last executing test programs: 2.127175547s ago: executing program 4 (id=7979): bpf$PROG_LOAD(0x5, 0x0, 0x33) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x48, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) 1.981635378s ago: executing program 1 (id=7983): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r0}, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="7a0a00ff00000000711059000000000095000000000000007f16a077fbf3ee3a12f28db930c9cc84695a5a0cebc0357f5e01103c275a863f8fca9495bc501710d03f328c2d3be2dd76b00d6aabc902bb46ca76395ae6160df76bfd5ef987e5aaee78201e61689296bd4b66c972191be79381328622dab27a949f5c0c2bd0fe837a5efe9b4dcc553d6a4a020728ac3c89f270645be300"/162], &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x32, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00082c"], 0xfdef) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000d80)={0x7, &(0x7f0000000040)=[{0x552, 0xf8, 0x6, 0x9}, {0x3, 0xfb, 0x5, 0x6}, {0x3, 0x6, 0xff, 0xa}, {0x2, 0x6, 0x2, 0x8000}, {0x3ff, 0x5, 0x4, 0x7}, {0x512e, 0x4f, 0x7f, 0x9e}, {0x5, 0x4, 0xf6}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00128700631177fbac141416e000030a44079f03fc2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c) 1.946574669s ago: executing program 4 (id=7984): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000004000000000ac1414aa0000883e"], 0xcfa4) 1.76773002s ago: executing program 4 (id=7989): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000740)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41d80ac0010134fa54a0186cee8441e2305e495d04ad68ab8fef69df82de645bef7a447286737a525eef9fc6fbb48b63f60c8c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c34a7af9eab48f2ca2d74d9a4de33", 0x9}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0xfe98}, {&(0x7f0000000200)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f1688dbddef9808d30420b68a63126bb2a8d3a3e652daab214a245380f219f0f3bc65627663df39180451c2bb5b4c713df0a15559536ef7dadbcbe00a51ae7ab853", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000101d9e800000000000000000850000009a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb18000000000000, 0x54a623}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x15}, {}, {0x6, 0x20}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f08a0185f61ee7af57d4f599402470525349b0125b0000a899b65cc9f2c2b2004a64f50d59350c58df750b8552f168c570608f8cccb744f7a0f4ef4dd5a272f4cb7bab1031a74dcb4739403a439558f99809e7a5db9115abfc87e7089dba"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r3, &(0x7f0000000100), 0x0}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair(0x28, 0x5, 0x28, &(0x7f0000001400)) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000070000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000004000000030000001200000001000000", @ANYRES32, @ANYBLOB="63e25fde2bcb7ada80dd61e9a389bacc7f3eff846300000004e6", @ANYRESHEX=r3, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu<=0||!') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000005c0)={0x3, 0x80, 0x6, 0x6, 0x68, 0x3, 0x0, 0x3, 0x30084, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xbd, 0x1, @perf_bp={&(0x7f0000000300), 0x7}, 0x0, 0xc, 0xc00, 0x2, 0x2, 0x80000001, 0x5, 0x0, 0x5, 0x0, 0xff}, r0, 0x100000000e, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x6, 0x4, 0xa, 0xa, 0x0, 0x80000000000009, 0x52080, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={0x0}, 0x108001, 0xffff, 0x7fffffff, 0x5, 0x3, 0x7, 0x9, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xe, r5, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000240), &(0x7f0000000340)=""/86}, 0x20) socketpair(0x26, 0x800, 0x6, &(0x7f0000000b40)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000540)='/') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r5, 0x68, 0x0, 0x8000, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0e0000001020000000000000", @ANYRES32=r5, @ANYBLOB="d42c43ff73367e7dd17e625ef869f59a3cb4ba010a98df3c7dfe5afb1abb7c3c14ce45a33f122d5dee68d82ab9458a4be99ae6bc3f0a03cd9fb6952e2d04e62f3c15d378b8b651c8995b4120039603ea2b07ce9124e240bb23e8559aa170568bb2909f35afd194b3f0c657b2a15bc69f33a1454e1de5c072ef2ecb9983b1c4c21a981f16117a6136b8c351c5e0c5172f99030ed2e4d5c9ca0b2ad1e6b010be4433e208da7eb1e419cf456764e2ccb60d94ce0c6a1b45be6f681ef3", @ANYRES64=r6], 0x20) r7 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x7, 0x4f, 0x5, 0xf7, 0x0, 0xe8f3, 0x10000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000280)}, 0x800, 0x9, 0x129, 0x1, 0x100, 0x2, 0x8, 0x0, 0x107, 0x0, 0x5}, 0xffffffffffffffff, 0x1, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) 1.032842044s ago: executing program 0 (id=8001): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @generic={0x5}, @call, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x4, &(0x7f00000002c0), 0x4) 1.032593544s ago: executing program 2 (id=8002): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff4, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) (async) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) close(r3) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000040)=r7, 0x4) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) socket$kcm(0xa, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) (async) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r9) (async) close(r9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r9, r0, 0x4, r0}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r9, r0, 0x4, r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x3789, 0x0, 0x2, 0x8, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8000}, 0xffffffffffffffff, 0x0, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xf9, 0x4a, &(0x7f0000000040)="3663e44ae83578a3e4d072534b5a14f0f95f0683381a308346588be56530ab80d70628db390b396a6d8fd29bb00c1ab56047c7d102d2da5a4ab16e2c660c12a43e3f016609c3789915969e8afd4ffe538ca26e163ffaeb05a02018147d4cecb9bb0835c5c1c03be276de5af0bddd403f4f9dabd71f0286109958d4051405970cfd95fde582b7b87e6ffb767e5f00c09fdac15eb3974a0de340dae1b9be0473bed8b5b402d73429b7ca85618b261f96089412d860aed262a87818df9826dca4b6c35489e9b0cc9343cae64a639be3e1051f2d233ba2106a346a3bf3e5437ea9b942c9878320955d05eb24f489c3154ccbbbf73bf80abd9787e2", &(0x7f0000000340)=""/74, 0x8001, 0x0, 0x7f, 0xa8, &(0x7f0000000440)="cd36de1e1a184c22004acbc51ef03ffa857736c36683ca1b98048fcd5e7610c6efa8acb10cfeb69aaf24735082367cb0642661d7d788efefbb90fc9614de1e2e7a433c31f01bfc605fbae90459b18dc075dc8ddb3667c954eedce7daed4edf0e57a82014f202f191d1602deff69afd63ab1e5a2fe469c7e7b52493d7ec8620", &(0x7f0000000680)="e8ac8757fd9e6b5587c342d61025c5e7f2caa4acd4f7cd603f857b8758fe80b4e14e23e1a66755b8130c782061eae048993e366c2ede25e03e8897d4e3818f4f07e2979f020f54606a80c9c2bb599b5a82680a2a2e27eca36d7f96585415f28ef95e43b7dfa8809231d2378d0374c27f7ab94d06cd5b3cbdf79054aaa77175bbc9f9e7c33e33edbb74ad5d4ee36c07f2cac32e17bff5133a1e78ebfb7d90db94ab18b4a585c85f9d", 0x2, 0x0, 0xa32b}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xf9, 0x4a, &(0x7f0000000040)="3663e44ae83578a3e4d072534b5a14f0f95f0683381a308346588be56530ab80d70628db390b396a6d8fd29bb00c1ab56047c7d102d2da5a4ab16e2c660c12a43e3f016609c3789915969e8afd4ffe538ca26e163ffaeb05a02018147d4cecb9bb0835c5c1c03be276de5af0bddd403f4f9dabd71f0286109958d4051405970cfd95fde582b7b87e6ffb767e5f00c09fdac15eb3974a0de340dae1b9be0473bed8b5b402d73429b7ca85618b261f96089412d860aed262a87818df9826dca4b6c35489e9b0cc9343cae64a639be3e1051f2d233ba2106a346a3bf3e5437ea9b942c9878320955d05eb24f489c3154ccbbbf73bf80abd9787e2", &(0x7f0000000340)=""/74, 0x8001, 0x0, 0x7f, 0xa8, &(0x7f0000000440)="cd36de1e1a184c22004acbc51ef03ffa857736c36683ca1b98048fcd5e7610c6efa8acb10cfeb69aaf24735082367cb0642661d7d788efefbb90fc9614de1e2e7a433c31f01bfc605fbae90459b18dc075dc8ddb3667c954eedce7daed4edf0e57a82014f202f191d1602deff69afd63ab1e5a2fe469c7e7b52493d7ec8620", &(0x7f0000000680)="e8ac8757fd9e6b5587c342d61025c5e7f2caa4acd4f7cd603f857b8758fe80b4e14e23e1a66755b8130c782061eae048993e366c2ede25e03e8897d4e3818f4f07e2979f020f54606a80c9c2bb599b5a82680a2a2e27eca36d7f96585415f28ef95e43b7dfa8809231d2378d0374c27f7ab94d06cd5b3cbdf79054aaa77175bbc9f9e7c33e33edbb74ad5d4ee36c07f2cac32e17bff5133a1e78ebfb7d90db94ab18b4a585c85f9d", 0x2, 0x0, 0xa32b}, 0x50) 928.775395ms ago: executing program 4 (id=8003): socketpair(0x2, 0x2, 0x1, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c80), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 928.531095ms ago: executing program 3 (id=8004): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003dfa1cfeaa71a92005099fb3ecc297fb71ed9517fe609fff336e3fdfdb0a17d803dcf7f60c2378a0587c4d3fc5225dcbe6276b3a05f4d6835f403798c4ce933bc3d19708a7a440a35f2d0fedda7154fbada7db26812e29cbc04fbac7f7aecdf1e82e"], 0x50) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000000f5ffffff0000", 0x5dc}], 0x1}, 0x0) 928.128055ms ago: executing program 0 (id=8005): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000018000000080000040000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0500"/17], 0x50) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)="228b44bbab3613345db0479cdd66edc94e737302196669df7762fd5157611554e46591ee050757c4db97f863b1c3ed56d949bd950f0bcb32ab7cbc8411632db4a0f8d5bbf1422dda5ac587", 0x4b}, {&(0x7f0000000500)="f5a9eab025ed9285e69823de13a0217550d7db725949cdc731f3732b3bb0dbf92a9c9c4788a51c228fdbe52a4b07d222ec32740d95f1fe4ccd1be18bd5a3407d97565774d85d464342487def5d38c3f3718136f09990ab38f50641a47916c58003e9c5f8d7f61d5e9793fc7e1e1441d9cfad62337a63c0d8466c1021d674e411953191d9b12e56da144d8478b5dd9f740a7081cf170cb80042518b5b", 0x9c}, {&(0x7f0000000040)="b6d0c02f", 0x4}, {&(0x7f00000005c0)="d7dc40d28f0a4c97c3a79624b5839815d7fc3fa07de672da81dee5de74ab4dbdbcf2c7b801743d7e1800035d58a8909420dc219f1c133235308eceb34a1338c8415fc94eb91057aa4199643625aa489ea1a1393de67a6dd6341e41890c8df829", 0x60}, {&(0x7f00000006c0)="0d86b04da5578ac636a1334d55b56a26f496daa187a5ba0db90a1b6177fb96c1ba4737423f9d5c0f98947fc9d4fee5a743a9e9ed617e51f99029c7130e3b3da86f12818d3e27c8daefb2580dea4d7e01473f6d2a3d8b8d153a5e5a1f6a2b7c4b", 0x60}, {&(0x7f0000000740)="789fc2f07bf7ef752c2eca87e3c394d7d149e2fdd1cab26106229a40866138415b0d35d3fa35f5241962c7f744709e0b8180da75cf04d2e48abff2a35c99f6de53837d9472dcb0058025b896363a988d4ddb8f254b1980606afab0ecf821fb8b075561a34083ae0406667151295d949393fb891e573151a6b806f65734bcb556", 0x80}], 0x6}, 0x4048041) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000200), 0x0, &(0x7f0000000500), &(0x7f0000000580), 0x0, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5) r6 = openat$cgroup_ro(r0, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x800454dd, &(0x7f0000000600)) setsockopt$sock_attach_bpf(r5, 0x1, 0x9, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) close(r2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x110, 0xd}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7a15e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08", 0x40}], 0x1}, 0x0) 867.017166ms ago: executing program 2 (id=8006): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000850070002200000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 803.860956ms ago: executing program 3 (id=8007): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000001000000000000000040000105da73a2400000000000000000000009"], 0x0, 0x4e}, 0x20) 705.572387ms ago: executing program 1 (id=8008): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x541e8000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r3, 0x4, r4}, 0x10) (async) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) 623.220507ms ago: executing program 2 (id=8009): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003dfa1cfeaa71a92005099fb3ecc297fb71ed9517fe609fff336e3fdfdb0a17d803dcf7f60c2378a0587c4d3fc5225dcbe6276b3a05f4d6835f403798c4ce933bc3d19708a7a440a35f2d0fedda7154fbada7db26812e29cbc04fbac7f7aecdf1e82ecb7b7fa37d64f7b5f8d756a27516e3d242b5fdcf1d7ccea120127caca4e58cfa6b8fa0794caec81681dd3f54ce11f504434dd125d27c3698fe0098798c326688bb178beb1b513e0d8bf460ddb91f1783aa8709c045b49de0d4448efaba5646b60cf1840b0f9a834cd129c53d72e00efb3b6203f116d372d5549e09b10b0fabd0eadf6b62e050c7289e0723"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x42) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000000000000000000000000b0000000000", 0x5dc}], 0x1}, 0x0) 560.590107ms ago: executing program 3 (id=8010): bpf$PROG_LOAD(0x5, 0x0, 0x33) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x48, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) 480.024868ms ago: executing program 1 (id=8011): r0 = socket$kcm(0x22, 0x2, 0x21) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40000000) 436.444238ms ago: executing program 2 (id=8012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 408.890478ms ago: executing program 3 (id=8013): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111790000000000851000000200000085000000340000009500004c000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 240.182979ms ago: executing program 2 (id=8014): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xfffffffffffffee7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0, 0xfe00}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 239.970269ms ago: executing program 3 (id=8015): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffc, 0x1, 0x0, 0xfffffffc, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000003001001000001"], 0x18}, 0x0) 166.69601ms ago: executing program 1 (id=8016): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000003b00000000000000", 0x5dc}], 0x1}, 0x0) 132.22107ms ago: executing program 2 (id=8017): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 565µs ago: executing program 4 (id=8018): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000300000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b33, 0x0) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x11}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001d00090000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000240), &(0x7f0000000340)=""/86}, 0x20) socketpair(0x26, 0x800, 0x6, &(0x7f0000000b40)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000540)='/') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r5, 0x68, 0x0, 0x8000, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0e0000001020000000000000", @ANYRES32=r5, @ANYBLOB="d42c43ff73367e7dd17e625ef869f59a3cb4ba010a98df3c7dfe5afb1abb7c3c14ce45a33f122d5dee68d82ab9458a4be99ae6bc3f0a03cd9fb6952e2d04e62f3c15d378b8b651c8995b4120039603ea2b07ce9124e240bb23e8559aa170568bb2909f35afd194b3f0c657b2a15bc69f33a1454e1de5c072ef2ecb9983b1c4c21a981f16117a6136b8c351c5e0c5172f99030ed2e4d5c9ca0b2ad1e6b010be4433e208da7eb1e419cf456764e2ccb60d94ce0c6a1b45be6f681ef3", @ANYRES64=r6], 0x20) r7 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x7, 0x4f, 0x5, 0xf7, 0x0, 0xe8f3, 0x10000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000280)}, 0x800, 0x9, 0x129, 0x1, 0x100, 0x2, 0x8, 0x0, 0x107, 0x0, 0x5}, 0xffffffffffffffff, 0x1, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) 422.591µs ago: executing program 1 (id=8019): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003dfa1cfeaa71a92005099fb3ecc297fb71ed9517fe609fff336e3fdfdb0a17d803dcf7f60c2378a0587c4d3fc5225dcbe6276b3a05f4d6835f403798c4ce933bc3d19708a7a440a35f2d0fedda7154fbada7db26812e29cbc04fbac7f7aecdf1e82e"], 0x50) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000000ffffffffffff", 0x5dc}], 0x1}, 0x0) 0s ago: executing program 0 (id=8020): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x44) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): : 'syz.4.5749': attribute type 272 has an invalid length. [ 427.672146][T19480] netlink: 'syz.0.5751': attribute type 39 has an invalid length. [ 427.728991][T19477] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5749'. [ 428.979954][T19537] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5770'. [ 429.456506][T19553] netlink: 'syz.1.5775': attribute type 21 has an invalid length. [ 429.881266][T19579] device syzkaller0 entered promiscuous mode [ 429.896299][T19584] syzkaller0: create flow: hash 1281735 