaf/0x3c0 [ 1584.625270][T25965] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1584.631588][T25965] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1584.636865][T25965] ? __sctp_connect+0xd80/0xd80 [ 1584.641701][T25965] ? __local_bh_enable_ip+0x136/0x1c0 [ 1584.647062][T25965] ? _local_bh_enable+0xa0/0xa0 [ 1584.651898][T25965] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1584.657690][T25965] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1584.663484][T25965] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1584.669024][T25965] ? security_sctp_bind_connect+0x85/0xb0 [ 1584.674736][T25965] sctp_sendmsg+0x15b0/0x2940 [ 1584.679416][T25965] ? aa_sk_perm+0x811/0x950 [ 1584.683914][T25965] ? sctp_getsockopt+0x8a0/0x8a0 [ 1584.688847][T25965] ? __might_fault+0xa6/0x120 [ 1584.693513][T25965] ? aa_af_perm+0x340/0x340 [ 1584.698007][T25965] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1584.704423][T25965] ? inet_sendmsg+0x78/0x2f0 [ 1584.709002][T25965] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1584.714276][T25965] ? security_socket_sendmsg+0x7c/0xa0 [ 1584.719732][T25965] ? inet_send_prepare+0x260/0x260 [ 1584.724829][T25965] ____sys_sendmsg+0x5be/0x970 [ 1584.729593][T25965] ? __sys_sendmsg_sock+0x30/0x30 [ 1584.734612][T25965] ? __import_iovec+0x315/0x500 [ 1584.739458][T25965] ? import_iovec+0x6f/0xa0 [ 1584.743954][T25965] ___sys_sendmsg+0x2a2/0x360 [ 1584.748630][T25965] ? __sys_sendmsg+0x290/0x290 [ 1584.753399][T25965] ? trace_call_bpf+0xbf/0x6b0 [ 1584.758170][T25965] __se_sys_sendmsg+0x1bb/0x2a0 [ 1584.763016][T25965] ? __x64_sys_sendmsg+0x80/0x80 [ 1584.767958][T25965] ? lockdep_hardirqs_on+0x94/0x140 [ 1584.773148][T25965] do_syscall_64+0x4c/0xa0 [ 1584.777554][T25965] ? clear_bhb_loop+0x60/0xb0 [ 1584.782225][T25965] ? clear_bhb_loop+0x60/0xb0 [ 1584.786894][T25965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1584.792779][T25965] RIP: 0033:0x7f96cb19ce59 [ 1584.797184][T25965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.816777][T25965] RSP: 002b:00007f96cc142028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1584.825177][T25965] RAX: ffffffffffffffda RBX: 00007f96cb415fa0 RCX: 00007f96cb19ce59 [ 1584.833137][T25965] RDX: 00000000000480d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1584.841096][T25965] RBP: 00007f96cc142090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.849060][T25965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1584.857017][T25965] R13: 00007f96cb416038 R14: 00007f96cb415fa0 R15: 00007fff6edf1738 [ 1584.864986][T25965] [ 1585.178820][T25968] netlink: 'syz.4.6331': attribute type 21 has an invalid length. [ 1585.193611][T25967] netlink: 'syz.4.6331': attribute type 21 has an invalid length. [ 1585.217112][T25974] netlink: 'syz.1.6332': attribute type 39 has an invalid length. [ 1585.674825][T25990] netlink: 'syz.3.6337': attribute type 39 has an invalid length. [ 1585.706252][T25990] device veth0_macvtap left promiscuous mode [ 1586.337845][T26006] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.6341'. [ 1586.507047][T26011] netlink: 'syz.4.6342': attribute type 39 has an invalid length. [ 1586.844102][T26015] netlink: 'syz.1.6344': attribute type 27 has an invalid length. [ 1587.006050][T26020] netlink: 'syz.0.6346': attribute type 27 has an invalid length. [ 1587.623702][T26034] netlink: 'syz.1.6351': attribute type 39 has an invalid length. [ 1588.626048][T26057] netlink: 'syz.1.6356': attribute type 39 has an invalid length. [ 1588.731443][T26060] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.6357'. [ 1588.762333][T13963] Bluetooth: hci5: command 0x0406 tx timeout [ 1589.358088][T26067] netlink: 'syz.2.6360': attribute type 27 has an invalid length. [ 1591.541006][T26110] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.6374'. [ 1592.350724][T26118] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6376'. [ 1595.428911][T26130] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1595.442143][T26132] validate_nla: 2 callbacks suppressed [ 1595.442159][T26132] netlink: 'syz.2.6379': attribute type 27 has an invalid length. [ 