last executing test programs: 14.469094084s ago: executing program 3 (id=3328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000200)="1772af29d5fc73e2b3eec74afbe6661819c9a0", 0x13}, {&(0x7f0000000240)="44e0eaa10038fcdcb782b6dfd7758ee955b35cb46f30809d", 0x18}, {&(0x7f0000000340)="8a025b060ecb8d1686", 0x9}], 0x4}, 0x20000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fefcb7907081175f37538e486dd6373ce22667f"], 0xfdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r3}, &(0x7f0000000d80), &(0x7f0000000dc0)=r4}, 0x20) 13.963889259s ago: executing program 3 (id=3333): r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x2, 0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001fc0)={0x6, 0x3, &(0x7f0000001d00)=@framed, &(0x7f0000001dc0)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r2, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0], 0x0, 0xe8, &(0x7f0000000c00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xf8, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x3, [@enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x2}]}, @const={0x5, 0x0, 0x0, 0xa, 0x1}, @fwd={0x7}, @union={0xa, 0x9, 0x0, 0x5, 0x1, 0xc1e, [{0xe, 0x5, 0x5}, {0xd, 0x1, 0x800}, {0x9, 0x3}, {0x4, 0x5, 0x7}, {0xa, 0x3}, {0x1, 0x4, 0x1}, {0x1, 0x0, 0xd}, {0x5, 0x2, 0x5}, {0x3, 0x4, 0xd}]}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x9, [{0xb}, {0x1, 0x2, 0x200}, {0xc, 0x1, 0x3}, {0x7, 0x4, 0xca6}, {0x6, 0x0, 0x7}, {0x8, 0x0, 0x8}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x4}, {0xb, 0x3}, {0x1, 0x2}]}]}, {0x0, [0x61]}}, &(0x7f00000009c0)=""/169, 0x143, 0xa9, 0x1, 0x93a0}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x6, '\x00', r6, r7, 0x3, 0x0, 0x4}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x2}, {0xb, 0x4}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000380)=""/47, 0x38, 0x2f}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@bloom_filter={0x1e, 0x604, 0x6, 0x7f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x7}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001600)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x4, 0x9, 0x0, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7fc}, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000001680), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r13}, &(0x7f00000000c0), &(0x7f0000000100)=r10}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x800, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r13, &(0x7f0000000100), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r13, &(0x7f0000000280)}, 0x20) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000040)=r12, 0x4) 13.4896526s ago: executing program 3 (id=3334): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socket$kcm(0xa, 0x2, 0x11) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x400000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)=ANY=[], &(0x7f0000000940)=""/77, 0xd1, 0x4d, 0x1}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0403, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x28, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18220000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000001140)='syzkaller\x00', 0x80, 0xcf, &(0x7f0000001180)=""/207, 0x40f00, 0x31, '\x00', 0x0, 0x20, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cc", 0x10}], 0x1}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) r5 = gettid() r6 = openat$cgroup_procs(r4, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240)=r5, 0x12) r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 12.276386106s ago: executing program 3 (id=3339): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000150000000000000085100000010000009500000000001000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800), 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r3]}}], 0x20, 0x1}, 0x40) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x4, 0xc}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) 11.227244348s ago: executing program 3 (id=3346): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x7, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa, 0x7, 0x0, 0x1}, 0x48) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x2f, &(0x7f0000000100), 0x120) 10.885498208s ago: executing program 3 (id=3349): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0000000000000000000000010500000020000000000000000000000300000000020000000200000000000080"], 0x0, 0x4e, 0x0, 0x1, 0x4}, 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2862, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x4048000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="32000000000000000000000092000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000001860000002000000000000000800000002a5fffffcffffff1830000003000000000000000000000068170800040000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x10000000}, 0x90) socket$kcm(0x10, 0x3, 0x10) 7.037027145s ago: executing program 2 (id=3371): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000150000000000000085100000010000009500000000001000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800), 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r3]}}], 0x20, 0x1}, 0x40) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x4, 0xc}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) 6.269336932s ago: executing program 4 (id=3377): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.069696579s ago: executing program 4 (id=3379): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x2042, 0x1}, 0x48) socketpair(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.900991515s ago: executing program 2 (id=3382): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 5.870093127s ago: executing program 0 (id=3383): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x9}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000040)=""/1, 0x1}, {&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/108, 0x6c}, {&(0x7f0000000840)=""/80, 0x50}], 0x9}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000)=r4, 0x4) perf_event_open(&(0x7f00000003c0)={0x5, 0xffffffffffffffb9, 0xaf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3, 0x9}, 0xa80, 0x9, 0xffff, 0x1, 0x8000000000000000, 0x0, 0x20, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_clone(0x801000, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="25f6572c4916"}) 4.988298074s ago: executing program 4 (id=3385): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x0, 0x0, 0x10, 0x0, 0x0, 0x88000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90a2, 0xca, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x29, &(0x7f0000000600)}, 0x40002000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x16, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8904, &(0x7f0000000280)={'veth1_to_batadv\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x20}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x0, &(0x7f0000000340)="fe0cd0ab0e40e3085508b171e68dc8994c737d67745cc9832f725417a740929f67f57da66bf7e0b4596c4af9ed66f05b7fc55aadf11f00709b0422e71ff2671bd10b83236e98b6d47ec7ba7628aa1211e1b43a7117e4506d69dab0c32a282c4ce4ca873de9b947aa2f607cd05cd6d6426d7dc9b4eaa2fa8fadae1e4376dafa95c684e93e69bd27c96da699c8c0592e3b851b3542efb10e6eb60db3c2f3d61df9bfa6be6c7abbff18b22454ecb2aa204160676aefcbf343583b4ed6cf9bbffaec83efa32aaa259beb3c86241bb1308b2d043e47db91b564b85cf2846ba267c19bc6e0facfef20a9fa", 0xe8, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 4.733358856s ago: executing program 2 (id=3387): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40107447, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18404, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x31380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x60}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x890c, 0x0) 4.696868579s ago: executing program 0 (id=3388): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.503427216s ago: executing program 0 (id=3389): socket$kcm(0x11, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x10, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000), 0x4) socket$kcm(0x29, 0x0, 0x0) syz_clone(0x801000, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="25f6572c4916"}) 4.429618313s ago: executing program 1 (id=3390): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0000000000000000000000010500000020000000000000000000000300000000020000000200000000000080"], 0x0, 0x4e, 0x0, 0x1, 0x4}, 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2862, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x4048000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="32000000000000000000000092000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000001860000002000000000000000800000002a5fffffcffffff1830000003000000000000000000000068170800040000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x10000000}, 0x90) socket$kcm(0x10, 0x3, 0x10) 4.34503862s ago: executing program 2 (id=3391): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000150000000000000085100000010000009500000000001000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800), 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@rights={{0x1c, 0x1, 0x1, [r1, r2, r3]}}], 0x20, 0x1}, 0x40) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x4, 0xc}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) 4.11568303s ago: executing program 1 (id=3392): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0000000000000000000000010500000020000000000000000000000300000000020000000200000000000080"], 0x0, 0x4e, 0x0, 0x1, 0x4}, 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2862, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="32000000000000000000000092000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000001860000002000000000000000800000002a5fffffcffffff1830000003000000000000000000000068170800040000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x10000000}, 0x90) 4.00235416s ago: executing program 0 (id=3393): socket$kcm(0x2, 0x1, 0x84) r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x2, 0xbb, 0x2, 0x7, 0x0, 0x7, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x8111, 0x100000000, 0x10000, 0x4, 0x4008, 0xc1, 0x109, 0x0, 