index 0 [ 429.931232][ T4241] syzkaller0: tun_net_xmit 48 [ 430.123484][T19579] syzkaller0 (unregistered): delete flow: hash 1281735 index 0 [ 430.314033][T19605] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 430.378207][T19605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.861096][T19681] Â: renamed from pim6reg1 [ 432.042199][T19703] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 432.052367][T19702] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 432.125789][T19714] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5835'. [ 432.328863][T19734] netlink: 'syz.3.5843': attribute type 4 has an invalid length. [ 432.358760][T19734] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5843'. [ 432.669817][T19745] device syzkaller0 entered promiscuous mode [ 432.705595][ T4174] syzkaller0: tun_net_xmit 48 [ 432.713694][T19750] syzkaller0: create flow: hash 1281735 index 0 [ 432.942424][T19745] syzkaller0 (unregistered): delete flow: hash 1281735 index 0 [ 434.020336][T19777] device syzkaller0 entered promiscuous mode [ 434.280129][T19797] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5867'. [ 435.276771][T19853] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5889'. [ 435.897461][T19893] netlink: 'syz.1.5906': attribute type 1 has an invalid length. [ 435.952494][T19893] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.5906'. [ 436.176313][T19911] netlink: 'syz.1.5916': attribute type 27 has an invalid length. [ 436.225340][T19911] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5916'. [ 436.276580][T19915] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5919'. [ 436.303645][T19911] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 436.355906][T19915] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5919'. [ 436.416883][T19919] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5919'. [ 436.749909][T19947] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.5925'. [ 437.068818][T19959] tap0: tun_chr_ioctl cmd 1074025692 [ 437.400899][T19929] chnl_net:caif_netlink_parms(): no params data found [ 437.529109][T19979] tc_dump_action: action bad kind [ 437.566681][T19984] netlink: 763 bytes leftover after parsing attributes in process `syz.1.5937'. [ 437.607063][T19983] netlink: 'syz.1.5937': attribute type 21 has an invalid length. [ 437.617360][T19983] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.627036][T19983] IPv6: Can't replace route, no match found [ 437.648986][ T410] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.737616][T19929] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.759660][T19929] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.782319][T19999] netlink: 'syz.0.5942': attribute type 3 has an invalid length. [ 437.790639][T19999] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5942'. [ 437.801897][T19929] device bridge_slave_0 entered promiscuous mode [ 437.850003][ T410] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.929751][T20002] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 437.967501][T19929] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.978875][T19929] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.989533][T19929] device bridge_slave_1 entered promiscuous mode [ 438.159136][ T410] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.238023][T19929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.319348][ T410] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.358277][T19929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.555311][T19929] team0: Port device team_slave_0 added [ 438.616309][T19929] team0: Port device team_slave_1 added [ 438.690213][T20023] netlink: 'syz.3.5952': attribute type 1 has an invalid length. [ 438.702535][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 438.720857][T19929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.729693][T19929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.730609][T20023] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.5952'. [ 438.783569][T19929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.870280][T19929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.882177][T19929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.910066][T19929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.927507][T20031] netlink: 'syz.3.5952': attribute type 21 has an invalid length. [ 438.950792][T20031] netlink: 'syz.3.5952': attribute type 2 has an invalid length. [ 438.997222][T20031] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5952'. [ 439.302496][T19929] device hsr_slave_0 entered promiscuous mode [ 439.320921][T19929] device hsr_slave_1 entered promiscuous mode [ 439.355417][T19929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.366301][T19929] Cannot create hsr debugfs directory [ 439.497336][T20054] device wg2 entered promiscuous mode [ 439.665490][T20075] netlink: 'syz.1.5970': attribute type 1 has an invalid length. [ 439.722947][T20075] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.5970'. [ 439.885948][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.892284][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.362746][T20106] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.5980'. [ 440.595497][T19929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.619093][T19929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.631681][T20133] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.5985'. [ 440.713493][T19929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.773535][ T1111] Bluetooth: hci0: command 0x041b tx timeout [ 440.864182][T19929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 441.446389][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.460065][ T410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.479174][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.492528][ T410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.508807][ T410] bridge0: port 3(batadv0) entered disabled state [ 441.528944][ T410] device bridge_slave_1 left promiscuous mode [ 441.540398][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.564607][ T410] device bridge_slave_0 left promiscuous mode [ 441.574395][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.695145][T20165] FAULT_INJECTION: forcing a failure. [ 441.695145][T20165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.721191][ T410] device veth1_macvtap left promiscuous mode [ 441.754926][T20165] CPU: 0 PID: 20165 Comm: syz.4.5994 Not tainted syzkaller #0 [ 441.755020][ T410] device veth0_macvtap left promiscuous mode [ 441.762432][T20165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.762444][T20165] Call Trace: [ 441.762451][T20165] [ 441.762459][T20165] dump_stack_lvl+0x168/0x230 [ 441.789358][T20165] ? show_regs_print_info+0x20/0x20 [ 441.794553][T20165] ? load_image+0x3b0/0x3b0 [ 441.799045][T20165] ? __lock_acquire+0x7c60/0x7c60 [ 441.804063][T20165] should_fail+0x38c/0x4c0 [ 441.808560][T20165] _copy_from_user+0x2e/0x170 [ 441.813220][T20165] __copy_msghdr_from_user+0xaf/0x5e0 [ 441.818579][T20165] ? verify_lock_unused+0x140/0x140 [ 441.823766][T20165] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 441.829043][T20165] ? trace_event_raw_event_lock+0x250/0x250 [ 441.834921][T20165] ? rcu_nmi_exit+0x6f/0xf0 [ 441.839426][T20165] ___sys_sendmsg+0x156/0x260 [ 441.844189][T20165] ? __sys_sendmsg+0x250/0x250 [ 441.848960][T20165] ? __fdget+0x18b/0x210 [ 441.853193][T20165] __se_sys_sendmsg+0x190/0x250 [ 441.858031][T20165] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 441.864295][T20165] ? __x64_sys_sendmsg+0x80/0x80 [ 441.869323][T20165] ? syscall_enter_from_user_mode+0x2a/0x70 [ 441.875208][T20165] do_syscall_64+0x4c/0xa0 [ 441.879611][T20165] ? clear_bhb_loop+0x30/0x80 [ 441.884276][T20165] ? clear_bhb_loop+0x30/0x80 [ 441.889051][T20165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 441.894957][T20165] RIP: 0033:0x7f88911416c9 [ 441.899367][T20165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.918966][T20165] RSP: 002b:00007f888f3a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.927384][T20165] RAX: ffffffffffffffda RBX: 00007f8891397fa0 RCX: 00007f88911416c9 [ 441.935343][T20165] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000007 [ 441.943300][T20165] RBP: 00007f888f3a8090 R08: 0000000000000000 R09: 0000000000000000 [ 441.951263][T20165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.959225][T20165] R13: 00007f8891398038 R14: 00007f8891397fa0 R15: 00007fffd62b1838 [ 441.967207][T20165] [ 442.843357][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 442.970654][ T410] team0 (unregistering): Port device team_slave_1 removed [ 443.004744][ T410] team0 (unregistering): Port device team_slave_0 removed [ 443.043165][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.086807][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.279000][ T410] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 443.343830][ T410] bond0 (unregistering): Released all slaves [ 443.474473][T20176] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5995'. [ 443.501760][T20194] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.509513][T20194] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.532642][T20221] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.6007'. [ 443.549316][T20221] tc_dump_action: action bad kind [ 443.595549][T19929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.688713][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 443.706658][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.749812][T19929] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.793740][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 443.822535][T20240] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.6012'. [ 443.843431][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.860627][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.867806][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.886188][T20240] netlink: zone id is out of range [ 443.904142][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.913367][T20240] netlink: zone id is out of range [ 443.918503][T20240] netlink: zone id is out of range [ 443.926040][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.935719][T20240] netlink: zone id is out of range [ 443.940866][T20240] netlink: zone id is out of range [ 443.952103][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.964077][T20240] netlink: zone id is out of range [ 443.972952][T20240] netlink: zone id is out of range [ 443.981422][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.988574][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.997098][T20240] netlink: zone id is out of range [ 444.002230][T20240] netlink: zone id is out of range [ 444.008351][T20240] netlink: zone id is out of range [ 444.014400][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 444.070491][T20245] netlink: 'syz.1.6013': attribute type 21 has an invalid length. [ 444.099573][T20245] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6013'. [ 444.118861][T20245] netlink: 'syz.1.6013': attribute type 3 has an invalid length. [ 444.133191][T20245] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6013'. [ 444.161117][T20265] FAULT_INJECTION: forcing a failure. [ 444.161117][T20265] name failslab, interval 1, probability 0, space 0, times 0 [ 444.173532][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 444.204445][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 444.214224][T20265] CPU: 1 PID: 20265 Comm: syz.0.6019 Not tainted syzkaller #0 [ 444.221713][T20265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 444.231783][T20265] Call Trace: [ 444.235071][T20265] [ 444.238013][T20265] dump_stack_lvl+0x168/0x230 [ 444.242716][T20265] ? show_regs_print_info+0x20/0x20 [ 444.247925][T20265] ? load_image+0x3b0/0x3b0 [ 444.252444][T20265] ? __might_sleep+0xf0/0xf0 [ 444.257049][T20265] ? __lock_acquire+0x7c60/0x7c60 [ 444.262079][T20265] should_fail+0x38c/0x4c0 [ 444.266499][T20265] should_failslab+0x5/0x20 [ 444.271029][T20265] slab_pre_alloc_hook+0x51/0xc0 [ 444.276011][T20265] kmem_cache_alloc_node+0x47/0x2d0 [ 444.276941][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 444.281213][T20265] ? __alloc_skb+0xf4/0x750 [ 444.281240][T20265] __alloc_skb+0xf4/0x750 [ 444.281261][T20265] pfkey_sendmsg+0x186/0xff0 [ 444.302438][T20265] ? __might_sleep+0xf0/0xf0 [ 444.307049][T20265] ? pfkey_release+0x310/0x310 [ 444.311830][T20265] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 444.312853][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 444.317851][T20265] ? aa_sk_perm+0x7b4/0x8f0 [ 444.317884][T20265] ? aa_af_perm+0x2b0/0x2b0 [ 444.317899][T20265] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 444.317923][T20265] ? aa_sock_msg_perm+0x94/0x150 [ 444.317940][T20265] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 444.317956][T20265] ? security_socket_sendmsg+0x7c/0xa0 [ 444.317971][T20265] ? pfkey_release+0x310/0x310 [ 444.317995][T20265] ____sys_sendmsg+0x5a2/0x8c0 [ 444.318026][T20265] ? __sys_sendmsg_sock+0x30/0x30 [ 444.318049][T20265] ? ___sys_sendmsg+0x1cd/0x260 [ 444.359252][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 444.361788][T20265] ___sys_sendmsg+0x1f0/0x260 [ 444.361824][T20265] ? __sys_sendmsg+0x250/0x250 [ 444.382503][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 444.384306][T20265] ? ktime_get_real_ts64+0x420/0x420 [ 444.384348][T20265] ? __fdget+0x18b/0x210 [ 444.384365][T20265] __se_sys_sendmsg+0x190/0x250 [ 444.384384][T20265] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 444.384404][T20265] ? __x64_sys_sendmsg+0x80/0x80 [ 444.384431][T20265] ? syscall_enter_from_user_mode+0x2a/0x70 [ 444.384452][T20265] do_syscall_64+0x4c/0xa0 [ 444.384467][T20265] ? clear_bhb_loop+0x30/0x80 [ 444.384481][T20265] ? clear_bhb_loop+0x30/0x80 [ 444.384499][T20265] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.384515][T20265] RIP: 0033:0x7f2369fa66c9 [ 444.384532][T20265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.384545][T20265] RSP: 002b:00007f236820d038 EFLAGS: 00000246 [ 444.400272][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.401736][T20265] ORIG_RAX: 000000000000002e [ 444.401747][T20265] RAX: ffffffffffffffda RBX: 00007f236a1fcfa0 RCX: 00007f2369fa66c9 [ 444.401759][T20265] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000007 [ 444.401769][T20265] RBP: 00007f236820d090 R08: 0000000000000000 R09: 0000000000000000 [ 444.401779][T20265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.422463][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.427207][T20265] R13: 00007f236a1fd038 R14: 00007f236a1fcfa0 R15: 00007ffdab164ab8 [ 444.427235][T20265] [ 444.641008][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 444.660294][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.762842][T19929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 444.924212][T12569] Bluetooth: hci0: command 0x0419 tx timeout [ 445.412900][T20295] FAULT_INJECTION: forcing a failure. [ 445.412900][T20295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.458770][T20295] CPU: 0 PID: 20295 Comm: syz.0.6034 Not tainted syzkaller #0 [ 445.466303][T20295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.476382][T20295] Call Trace: [ 445.479695][T20295] [ 445.482736][T20295] dump_stack_lvl+0x168/0x230 [ 445.487464][T20295] ? show_regs_print_info+0x20/0x20 [ 445.492694][T20295] ? load_image+0x3b0/0x3b0 [ 445.497246][T20295] ? __lock_acquire+0x7c60/0x7c60 [ 445.502328][T20295] should_fail+0x38c/0x4c0 [ 445.506791][T20295] prepare_alloc_pages+0x1e4/0x5f0 [ 445.511955][T20295] __alloc_pages+0x10e/0x470 [ 445.516630][T20295] ? zone_statistics+0x170/0x170 [ 445.521651][T20295] kmalloc_large_node+0x7d/0x190 [ 445.526635][T20295] __kmalloc_node_track_caller+0x22e/0x3a0 [ 445.532480][T20295] ? pfkey_sendmsg+0x186/0xff0 [ 445.537273][T20295] ? kmem_cache_alloc_node+0x162/0x2d0 [ 445.542750][T20295] ? __alloc_skb+0xf4/0x750 [ 