1595.457830][T26130] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1595.470448][T26130] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1595.487546][T26139] netlink: 'syz.1.6382': attribute type 39 has an invalid length. [ 1595.644813][T26145] netlink: 'syz.0.6384': attribute type 3 has an invalid length. [ 1595.944685][T26157] FAULT_INJECTION: forcing a failure. [ 1595.944685][T26157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1595.995637][T26157] CPU: 0 PID: 26157 Comm: syz.3.6387 Not tainted syzkaller #0 [ 1596.003139][T26157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1596.013200][T26157] Call Trace: [ 1596.016488][T26157] [ 1596.019427][T26157] dump_stack_lvl+0x188/0x24e [ 1596.024122][T26157] ? show_regs_print_info+0x12/0x12 [ 1596.029332][T26157] ? load_image+0x400/0x400 [ 1596.033850][T26157] ? __lock_acquire+0x7d10/0x7d10 [ 1596.038894][T26157] should_fail_ex+0x399/0x4d0 [ 1596.043587][T26157] _copy_from_user+0x2c/0x170 [ 1596.048281][T26157] bpf_prog_test_run_skb+0x262/0x12a0 [ 1596.053662][T26157] ? __fget_files+0x28/0x4b0 [ 1596.058265][T26157] ? __fget_files+0x28/0x4b0 [ 1596.062872][T26157] ? __fget_files+0x43d/0x4b0 [ 1596.067575][T26157] ? cpu_online+0xa0/0xa0 [ 1596.071915][T26157] bpf_prog_test_run+0x31e/0x390 [ 1596.076872][T26157] __sys_bpf+0x62b/0x780 [ 1596.081129][T26157] ? bpf_link_show_fdinfo+0x380/0x380 [ 1596.086526][T26157] ? lock_chain_count+0x20/0x20 [ 1596.091399][T26157] __x64_sys_bpf+0x78/0x90 [ 1596.095827][T26157] do_syscall_64+0x4c/0xa0 [ 1596.100262][T26157] ? clear_bhb_loop+0x60/0xb0 [ 1596.104950][T26157] ? clear_bhb_loop+0x60/0xb0 [ 1596.109636][T26157] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1596.115537][T26157] RIP: 0033:0x7f8be539ce59 [ 1596.119963][T26157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1596.139582][T26157] RSP: 002b:00007f8be35b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1596.148005][T26157] RAX: ffffffffffffffda RBX: 00007f8be5616180 RCX: 00007f8be539ce59 [ 1596.155985][T26157] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 1596.163961][T26157] RBP: 00007f8be35b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1596.171945][T26157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.179922][T26157] R13: 00007f8be5616218 R14: 00007f8be5616180 R15: 00007ffc65a55ee8 [ 1596.187914][T26157] [ 1598.649748][T26154] netlink: 'syz.3.6387': attribute type 10 has an invalid length. [ 1598.767075][T26165] FAULT_INJECTION: forcing a failure. [ 1598.767075][T26165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.804670][T26165] CPU: 1 PID: 26165 Comm: syz.0.6389 Not tainted syzkaller #0 [ 1598.812173][T26165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1598.822236][T26165] Call Trace: [ 1598.825524][T26165] [ 1598.828465][T26165] dump_stack_lvl+0x188/0x24e [ 1598.832066][T26154] team0 (unregistering): Port device team_slave_0 removed [ 1598.833156][T26165] ? show_regs_print_info+0x12/0x12 [ 1598.845451][T26165] ? load_image+0x400/0x400 [ 1598.849947][T26165] ? __lock_acquire+0x7d10/0x7d10 [ 1598.854966][T26165] ? __fget_files+0x28/0x4b0 [ 1598.859547][T26165] should_fail_ex+0x399/0x4d0 [ 1598.864223][T26165] _copy_from_user+0x2c/0x170 [ 1598.868902][T26165] generic_map_update_batch+0x4f3/0x810 [ 1598.874440][T26165] ? rcu_read_unlock+0xa0/0xa0 [ 1598.879188][T26165] ? __fdget+0x17c/0x200 [ 1598.883433][T26165] ? rcu_read_unlock+0xa0/0xa0 [ 1598.888210][T26165] bpf_map_do_batch+0x466/0x600 [ 1598.893078][T26165] __sys_bpf+0x6f7/0x780 [ 1598.897340][T26165] ? bpf_link_show_fdinfo+0x380/0x380 [ 1598.902746][T26165] ? lock_chain_count+0x20/0x20 [ 1598.907621][T26165] __x64_sys_bpf+0x78/0x90 [ 1598.912061][T26165] do_syscall_64+0x4c/0xa0 [ 1598.916493][T26165] ? clear_bhb_loop+0x60/0xb0 [ 1598.921180][T26165] ? clear_bhb_loop+0x60/0xb0 [ 1598.925870][T26165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1598.931778][T26165] RIP: 0033:0x7f96cb19ce59 [ 1598.936201][T26165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.955809][T26165] RSP: 002b:00007f96cc142028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1598.964218][T26165] RAX: ffffffffffffffda RBX: 00007f96cb415fa0 RCX: 00007f96cb19ce59 [ 1598.972204][T26165] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1598.980182][T26165] RBP: 00007f96cc142090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.988162][T26165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1598.996143][T26165] R13: 00007f96cb416038 R14: 00007f96cb415fa0 R15: 00007fff6edf1738 [ 1599.004138][T26165] [ 1599.030153][T26154] team0 (unregistering): Port device team_slave_1 removed [ 1599.070307][T26159] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1599.084574][T26160] netlink: 'syz.1.6388': attribute type 27 has an invalid length. [ 1599.137875][T26159] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1599.196419][T26159] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1599.406100][T26174] netlink: 'syz.0.6392': attribute type 39 has an invalid length. [ 1600.106490][T26185] netlink: 'syz.4.6396': attribute type 39 has an invalid length. [ 1602.896133][T26197] netlink: 'syz.0.6398': attribute type 27 has an invalid length. [ 1602.938141][T26197] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1603.724171][T26209] netlink: 'syz.1.6401': attribute type 10 has an invalid length. [ 1604.826390][T26231] netlink: 'syz.4.6407': attribute type 28 has an invalid length. [ 1604.882083][T26231] netlink: 'syz.4.6407': attribute type 4 has an invalid length. [ 1604.906879][T26232] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.6407'. [ 1604.910476][T26209] team0 (unregistering): Port device team_slave_0 removed [ 1604.919157][T26232] netlink: zone id is out of range [ 1604.928767][T26231] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6407'. [ 1604.952196][T26232] netlink: zone id is out of range [ 1604.983569][T26209] team0 (unregistering): Port device team_slave_1 removed [ 1605.002306][T26232] netlink: zone id is out of range [ 1605.007437][T26232] netlink: zone id is out of range [ 1605.122111][T26232] netlink: zone id is out of range [ 1605.137250][T26232] netlink: zone id is out of range [ 1605.198035][T26232] netlink: zone id is out of range [ 1605.222085][T26232] netlink: zone id is out of range [ 1605.227443][T26232] netlink: zone id is out of range [ 1605.240848][T26232] netlink: zone id is out of range [ 1605.268946][T26234] netlink: 'syz.0.6408': attribute type 10 has an invalid length. [ 1605.366827][T26234] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1605.383910][T26236] netlink: 'syz.3.6409': attribute type 39 has an invalid length. [ 1605.626027][T26242] netlink: 'syz.1.6410': attribute type 39 has an invalid length. [ 1607.176223][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.182805][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.543611][T26261] netlink: 'syz.4.6417': attribute type 27 has an invalid length. [ 1609.242169][T13963] Bluetooth: hci2: command 0x0406 tx timeout [ 1610.127351][T26328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.134829][T26328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.371424][T26330] device bridge_slave_1 left promiscuous mode [ 1610.386509][T26330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.428707][T26330] device bridge_slave_0 left promiscuous mode [ 1610.452403][T26330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.794389][T26375] device syzkaller0 entered promiscuous mode [ 1616.211144][T26388] device syzkaller0 entered promiscuous mode [ 1616.219098][T26385] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1616.303552][T26402] device syzkaller0 entered promiscuous mode [ 1619.478054][T26415] device syzkaller0 entered promiscuous mode [ 1624.000663][T26457] device syzkaller0 entered promiscuous mode [ 1624.602247][T13963] Bluetooth: hci1: command 0x0406 tx timeout [ 1628.695288][T26513] device syzkaller0 entered promiscuous mode [ 1635.426727][T26571] device syzkaller0 entered promiscuous mode [ 1635.506987][T26574] device syzkaller0 entered promiscuous mode [ 1639.972534][T13963] Bluetooth: hci3: command 0x0406 tx timeout [ 1644.818961][T26655] device syzkaller0 entered promiscuous mode [ 1644.840959][T26657] device veth0_vlan left promiscuous mode [ 1644.853860][T26657] device veth0_vlan entered promiscuous