0x300, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x6) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x7f, 0x1, 0x8, 0x0, 0x8000000000000000, 0x40001, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x4, 0x0, 0x101, 0x1, 0x80000001, 0x9, 0x5, 0x0, 0x1000, 0x0, 0xfffffffffffffff7}, r1, 0x6, r0, 0x8) socket$kcm(0xa, 0x5, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x31) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 3.89076545s ago: executing program 4 (id=3394): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x2042, 0x1}, 0x48) socketpair(0x1, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.866378962s ago: executing program 1 (id=3395): socket$kcm(0x2, 0x1, 0x84) perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x2, 0xbb, 0x2, 0x7, 0x0, 0x7, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x8111, 0x100000000, 0x10000, 0x4, 0x4008, 0xc1, 0x109, 0x0, 0x300, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x6) getpid() socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 3.530069692s ago: executing program 1 (id=3396): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa, 0x7, 0x0, 0x1}, 0x48) r0 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x31, &(0x7f0000000100), 0x120) 3.529678212s ago: executing program 0 (id=3397): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x6, 0x3, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc9, &(0x7f00000000c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x90) 3.406393122s ago: executing program 0 (id=3398): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b00)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x90) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x9}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000000040)=""/1, 0x1}, {&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/147, 0x93}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/108, 0x6c}, {&(0x7f0000000840)=""/80, 0x50}], 0x9}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x84, 0x14, &(0x7f0000000000)=r4, 0x4) perf_event_open(&(0x7f00000003c0)={0x5, 0xffffffffffffffb9, 0xaf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3, 0x9}, 0xa80, 0x9, 0xffff, 0x1, 0x8000000000000000, 0x0, 0x20, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_clone(0x801000, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="25f6572c4916"}) 3.405854983s ago: executing program 1 (id=3399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000200)="1772af29d5fc73e2b3eec74afbe6661819c9a0", 0x13}, {&(0x7f0000000240)="44e0eaa10038fcdcb782b6dfd7758ee955b35cb46f30809d", 0x18}, {&(0x7f0000000340)="8a025b060ecb8d1686", 0x9}], 0x4}, 0x20000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fefcb7907081175f37538e486dd6373ce22667f2f"], 0xfdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r3}, &(0x7f0000000d80), &(0x7f0000000dc0)=r4}, 0x20) 3.293706302s ago: executing program 2 (id=3400): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40107447, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18404, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x31380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x60}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x890c, 0x0) 2.541767038s ago: executing program 4 (id=3401): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.507487871s ago: executing program 1 (id=3402): socket$kcm(0x11, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x10, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000), 0x4) socket$kcm(0x29, 0x0, 0x0) syz_clone(0x801000, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="25f6572c4916"}) 2.326245837s ago: executing program 2 (id=3403): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x0, 0x0, 0x10, 0x0, 0x0, 0x88000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x90a2, 0xca, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x29, &(0x7f0000000600)}, 0x40002000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x16, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8904, &(0x7f0000000280)={'veth1_to_batadv\x00', @random='\x00\x00\x00 \x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x20}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x0, &(0x7f0000000340)="fe0cd0ab0e40e3085508b171e68dc8994c737d67745cc9832f725417a740929f67f57da66bf7e0b4596c4af9ed66f05b7fc55aadf11f00709b0422e71ff2671bd10b83236e98b6d47ec7ba7628aa1211e1b43a7117e4506d69dab0c32a282c4ce4ca873de9b947aa2f607cd05cd6d6426d7dc9b4eaa2fa8fadae1e4376dafa95c684e93e69bd27c96da699c8c0592e3b851b3542efb10e6eb60db3c2f3d61df9bfa6be6c7abbff18b22454ecb2aa204160676aefcbf343583b4ed6cf9bbffaec83efa32aaa259beb3c86241bb1308b2d043e47db91b564b85cf2846ba267c19bc6e0facfef20a9fa", 0xe8, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 0s ago: executing program 4 (id=3404): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0000000000000000000000010500000020000000000000000000000300000000020000000200000000000080"], 0x0, 0x4e, 0x0, 0x1, 0x4}, 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2862, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe80"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x4048000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="32000000000000000000000092000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000001860000002000000000000000800000002a5fffffcffffff1830000003000000000000000000000068170800040000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x10000000}, 0x90) socket$kcm(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 16.671717][ T8630] ? panic+0x764/0x764 [ 316.675902][ T8630] ? __lock_acquire+0x1f80/0x1f80 [ 316.680929][ T8630] should_fail_ex+0x3a6/0x4d0 [ 316.685755][ T8630] _copy_from_user+0x2b/0x170 [ 316.690958][ T8630] copy_msghdr_from_user+0xaa/0x670 [ 316.696351][ T8630] ? sendmsg_copy_msghdr+0x70/0x70 [ 316.701557][ T8630] __sys_recvmsg+0x24b/0x3d0 [ 316.706242][ T8630] ? ____sys_recvmsg+0x530/0x530 [ 316.711182][ T8630] ? syscall_enter_from_user_mode+0x29/0x230 [ 316.717244][ T8630] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 316.723580][ T8630] ? syscall_enter_from_user_mode+0x2e/0x230 [ 316.729816][ T8630] ? lockdep_hardirqs_on+0x94/0x130 [ 316.735027][ T8630] ? syscall_enter_from_user_mode+0x2e/0x230 [ 316.741198][ T8630] do_syscall_64+0x3b/0xb0 [ 316.745612][ T8630] ? clear_bhb_loop+0x45/0xa0 [ 316.750296][ T8630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.756273][ T8630] RIP: 0033:0x7f5141b7cef9 [ 316.760687][ T8630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.780284][ T8630] RSP: 002b:00007f5142a35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 316.788907][ T8630] RAX: ffffffffffffffda RBX: 00007f5141d35f80 RCX: 00007f5141b7cef9 [ 316.796951][ T8630] RDX: 0000000000000000 RSI: 0000000020003040 RDI: 0000000000000004 [ 316.805215][ T8630] RBP: 00007f5142a35090 R08: 0000000000000000 R09: 0000000000000000 [ 316.813179][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.821291][ T8630] R13: 0000000000000000 R14: 00007f5141d35f80 R15: 00007fff148ff4c8 [ 316.829380][ T8630] [ 317.123275][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.132124][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.516455][ T8683] sctp: [Deprecated]: syz.0.1894 (pid 8683) Use of int in max_burst socket option deprecated. [ 318.516455][ T8683] Use struct sctp_assoc_value instead [ 319.790381][ T8734] sctp: [Deprecated]: syz.2.1900 (pid 8734) Use of int in max_burst socket option deprecated. [ 319.790381][ T8734] Use struct sctp_assoc_value instead [ 322.112525][ T8774] FAULT_INJECTION: forcing a failure. [ 322.112525][ T8774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.161561][ T8774] CPU: 1 PID: 8774 Comm: syz.1.1914 Not tainted 6.1.109-syzkaller #0 [ 322.170414][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 322.182426][ T8774] Call Trace: [ 322.185942][ T8774] [ 322.189338][ T8774] dump_stack_lvl+0x1e3/0x2cb [ 322.194802][ T8774] ? nf_tcp_handle_invalid+0x642/0x642 [ 322.201968][ T8774] ? panic+0x764/0x764 [ 322.206525][ T8774] ? __might_fault+0xa1/0x110 [ 322.211363][ T8774] ? __lock_acquire+0x1f80/0x1f80 [ 322.217284][ T8774] should_fail_ex+0x3a6/0x4d0 [ 322.223474][ T8774] copyin+0x1a/0x120 [ 322.228797][ T8774] _copy_from_iter+0x493/0xff0 [ 322.233609][ T8774] ? copyout_mc+0x100/0x100 [ 322.238301][ T8774] ? txopt_get+0x3dc/0x4f0 [ 322.242731][ T8774] ? tomoyo_check_inet_address+0x2a5/0xb80 [ 322.248535][ T8774] ? txopt_get+0x77/0x4f0 [ 322.252882][ T8774] ? fl6_sock_lookup+0xc0/0xc0 [ 322.257645][ T8774] ? tomoyo_check_inet_address+0x8a1/0xb80 [ 322.263559][ T8774] rawv6_probe_proto_opt+0x167/0x300 [ 322.269346][ T8774] rawv6_sendmsg+0xcfb/0x2150 [ 322.274231][ T8774] ? tomoyo_check_unix_address+0x850/0x850 [ 322.280073][ T8774] ? compat_rawv6_ioctl+0x60/0x60 [ 322.285399][ T8774] ? aa_sk_perm+0x92d/0xa60 [ 322.289960][ T8774] ? aa_af_perm+0x350/0x350 [ 322.294477][ T8774] ? sock_rps_record_flow+0x1a/0x3f0 [ 322.299775][ T8774] ? inet_sendmsg+0x81/0x310 [ 322.304716][ T8774] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 322.310077][ T8774] ? security_socket_sendmsg+0x7d/0xa0 [ 322.316242][ T8774] ? inet_send_prepare+0x250/0x250 [ 322.321472][ T8774] ____sys_sendmsg+0x5a5/0x8f0 [ 322.326718][ T8774] ? __sys_sendmsg_sock+0x30/0x30 [ 322.332008][ T8774] __sys_sendmsg+0x2a9/0x390 [ 322.336624][ T8774] ? ____sys_sendmsg+0x8f0/0x8f0 [ 322.341577][ T8774] ? vfs_write+0x6cf/0xbc0 [ 322.346711][ T8774] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 322.353071][ T8774] ? syscall_enter_from_user_mode+0x2e/0x230 [ 322.359375][ T8774] ? lockdep_hardirqs_on+0x94/0x130 [ 322.364595][ T8774] ? syscall_enter_from_user_mode+0x2e/0x230 [ 322.370615][ T8774] do_syscall_64+0x3b/0xb0 [ 322.375671][ T8774] ? clear_bhb_loop+0x45/0xa0 [ 322.380577][ T8774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.386530][ T8774] RIP: 0033:0x7f7f95b7cef9 [ 322.390980][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.412306][ T8774] RSP: 002b:00007f7f969a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.421633][ T8774] RAX: ffffffffffffffda RBX: 00007f7f95d35f80 RCX: 00007f7f95b7cef9 [ 322.429727][ T8774] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 322.440054][ T8774] RBP: 00007f7f969a9090 R08: 