445.547374][T20295] ? pfkey_sendmsg+0x186/0xff0 [ 445.552178][T20295] __alloc_skb+0x22c/0x750 [ 445.556641][T20295] pfkey_sendmsg+0x186/0xff0 [ 445.561275][T20295] ? __might_sleep+0xf0/0xf0 [ 445.565913][T20295] ? pfkey_release+0x310/0x310 [ 445.570723][T20295] ? aa_sk_perm+0x7b4/0x8f0 [ 445.575275][T20295] ? aa_af_perm+0x2b0/0x2b0 [ 445.579801][T20295] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 445.586362][T20295] ? aa_sock_msg_perm+0x94/0x150 [ 445.591339][T20295] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 445.596652][T20295] ? security_socket_sendmsg+0x7c/0xa0 [ 445.602142][T20295] ? pfkey_release+0x310/0x310 [ 445.606940][T20295] ____sys_sendmsg+0x5a2/0x8c0 [ 445.611754][T20295] ? memset+0x1e/0x40 [ 445.615774][T20295] ? __sys_sendmsg_sock+0x30/0x30 [ 445.620861][T20295] ? import_iovec+0x6f/0xa0 [ 445.625422][T20295] ___sys_sendmsg+0x1f0/0x260 [ 445.630155][T20295] ? __sys_sendmsg+0x250/0x250 [ 445.634991][T20295] ? trace_event_raw_event_lock+0x250/0x250 [ 445.640978][T20295] ? __fdget+0x18b/0x210 [ 445.645262][T20295] __se_sys_sendmsg+0x190/0x250 [ 445.650153][T20295] ? __x64_sys_sendmsg+0x80/0x80 [ 445.655116][T20295] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 445.661166][T20295] ? lockdep_hardirqs_on+0x94/0x140 [ 445.666488][T20295] do_syscall_64+0x4c/0xa0 [ 445.670931][T20295] ? clear_bhb_loop+0x30/0x80 [ 445.675636][T20295] ? clear_bhb_loop+0x30/0x80 [ 445.680344][T20295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 445.686252][T20295] RIP: 0033:0x7f2369fa66c9 [ 445.690671][T20295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.710375][T20295] RSP: 002b:00007f236820d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.718791][T20295] RAX: ffffffffffffffda RBX: 00007f236a1fcfa0 RCX: 00007f2369fa66c9 [ 445.726996][T20295] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000007 [ 445.734977][T20295] RBP: 00007f236820d090 R08: 0000000000000000 R09: 0000000000000000 [ 445.742942][T20295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.750924][T20295] R13: 00007f236a1fd038 R14: 00007f236a1fcfa0 R15: 00007ffdab164ab8 [ 445.758962][T20295] [ 445.865517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.883900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.908603][T19929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.988013][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.007406][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.066184][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.093867][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.120386][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.153978][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.173211][T19929] device veth0_vlan entered promiscuous mode [ 446.247157][T19929] device veth1_vlan entered promiscuous mode [ 446.417064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.463843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.472188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.492620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.528735][T20300] netlink: 'syz.3.6028': attribute type 17 has an invalid length. [ 446.554924][T20300] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6028'. [ 446.595449][T19929] device veth0_macvtap entered promiscuous mode [ 446.616841][T19929] device veth1_macvtap entered promiscuous mode [ 446.661342][T19929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.722849][T19929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.743113][T19929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.773101][T19929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.782962][T19929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.813197][T19929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.834514][T19929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.842434][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.872499][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.895334][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.977115][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.010274][T19929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.025251][T19929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.056950][T19929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.083139][T19929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.103060][T19929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.123091][T19929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.144440][T19929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.201965][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 447.216807][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.240977][T19929] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.262291][T19929] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.281215][T19929] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.290523][T19929] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.541925][ T5156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.567712][ T5156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.610007][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 447.649362][ T5156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.675131][ T5156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.730087][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 448.049232][T20368] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.6053'. [ 448.975415][T20377] chnl_net:caif_netlink_parms(): no params data found [ 449.194949][T20377] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.202115][T20377] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.212214][T20377] device bridge_slave_0 entered promiscuous mode [ 449.236519][ T410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.255784][T20377] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.264008][T20377] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.273637][T20377] device bridge_slave_1 entered promiscuous mode [ 449.301681][T20412] device syzkaller0 entered promiscuous mode [ 449.327760][T20377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.345033][ T410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.359930][T20377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.502974][ T410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.520788][T20377] team0: Port device team_slave_0 added [ 449.545009][T20377] team0: Port device team_slave_1 added [ 449.581769][ T410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.650068][T20377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.662935][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.740878][T20377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.770517][T20377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.796661][T20377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.825834][T20377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.920445][T20377] device hsr_slave_0 entered promiscuous mode [ 449.932757][T20377] device hsr_slave_1 entered promiscuous mode [ 449.946438][T20377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.958221][T20377] Cannot create hsr debugfs directory [ 450.372322][T20470] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6086'. [ 450.453312][T11173] Bluetooth: hci4: command 0x0409 tx timeout [ 450.568465][T20484] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6089'. [ 450.641441][T20490] netlink: 'syz.3.6091': attribute type 10 has an invalid length. [ 451.327263][T20377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.435268][T20377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.478436][T20377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 451.603356][T20377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 451.695067][T20532] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.6103'. [ 451.732335][T20532] net_ratelimit: 218 callbacks suppressed [ 451.732378][T20532] netlink: zone id is out of range [ 451.750526][ T410] device hsr_slave_0 left promiscuous mode [ 451.763735][ T410] device hsr_slave_1 left promiscuous mode [ 451.780807][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.793735][T20532] netlink: zone id is out of range [ 451.798986][T20532] netlink: zone id is out of range [ 451.813177][ T410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.843209][T20532] netlink: zone id is out of range [ 451.854727][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.862268][ T410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.878364][T20532] netlink: zone id is out of range [ 451.899766][T20532] netlink: zone id is out of range [ 451.903778][ T410] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 451.931200][ T410] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 451.954923][ T410] device bridge_slave_1 left promiscuous mode [ 451.961076][T20532] netlink: zone id is out of range [ 451.961121][T20532] netlink: zone id is out of range [ 451.961143][T20532] netlink: zone id is out of range [ 451.961174][T20532] netlink: zone id is out of range [ 452.033372][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.059267][ T410] device bridge_slave_0 left promiscuous mode [ 452.075898][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.106746][ T410] device veth1_vlan left promiscuous mode [ 452.112611][ T410] device veth0_vlan left promiscuous mode [ 452.342767][ T410] team0 (unregistering): Port device geneve1 removed [ 452.378644][ T410] team0 (unregistering): Port device macvlan1 removed [ 452.524129][ T4298] Bluetooth: hci4: command 0x041b tx timeout [ 452.597888][ T410] team0 (unregistering): Port device team_slave_1 removed [ 452.649782][ T410] team0 (unregistering): Port device team_slave_0 removed [ 452.679398][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.700991][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.801726][ T410] bond0 (unregistering): Released all slaves [ 452.871508][T20557] netlink: 'syz.4.6111': attribute type 3 has an invalid length. [ 453.183674][T20377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.275706][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.289232][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.360490][T20377] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.457129][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.478173][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.518972][T19945] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.526217][T19945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.623510][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.648133][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.708112][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.733475][T19945] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.740619][T19945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.770776][T20597] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.6125'. [ 453.775776][T20596] FAULT_INJECTION: forcing a failure. [ 453.775776][T20596] name failslab, interval 1, probability 0, space 0, times 0 [ 453.823290][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.834705][T20596] CPU: 1 PID: 20596 Comm: syz.2.6124 Not tainted syzkaller #0 [ 453.842204][T20596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.852269][T20596] Call Trace: [ 453.855553][T20596] [ 453.858482][T20596] dump_stack_lvl+0x168/0x230 [ 453.863182][T20596] ? show_regs_print_info+0x20/0x20 [ 453.868369][T20596] ? load_image+0x3b0/0x3b0 [ 453.872859][T20596] ? __might_sleep+0xf0/0xf0 [ 453.877431][T20596] ? __lock_acquire+0x7c60/0x7c60 [ 453.882443][T20596] should_fail+0x38c/0x4c0 [ 453.886943][T20596] should_failslab+0x5/0x20 [ 453.891435][T20596] slab_pre_alloc_hook+0x51/0xc0 [ 453.896357][T20596] ? skb_clone+0x1bd/0x350 [ 453.900764][T20596] kmem_cache_alloc+0x3d/0x290 [ 453.905638][T20596] skb_clone+0x1bd/0x350 [ 453.909871][T20596] ? pfkey_broadcast_one+0x7d/0x340 [ 453.915057][T20596] pfkey_broadcast_one+0x9b/0x340 [ 453.920072][T20596] ? pfkey_broadcast+0x363/0x3a0 [ 453.925003][T20596] pfkey_broadcast+0x370/0x3a0 [ 453.929758][T20596] pfkey_sendmsg+0xda2/0xff0 [ 453.934344][T20596] ? pfkey_release+0x310/0x310 [ 453.939090][T20596] ? aa_sk_perm+0x1b3/0x8f0 [ 453.943609][T20596] ? aa_sock_msg_perm+0x94/0x150 [ 453.948531][T20596] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 453.953797][T20596] ? security_socket_sendmsg+0x7c/0xa0 [ 453.959236][T20596] ? pfkey_release+0x310/0x310 [ 453.963989][T20596] ____sys_sendmsg+0x5a2/0x8c0 [ 453.968758][T20596] ? memset+0x1e/0x40 [ 453.972729][T20596] ? __sys_sendmsg_sock+0x30/0x30 [ 453.977749][T20596] ? import_iovec+0x6f/0xa0 [ 453.982237][T20596] ___sys_sendmsg+0x1f0/0x260 [ 453.986901][T20596] ? __sys_sendmsg+0x250/0x250 [ 453.991656][T20596] ? ktime_get_real_ts64+0x420/0x420 [ 453.996952][T20596] ? __fdget+0x18b/0x210 [ 454.001181][T20596] __se_sys_sendmsg+0x190/0x250 [ 454.006047][T20596] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 454.012189][T20596] ? __x64_sys_sendmsg+0x80/0x80 [ 454.017122][T20596] ? syscall_enter_from_user_mode+0x2a/0x70 [ 454.023016][T20596] do_syscall_64+0x4c/0xa0 [ 454.027423][T20596] ? clear_bhb_loop+0x30/0x80 [ 454.032341][T20596] ? clear_bhb_loop+0x30/0x80 [ 454.037040][T20596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 454.042930][T20596] RIP: 0033:0x7f2ddd5296c9 [ 454.047341][T20596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.066935][T20596] RSP: 002b:00007f2ddb790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.075434][T20596] RAX: ffffffffffffffda RBX: 00007f2ddd77ffa0 RCX: 00007f2ddd5296c9 [ 454.083476][T20596] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000007 [ 454.091525][T20596] RBP: 00007f2ddb790090 R08: 0000000000000000 R09: 0000000000000000 [ 454.099484][T20596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.107530][T20596] R13: 00007f2ddd780038 R14: 00007f2ddd77ffa0 R15: 00007ffff5e6d518 [ 454.115497][T20596] [ 454.316693][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 454.362904][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 454.413990][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 454.439163][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 454.454652][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 454.467315][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 454.477747][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 454.500928][T20377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.514859][T20377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.545523][T20607] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 454.587784][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 454.603162][T12774] Bluetooth: hci4: command 0x040f tx timeout [ 454.610392][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 454.631936][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.986302][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 455.027934][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.060180][T20377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.175305][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 455.205180][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.260683][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 455.272828][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.296728][T20377] device veth0_vlan entered promiscuous mode [ 455.308449][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.325426][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.358051][T20638] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6139'. [ 455.409645][T20377] device veth1_vlan entered promiscuous mode [ 455.555177][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 455.576379][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 455.616998][T20377] device veth0_macvtap entered promiscuous mode [ 455.653812][T20377] device veth1_macvtap entered promiscuous mode [ 