mode [ 1644.903435][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1644.919077][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1644.960955][T15067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1649.063840][T26705] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 1657.479015][T26832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.486469][T26832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.539308][T26832] device bridge0 entered promiscuous mode [ 1658.631986][T26828] device syzkaller0 entered promiscuous mode [ 1664.043247][T26922] device syzkaller0 entered promiscuous mode [ 1666.663772][T26952] device syzkaller0 entered promiscuous mode [ 1667.144024][T26970] [ 1667.147274][T26970] ============================= [ 1667.152231][T26970] WARNING: suspicious RCU usage [ 1667.157105][T26970] syzkaller #0 Not tainted [ 1667.161523][T26970] ----------------------------- [ 1667.166398][T26970] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1667.174926][T26970] [ 1667.174926][T26970] other info that might help us debug this: [ 1667.174926][T26970] [ 1667.185194][T26970] [ 1667.185194][T26970] rcu_scheduler_active = 2, debug_locks = 1 [ 1667.193303][T26970] 1 lock held by syz.3.6659/26970: [ 1667.198446][T26970] #0: ffffffff8cb2df60 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1667.208700][T26970] [ 1667.208700][T26970] stack backtrace: [ 1667.214622][T26970] CPU: 0 PID: 26970 Comm: syz.3.6659 Not tainted syzkaller #0 [ 1667.222078][T26970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1667.232125][T26970] Call Trace: [ 1667.235394][T26970] [ 1667.238316][T26970] dump_stack_lvl+0x188/0x24e [ 1667.242998][T26970] ? show_regs_print_info+0x12/0x12 [ 1667.248200][T26970] ? load_image+0x400/0x400 [ 1667.252704][T26970] lockdep_rcu_suspicious+0x1dd/0x300 [ 1667.258078][T26970] get_callchain_entry+0x2a5/0x3b0 [ 1667.263190][T26970] get_perf_callchain+0xc4/0x490 [ 1667.268128][T26970] ? put_callchain_entry+0xb0/0xb0 [ 1667.273235][T26970] ? preempt_schedule+0xbc/0xd0 [ 1667.278084][T26970] ? preempt_schedule_common+0xa5/0xd0 [ 1667.283538][T26970] ? verify_lock_unused+0x140/0x140 [ 1667.288734][T26970] ? preempt_schedule+0xbc/0xd0 [ 1667.293586][T26970] __bpf_get_stack+0x2de/0x520 [ 1667.298349][T26970] ? stack_map_get_build_id_offset+0x970/0x970 [ 1667.304497][T26970] ? __cant_sleep+0x220/0x220 [ 1667.309163][T26970] ? bpf_prog_d43750871481577d+0x3d/0x41 [ 1667.314791][T26970] bpf_get_stack_raw_tp+0x189/0x1c0 [ 1667.319995][T26970] bpf_prog_d43750871481577d+0x3d/0x41 [ 1667.325447][T26970] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1667.330815][T26970] bpf_prog_test_run_syscall+0x313/0x4a0 [ 1667.336443][T26970] ? sock_gen_cookie+0x60/0x60 [ 1667.341203][T26970] ? sock_gen_cookie+0x60/0x60 [ 1667.345963][T26970] bpf_prog_test_run+0x31e/0x390 [ 1667.350896][T26970] __sys_bpf+0x62b/0x780 [ 1667.355133][T26970] ? bpf_link_show_fdinfo+0x380/0x380 [ 1667.360501][T26970] ? do_sys_openat2+0xed/0x4b0 [ 1667.365269][T26970] ? lock_chain_count+0x20/0x20 [ 1667.370117][T26970] __x64_sys_bpf+0x78/0x90 [ 1667.374527][T26970] do_syscall_64+0x4c/0xa0 [ 1667.378942][T26970] ? clear_bhb_loop+0x60/0xb0 [ 1667.383613][T26970] ? clear_bhb_loop+0x60/0xb0 [ 1667.388284][T26970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1667.394169][T26970] RIP: 0033:0x7f8be539ce59 [ 1667.398575][T26970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1667.418173][T26970] RSP: 002b:00007f8be35d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1667.426582][T26970] RAX: ffffffffffffffda RBX: 00007f8be5616090 RCX: 00007f8be539ce59 [ 1667.434551][T26970] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1667.442513][T26970] RBP: 00007f8be5432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1667.450473][T26970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1667.458433][T26970] R13: 00007f8be5616128 R14: 00007f8be5616090 R15: 00007ffc65a55ee8 [ 1667.466407][T26970] [ 1668.617842][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.624373][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.682204][T21960] Bluetooth: hci4: command 0x0406 tx timeout