0000000000000000 R09: 0000000000000000 [ 322.449356][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.457428][ T8774] R13: 0000000000000000 R14: 00007f7f95d35f80 R15: 00007fffd2282d08 [ 322.466564][ T8774] [ 322.646087][ T8787] FAULT_INJECTION: forcing a failure. [ 322.646087][ T8787] name failslab, interval 1, probability 0, space 0, times 0 [ 322.659119][ T8787] CPU: 0 PID: 8787 Comm: syz.2.1918 Not tainted 6.1.109-syzkaller #0 [ 322.667241][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 322.677588][ T8787] Call Trace: [ 322.680978][ T8787] [ 322.683920][ T8787] dump_stack_lvl+0x1e3/0x2cb [ 322.688645][ T8787] ? nf_tcp_handle_invalid+0x642/0x642 [ 322.694222][ T8787] ? panic+0x764/0x764 [ 322.698397][ T8787] ? __lock_acquire+0x125b/0x1f80 [ 322.703466][ T8787] should_fail_ex+0x3a6/0x4d0 [ 322.708615][ T8787] should_failslab+0x5/0x20 [ 322.713509][ T8787] slab_pre_alloc_hook+0x59/0x300 [ 322.719533][ T8787] ? pskb_trim_rcsum_slow+0x316/0x520 [ 322.724975][ T8787] kmem_cache_alloc+0x4e/0x2d0 [ 322.730139][ T8787] ? skb_ext_add+0x149/0x910 [ 322.735198][ T8787] skb_ext_add+0x149/0x910 [ 322.740327][ T8787] br_nf_pre_routing_ipv6+0x126/0x740 [ 322.747213][ T8787] ? br_nf_check_hbh_len+0x550/0x550 [ 322.752698][ T8787] ? br_nf_pre_routing+0x72b/0x1550 [ 322.758461][ T8787] ? br_nf_hook_thresh+0x580/0x580 [ 322.764223][ T8787] br_handle_frame+0x991/0x1340 [ 322.770000][ T8787] ? br_handle_frame_dummy+0x10/0x10 [ 322.775488][ T8787] ? brport_get_ownership+0x80/0x80 [ 322.780723][ T8787] ? br_handle_frame_dummy+0x10/0x10 [ 322.786638][ T8787] __netif_receive_skb_core+0x13dd/0x41d0 [ 322.792489][ T8787] ? qdisc_run+0x260/0x260 [ 322.796959][ T8787] ? __lock_acquire+0x125b/0x1f80 [ 322.802097][ T8787] __netif_receive_skb+0x11c/0x530 [ 322.807216][ T8787] ? read_lock_is_recursive+0x10/0x10 [ 322.812585][ T8787] ? lockdep_hardirqs_on+0x94/0x130 [ 322.817783][ T8787] ? __netif_receive_skb_list_core+0x890/0x890 [ 322.823965][ T8787] ? tun_rx_batched+0x15c/0x8e0 [ 322.828839][ T8787] ? netif_receive_skb+0x13b/0x890 [ 322.834036][ T8787] ? netif_receive_skb+0x13b/0x890 [ 322.839142][ T8787] netif_receive_skb+0x1f4/0x890 [ 322.844095][ T8787] ? tun_rx_batched+0x15c/0x8e0 [ 322.849026][ T8787] ? enqueue_to_backlog+0xc00/0xc00 [ 322.854224][ T8787] ? tun_rx_batched+0x15c/0x8e0 [ 322.859069][ T8787] tun_rx_batched+0x1b3/0x8e0 [ 322.863763][ T8787] ? print_irqtrace_events+0x210/0x210 [ 322.869224][ T8787] ? read_lock_is_recursive+0x10/0x10 [ 322.874598][ T8787] ? pskb_may_pull+0xf0/0xf0 [ 322.879205][ T8787] tun_get_user+0x2c03/0x42d0 [ 322.883946][ T8787] ? tun_get_user+0x2792/0x42d0 [ 322.888826][ T8787] ? rcu_read_unlock+0xa0/0xa0 [ 322.893596][ T8787] ? tun_get+0x1e/0x2f0 [ 322.897749][ T8787] ? __lock_acquire+0x1f80/0x1f80 [ 322.902788][ T8787] ? tun_get+0x1e/0x2f0 [ 322.906937][ T8787] ? tun_get+0x27d/0x2f0 [ 322.911178][ T8787] tun_chr_write_iter+0x10c/0x1f0 [ 322.916206][ T8787] vfs_write+0x857/0xbc0 [ 322.920888][ T8787] ? file_end_write+0x250/0x250 [ 322.925740][ T8787] ? __fget_files+0x28/0x4a0 [ 322.930343][ T8787] ? __fget_files+0x435/0x4a0 [ 322.935018][ T8787] ? __fdget_pos+0x1db/0x360 [ 322.939603][ T8787] ? ksys_write+0x77/0x2c0 [ 322.944014][ T8787] ksys_write+0x19c/0x2c0 [ 322.948596][ T8787] ? print_irqtrace_events+0x210/0x210 [ 322.954081][ T8787] ? __ia32_sys_read+0x80/0x80 [ 322.958858][ T8787] ? syscall_enter_from_user_mode+0x2e/0x230 [ 322.965003][ T8787] ? lockdep_hardirqs_on+0x94/0x130 [ 322.970366][ T8787] ? syscall_enter_from_user_mode+0x2e/0x230 [ 322.976532][ T8787] do_syscall_64+0x3b/0xb0 [ 322.980953][ T8787] ? clear_bhb_loop+0x45/0xa0 [ 322.985709][ T8787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.991701][ T8787] RIP: 0033:0x7f0916d7cef9 [ 322.997119][ T8787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.016984][ T8787] RSP: 002b:00007f0917c46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.025653][ T8787] RAX: ffffffffffffffda RBX: 00007f0916f35f80 RCX: 00007f0916d7cef9 [ 323.033615][ T8787] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 00000000000000c8 [ 323.041575][ T8787] RBP: 00007f0917c46090 R08: 0000000000000000 R09: 0000000000000000 [ 323.049565][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.057538][ T8787] R13: 0000000000000000 R14: 00007f0916f35f80 R15: 00007ffc2ccb8488 [ 323.065532][ T8787] [ 323.312893][ T8796] sctp: [Deprecated]: syz.1.1920 (pid 8796) Use of int in max_burst socket option deprecated. [ 323.312893][ T8796] Use struct sctp_assoc_value instead [ 325.669936][ T8842] netlink: 'syz.2.1935': attribute type 15 has an invalid length. [ 325.689506][ T8842] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.1935'. [ 325.704860][ T8844] netlink: 'syz.3.1937': attribute type 12 has an invalid length. [ 325.737539][ T8844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1937'. [ 325.862074][ T8847] sctp: [Deprecated]: syz.4.1938 (pid 8847) Use of int in max_burst socket option deprecated. [ 325.862074][ T8847] Use struct sctp_assoc_value instead [ 325.930629][ T8850] netlink: 'syz.0.1939': attribute type 21 has an invalid length. [ 325.970035][ T8850] netlink: 'syz.0.1939': attribute type 5 has an invalid length. [ 326.030772][ T8855] netlink: 'syz.3.1942': attribute type 10 has an invalid length. [ 326.057596][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.122047][ T8855] device batadv0 entered promiscuous mode [ 326.133083][ T8855] team0: Port device batadv0 added [ 326.163069][ T8862] FAULT_INJECTION: forcing a failure. [ 326.163069][ T8862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.183422][ T8862] CPU: 1 PID: 8862 Comm: syz.2.1944 Not tainted 6.1.109-syzkaller #0 [ 326.192088][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 326.202233][ T8862] Call Trace: [ 326.205621][ T8862] [ 326.208652][ T8862] dump_stack_lvl+0x1e3/0x2cb [ 326.213373][ T8862] ? nf_tcp_handle_invalid+0x642/0x642 [ 326.218897][ T8862] ? panic+0x764/0x764 [ 326.222997][ T8862] ? __lock_acquire+0x1f80/0x1f80 [ 326.228089][ T8862] should_fail_ex+0x3a6/0x4d0 [ 326.232854][ T8862] _copy_from_user+0x2b/0x170 [ 326.237581][ T8862] generic_map_update_batch+0x526/0x920 [ 326.243170][ T8862] ? rcu_read_unlock+0xa0/0xa0 [ 326.248030][ T8862] ? __fdget+0x182/0x210 [ 326.252275][ T8862] ? rcu_read_unlock+0xa0/0xa0 [ 326.257236][ T8862] bpf_map_do_batch+0x4d0/0x620 [ 326.262279][ T8862] __sys_bpf+0x658/0x6c0 [ 326.266538][ T8862] ? __fget_files+0x435/0x4a0 [ 326.271241][ T8862] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 326.276700][ T8862] ? print_irqtrace_events+0x210/0x210 [ 326.282212][ T8862] ? print_irqtrace_events+0x210/0x210 [ 326.287697][ T8862] ? syscall_enter_from_user_mode+0x2e/0x230 [ 326.293676][ T8862] ? lockdep_hardirqs_on+0x94/0x130 [ 326.298928][ T8862] __x64_sys_bpf+0x78/0x90 [ 326.303371][ T8862] do_syscall_64+0x3b/0xb0 [ 326.307812][ T8862] ? clear_bhb_loop+0x45/0xa0 [ 326.312689][ T8862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.318696][ T8862] RIP: 0033:0x7f0916d7cef9 [ 326.323192][ T8862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.342908][ T8862] RSP: 002b:00007f0917c46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.351422][ T8862] RAX: ffffffffffffffda RBX: 00007f0916f35f80 RCX: 00007f0916d7cef9 [ 326.359393][ T8862] RDX: 0000000000000038 RSI: 0000000020000300 RDI: 000000000000001a [ 326.367383][ T8862] RBP: 00007f0917c46090 R08: 0000000000000000 R09: 0000000000000000 [ 326.375377][ T8862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.383383][ T8862] R13: 0000000000000000 R14: 00007f0916f35f80 R15: 00007ffc2ccb8488 [ 326.391399][ T8862] [ 326.442166][ T3709] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 326.452040][ T3709] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 326.589299][ T8871] netlink: 'syz.0.1945': attribute type 29 has an invalid length. [ 326.654750][ T8871] netlink: 'syz.0.1945': attribute type 29 has an invalid length. [ 326.701178][ T8875] netlink: 'syz.0.1945': attribute type 29 has an invalid length. [ 326.739964][ T8878] netlink: 'syz.0.1945': attribute type 29 has an invalid length. [ 326.771765][ T8871] netlink: 'syz.0.1945': attribute type 29 has an invalid length. [ 327.590372][ T8897] sctp: [Deprecated]: syz.0.1953 (pid 8897) Use of int in max_burst socket option deprecated. [ 327.590372][ T8897] Use struct sctp_assoc_value instead [ 327.660022][ T8905] FAULT_INJECTION: forcing a failure. [ 327.660022][ T8905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.691144][ T8905] CPU: 1 PID: 8905 Comm: syz.3.1956 Not tainted 6.1.109-syzkaller #0 [ 327.701190][ T8905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 327.711432][ T8905] Call Trace: [ 327.714715][ T8905] [ 327.717654][ T8905] dump_stack_lvl+0x1e3/0x2cb [ 327.722470][ T8905] ? nf_tcp_handle_invalid+0x642/0x642 [ 327.728567][ T8905] ? panic+0x764/0x764 [ 327.733222][ T8905] ? __might_fault+0xa1/0x110 [ 327.737918][ T8905] should_fail_ex+0x3a6/0x4d0 [ 327.743773][ T8905] _copy_from_user+0x2b/0x170 [ 327.748683][ T8905] move_addr_to_kernel+0x7e/0x140 [ 327.754361][ T8905] copy_msghdr_from_user+0x436/0x670 [ 327.759702][ T8905] ? sendmsg_copy_msghdr+0x70/0x70 [ 327.764968][ T8905] __sys_sendmsg+0x236/0x390 [ 327.769774][ T8905] ? ____sys_sendmsg+0x8f0/0x8f0 [ 327.774747][ T8905] ? vfs_write+0x6cf/0xbc0 [ 327.779224][ T8905] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 327.785233][ T8905] ? syscall_enter_from_user_mode+0x2e/0x230 [ 327.791225][ T8905] ? lockdep_hardirqs_on+0x94/0x130 [ 327.796448][ T8905] ? syscall_enter_from_user_mode+0x2e/0x230 [ 327.802541][ T8905] do_syscall_64+0x3b/0xb0 [ 327.807166][ T8905] ? clear_bhb_loop+0x45/0xa0 [ 327.811862][ T8905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.817855][ T8905] RIP: 0033:0x7f595cd7cef9 [ 327.822415][ T8905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.842599][ T8905] RSP: 002b:00007f595dbe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.851057][ T8905] RAX: ffffffffffffffda RBX: 00007f595cf35f80 RCX: 00007f595cd7cef9 [ 327.859231][ T8905] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 327.867389][ T8905] RBP: 00007f595dbe7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.875727][ T8905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.883824][ T8905] R13: 0000000000000000 R14: 00007f595cf35f80 R15: 00007fff5ce0f1f8 [ 327.891843][ T8905] [ 328.140381][ T8911] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1957'. [ 328.186126][ T8911] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1957'. [ 329.010441][ T8942] sctp: [Deprecated]: syz.1.1969 (pid 8942) Use of int in max_burst socket option deprecated. [ 329.010441][ T8942] Use struct sctp_assoc_value instead [ 329.265956][ T8951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1971'. [ 329.846621][ T8971] FAULT_INJECTION: forcing a failure. [ 329.846621][ T8971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.864232][ T8971] CPU: 0 PID: 8971 Comm: syz.1.1977 Not tainted 6.1.109-syzkaller #0 [ 329.872396][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 329.882477][ T8971] Call Trace: [ 329.885783][ T8971] [ 329.888754][ T8971] dump_stack_lvl+0x1e3/0x2cb [ 329.893588][ T8971] ? nf_tcp_handle_invalid+0x642/0x642 [ 329.899091][ T8971] ? panic+0x764/0x764 [ 329.903182][ T8971] ? __lock_acquire+0x1f80/0x1f80 [ 329.908241][ T8971] should_fail_ex+0x3a6/0x4d0 [ 329.913134][ T8971] _copy_from_user+0x2b/0x170 [ 329.917847][ T8971] copy_msghdr_from_user+0xaa/0x670 [ 329.923089][ T8971] ? sendmsg_copy_msghdr+0x70/0x70 [ 329.928235][ T8971] __sys_sendmsg+0x236/0x390 [ 329.932848][ T8971] ? ____sys_sendmsg+0x8f0/0x8f0 [ 329.937824][ T8971] ? vfs_write+0x6cf/0xbc0 [ 329.942370][ T8971] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 329.948510][ T8971] ? syscall_enter_from_user_mode+0x2e/0x230 [ 329.954534][ T8971] ? lockdep_hardirqs_on+0x94/0x130 [ 329.959753][ T8971] ? syscall_enter_from_user_mode+0x2e/0x230 [ 329.966014][ T8971] do_syscall_64+0x3b/0xb0 [ 329.970467][ T8971] ? clear_bhb_loop+0x45/0xa0 [ 329.975290][ T8971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.981825][ T8971] RIP: 0033:0x7f7f95b7cef9 [ 329.986274][ T8971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.006269][ T8971] RSP: 002b:00007f7f969a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.014809][ T8971] RAX: ffffffffffffffda RBX: 00007f7f95d35f80 RCX: 00007f7f95b7cef9 [ 330.023365][ T8971] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 330.031805][ T8971] RBP: 00007f7f969a9090 R08: 0000000000000000 R09: 0000000000000000 [ 330.040689][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.048970][ T8971] R13: 0000000000000000 R14: 00007f7f95d35f80 R15: 00007fffd2282d08 [ 330.057240][ T8971] [ 330.090002][ T8963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1976'. [ 330.224078][ T8963] team0: Port device syz_tun added [ 330.328629][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1978'. [ 330.368811][ T8974] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1978'. [ 330.507070][ T8985] sctp: [Deprecated]: syz.1.1980 (pid 8985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.507070][ T8985] Use struct sctp_sack_info instead [ 330.673177][ T8992] sctp: [Deprecated]: syz.4.1984 (pid 8992) Use of int in max_burst socket option deprecated. [ 330.673177][ T8992] Use struct sctp_assoc_value instead [ 330.754370][ T8991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1980'. [ 331.489107][ T9007] validate_nla: 17 callbacks suppressed [ 331.489130][ T9007] netlink: 'syz.1.1989': attribute type 10 has an invalid length. [ 331.581923][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.609070][ T9007] device batadv0 entered promiscuous mode [ 331.656009][ T9007] team0: Port device batadv0 added [ 331.672115][ T9013] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1993'. [ 331.694626][ T5341] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 331.703976][ T5341] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 332.102685][ T9036] sctp: [Deprecated]: syz.4.2000 (pid 9036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.102685][ T9036] Use struct sctp_sack_info instead [ 332.212477][ T9044] sctp: [Deprecated]: syz.1.2002 (pid 9044) Use of int in max_burst socket option deprecated. [ 332.212477][ T9044] Use struct sctp_assoc_value instead [ 332.275479][ T9039] netlink: 'syz.2.2001': attribute type 10 has an invalid length. [ 332.425328][ T9039] device netdevsim0 entered promiscuous mode [ 332.462135][ T9039] team0: Port device netdevsim0 added [ 332.969757][ T9040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2000'. [ 333.034687][ T9039] syz.2.2001 (9039) used greatest stack depth: 19208 bytes left [ 333.127217][ T9054] FAULT_INJECTION: forcing a failure. [ 333.127217][ T9054] name failslab, interval 1, probability 0, space 0, times 0 [ 333.183984][ T9054] CPU: 1 PID: 9054 Comm: syz.0.2007 Not tainted 6.1.109-syzkaller #0 [ 333.192157][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 333.202462][ T9054] Call Trace: [ 333.205781][ T9054] [ 333.208748][ T9054] dump_stack_lvl+0x1e3/0x2cb [ 333.213567][ T9054] ? nf_tcp_handle_invalid+0x642/0x642 [ 333.219174][ T9054] ? panic+0x764/0x764 [ 333.223333][ T9054] should_fail_ex+0x3a6/0x4d0 [ 333.228071][ T9054] should_failslab+0x5/0x20 [ 333.232589][ T9054] slab_pre_alloc_hook+0x59/0x300 [ 333.237670][ T9054] kmem_cache_alloc_node+0x52/0x310 [ 333.242935][ T9054] ? perf_event_alloc+0x15a/0x2150 [ 333.248124][ T9054] perf_event_alloc+0x15a/0x2150 [ 333.253102][ T9054] ? __lock_acquire+0x1f80/0x1f80 [ 333.258168][ T9054] ? _raw_spin_unlock+0x24/0x40 [ 333.263104][ T9054] __se_sys_perf_event_open+0xb2e/0x4960 [ 333.268888][ T9054] ? __se_sys_perf_event_open+0x74a/0x4960 [ 333.274833][ T9054] ? perf_trace_preemptirq_template+0xf4/0x3d0 [ 333.281197][ T9054] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 333.286912][ T9054] ? syscall_enter_from_user_mode+0x2e/0x230 [ 333.294160][ T9054] ? lockdep_hardirqs_on+0x94/0x130 [ 333.299848][ T9054] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 333.306048][ T9054] do_syscall_64+0x3b/0xb0 [ 333.310544][ T9054] ? clear_bhb_loop+0x45/0xa0 [ 333.315376][ T9054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.321676][ T9054] RIP: 0033:0x7fd575f7cef9 [ 333.326210][ T9054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.346033][ T9054] RSP: 002b:00007fd576de1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 333.355052][ T9054] RAX: ffffffffffffffda RBX: 00007fd576135f80 RCX: 00007fd575f7cef9 [ 333.363169][ T9054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 333.371177][ T9054] RBP: 00007fd576de1090 R08: 0000000000000000 R09: 0000000000000000 [ 333.379248][ T9054] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 333.387357][ T9054] R13: 0000000000000000 R14: 00007fd576135f80 R15: 00007fffa73f9e08 [ 333.395527][ T9054] [ 333.630733][ T9061] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2009'. [ 333.661149][ T9061] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2009'. [ 334.689348][ T9078] sctp: [Deprecated]: syz.4.2018 (pid 9078) Use of int in max_burst socket option deprecated. [ 334.689348][ T9078] Use struct sctp_assoc_value instead [ 334.791648][ T9086] sctp: [Deprecated]: syz.2.2017 (pid 9086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.791648][ T9086] Use struct sctp_sack_info instead [ 334.940303][ T9087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2017'. [ 337.259259][ T9149] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2043'. [ 337.316064][ T9150] netlink: 'syz.3.2045': attribute type 10 has an invalid length. [ 337.341745][ T9150] device geneve0 entered promiscuous mode [ 337.407367][ T9150] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 337.542193][ T9154] can: request_module (can-proto-0) failed. [ 337.862700][ T9172] sctp: [Deprecated]: syz.0.2052 (pid 9172) Use of int in max_burst socket option deprecated. [ 337.862700][ T9172] Use struct sctp_assoc_value instead [ 338.139760][ T9184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2059'. [ 339.449206][ T9217] FAULT_INJECTION: forcing a failure. [ 339.449206][ T9217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.475318][ T9217] CPU: 0 PID: 9217 Comm: syz.0.2072 Not tainted 6.1.109-syzkaller #0 [ 339.483511][ T9217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 339.493601][ T9217] Call Trace: [ 339.496914][ T9217] [ 339.499881][ T9217] dump_stack_lvl+0x1e3/0x2cb [ 339.504617][ T9217] ? nf_tcp_handle_invalid+0x642/0x642 [ 339.510123][ T9217] ? panic+0x764/0x764 [ 339.514256][ T9217] ? __lock_acquire+0x1f80/0x1f80 [ 339.519355][ T9217] should_fail_ex+0x3a6/0x4d0 [ 339.524091][ T9217] _copy_to_user+0x2b/0x130 [ 339.528637][ T9217] bpf_obj_get_info_by_fd+0x321d/0x3fe0 [ 339.534316][ T9217] ? bpf_map_get_fd_by_id+0x340/0x340 [ 339.539840][ T9217] ? perf_trace_lock+0x138/0x440 [ 339.544855][ T9217] ? trace_event_raw_event_lock+0x240/0x240 [ 339.550921][ T9217] ? __might_fault+0xbd/0x110 [ 339.555657][ T9217] ? bpf_lsm_bpf+0x5/0x10 [ 339.560009][ T9217] ? security_bpf+0x7d/0xa0 [ 339.564539][ T9217] __sys_bpf+0x47a/0x6c0 [ 339.568809][ T9217] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 339.574338][ T9217] ? print_irqtrace_events+0x210/0x210 [ 339.579824][ T9217] ? print_irqtrace_events+0x210/0x210 [ 339.585324][ T9217] __x64_sys_bpf+0x78/0x90 [ 339.589756][ T9217] do_syscall_64+0x3b/0xb0 [ 339.594184][ T9217] ? clear_bhb_loop+0x45/0xa0 [ 339.598879][ T9217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.604781][ T9217] RIP: 0033:0x7fd575f7cef9 [ 339.609203][ T9217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.628882][ T9217] RSP: 002b:00007fd576de1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.637333][ T9217] RAX: ffffffffffffffda RBX: 00007fd576135f80 RCX: 00007fd575f7cef9 [ 339.645322][ T9217] RDX: 0000000000000010 RSI: 00000000200003c0 RDI: 000000000000000f [ 339.653299][ T9217] RBP: 00007fd576de1090 R08: 0000000000000000 R09: 0000000000000000 [ 339.661368][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.669343][ T9217] R13: 0000000000000000 R14: 00007fd576135f80 R15: 00007fffa73f9e08 [ 339.677363][ T9217] [ 339.751096][ T9219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2073'. [ 340.707537][ T9250] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2087'. [ 340.882684][ T9252] sctp: [Deprecated]: syz.2.2086 (pid 9252) Use