455.714965][T20377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.788113][T20377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.828835][T20377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.845056][T20653] FAULT_INJECTION: forcing a failure. [ 455.845056][T20653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.855021][T20377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.882487][T20377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.899337][T20653] CPU: 1 PID: 20653 Comm: syz.2.6144 Not tainted syzkaller #0 [ 455.905940][T20377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.906835][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.906849][T20653] Call Trace: [ 455.930086][T20653] [ 455.933027][T20653] dump_stack_lvl+0x168/0x230 [ 455.934391][T20377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.937731][T20653] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.937758][T20653] ? show_regs_print_info+0x20/0x20 [ 455.937778][T20653] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 455.937811][T20653] should_fail+0x38c/0x4c0 [ 455.967145][T20653] _copy_to_user+0x2e/0x130 [ 455.968703][T20377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.971662][T20653] simple_read_from_buffer+0xe3/0x150 [ 455.971692][T20653] proc_fail_nth_read+0x19a/0x210 [ 455.992473][T20653] ? proc_fault_inject_write+0x2f0/0x2f0 [ 455.998129][T20653] ? bpf_lsm_kernfs_init_security+0x10/0x10 [ 456.000962][T20377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.004041][T20653] ? fsnotify_perm+0x254/0x560 [ 456.004079][T20653] ? proc_fault_inject_write+0x2f0/0x2f0 [ 456.004106][T20653] vfs_read+0x2f6/0xcf0 [ 456.004131][T20653] ? kernel_read+0x1e0/0x1e0 [ 456.004152][T20653] ? __fget_files+0x40f/0x480 [ 456.004176][T20653] ? mutex_lock_nested+0x17/0x20 [ 456.004193][T20653] ? __fdget_pos+0x2bf/0x370 [ 456.004205][T20653] ? ksys_read+0x71/0x250 [ 456.004222][T20653] ksys_read+0x14d/0x250 [ 456.004238][T20653] ? vfs_write+0xd00/0xd00 [ 456.004261][T20653] ? lockdep_hardirqs_on+0x94/0x140 [ 456.031453][T20377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.033576][T20653] do_syscall_64+0x4c/0xa0 [ 456.033602][T20653] ? clear_bhb_loop+0x30/0x80 [ 456.033618][T20653] ? clear_bhb_loop+0x30/0x80 [ 456.033635][T20653] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.033653][T20653] RIP: 0033:0x7f2ddd5280dc [ 456.033669][T20653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 456.033684][T20653] RSP: 002b:00007f2ddb790030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 456.033702][T20653] RAX: ffffffffffffffda RBX: 00007f2ddd77ffa0 RCX: 00007f2ddd5280dc [ 456.047415][T20377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.047859][T20653] RDX: 000000000000000f RSI: 00007f2ddb7900a0 RDI: 0000000000000008 [ 456.047876][T20653] RBP: 00007f2ddb790090 R08: 0000000000000000 R09: 0000000000000000 [ 456.047888][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.059380][T20377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.060903][T20653] R13: 00007f2ddd780038 R14: 00007f2ddd77ffa0 R15: 00007ffff5e6d518 [ 456.060938][T20653] [ 456.236962][T20377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.248905][T20377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.258366][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 456.268509][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.282123][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.299848][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.320227][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.332036][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.365718][T20377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.385134][T20377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.398707][T20377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.409573][T20377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.641661][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.685106][ T4241] Bluetooth: hci4: command 0x0419 tx timeout [ 456.685170][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.765940][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.775674][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.787674][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 456.826016][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 457.672919][ T410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.806904][ T410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.897917][ T410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.040466][ T410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.087400][T20689] chnl_net:caif_netlink_parms(): no params data found [ 459.563306][ T4174] Bluetooth: hci3: command 0x0409 tx timeout [ 461.388605][T20689] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.406180][T20689] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.441007][T20689] device bridge_slave_0 entered promiscuous mode [ 461.519131][T20689] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.536298][T20732] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6168'. [ 461.543160][T20689] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.572680][T20689] device bridge_slave_1 entered promiscuous mode [ 461.654571][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 461.910058][T20689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.946462][T20689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.081668][T20689] team0: Port device team_slave_0 added [ 462.166306][T20689] team0: Port device team_slave_1 added [ 462.355161][T20689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.372793][T20689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.455506][T20689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.521014][T20689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.532890][T20689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.617080][T20689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.737451][T20773] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.6177'. [ 462.804126][T20774] netlink: 'syz.2.6177': attribute type 2 has an invalid length. [ 462.864323][T20689] device hsr_slave_0 entered promiscuous mode [ 462.900899][T20689] device hsr_slave_1 entered promiscuous mode [ 463.733979][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 464.042705][ T410] device hsr_slave_1 left promiscuous mode [ 464.056963][ T410] device bridge_slave_1 left promiscuous mode [ 464.076579][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.141679][T20837] netlink: 'syz.4.6200': attribute type 3 has an invalid length. [ 464.142437][ T410] device bridge_slave_0 left promiscuous mode [ 464.187144][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.194508][T20837] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6200'. [ 464.259142][ T410] device veth1_macvtap left promiscuous mode [ 464.283556][ T410] device veth1_vlan left promiscuous mode [ 464.303941][ T410] device veth0_vlan left promiscuous mode [ 464.931668][ T410] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 465.130515][ T410] team0 (unregistering): Port device team_slave_1 removed [ 465.168454][ T410] team0 (unregistering): Port device team_slave_0 removed [ 465.211124][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.251680][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.324461][ T410] bond0 (unregistering): (slave team0): Releasing backup interface [ 465.335720][ T410] team0 (unregistering): Port device bridge0 removed [ 465.361187][ T410] bond0 (unregistering): Released all slaves [ 465.459086][T20856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6207'. [ 465.511357][T20878] delete_channel: no stack [ 465.535138][T20689] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.576498][T20689] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.610776][T20689] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.679524][T20689] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.813483][ T4174] Bluetooth: hci3: command 0x0419 tx timeout [ 466.124233][T20689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.334092][T20689] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.380395][T20929] device sit0 entered promiscuous mode [ 466.968938][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.994287][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.029304][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.049450][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.086950][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.094183][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.127580][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.148292][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.169938][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.177322][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.243944][T20965] netlink: 'syz.0.6239': attribute type 10 has an invalid length. [ 467.317309][T20965] team0: Port device hsr_slave_0 added [ 467.334130][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.349780][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.397393][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.424564][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.460872][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.501613][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.524128][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.533865][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.566692][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.598701][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.617631][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.640109][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.663907][T20971] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 467.704678][T20689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.766779][T20987] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6245'. [ 467.805669][T20992] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6245'. [ 467.951481][T21000] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6247'. [ 468.070927][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.079288][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.109976][T20689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.673485][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 468.688303][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.814049][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 468.834580][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.902185][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.930815][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.956455][T20689] device veth0_vlan entered promiscuous mode [ 469.018992][T20689] device veth1_vlan entered promiscuous mode [ 469.131158][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 469.162263][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 469.228058][T20689] device veth0_macvtap entered promiscuous mode [ 469.365429][T20689] device veth1_macvtap entered promiscuous mode [ 469.427429][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.467838][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.510862][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.539906][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.572929][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.600884][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.623225][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.634217][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.659155][T20689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.743492][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 469.764077][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 469.779293][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.798937][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 469.812832][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.853206][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.883105][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.894396][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.914745][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.933056][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.960611][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.974268][T21070] netlink: 'syz.0.6269': attribute type 9 has an invalid length. [ 469.982043][T21070] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6269'. [ 470.022078][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.067617][T20689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.096160][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.120289][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.152609][T20689] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.168166][T20689] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.195833][T20689] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.217476][T20689] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.321572][T21084] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.6273'. [ 470.544888][T19945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.567724][T19945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.672009][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 470.700458][T21094] netlink: 'syz.0.6276': attribute type 21 has an invalid length. [ 470.701327][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.723949][T21094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6276'. [ 470.825612][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.888029][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 472.288186][T21126] device sit0 entered promiscuous mode [ 474.365225][T21130] chnl_net:caif_netlink_parms(): no params data found [ 474.523267][ T1111] Bluetooth: hci5: command 0x0409 tx timeout [ 474.652038][T21130] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.659531][T21130] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.681072][T21130] device bridge_slave_0 entered promiscuous mode [ 474.763441][T21130] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.781017][T21130] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.822049][T21130] device bridge_slave_1 entered promiscuous mode [ 474.915427][T21130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.971602][T21130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.017389][T21196] net_ratelimit: 155 callbacks suppressed [ 475.017446][T21196] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 475.031179][T21196] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 475.102254][T21130] team0: Port device team_slave_0 added [ 475.136441][T21130] team0: Port device team_slave_1 added [ 475.264925][T21130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.272620][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.335197][T21130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.351241][T21130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.359169][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.459241][T21130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.590511][ T410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.675882][T21130] device hsr_slave_0 entered promiscuous mode [ 475.700428][T21130] device hsr_slave_1 entered promiscuous mode [ 475.717363][T21130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.746082][T21130] Cannot create hsr debugfs directory [ 475.767627][ T410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.861134][ T410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.018181][ T410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.233831][T21245] sctp: [Deprecated]: syz.2.6324 (pid 21245) Use of int in maxseg socket option. [ 476.233831][T21245] Use struct sctp_assoc_value instead [ 476.604392][ T4292] Bluetooth: hci5: command 0x041b tx timeout [ 477.414415][T21284] netlink: 'syz.3.6333': attribute type 21 has an invalid length. [ 477.430409][T21284] netlink: 'syz.3.6333': attribute type 12 has an invalid length. [ 477.458953][T21284] netlink: 'syz.3.6333': attribute type 13 has an invalid length. [ 477.479943][T21284] netlink: 'syz.3.6333': attribute type 14 has an invalid length. [ 477.493663][T21284] netlink: 'syz.3.6333': attribute type 15 has an invalid length. [ 477.513459][T21284] netlink: 'syz.3.6333': attribute type 16 has an invalid length. [ 477.573135][T21284] netlink: 'syz.3.6333': attribute type 19 has an invalid length. [ 477.613315][T21284] netlink: 'syz.3.6333': attribute type 21 has an invalid length. [ 477.621174][T21284] netlink: 'syz.3.6333': attribute type 22 has an invalid length. [ 477.635964][T21284] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.6333'. [ 477.770819][T21130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.843616][T21130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.912287][T21130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.945513][T21318] device wlan0 entered promiscuous mode [ 477.954468][T21312] tun0: tun_chr_ioctl cmd 2148553947 [ 477.982677][T21130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.454731][T21130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.580907][T21353] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6349'. [ 478.635285][T21130] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.653639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.664829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.703138][ T4292] Bluetooth: hci5: command 0x040f tx timeout [ 478.734283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 478.759123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.779854][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.787028][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.834147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 478.855299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.878899][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.886163][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.912801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 478.945370][ T410] batman_adv: batadv0: Removing interface: team0 [ 478.959628][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.010163][ T410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.053827][ T410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.123524][ T410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.171960][ T410] device bridge_slave_1 left promiscuous mode [ 479.178756][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.187858][ T410] device bridge_slave_0 left promiscuous mode [ 479.195501][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.209906][ T410] device veth0_macvtap left promiscuous mode [ 479.381993][ T410] team0 (unregistering): Port device team_slave_1 removed [ 479.399170][ T410] team0 (unregistering): Port device team_slave_0 removed [ 479.416204][ T410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.432975][ T410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.510707][ T410] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 479.520163][ T410] bond0 (unregistering): Released all slaves [ 479.582376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.590785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.644291][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.662290][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.697618][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.727503][T21130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.739061][T21130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.837634][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 479.848799][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 479.858478][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.868297][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.886840][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.901005][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.918973][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.290441][T21410] sctp: [Deprecated]: syz.1.6369 (pid 21410) Use of int in maxseg socket option. [ 480.290441][T21410] Use struct sctp_assoc_value instead [ 480.358347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.374286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.408972][T21130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.773430][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 480.938982][T21447] netlink: 'syz.3.6384': attribute type 21 has an invalid length. [ 480.963058][T21447] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6384'. [ 481.075368][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 481.098043][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.119467][T21448] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6383'. [ 481.272686][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 481.314613][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.336238][T21130] device veth0_vlan entered promiscuous mode [ 481.347157][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.374937][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.420682][T21130] device veth1_vlan entered promiscuous mode [ 481.565973][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 481.594304][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 481.613898][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.635948][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.679002][T21130] device veth0_macvtap entered promiscuous mode [ 481.699206][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 481.728123][T21130] device veth1_macvtap entered promiscuous mode [ 481.810055][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.873053][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.882918][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.964905][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.993195][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.013052][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.037941][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.073146][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.109989][T21130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.192725][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.228811][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.267041][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.310683][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.331347][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.362513][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.409539][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.431124][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.467803][T21130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.486493][T21130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.512977][T21130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.540451][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.584319][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.659936][T21130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.675968][T21130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.691419][T21130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.707964][T21130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.740065][T21494] validate_nla: 2 callbacks suppressed [ 482.740081][T21494] netlink: 'syz.0.6403': attribute type 10 has an invalid length. [ 482.779236][T21494] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.786881][T21494] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.012767][T19945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.051509][T19945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.062524][T21510] netlink: 'syz.2.6410': attribute type 11 has an invalid length. [ 483.100333][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.135539][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.161499][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.202605][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 483.848776][T21539] netlink: 'syz.2.6422': attribute type 10 has an invalid length. [ 483.862587][T21539] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.870275][T21539] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.964174][T21539] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.971379][T21539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.979033][T21539] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.986221][T21539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.997812][T21539] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 484.424220][T21544] chnl_net:caif_netlink_parms(): no params data found [ 484.572231][T21544] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.580298][T21544] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.608885][T21544] device bridge_slave_0 entered promiscuous mode [ 484.645092][T21544] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.657319][T21544] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.672229][T21544] device bridge_slave_1 entered promiscuous mode [ 484.702975][T21544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.724673][T21544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.808199][T21595] netlink: 'syz.1.6443': attribute type 3 has an invalid length. [ 484.836408][T21585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6436'. [ 484.850386][T21595] netlink: 'syz.1.6443': attribute type 1 has an invalid length. [ 484.850408][T21595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6443'. [ 485.019068][T21544] team0: Port device team_slave_0 added [ 485.074115][T21544] team0: Port device team_slave_1 added [ 485.218469][T21544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.226364][T21544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.253955][T21544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.313175][T21544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.325594][T21544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.355406][T21544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.480007][T21616] netlink: 'syz.1.6453': attribute type 21 has an invalid length. [ 485.488920][T21616] netlink: 'syz.1.6453': attribute type 6 has an invalid length. [ 485.496886][T21616] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6453'. [ 485.579175][T21544] device hsr_slave_0 entered promiscuous mode [ 485.621522][T21544] device hsr_slave_1 entered promiscuous mode [ 485.633998][T21544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.646551][T21544] Cannot create hsr debugfs directory [ 485.970217][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 486.015763][T21544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.032277][T21643] netlink: 'syz.3.6465': attribute type 2 has an invalid length. [ 486.043648][T21643] netlink: 'syz.3.6465': attribute type 8 has an invalid length. [ 486.051424][T21643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6465'. [ 486.071911][T21646] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6465'. [ 486.181388][T21544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.322189][T21544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.473267][T21544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.854662][T21544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.892072][T21544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.915751][T21544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 486.952932][T21544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 487.037674][T21665] delete_channel: no stack [ 487.229704][T21680] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6478'. [ 487.348529][T21680] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.6478'. [ 487.388714][T21544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.490805][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.510302][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.539304][T21544] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.592305][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.614071][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.652846][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.660035][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.727283][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.750276][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.801547][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.832367][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.839577][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.878352][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.964145][T21692] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6483'. [ 488.011548][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.030309][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.043987][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 488.076822][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.116197][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.180249][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.206140][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.287288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.314300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.323620][T21695] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6484'. [ 488.348872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.384744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.411525][T21544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.994671][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 489.002302][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 489.253385][T21544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.362696][T21721] netlink: 'syz.1.6490': attribute type 21 has an invalid length. [ 489.401618][T21721] netlink: 'syz.1.6490': attribute type 1 has an invalid length. [ 489.492471][T21721] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.6490'. [ 489.576451][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 489.609650][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 489.653449][T21725] netlink: 'syz.3.6492': attribute type 21 has an invalid length. [ 489.706771][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 489.742807][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 489.787581][T21544] device veth0_vlan entered promiscuous mode [ 489.801331][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 489.830303][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 489.859275][T21544] device veth1_vlan entered promiscuous mode [ 489.962147][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 489.970726][T21732] delete_channel: no stack [ 489.984577][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 490.009770][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.030782][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.057102][T21544] device veth0_macvtap entered promiscuous mode [ 490.092498][T21544] device veth1_macvtap entered promiscuous mode [ 490.123274][T12571] Bluetooth: hci1: command 0x040f tx timeout [ 490.173531][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.222232][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.287594][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.396372][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.437392][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.503528][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.590579][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.642757][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.714402][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.803672][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.891657][T21544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.946140][T21739] netlink: 'syz.3.6496': attribute type 7 has an invalid length. [ 490.971333][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 