of int in max_burst socket option deprecated. [ 340.882684][ T9252] Use struct sctp_assoc_value instead [ 344.822500][ T9298] netlink: 'syz.4.2103': attribute type 22 has an invalid length. [ 345.732728][ T9322] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2109'. [ 345.742254][ T9322] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 346.072691][ T9336] netlink: 'syz.3.2113': attribute type 4 has an invalid length. [ 346.104232][ T9336] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2113'. [ 348.881217][ T9407] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2133'. [ 349.383934][ T9423] netlink: 'syz.0.2138': attribute type 29 has an invalid length. [ 349.614750][ T9415] netlink: 'syz.3.2139': attribute type 1 has an invalid length. [ 349.644648][ T9423] netlink: 'syz.0.2138': attribute type 29 has an invalid length. [ 349.728393][ T9434] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.735339][ T9434] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.759909][ T9434] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.766371][ T9434] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.772894][ T9434] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.779345][ T9434] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.875121][ T9434] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.881590][ T9434] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 349.923222][ T9434] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 349.929687][ T9434] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 351.554955][ T9464] FAULT_INJECTION: forcing a failure. [ 351.554955][ T9464] name failslab, interval 1, probability 0, space 0, times 0 [ 351.742138][ T9427] netlink: 'syz.0.2138': attribute type 29 has an invalid length. [ 351.752084][ T9464] CPU: 0 PID: 9464 Comm: syz.2.2154 Not tainted 6.1.109-syzkaller #0 [ 351.760205][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 351.770293][ T9464] Call Trace: [ 351.773589][ T9464] [ 351.776542][ T9464] dump_stack_lvl+0x1e3/0x2cb [ 351.781252][ T9464] ? nf_tcp_handle_invalid+0x642/0x642 [ 351.786743][ T9464] ? panic+0x764/0x764 [ 351.790833][ T9464] ? __might_sleep+0xb0/0xb0 [ 351.795462][ T9464] should_fail_ex+0x3a6/0x4d0 [ 351.800176][ T9464] should_failslab+0x5/0x20 [ 351.804718][ T9464] slab_pre_alloc_hook+0x59/0x300 [ 351.809759][ T9464] ? tomoyo_encode+0x26b/0x530 [ 351.814533][ T9464] __kmem_cache_alloc_node+0x47/0x260 [ 351.819914][ T9464] ? tomoyo_encode+0x26b/0x530 [ 351.824678][ T9464] __kmalloc+0xa1/0x230 [ 351.828847][ T9464] tomoyo_encode+0x26b/0x530 [ 351.833438][ T9464] ? sock_free_inode+0x20/0x20 [ 351.838206][ T9464] tomoyo_realpath_from_path+0x594/0x5d0 [ 351.843944][ T9464] tomoyo_path_number_perm+0x21f/0x7f0 [ 351.849411][ T9464] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 351.855050][ T9464] ? trace_event_raw_event_lock+0x240/0x240 [ 351.861034][ T9464] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 351.866519][ T9464] ? __fget_files+0x28/0x4a0 [ 351.871136][ T9464] ? __fget_files+0x28/0x4a0 [ 351.875724][ T9464] ? __fget_files+0x435/0x4a0 [ 351.880399][ T9464] ? __fget_files+0x28/0x4a0 [ 351.885173][ T9464] security_file_ioctl+0x6d/0xa0 [ 351.890116][ T9464] __se_sys_ioctl+0x47/0x160 [ 351.894718][ T9464] do_syscall_64+0x3b/0xb0 [ 351.899136][ T9464] ? clear_bhb_loop+0x45/0xa0 [ 351.903818][ T9464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.909715][ T9464] RIP: 0033:0x7f0916d7cef9 [ 351.914225][ T9464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.933861][ T9464] RSP: 002b:00007f0917c46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.942279][ T9464] RAX: ffffffffffffffda RBX: 00007f0916f35f80 RCX: 00007f0916d7cef9 [ 351.950262][ T9464] RDX: 0000000020000000 RSI: 0000000000008b26 RDI: 0000000000000003 [ 351.958234][ T9464] RBP: 00007f0917c46090 R08: 0000000000000000 R09: 0000000000000000 [ 351.966376][ T9464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.974343][ T9464] R13: 0000000000000000 R14: 00007f0916f35f80 R15: 00007ffc2ccb8488 [ 351.982334][ T9464] [ 352.024269][ T9464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.552139][ T9479] netlink: 'syz.2.2158': attribute type 1 has an invalid length. [ 355.960854][ T9542] netlink: 'syz.2.2183': attribute type 10 has an invalid length. [ 356.795912][ T9575] netlink: 131996 bytes leftover after parsing attributes in process `syz.3.2193'. [ 358.378516][ T9610] netlink: 'syz.4.2206': attribute type 10 has an invalid length. [ 358.507182][ T9610] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 359.201556][ T9634] netlink: 'syz.4.2214': attribute type 1 has an invalid length. [ 359.391876][ T9642] netlink: 'syz.3.2216': attribute type 9 has an invalid length. [ 359.455300][ T9642] netlink: 131264 bytes leftover after parsing attributes in process `syz.3.2216'. [ 360.101544][ T9656] FAULT_INJECTION: forcing a failure. [ 360.101544][ T9656] name failslab, interval 1, probability 0, space 0, times 0 [ 360.209086][ T9656] CPU: 0 PID: 9656 Comm: syz.1.2221 Not tainted 6.1.109-syzkaller #0 [ 360.217214][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 360.227291][ T9656] Call Trace: [ 360.230579][ T9656] [ 360.233516][ T9656] dump_stack_lvl+0x1e3/0x2cb [ 360.238228][ T9656] ? nf_tcp_handle_invalid+0x642/0x642 [ 360.243717][ T9656] ? panic+0x764/0x764 [ 360.247809][ T9656] ? __might_sleep+0xb0/0xb0 [ 360.252434][ T9656] should_fail_ex+0x3a6/0x4d0 [ 360.257224][ T9656] should_failslab+0x5/0x20 [ 360.261829][ T9656] slab_pre_alloc_hook+0x59/0x300 [ 360.266877][ T9656] ? nf_nat_masq_schedule+0x2d1/0x650 [ 360.272278][ T9656] __kmem_cache_alloc_node+0x47/0x260 [ 360.277683][ T9656] ? nf_nat_masq_schedule+0x2d1/0x650 [ 360.283079][ T9656] kmalloc_trace+0x26/0xe0 [ 360.287530][ T9656] nf_nat_masq_schedule+0x2d1/0x650 [ 360.292752][ T9656] ? nf_nat_masq_schedule+0x650/0x650 [ 360.298149][ T9656] ? masq_device_event+0xd0/0xd0 [ 360.303104][ T9656] ? nfqnl_rcv_dev_event+0x734/0x770 [ 360.308430][ T9656] masq_device_event+0x9c/0xd0 [ 360.313327][ T9656] raw_notifier_call_chain+0xd0/0x170 [ 360.318825][ T9656] __dev_notify_flags+0x304/0x610 [ 360.323892][ T9656] ? __dev_change_flags+0x6e0/0x6e0 [ 360.329119][ T9656] ? __dev_change_flags+0x569/0x6e0 [ 360.334380][ T9656] ? dev_get_flags+0x1c0/0x1c0 [ 360.339187][ T9656] ? trace_raw_output_contention_end+0xd0/0xd0 [ 360.345381][ T9656] dev_change_flags+0xe7/0x190 [ 360.350176][ T9656] dev_ifsioc+0x177/0x1160 [ 360.354622][ T9656] ? dev_ioctl+0xf70/0xf70 [ 360.359061][ T9656] ? mutex_lock_nested+0x10/0x10 [ 360.364030][ T9656] ? apparmor_capable+0x12e/0x190 [ 360.369075][ T9656] ? full_name_hash+0xad/0xe0 [ 360.373778][ T9656] ? dev_load+0x1d/0x1e0 [ 360.378060][ T9656] dev_ioctl+0x508/0xf70 [ 360.382325][ T9656] ? get_user_ifreq+0x167/0x1f0 [ 360.387193][ T9656] sock_do_ioctl+0x26b/0x450 [ 360.391895][ T9656] ? sock_show_fdinfo+0xb0/0xb0 [ 360.396771][ T9656] ? __fget_files+0x28/0x4a0 [ 360.401399][ T9656] sock_ioctl+0x47f/0x770 [ 360.405749][ T9656] ? sock_poll+0x410/0x410 [ 360.410272][ T9656] ? __fget_files+0x28/0x4a0 [ 360.414905][ T9656] ? __fget_files+0x435/0x4a0 [ 360.419613][ T9656] ? __fget_files+0x28/0x4a0 [ 360.424254][ T9656] ? bpf_lsm_file_ioctl+0x5/0x10 [ 360.429274][ T9656] ? security_file_ioctl+0x7d/0xa0 [ 360.434425][ T9656] ? sock_poll+0x410/0x410 [ 360.438878][ T9656] __se_sys_ioctl+0xf1/0x160 [ 360.443494][ T9656] do_syscall_64+0x3b/0xb0 [ 360.447931][ T9656] ? clear_bhb_loop+0x45/0xa0 [ 360.452629][ T9656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.458542][ T9656] RIP: 0033:0x7f7f95b7cef9 [ 360.462970][ T9656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.482610][ T9656] RSP: 002b:00007f7f969a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.491073][ T9656] RAX: ffffffffffffffda RBX: 00007f7f95d35f80 RCX: 00007f7f95b7cef9 [ 360.499077][ T9656] RDX: 0000000020000140 RSI: 0000000000008914 RDI: 0000000000000005 [ 360.507086][ T9656] RBP: 00007f7f969a9090 R08: 0000000000000000 R09: 0000000000000000 [ 360.515084][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.523078][ T9656] R13: 0000000000000000 R14: 00007f7f95d35f80 R15: 00007fffd2282d08 [ 360.531084][ T9656] [ 361.288126][ T9693] netlink: 'syz.1.2231': attribute type 9 has an invalid length. [ 361.296868][ T9693] netlink: 131264 bytes leftover after parsing attributes in process `syz.1.2231'. [ 361.907428][ T9709] netlink: 131996 bytes leftover after parsing attributes in process `syz.0.2237'. [ 362.377166][ T9717] sctp: [Deprecated]: syz.4.2241 (pid 9717) Use of int in max_burst socket option deprecated. [ 362.377166][ T9717] Use struct sctp_assoc_value instead [ 362.642599][ T9719] netlink: 'syz.3.2243': attribute type 10 has an invalid length. [ 362.725703][ T9719] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 365.526989][ T9794] netlink: 131996 bytes leftover after parsing attributes in process `syz.1.2272'. [ 366.647537][ T9817] sctp: [Deprecated]: syz.0.2281 (pid 9817) Use of int in max_burst socket option deprecated. [ 366.647537][ T9817] Use struct sctp_assoc_value instead [ 367.885546][ T9835] sctp: [Deprecated]: syz.3.2287 (pid 9835) Use of int in max_burst socket option deprecated. [ 367.885546][ T9835] Use struct sctp_assoc_value instead [ 371.231105][ T9960] sctp: [Deprecated]: syz.3.2337 (pid 9960) Use of int in max_burst socket option deprecated. [ 371.231105][ T9960] Use struct sctp_assoc_value instead [ 373.485650][T10017] sctp: [Deprecated]: syz.1.2362 (pid 10017) Use of int in max_burst socket option deprecated. [ 373.485650][T10017] Use struct sctp_assoc_value instead [ 378.308312][T10089] sctp: [Deprecated]: syz.4.2389 (pid 10089) Use of int in max_burst socket option deprecated. [ 378.308312][T10089] Use struct sctp_assoc_value instead [ 378.580563][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.587027][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.526809][T10102] sctp: [Deprecated]: syz.1.2393 (pid 10102) Use of int in max_burst socket option deprecated. [ 379.526809][T10102] Use struct sctp_assoc_value instead [ 381.430995][T10139] sctp: [Deprecated]: syz.0.2406 (pid 10139) Use of int in max_burst socket option deprecated. [ 