491.004403][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.064669][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.132617][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.218942][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.256843][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.298866][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.340723][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.373732][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.384522][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.394399][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.432249][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.482007][T21544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.509986][T21544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.570648][T21544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.619283][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.645415][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.676559][T21746] netlink: 'syz.2.6499': attribute type 5 has an invalid length. [ 491.706278][T21544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.751259][T21544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.822077][T21544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.849575][T21544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.160790][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.200290][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.208485][T11173] Bluetooth: hci1: command 0x0419 tx timeout [ 492.234367][T19945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.238555][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 492.263750][T19945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.327415][T19945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 492.895959][T21789] __nla_validate_parse: 1 callbacks suppressed [ 492.895980][T21789] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.6514'. [ 494.044727][T21820] netlink: 'syz.3.6524': attribute type 10 has an invalid length. [ 494.137980][T21820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.890924][T21847] netlink: 'syz.1.6534': attribute type 1 has an invalid length. [ 495.015561][T21847] netlink: 11922 bytes leftover after parsing attributes in process `syz.1.6534'. [ 495.352150][T21851] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6537'. [ 496.927478][T21881] netlink: 'syz.3.6549': attribute type 10 has an invalid length. [ 497.007313][T21881] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.014924][T21881] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.186105][T21881] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.193273][T21881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.200773][T21881] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.207947][T21881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.265839][T21881] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 497.343538][T21882] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6549'. [ 497.661485][T21894] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6551'. [ 499.169622][T21936] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.6568'. [ 499.485055][T21945] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6570'. [ 499.906715][T21958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6575'. [ 499.966134][T21958] netlink: 119 bytes leftover after parsing attributes in process `syz.3.6575'. [ 501.128018][T22007] netlink: 'syz.0.6595': attribute type 25 has an invalid length. [ 501.161516][T22007] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.6595'. [ 501.349357][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.356995][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.994810][T22039] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6604'. [ 502.223218][T22051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6607'. [ 502.482592][T22061] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.6612'. [ 502.900891][T22060] task_rename: port 1(team0) entered blocking state [ 502.912869][T22060] task_rename: port 1(team0) entered disabled state [ 502.939829][T22060] device team0 entered promiscuous mode [ 502.982941][T22060] device team_slave_0 entered promiscuous mode [ 503.008204][T22060] device team_slave_1 entered promiscuous mode [ 503.089358][T22080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6618'. [ 503.844401][T22112] netlink: 'syz.0.6630': attribute type 1 has an invalid length. [ 503.873432][T22109] netlink: 'syz.3.6631': attribute type 1 has an invalid length. [ 504.140484][T22129] netlink: 'syz.1.6634': attribute type 10 has an invalid length. [ 504.179407][T22129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6634'. [ 504.315333][T22129] bridge0: port 3(ipvlan1) entered blocking state [ 504.386258][T22129] bridge0: port 3(ipvlan1) entered disabled state [ 504.410359][T22129] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 504.851588][T22141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.893739][T22141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.931909][T22141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.952868][T22142] netlink: 'syz.0.6640': attribute type 1 has an invalid length. [ 504.982717][T22141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.014277][T22142] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6640'. [ 505.049241][T22149] netlink: 'syz.0.6640': attribute type 29 has an invalid length. [ 505.260088][T22149] netlink: 'syz.0.6640': attribute type 29 has an invalid length. [ 505.365066][T22161] netlink: 'syz.3.6648': attribute type 10 has an invalid length. [ 505.502958][T22161] team0: Port device macvlan1 added [ 506.033242][T22157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.246589][T22183] netlink: 'syz.3.6654': attribute type 4 has an invalid length. [ 506.313958][T22183] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6654'. [ 506.982047][T22215] netlink: 'syz.2.6665': attribute type 10 has an invalid length. [ 507.142867][T22215] team0: Port device macvlan1 added [ 507.436703][T22232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6671'. [ 507.499927][T22225] task_rename: port 1(team0) entered blocking state [ 507.539904][T22225] task_rename: port 1(team0) entered disabled state [ 507.576688][T22234] netlink: 'syz.0.6671': attribute type 9 has an invalid length. [ 507.594399][T22234] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6671'. [ 507.645749][T22225] device team0 entered promiscuous mode [ 507.651372][T22225] device team_slave_0 entered promiscuous mode [ 507.699236][T22225] device team_slave_1 entered promiscuous mode [ 507.724239][T22225] device macvlan1 entered promiscuous mode [ 507.831064][T22233] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.6669'. [ 508.001813][T22241] device  entered promiscuous mode [ 508.232397][T22251] netlink: 'syz.0.6675': attribute type 7 has an invalid length. [ 509.322696][T22307] netlink: 'syz.3.6701': attribute type 39 has an invalid length. [ 509.597217][T22322] netlink: 'syz.1.6707': attribute type 2 has an invalid length. [ 509.615518][T22322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6707'. [ 509.841003][T22336] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.6712'. [ 510.161340][T22364] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6723'. [ 510.226575][T22364] netlink: set zone limit has 8 unknown bytes [ 510.622891][T19945] device veth0_to_team left promiscuous mode [ 510.672134][T19945] Ÿë: port 1(veth0_to_team) entered disabled state [ 510.760465][T19945] batman_adv: batadv0: Removing interface: team0 [ 510.778394][T19945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.787282][T19945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.808483][T19945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.834376][T19945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.855061][T19945] device bridge_slave_1 left promiscuous mode [ 510.866225][T19945] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.887152][T19945] device bridge_slave_0 left promiscuous mode [ 510.895060][T19945] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.917574][T19945] device veth1_macvtap left promiscuous mode [ 510.938227][T19945] device veth0_macvtap left promiscuous mode [ 510.953433][T19945] device veth1_vlan left promiscuous mode [ 510.964008][T19945] device veth0_vlan left promiscuous mode [ 511.392318][T19945] team0 (unregistering): Port device hsr_slave_0 removed [ 511.479473][T19945] team0 (unregistering): Port device team_slave_1 removed [ 511.509818][T19945] team0 (unregistering): Port device team_slave_0 removed [ 512.231500][T22429] device wlan0 entered promiscuous mode [ 513.151527][T22467] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6760'. [ 514.174892][T22502] device sit0 left promiscuous mode [ 514.559993][T22503] device sit0 entered promiscuous mode [ 514.895219][T22522] device wlan0 left promiscuous mode [ 514.936242][T22522] device wlan0 entered promiscuous mode [ 515.123164][T22527] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6783'. [ 515.953914][T22551] netlink: 'syz.1.6791': attribute type 10 has an invalid length. [ 516.049483][T22551] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6791'. [ 516.091980][T22550] netlink: 'syz.1.6791': attribute type 10 has an invalid length. [ 516.274201][T22550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6791'. [ 517.069592][T22583] device wlan0 entered promiscuous mode [ 517.156752][T22588] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6803'. [ 518.532038][T22637] netlink: 'syz.2.6823': attribute type 10 has an invalid length. [ 518.591321][T22640] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6824'. [ 518.614770][T22637] device veth1_macvtap left promiscuous mode [ 520.075683][T22700] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6844'. [ 520.423950][T22710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6850'. [ 520.772085][T22710] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.855224][T22710] device bridge_slave_0 left promiscuous mode [ 520.861388][T22710] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.057844][T22739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6856'. [ 521.135662][T22739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6856'. [ 521.293974][T22752] netlink: 'syz.0.6859': attribute type 29 has an invalid length. [ 521.368386][T22752] netlink: 'syz.0.6859': attribute type 29 has an invalid length. [ 521.413041][T22758] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6864'. [ 522.253277][T22773] netlink: 'syz.4.6870': attribute type 10 has an invalid length. [ 522.301018][T22773] device veth1_macvtap left promiscuous mode [ 522.470143][T22788] device wg2 entered promiscuous mode [ 523.149586][T22811] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6886'. [ 523.822344][T22849] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6904'. [ 524.222773][T22880] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6915'. [ 524.538918][T22888] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6920'. [ 525.040498][T22918] netlink: 'syz.4.6929': attribute type 3 has an invalid length. [ 525.103485][T22918] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6929'. [ 525.227091][T22930] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6933'. [ 526.074051][T22943] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6939'. [ 526.149154][T22955] netlink: 'syz.1.6939': attribute type 41 has an invalid length. [ 526.178903][T22955] netlink: 'syz.1.6939': attribute type 4 has an invalid length. [ 526.229864][T22955] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6939'. [ 526.360307][T22955] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 526.538393][T22974] netlink: 'syz.2.6951': attribute type 10 has an invalid length. [ 526.558326][T22974] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6951'. [ 526.618443][T22976] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6952'. [ 526.813535][T22987] netlink: zone id is out of range [ 526.855517][T22987] netlink: set zone limit has 8 unknown bytes [ 526.926741][T22990] delete_channel: no stack [ 527.434326][T23026] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6967'. [ 528.376298][T23067] device syzkaller0 entered promiscuous mode [ 528.427942][T23067] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 528.764011][ T9] wlan1: Trigger new scan to find an IBSS to join [ 529.508605][T23113] netlink: 'syz.3.7005': attribute type 9 has an invalid length. [ 529.575003][T23113] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7005'. [ 529.629325][T23124] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.7005'. [ 530.211381][T23153] device syzkaller0 entered promiscuous mode [ 530.283180][T23165] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 530.409213][T23167] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7024'. [ 531.517747][T23194] netlink: 'syz.0.7036': attribute type 21 has an invalid length. [ 531.536210][T23194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7036'. [ 531.681404][T23201] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7037'. [ 531.695605][T23204] netlink: 'syz.1.7038': attribute type 4 has an invalid length. [ 531.706007][T23204] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7038'. [ 531.741694][T23211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7039'. [ 531.748259][T23204] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 531.785395][T23211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7039'. [ 532.566887][T23266] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7061'. [ 533.475650][T23308] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 533.723535][T19945] wlan1: Trigger new scan to find an IBSS to join [ 533.929921][T23353] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.7092'. [ 533.980390][T23353] openvswitch: netlink: Message has 20476 unknown bytes. [ 534.625568][T19945] wlan1: Creating new IBSS network, BSSID 2a:4c:e4:26:08:c5 [ 534.733095][T23388] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 535.286592][T23412] can: request_module (can-proto-0) failed. [ 535.310525][T23422] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.7121'. [ 535.351828][T23422] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.402377][T23422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7121'. [ 535.837966][T23450] tun0: tun_chr_ioctl cmd 1074025675 [ 535.857534][T23450] tun0: persist disabled [ 535.914849][T23460] tun0: tun_chr_ioctl cmd 2147767517 [ 536.569623][T23489] netlink: 'syz.1.7144': attribute type 2 has an invalid length. [ 536.615812][T23489] netlink: 'syz.1.7144': attribute type 8 has an invalid length. [ 536.657262][T23489] netlink: 'syz.1.7144': attribute type 9 has an invalid length. [ 536.696462][T23489] netlink: 'syz.1.7144': attribute type 10 has an invalid length. [ 536.716806][T23489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7144'. [ 536.743261][T23494] netlink: 'syz.3.7147': attribute type 10 has an invalid length. [ 536.841106][T23494] device team0 left promiscuous mode [ 536.850864][T23494] device team_slave_0 left promiscuous mode [ 536.864030][T23494] device team_slave_1 left promiscuous mode [ 536.874922][T23494] device macvlan1 left promiscuous mode [ 536.891472][T23494] task_rename: port 1(team0) entered disabled state [ 536.938742][T23494] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.966109][T23494] bond0: (slave team0): Enslaving as an active interface with an up link [ 537.189440][T23525] netlink: 'syz.0.7159': attribute type 5 has an invalid length. [ 537.233079][T23525] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7159'. [ 537.564643][T23537] bond_slave_1: mtu less than device minimum [ 538.242195][T23578] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.7181'. [ 538.511179][T23588] netlink: 'syz.0.7185': attribute type 25 has an invalid length. [ 538.528554][T23589] bond_slave_1: mtu less than device minimum [ 538.540421][T23588] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.7185'. [ 538.742691][T23588] netlink: 'syz.0.7185': attribute type 39 has an invalid length. [ 539.142814][T23602] netlink: 'syz.1.7189': attribute type 3 has an invalid length. [ 539.188466][T23602] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7189'. [ 540.256530][T23659] netlink: 'syz.1.7211': attribute type 3 has an invalid length. [ 540.296993][T23659] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7211'. [ 540.508498][T23668] netlink: 'syz.3.7214': attribute type 1 has an invalid length. [ 540.554588][T23668] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.7214'. [ 540.636989][T23668] netlink: 'syz.3.7214': attribute type 1 has an invalid length. [ 542.150021][T23746] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7246'. [ 543.499247][T23831] netlink: 'syz.3.7275': attribute type 10 has an invalid length. [ 544.600336][T23850] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7282'. [ 545.266166][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.271620][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.404810][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.425096][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.430899][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.488137][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.543522][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.599836][T23927] netlink: 'syz.1.7312': attribute type 19 has an invalid length. [ 545.631326][T23927] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7312'. [ 545.683931][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.706971][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.712737][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.733247][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.762584][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.779805][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.813576][T23935] netlink: 'syz.2.7315': attribute type 2 has an invalid length. [ 545.839270][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.849699][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.873395][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.888583][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.894863][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.900416][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.975592][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 545.999532][T23943] device wlan1 entered promiscuous mode [ 546.041471][T23918] tun0: tun_chr_ioctl cmd 1074025681 [ 546.204720][T23954] syz.1.7323[23954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 546.204862][T23954] syz.1.7323[23954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 546.242131][T23954] syz.1.7323[23954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 546.288415][T23954] syz.1.7323[23954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 546.327709][T23954] ÿÿÿÿÿÿ: renamed from vlan1 [ 546.798992][T24004] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.7341'. [ 546.839821][T24004] netlink: 'syz.3.7341': attribute type 2 has an invalid length. [ 546.857448][T24004] netlink: 'syz.3.7341': attribute type 8 has an invalid length. [ 546.887778][T24004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7341'. [ 547.057122][T24019] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7350'. [ 547.123421][T24028] netlink: 'syz.0.7349': attribute type 21 has an invalid length. [ 547.520479][T24046] device wlan0 entered promiscuous mode [ 548.431043][T24074] netlink: 'syz.1.7368': attribute type 12 has an invalid length. [ 548.453049][T24074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7368'. [ 548.624524][T24073] device syzkaller0 entered promiscuous mode [ 548.883352][T24087] netlink: 'syz.4.7375': attribute type 4 has an invalid length. [ 548.892813][T24087] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7375'. [ 548.992294][T24087] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 549.200037][T24086] delete_channel: no stack [ 549.312848][T24106] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.7382'. [ 549.366432][T24106] netlink: 'syz.0.7382': attribute type 2 has an invalid length. [ 549.401152][T24106] netlink: 'syz.0.7382': attribute type 8 has an invalid length. [ 549.438749][T24106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7382'. [ 549.502944][T24113] netlink: 'syz.4.7384': attribute type 12 has an invalid length. [ 549.521521][T24113] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7384'. [ 549.947978][T24142] netlink: 'syz.2.7394': attribute type 4 has an invalid length. [ 550.003519][T24142] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7394'. [ 550.134350][T24142] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 550.160682][T24143] netlink: 'syz.0.7395': attribute type 10 has an invalid length. [ 550.230014][T24143] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.273748][T24143] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.409216][T24143] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.416719][T24143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.429565][T24143] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.437597][T24143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.497205][T24143] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 550.527323][T24146] IPv6: Can't replace route, no match found [ 550.676593][T24140] delete_channel: no stack [ 550.730745][T24174] netlink: 'syz.0.7404': attribute type 12 has an invalid length. [ 550.762022][T24174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7404'. [ 550.986883][T24196] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7415'. [ 551.096811][T24193] netlink: 'syz.2.7414': attribute type 9 has an invalid length. [ 551.105248][T24193] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7414'. [ 551.120780][T24196] netlink: 'syz.3.7415': attribute type 13 has an invalid length. [ 551.169817][T24196] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.456485][T24212] netlink: 'syz.3.7421': attribute type 4 has an invalid length. [ 551.494174][T24212] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7421'. [ 551.820232][T24212] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 551.935501][T24233] device syzkaller0 entered promiscuous mode [ 552.247818][T24211] delete_channel: no stack [ 552.711320][T24283] device syzkaller0 entered promiscuous mode [ 552.903188][T24296] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 553.751563][T24349] __nla_validate_parse: 5 callbacks suppressed [ 553.751606][T24349] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7472'. [ 553.848741][T24354] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7474'. [ 553.886285][T24362] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7474'. [ 554.326051][T24376] validate_nla: 6 callbacks suppressed [ 554.326158][T24376] netlink: 'syz.1.7482': attribute type 10 has an invalid length. [ 554.393957][T24376] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.406515][T24376] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.138178][T24376] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.152713][T24376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.173019][T24376] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.180627][T24376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.190885][T24376] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 556.211466][T24443] netlink: 'syz.3.7509': attribute type 21 has an invalid length. [ 556.239611][T24443] netlink: 'syz.3.7509': attribute type 1 has an invalid length. [ 556.285353][T24443] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7509'. [ 556.558814][T24465] netlink: 'syz.2.7516': attribute type 10 has an invalid length. [ 556.590423][T24465] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7516'. [ 556.632060][T24465] device team0 entered promiscuous mode [ 556.676992][T24465] device team_slave_0 entered promiscuous mode [ 556.693599][T24465] device team_slave_1 entered promiscuous mode [ 556.707427][T24465] device macvlan1 entered promiscuous mode [ 556.738309][T24465] bridge0: port 1(team0) entered blocking state [ 556.773531][T24465] bridge0: port 1(team0) entered disabled state [ 556.832485][T24462] device sit0 entered promiscuous mode [ 557.035087][T24472] netlink: 747 bytes leftover after parsing attributes in process `syz.4.7520'. [ 558.243432][T24514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7535'. [ 558.507050][T24524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.514446][T24524] IPv6: NLM_F_CREATE should be set when creating new route [ 558.521903][T24524] IPv6: NLM_F_CREATE should be set when creating new route [ 559.138615][T24546] netlink: 'syz.3.7550': attribute type 6 has an invalid length. [ 559.723370][ T4174] Bluetooth: hci0: command 0x0406 tx timeout [ 561.011607][T24619] netlink: 'syz.2.7573': attribute type 4 has an invalid length. [ 561.061296][T24619] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7573'. [ 561.426364][T24628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.765652][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.772010][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.254980][T24686] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.7599'. [ 564.358289][T24730] netlink: 'syz.3.7612': attribute type 29 has an invalid length. [ 564.408982][T24730] netlink: 'syz.3.7612': attribute type 29 has an invalid length. [ 564.539809][T24743] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7615'. [ 565.013954][T24754] netlink: 'syz.3.7623': attribute type 5 has an invalid length. [ 565.202014][T24758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7625'. [ 565.276450][T24758] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.387340][T24758] device bridge_slave_0 left promiscuous mode [ 565.415322][T24758] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.561043][T24765] netlink: 'syz.3.7628': attribute type 21 has an invalid length. [ 565.603457][T24765] netlink: 'syz.3.7628': attribute type 20 has an invalid length. [ 565.696081][T24765] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.052169][T24789] netlink: 'syz.0.7638': attribute type 1 has an invalid length. [ 566.090382][T24789] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.7638'. [ 566.167292][T24789] netlink: 'syz.0.7638': attribute type 1 has an invalid length. [ 566.206512][T24799] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7642'. [ 566.989442][T24819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7650'. [ 567.087590][T24819] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.205190][T24819] device bridge_slave_0 left promiscuous mode [ 567.222320][T24819] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.253129][ T4270] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 567.556199][T24845] netlink: 'syz.1.7659': attribute type 21 has an invalid length. [ 568.276821][T24874] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.7673'. [ 568.322932][T24876] netlink: 'syz.3.7674': attribute type 10 has an invalid length. [ 568.389313][T24876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 568.464112][T24876] team0: Port device hsr0 added [ 568.702728][T24893] netlink: 'syz.1.7679': attribute type 10 has an invalid length. [ 568.773670][T24893] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7679'. [ 569.137330][T24902] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.183567][T24888] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7675'. [ 569.330873][T24888] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.588945][T24913] netlink: 'syz.3.7688': attribute type 10 has an invalid length. [ 569.703289][T24888] device bridge_slave_0 left promiscuous mode [ 569.727459][T24888] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.005786][T24904] netlink: 'syz.0.7683': attribute type 22 has an invalid length. [ 570.028846][T24904] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7683'. [ 570.179480][T24913] netlink: 'syz.3.7688': attribute type 10 has an invalid length. [ 570.486022][T24940] syz.2.7697[24940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.486119][T24940] syz.2.7697[24940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.602272][T24944] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.7698'. [ 571.114877][T24975] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.7709'. [ 571.135887][T24975] netlink: zone id is out of range [ 571.142046][T24975] netlink: zone id is out of range [ 571.143849][T24967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.148056][T24975] netlink: zone id is out of range [ 571.163845][T24975] netlink: zone id is out of range [ 571.169431][T24974] netlink: 'syz.1.7709': attribute type 10 has an invalid length. [ 571.180159][T24975] netlink: zone id is out of range [ 571.191170][T24975] netlink: zone id is out of range [ 571.196612][T24975] netlink: zone id is out of range [ 571.202560][T24975] netlink: zone id is out of range [ 571.208857][T24975] netlink: zone id is out of range [ 571.215093][T24975] netlink: zone id is out of range [ 571.321868][T24974] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.340495][T24974] bond0: (slave team0): Enslaving as an active interface with an up link [ 571.359901][T24971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7707'. [ 571.445492][T24971] device bridge_slave_0 left promiscuous mode [ 571.470413][T24971] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.468358][T25030] device syzkaller0 entered promiscuous mode [ 572.556681][T25038] cgroup: fork rejected by pids controller in /syz3 [ 572.730411][T25051] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 572.779539][T25051] device syzkaller0 entered promiscuous mode [ 574.505872][T25184] device syzkaller0 entered promiscuous mode [ 575.039227][T25182] chnl_net:caif_netlink_parms(): no params data found [ 575.083120][T12571] Bluetooth: hci4: command 0x0406 tx timeout [ 575.633115][T25182] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.640249][T25182] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.678257][T25182] device bridge_slave_0 entered promiscuous mode [ 575.714959][T25182] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.733458][T25182] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.742205][T25182] device bridge_slave_1 entered promiscuous mode [ 575.953976][T25182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.028882][T25182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.150223][ T4305] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.203106][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 576.234676][T25182] team0: Port device team_slave_0 added [ 576.259644][ T4305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.319698][T25182] team0: Port device team_slave_1 added [ 576.338888][T25272] Ÿë: port 1(veth0_to_team) entered blocking state [ 576.353231][T25272] Ÿë: port 1(veth0_to_team) entered disabled state [ 576.379027][T25272] device veth0_to_team entered promiscuous mode [ 576.444662][T25182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.452097][T25182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.563226][T25182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.610798][ T4305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.680991][T25182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.693056][T25182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.763787][T25291] netlink: 'syz.1.7792': attribute type 2 has an invalid length. [ 576.771731][T25182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.791569][T25291] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.7792'. [ 576.908554][ T4305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.999881][T25182] device hsr_slave_0 entered promiscuous mode [ 