381.430995][T10139] Use struct sctp_assoc_value instead [ 381.825514][T10144] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2409'. [ 385.101977][T10204] sctp: [Deprecated]: syz.2.2430 (pid 10204) Use of int in max_burst socket option deprecated. [ 385.101977][T10204] Use struct sctp_assoc_value instead [ 390.299744][T10233] sctp: [Deprecated]: syz.3.2442 (pid 10233) Use of int in max_burst socket option deprecated. [ 390.299744][T10233] Use struct sctp_assoc_value instead [ 391.931609][T10271] sctp: [Deprecated]: syz.0.2455 (pid 10271) Use of int in max_burst socket option deprecated. [ 391.931609][T10271] Use struct sctp_assoc_value instead [ 392.787970][T10291] sctp: [Deprecated]: syz.1.2463 (pid 10291) Use of int in max_burst socket option deprecated. [ 392.787970][T10291] Use struct sctp_assoc_value instead [ 395.538522][T10344] sctp: [Deprecated]: syz.0.2479 (pid 10344) Use of int in max_burst socket option deprecated. [ 395.538522][T10344] Use struct sctp_assoc_value instead [ 397.629772][T10373] sctp: [Deprecated]: syz.2.2489 (pid 10373) Use of int in max_burst socket option deprecated. [ 397.629772][T10373] Use struct sctp_assoc_value instead [ 399.436128][T10415] sctp: [Deprecated]: syz.2.2503 (pid 10415) Use of int in max_burst socket option deprecated. [ 399.436128][T10415] Use struct sctp_assoc_value instead [ 402.204951][T10468] sctp: [Deprecated]: syz.2.2523 (pid 10468) Use of int in max_burst socket option deprecated. [ 402.204951][T10468] Use struct sctp_assoc_value instead [ 402.781835][T10481] sctp: [Deprecated]: syz.4.2525 (pid 10481) Use of int in max_burst socket option deprecated. [ 402.781835][T10481] Use struct sctp_assoc_value instead [ 408.074616][T10538] sctp: [Deprecated]: syz.4.2544 (pid 10538) Use of int in max_burst socket option deprecated. [ 408.074616][T10538] Use struct sctp_assoc_value instead [ 410.113111][T10580] sctp: [Deprecated]: syz.0.2560 (pid 10580) Use of int in max_burst socket option deprecated. [ 410.113111][T10580] Use struct sctp_assoc_value instead [ 411.154361][T10600] sctp: [Deprecated]: syz.2.2566 (pid 10600) Use of int in max_burst socket option deprecated. [ 411.154361][T10600] Use struct sctp_assoc_value instead [ 411.811113][T10609] sctp: [Deprecated]: syz.4.2571 (pid 10609) Use of int in max_burst socket option deprecated. [ 411.811113][T10609] Use struct sctp_assoc_value instead [ 413.576414][T10639] sctp: [Deprecated]: syz.3.2580 (pid 10639) Use of int in max_burst socket option deprecated. [ 413.576414][T10639] Use struct sctp_assoc_value instead [ 413.956000][T10645] sctp: [Deprecated]: syz.0.2584 (pid 10645) Use of int in max_burst socket option deprecated. [ 413.956000][T10645] Use struct sctp_assoc_value instead [ 415.347802][T10678] sctp: [Deprecated]: syz.2.2595 (pid 10678) Use of int in max_burst socket option deprecated. [ 415.347802][T10678] Use struct sctp_assoc_value instead [ 416.573179][T10704] sctp: [Deprecated]: syz.0.2604 (pid 10704) Use of int in max_burst socket option deprecated. [ 416.573179][T10704] Use struct sctp_assoc_value instead [ 416.903573][T10720] sctp: [Deprecated]: syz.3.2611 (pid 10720) Use of int in max_burst socket option deprecated. [ 416.903573][T10720] Use struct sctp_assoc_value instead [ 419.874871][T10760] sctp: [Deprecated]: syz.0.2623 (pid 10760) Use of int in max_burst socket option deprecated. [ 419.874871][T10760] Use struct sctp_assoc_value instead [ 420.488357][T10771] sctp: [Deprecated]: syz.3.2626 (pid 10771) Use of int in max_burst socket option deprecated. [ 420.488357][T10771] Use struct sctp_assoc_value instead [ 421.382408][T10790] sctp: [Deprecated]: syz.0.2642 (pid 10790) Use of int in max_burst socket option deprecated. [ 421.382408][T10790] Use struct sctp_assoc_value instead [ 427.482678][T10838] sctp: [Deprecated]: syz.1.2646 (pid 10838) Use of int in max_burst socket option deprecated. [ 427.482678][T10838] Use struct sctp_assoc_value instead [ 427.801678][T10850] sctp: [Deprecated]: syz.2.2650 (pid 10850) Use of int in max_burst socket option deprecated. [ 427.801678][T10850] Use struct sctp_assoc_value instead [ 428.874070][T10859] sctp: [Deprecated]: syz.0.2662 (pid 10859) Use of int in max_burst socket option deprecated. [ 428.874070][T10859] Use struct sctp_assoc_value instead [ 431.574597][T10909] sctp: [Deprecated]: syz.2.2669 (pid 10909) Use of int in max_burst socket option deprecated. [ 431.574597][T10909] Use struct sctp_assoc_value instead [ 432.317209][T10925] sctp: [Deprecated]: syz.4.2673 (pid 10925) Use of int in max_burst socket option deprecated. [ 432.317209][T10925] Use struct sctp_assoc_value instead [ 434.099945][T10961] sctp: [Deprecated]: syz.4.2683 (pid 10961) Use of int in max_burst socket option deprecated. [ 434.099945][T10961] Use struct sctp_assoc_value instead [ 435.172045][T10976] sctp: [Deprecated]: syz.2.2688 (pid 10976) Use of int in max_burst socket option deprecated. [ 435.172045][T10976] Use struct sctp_assoc_value instead [ 436.411131][T10997] sctp: [Deprecated]: syz.4.2695 (pid 10997) Use of int in max_burst socket option deprecated. [ 436.411131][T10997] Use struct sctp_assoc_value instead [ 436.900527][T11016] FAULT_INJECTION: forcing a failure. [ 436.900527][T11016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.963620][T11016] CPU: 0 PID: 11016 Comm: syz.1.2703 Not tainted 6.1.109-syzkaller #0 [ 436.972227][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 436.982347][T11016] Call Trace: [ 436.985641][T11016] [ 436.988587][T11016] dump_stack_lvl+0x1e3/0x2cb [ 436.993294][T11016] ? nf_tcp_handle_invalid+0x642/0x642 [ 436.998779][T11016] ? panic+0x764/0x764 [ 437.002876][T11016] should_fail_ex+0x3a6/0x4d0 [ 437.007675][T11016] strncpy_from_user+0x32/0x360 [ 437.012554][T11016] bpf_prog_load+0x188/0x1bb0 [ 437.017275][T11016] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 437.023387][T11016] ? print_irqtrace_events+0x210/0x210 [ 437.028883][T11016] ? map_freeze+0x390/0x390 [ 437.033437][T11016] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 437.039718][T11016] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 437.045915][T11016] ? _copy_from_user+0x52/0x170 [ 437.050800][T11016] ? __sanitizer_cov_trace_const_cmp4+0x4/0x80 [ 437.056998][T11016] ? bpf_lsm_bpf+0x5/0x10 [ 437.061370][T11016] ? security_bpf+0x7d/0xa0 [ 437.065900][T11016] __sys_bpf+0x382/0x6c0 [ 437.070166][T11016] ? ktime_get+0x242/0x270 [ 437.074690][T11016] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 437.080116][T11016] ? print_irqtrace_events+0x210/0x210 [ 437.085611][T11016] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 437.091631][T11016] ? syscall_enter_from_user_mode+0x2e/0x230 [ 437.097675][T11016] ? syscall_enter_from_user_mode+0x2e/0x230 [ 437.103689][T11016] ? lockdep_hardirqs_on+0x94/0x130 [ 437.108933][T11016] __x64_sys_bpf+0x78/0x90 [ 437.113380][T11016] do_syscall_64+0x3b/0xb0 [ 437.117836][T11016] ? clear_bhb_loop+0x45/0xa0 [ 437.122542][T11016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.128460][T11016] RIP: 0033:0x7f7f95b7cef9 [ 437.132898][T11016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.152546][T11016] RSP: 002b:00007f7f969a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.160991][T11016] RAX: ffffffffffffffda RBX: 00007f7f95d35f80 RCX: 00007f7f95b7cef9 [ 437.168990][T11016] RDX: 0000000000000090 RSI: 0000000020000840 RDI: 0000000000000005 [ 437.177072][T11016] RBP: 00007f7f969a9090 R08: 0000000000000000 R09: 0000000000000000 [ 437.185070][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.193069][T11016] R13: 0000000000000000 R14: 00007f7f95d35f80 R15: 00007fffd2282d08 [ 437.201083][T11016] [ 437.490911][T11029] sctp: [Deprecated]: syz.0.2707 (pid 11029) Use of int in max_burst socket option deprecated. [ 437.490911][T11029] Use struct sctp_assoc_value instead [ 437.772367][T11033] sctp: [Deprecated]: syz.3.2708 (pid 11033) Use of int in max_burst socket option deprecated. [ 437.772367][T11033] Use struct sctp_assoc_value instead [ 438.943617][T11051] sctp: [Deprecated]: syz.1.2714 (pid 11051) Use of int in max_burst socket option deprecated. [ 438.943617][T11051] Use struct sctp_assoc_value instead [ 439.996112][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.002455][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.173230][T11106] sctp: [Deprecated]: syz.3.2735 (pid 11106) Use of int in max_burst socket option deprecated. [ 442.173230][T11106] Use struct sctp_assoc_value instead [ 442.788954][ T3651] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 443.269685][T11141] sctp: [Deprecated]: syz.0.2748 (pid 11141) Use of int in max_burst socket option deprecated. [ 443.269685][T11141] Use struct sctp_assoc_value instead [ 445.109800][T11188] sctp: [Deprecated]: syz.1.2765 (pid 11188) Use of int in max_burst socket option deprecated. [ 445.109800][T11188] Use struct sctp_assoc_value instead [ 447.409639][T11229] sctp: [Deprecated]: syz.2.2780 (pid 11229) Use of int in max_burst socket option deprecated. [ 447.409639][T11229] Use struct sctp_assoc_value instead [ 449.857545][T11297] sctp: [Deprecated]: syz.4.2801 (pid 11297) Use of int in max_burst socket option deprecated. [ 449.857545][T11297] Use struct sctp_assoc_value instead [ 450.258057][T11311] sctp: [Deprecated]: syz.3.2806 (pid 11311) Use of int in max_burst socket option deprecated. [ 450.258057][T11311] Use struct sctp_assoc_value instead [ 453.207972][T11355] sctp: [Deprecated]: syz.4.2819 (pid 11355) Use of int in max_burst socket option deprecated. [ 453.207972][T11355] Use struct sctp_assoc_value instead [ 454.591524][T11378] sctp: [Deprecated]: syz.3.2827 (pid 11378) Use of int in max_burst socket option deprecated. [ 454.591524][T11378] Use struct sctp_assoc_value instead [ 457.112739][T11424] sctp: [Deprecated]: syz.2.2841 (pid 11424) Use of int in max_burst socket option deprecated. [ 457.112739][T11424] Use struct sctp_assoc_value instead [ 457.316761][T11429] sctp: [Deprecated]: syz.3.2845 (pid 11429) Use of int in max_burst socket option deprecated. [ 457.316761][T11429] Use struct sctp_assoc_value instead [ 459.500085][T11471] sctp: [Deprecated]: syz.1.2860 (pid 11471) Use of int in max_burst socket option deprecated. [ 459.500085][T11471] Use struct sctp_assoc_value instead [ 460.628973][T11502] sctp: [Deprecated]: syz.3.2871 (pid 11502) Use of int in max_burst socket option deprecated. [ 460.628973][T11502] Use struct sctp_assoc_value instead [ 461.488562][T11521] sctp: [Deprecated]: syz.1.2876 (pid 11521) Use of int in max_burst socket option deprecated. [ 461.488562][T11521] Use struct sctp_assoc_value instead [ 463.051681][T11559] sctp: [Deprecated]: syz.1.2890 (pid 11559) Use of int in max_burst socket option deprecated. [ 463.051681][T11559] Use struct sctp_assoc_value instead [ 465.337026][T11610] sctp: [Deprecated]: syz.1.2907 (pid 11610) Use of int in max_burst socket option deprecated. [ 465.337026][T11610] Use struct sctp_assoc_value instead [ 466.757900][T11655] sctp: [Deprecated]: syz.3.2921 (pid 11655) Use of int in max_burst socket option deprecated. [ 466.757900][T11655] Use struct sctp_assoc_value instead [ 467.384886][ T3640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.394061][ T3640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.403160][ T3640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.411166][ T3640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.445600][ T3640] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 467.464705][ T3640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.586198][T11670] netlink: 'syz.1.2930': attribute type 21 has an invalid length. [ 467.623575][T11670] netlink: 'syz.1.2930': attribute type 6 has an invalid length. [ 467.665340][T11670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2930'. [ 468.427661][T11665] chnl_net:caif_netlink_parms(): no params data found [ 469.095857][T11665] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.103459][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.135607][T11665] device bridge_slave_0 entered promiscuous mode [ 469.163249][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.182802][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.214453][T11665] device bridge_slave_1 entered promiscuous mode [ 469.392599][T11665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.463796][T11665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.481614][T11700] sctp: [Deprecated]: syz.4.2938 (pid 11700) Use of int in max_burst socket option deprecated. [ 469.481614][T11700] Use struct sctp_assoc_value instead [ 469.514422][ T3651] Bluetooth: hci5: command tx timeout [ 469.673039][T11665] team0: Port device team_slave_0 added [ 469.726053][T11665] team0: Port device team_slave_1 added [ 470.218271][T11514] device syz_tun left promiscuous mode [ 470.274522][T11514] team0: Port device syz_tun removed [ 470.313040][T11665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.334166][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.490992][T11665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.056534][ T3662] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.118865][T11665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.134694][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.225825][T11665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.448556][ T3662] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.594527][ T3651] Bluetooth: hci5: command tx timeout [ 471.988701][T11665] device hsr_slave_0 entered promiscuous mode [ 472.019514][T11665] device hsr_slave_1 entered promiscuous mode [ 472.046722][T11665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.075052][T11665] Cannot create hsr debugfs directory [ 472.099425][T11746] sctp: [Deprecated]: syz.3.2954 (pid 11746) Use of int in max_burst socket option deprecated. [ 472.099425][T11746] Use struct sctp_assoc_value instead [ 472.189641][ T3662] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.682736][ T3651] Bluetooth: hci5: command tx timeout [ 475.172024][ T3662] device netdevsim0 left promiscuous mode [ 475.285954][ T3662] team0: Port device netdevsim0 removed [ 475.312979][ T3662] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.754199][ T3651] Bluetooth: hci5: command tx timeout [ 478.043630][T11836] netlink: 'syz.0.2978': attribute type 13 has an invalid length. [ 478.058290][T11836] device macvtap0 entered promiscuous mode [ 478.117851][T11836] macvtap0: refused to change device tx_queue_len [ 478.524554][T11665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.914404][T11665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.966634][T11665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 479.077262][T11665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 479.768780][T11665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.829316][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.846434][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.887920][T11665] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.909869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.931402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.043907][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.051105][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.073485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.330351][ T3662] device hsr_slave_0 left promiscuous mode [ 480.451716][ T3662] device hsr_slave_1 left promiscuous mode [ 480.485748][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.497851][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.521179][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.544346][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.583853][ T3662] device macsec0 left promiscuous mode [ 480.592496][ T3662] bridge0: port 4(macsec0) entered disabled state [ 480.639170][ T3662] bridge0: port 3(team0) entered disabled state [ 480.692354][ T3662] device bridge_slave_1 left promiscuous mode [ 480.712122][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.744749][ T3662] device bridge_slave_0 left promiscuous mode [ 480.751029][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.833015][ T3662] device veth1_vlan left promiscuous mode [ 482.464894][ T3662] device team_slave_1 left promiscuous mode [ 482.508812][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 482.761807][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.982688][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.332309][ T3662] bond0 (unregistering): Released all slaves [ 484.469737][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.488038][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.497693][ T5341] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.505676][ T5341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.528270][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.672707][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.722655][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.773954][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.789189][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.810089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 484.819430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 484.877666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 484.917147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.018641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.047262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.083417][T11665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 485.554790][T11928] sctp: [Deprecated]: syz.1.3003 (pid 11928) Use of int in max_burst socket option deprecated. [ 485.554790][T11928] Use struct sctp_assoc_value instead [ 485.655741][T11665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.697076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.718779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.869028][T11665] device veth0_vlan entered promiscuous mode [ 485.882749][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 485.901092][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 485.965077][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 485.995966][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.005539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.036146][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.093699][T11665] device veth1_vlan entered promiscuous mode [ 486.409013][T11665] device veth0_macvtap entered promiscuous mode [ 486.438301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 486.457722][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 486.498693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 486.529121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.586419][T11665] device veth1_macvtap entered promiscuous mode [ 486.607173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 486.632588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 486.686556][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.707373][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.723930][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.745045][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.758524][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.773802][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.804300][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.824289][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.849086][T11665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.879849][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 486.921226][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 486.968728][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.982570][T11942] sctp: [Deprecated]: syz.0.3010 (pid 11942) Use of int in max_burst socket option deprecated. [ 486.982570][T11942] Use struct sctp_assoc_value instead [ 487.054577][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.083203][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.127611][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.171278][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.234652][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.284810][T11665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.323381][T11665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.349750][T11665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.364684][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 