577.011824][T25182] device hsr_slave_1 entered promiscuous mode [ 577.024213][T25182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.036656][T25182] Cannot create hsr debugfs directory [ 577.993647][T25343] netlink: 'syz.2.7808': attribute type 2 has an invalid length. [ 578.001702][T25343] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.7808'. [ 578.289378][T25182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 578.297535][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 578.332829][T25182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 578.401688][T25182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 578.466667][T25182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 578.839485][T25385] À: port 1(vlan0) entered blocking state [ 578.868382][T25385] À: port 1(vlan0) entered disabled state [ 578.901043][T25385] device vlan0 entered promiscuous mode [ 578.924902][T25370] À: port 1(vlan0) entered blocking state [ 578.930816][T25370] À: port 1(vlan0) entered forwarding state [ 578.989895][T25182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.107237][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 579.133837][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 579.165005][T25182] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.141269][T25414] netlink: 'syz.4.7824': attribute type 2 has an invalid length. [ 580.181864][T25414] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.7824'. [ 580.363785][T12569] Bluetooth: hci2: command 0x040f tx timeout [ 582.133308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 582.142110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 582.165619][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.172756][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.181114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 582.192194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 582.201272][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.208410][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.217034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 582.238512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 582.247128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 582.256715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 582.269855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.304024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 582.319352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 582.328638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 582.346995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 582.360326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 582.380521][T25182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.392895][T25182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 582.412458][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 582.432900][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 582.454266][T12571] Bluetooth: hci2: command 0x0419 tx timeout [ 582.485098][ T4305] device hsr_slave_0 left promiscuous mode [ 582.504821][ T4305] device hsr_slave_1 left promiscuous mode [ 582.512575][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.529131][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.541111][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.560530][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.573929][ T4305] device bridge_slave_1 left promiscuous mode [ 582.590429][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.607368][ T4305] device veth1_vlan left promiscuous mode [ 582.617180][ T4305] device veth0_vlan left promiscuous mode [ 582.872871][ T4305] team0 (unregistering): Port device macvlan1 removed [ 582.906654][ T4305] team0 (unregistering): Port device hsr0 removed [ 582.941951][ T4305] team0 (unregistering): Port device team_slave_1 removed [ 582.956957][ T4305] team0 (unregistering): Port device team_slave_0 removed [ 582.969890][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.985720][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.030539][ T4305] bond0 (unregistering): (slave team0): Releasing backup interface [ 583.058145][ T4305] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 583.068611][ T4305] bond0 (unregistering): Released all slaves [ 583.392364][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 583.400685][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 583.433504][T25182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.488750][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 583.510540][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 583.569544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 583.586960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 583.602238][T25182] device veth0_vlan entered promiscuous mode [ 583.622569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 583.646596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 583.668972][T25182] device veth1_vlan entered promiscuous mode [ 583.768110][T25182] device veth0_macvtap entered promiscuous mode [ 583.816347][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 583.832535][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 583.841180][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 583.850533][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 583.863771][T25182] device veth1_macvtap entered promiscuous mode [ 583.889399][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 583.909177][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 584.016366][T25182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.027656][T25182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.038342][T25182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.049825][T25182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.060426][T25182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.071720][T25182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.093797][T25182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.143454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 584.165624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 584.199803][T25182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.228791][T25182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.241558][T25182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.259131][T25182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.271118][T25182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.287349][T25182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.314405][T25182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.330714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 584.340489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 584.368882][T25182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.391711][T25182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.401615][T25182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.410978][T25182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.581268][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.615799][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.661275][T25493] netlink: 'syz.4.7852': attribute type 4 has an invalid length. [ 584.678637][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 584.694634][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.729575][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.749275][T25493] netlink: 'syz.4.7852': attribute type 8 has an invalid length. [ 584.779225][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 584.817661][T25493] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.7852'. [ 586.230722][T25568] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7884'. [ 586.316328][T25567] ref_ctr_offset mismatch. inode: 0x5b7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 586.336519][T25565] IPv6: Can't replace route, no match found [ 586.370861][T25566] GPL: port 1(macsec0) entered blocking state [ 586.385169][T25565] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.7884'. [ 586.396908][T25566] GPL: port 1(macsec0) entered disabled state [ 586.423867][T25566] device macsec0 entered promiscuous mode [ 587.472758][T25623] netlink: 'syz.2.7904': attribute type 4 has an invalid length. [ 587.489680][T25623] netlink: 'syz.2.7904': attribute type 7 has an invalid length. [ 587.500205][T25623] netlink: 198236 bytes leftover after parsing attributes in process `syz.2.7904'. [ 587.989201][T25650] device sit0 left promiscuous mode [ 588.121399][T25662] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.147243][T25650] device sit0 entered promiscuous mode [ 589.740259][T25768] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 589.826152][T25768] net_ratelimit: 4 callbacks suppressed [ 589.826171][T25768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.745937][T25834] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.765716][T25843] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.7989'. [ 595.063406][T25895] delete_channel: no stack [ 595.499416][T25918] netlink: 'syz.0.8020': attribute type 10 has an invalid length. [ 595.563143][ T4257] Bluetooth: hci5: command 0x0406 tx timeout [ 595.764429][T25918] device macsec0 left promiscuous mode [ 595.783279][T25918] GPL: port 1(macsec0) entered disabled state [ 598.358508][T25909] ------------[ cut here ]------------ [ 598.364176][T25909] WARNING: CPU: 0 PID: 25909 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 598.374024][T25909] Modules linked in: [ 598.378017][T25909] CPU: 0 PID: 25909 Comm: syz.2.8017 Not tainted syzkaller #0 [ 598.385641][T25909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.395949][T25909] RIP: 0010:perf_pending_task+0x358/0x470 [ 598.401694][T25909] Code: ff 84 db 75 14 e8 e8 9f de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 9f de ff e8 57 4e 67 ff eb e5 e8 c8 9f de ff <0f> 0b e9 f3 fe ff ff e8 bc 9f de ff 48 c7 c7 00 21 1a 8c 4c 89 f6 [ 598.421482][T25909] RSP: 0018:ffffc900031cf9d8 EFLAGS: 00010293 [ 598.427619][T25909] RAX: ffffffff81992c48 RBX: ffff88802353efc0 RCX: ffff888020561dc0 [ 598.435798][T25909] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 598.443977][T25909] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10040ac4fb [ 598.451965][T25909] R10: ffffed10040ac4fb R11: 1ffff110040ac4fa R12: ffff888020561dc0 [ 598.460080][T25909] R13: ffff888061bb8158 R14: ffff88802353ed90 R15: 1ffff110046a7db2 [ 598.468161][T25909] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 598.477180][T25909] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.483830][T25909] CR2: 0000000100000000 CR3: 000000000be8e000 CR4: 00000000003506f0 [ 598.492067][T25909] DR0: 0000000000000000 DR1: 0100000000000000 DR2: 0000000000000000 [ 598.500130][T25909] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 598.508178][T25909] Call Trace: [ 598.511474][T25909] [ 598.514487][T25909] task_work_run+0x125/0x1a0 [ 598.519098][T25909] do_exit+0x61e/0x20a0 [ 598.523391][T25909] ? put_task_struct+0x80/0x80 [ 598.528175][T25909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 598.534397][T25909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 598.540776][T25909] do_group_exit+0x12e/0x300 [ 598.545520][T25909] get_signal+0x6ca/0x12c0 [ 598.550135][T25909] arch_do_signal_or_restart+0xc1/0x1300 [ 598.555994][T25909] ? futex_exit_release+0x1c0/0x1c0 [ 598.561216][T25909] ? get_sigframe_size+0x10/0x10 [ 598.566285][T25909] ? exit_to_user_mode_loop+0x3b/0x130 [ 598.571866][T25909] exit_to_user_mode_loop+0x9e/0x130 [ 598.577240][T25909] exit_to_user_mode_prepare+0xee/0x180 [ 598.582811][T25909] syscall_exit_to_user_mode+0x16/0x40 [ 598.588466][T25909] do_syscall_64+0x58/0xa0 [ 598.593036][T25909] ? clear_bhb_loop+0x30/0x80 [ 598.597732][T25909] ? clear_bhb_loop+0x30/0x80 [ 598.602436][T25909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.608404][T25909] RIP: 0033:0x7f2ddd5296c9 [ 598.612917][T25909] Code: Unable to access opcode bytes at RIP 0x7f2ddd52969f. [ 598.620403][T25909] RSP: 002b:00007f2ddb7900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 598.628887][T25909] RAX: fffffffffffffe00 RBX: 00007f2ddd77ffa8 RCX: 00007f2ddd5296c9 [ 598.636918][T25909] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ddd77ffa8 [ 598.645040][T25909] RBP: 00007f2ddd77ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 598.653344][T25909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.661441][T25909] R13: 00007f2ddd780038 R14: 00007ffff5e6d430 R15: 00007ffff5e6d518 [ 598.669678][T25909] [ 598.672730][T25909] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 598.680043][T25909] CPU: 0 PID: 25909 Comm: syz.2.8017 Not tainted syzkaller #0 [ 598.687617][T25909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.697868][T25909] Call Trace: [ 598.701165][T25909] [ 598.704097][T25909] dump_stack_lvl+0x168/0x230 [ 598.708786][T25909] ? show_regs_print_info+0x20/0x20 [ 598.714078][T25909] ? load_image+0x3b0/0x3b0 [ 598.718597][T25909] panic+0x2c9/0x7f0 [ 598.722499][T25909] ? bpf_jit_dump+0xd0/0xd0 [ 598.727020][T25909] ? perf_pending_task+0x358/0x470 [ 598.732163][T25909] __warn+0x248/0x2b0 [ 598.736189][T25909] ? perf_pending_task+0x358/0x470 [ 598.741331][T25909] report_bug+0x1b7/0x2e0 [ 598.745794][T25909] handle_bug+0x3a/0x70 [ 598.749957][T25909] exc_invalid_op+0x16/0x40 [ 598.754470][T25909] asm_exc_invalid_op+0x16/0x20 [ 598.759420][T25909] RIP: 0010:perf_pending_task+0x358/0x470 [ 598.765157][T25909] Code: ff 84 db 75 14 e8 e8 9f de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 9f de ff e8 57 4e 67 ff eb e5 e8 c8 9f de ff <0f> 0b e9 f3 fe ff ff e8 bc 9f de ff 48 c7 c7 00 21 1a 8c 4c 89 f6 [ 598.784777][T25909] RSP: 0018:ffffc900031cf9d8 EFLAGS: 00010293 [ 598.790940][T25909] RAX: ffffffff81992c48 RBX: ffff88802353efc0 RCX: ffff888020561dc0 [ 598.798918][T25909] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 598.806897][T25909] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10040ac4fb [ 598.814875][T25909] R10: ffffed10040ac4fb R11: 1ffff110040ac4fa R12: ffff888020561dc0 [ 598.822942][T25909] R13: ffff888061bb8158 R14: ffff88802353ed90 R15: 1ffff110046a7db2 [ 598.830932][T25909] ? perf_pending_task+0x358/0x470 [ 598.836070][T25909] ? perf_pending_task+0x358/0x470 [ 598.841201][T25909] task_work_run+0x125/0x1a0 [ 598.845798][T25909] do_exit+0x61e/0x20a0 [ 598.849970][T25909] ? put_task_struct+0x80/0x80 [ 598.854737][T25909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 598.860903][T25909] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 598.867173][T25909] do_group_exit+0x12e/0x300 [ 598.871866][T25909] get_signal+0x6ca/0x12c0 [ 598.876316][T25909] arch_do_signal_or_restart+0xc1/0x1300 [ 598.881973][T25909] ? futex_exit_release+0x1c0/0x1c0 [ 598.887299][T25909] ? get_sigframe_size+0x10/0x10 [ 598.892349][T25909] ? exit_to_user_mode_loop+0x3b/0x130 [ 598.897819][T25909] exit_to_user_mode_loop+0x9e/0x130 [ 598.903122][T25909] exit_to_user_mode_prepare+0xee/0x180 [ 598.908682][T25909] syscall_exit_to_user_mode+0x16/0x40 [ 598.914144][T25909] do_syscall_64+0x58/0xa0 [ 598.918563][T25909] ? clear_bhb_loop+0x30/0x80 [ 598.923239][T25909] ? clear_bhb_loop+0x30/0x80 [ 598.927933][T25909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 598.933940][T25909] RIP: 0033:0x7f2ddd5296c9 [ 598.938378][T25909] Code: Unable to access opcode bytes at RIP 0x7f2ddd52969f. [ 598.945752][T25909] RSP: 002b:00007f2ddb7900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 598.954258][T25909] RAX: fffffffffffffe00 RBX: 00007f2ddd77ffa8 RCX: 00007f2ddd5296c9 [ 598.962305][T25909] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ddd77ffa8 [ 598.970370][T25909] RBP: 00007f2ddd77ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 598.978353][T25909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.986333][T25909] R13: 00007f2ddd780038 R14: 00007ffff5e6d430 R15: 00007ffff5e6d518 [ 598.994497][T25909] [ 598.997816][T25909] Kernel Offset: disabled [ 599.002274][T25909] Rebooting in 86400 seconds..