487.414957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 487.438867][T11665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.469565][T11665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.504156][T11665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.530133][T11665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.742630][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.788113][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.876006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 487.894853][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.927974][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.970189][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 489.661677][ T3651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 489.672071][ T3651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 489.681476][ T3651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 489.690277][ T3651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 489.698256][ T3651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 489.706857][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 490.526060][T12004] chnl_net:caif_netlink_parms(): no params data found [ 491.025206][T11931] device syz_tun left promiscuous mode [ 491.052739][T11931] team0: Port device syz_tun removed [ 491.128452][T12037] sctp: [Deprecated]: syz.2.3041 (pid 12037) Use of int in max_burst socket option deprecated. [ 491.128452][T12037] Use struct sctp_assoc_value instead [ 491.155009][T12004] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.162242][T12004] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.225035][T12004] device bridge_slave_0 entered promiscuous mode [ 491.347234][T12004] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.369098][T12004] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.396875][T12004] device bridge_slave_1 entered promiscuous mode [ 491.747986][ T3709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.754642][ T3640] Bluetooth: hci3: command tx timeout [ 492.206242][ T3709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.333179][T12004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.601702][T12004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.646283][T12065] sctp: [Deprecated]: syz.1.3051 (pid 12065) Use of int in max_burst socket option deprecated. [ 492.646283][T12065] Use struct sctp_assoc_value instead [ 492.729817][T12004] team0: Port device team_slave_0 added [ 493.218398][ T3709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.305816][T12004] team0: Port device team_slave_1 added [ 493.539938][ T3709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.710966][T12004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.774349][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.834551][ T3640] Bluetooth: hci3: command tx timeout [ 493.963000][T12004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.289070][T12004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.317087][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.493580][T12004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.939826][T12004] device hsr_slave_0 entered promiscuous mode [ 495.025513][T12004] device hsr_slave_1 entered promiscuous mode [ 495.053009][T12004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.084181][T12004] Cannot create hsr debugfs directory [ 495.154292][T12094] netlink: 'syz.0.3057': attribute type 21 has an invalid length. [ 495.193735][T12094] netlink: 'syz.0.3057': attribute type 6 has an invalid length. [ 495.286809][T12094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3057'. [ 495.914233][ T3640] Bluetooth: hci3: command tx timeout [ 497.994295][ T3640] Bluetooth: hci3: command tx timeout [ 498.941964][T12157] sctp: [Deprecated]: syz.3.3069 (pid 12157) Use of int in max_burst socket option deprecated. [ 498.941964][T12157] Use struct sctp_assoc_value instead [ 500.791098][T12188] netlink: 'syz.3.3072': attribute type 21 has an invalid length. [ 500.823218][T12188] netlink: 'syz.3.3072': attribute type 6 has an invalid length. [ 500.883181][T12188] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3072'. [ 501.378808][T12004] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.436405][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.442799][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.844884][T12004] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 502.768715][T12004] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 502.827264][T12004] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 503.596875][T12234] netlink: 'syz.1.3087': attribute type 21 has an invalid length. [ 503.645450][T12234] netlink: 'syz.1.3087': attribute type 6 has an invalid length. [ 503.704570][T12234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3087'. [ 504.199318][T12254] sctp: [Deprecated]: syz.1.3090 (pid 12254) Use of int in max_burst socket option deprecated. [ 504.199318][T12254] Use struct sctp_assoc_value instead [ 504.829712][T12004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.976443][T12004] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.983450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.994080][T12264] sctp: [Deprecated]: syz.3.3093 (pid 12264) Use of int in max_burst socket option deprecated. [ 504.994080][T12264] Use struct sctp_assoc_value instead [ 504.995094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 506.243500][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 506.305680][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.323738][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.330964][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.354239][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.384830][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.399761][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.406975][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.507741][ T3709] device hsr_slave_0 left promiscuous mode [ 506.520915][ T3709] device hsr_slave_1 left promiscuous mode [ 506.528565][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.544674][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.561496][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.573733][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.598601][ T3709] device macsec0 left promiscuous mode [ 506.625247][ T3709] bridge0: port 4(macsec0) entered disabled state [ 506.637352][ T3709] device team0 left promiscuous mode [ 506.674923][ T3709] device team_slave_1 left promiscuous mode [ 506.723271][ T3709] bridge0: port 3(team0) entered disabled state [ 506.797575][ T3709] device bridge_slave_1 left promiscuous mode [ 506.803842][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.861118][ T3709] device bridge_slave_0 left promiscuous mode [ 506.896786][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.007604][ T3709] device veth0_macvtap left promiscuous mode [ 507.017524][ T3709] device veth1_vlan left promiscuous mode [ 507.040881][ T3709] device veth0_vlan left promiscuous mode [ 508.313976][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 508.775246][T12311] sctp: [Deprecated]: syz.3.3105 (pid 12311) Use of int in max_burst socket option deprecated. [ 508.775246][T12311] Use struct sctp_assoc_value instead [ 508.824712][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.867350][ T3651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.876720][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.884972][ T3651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.893847][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.922483][ T3650] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 508.931053][ T3650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.036300][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.828213][ T3709] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 510.284430][ T3709] bond0 (unregistering): Released all slaves [ 510.430921][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 510.440657][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.465831][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 510.480399][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 510.495645][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 510.509022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 510.526131][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 510.544855][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 510.558113][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.590784][T12004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.637573][T12004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 510.675203][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 510.687167][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 510.755169][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 510.954418][ T3640] Bluetooth: hci2: command tx timeout [ 511.551182][T12312] chnl_net:caif_netlink_parms(): no params data found [ 511.843449][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.875039][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.924521][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.937331][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.972618][T12312] device bridge_slave_0 entered promiscuous mode [ 512.019536][T12004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.076707][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.083860][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.145617][T12312] device bridge_slave_1 entered promiscuous mode [ 512.720735][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.765020][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.877709][ T5341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.044371][ T3640] Bluetooth: hci2: command tx timeout [ 513.083291][ T5341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.179710][T12312] team0: Port device team_slave_0 added [ 513.448941][ T5341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.463747][T12393] sctp: [Deprecated]: syz.0.3119 (pid 12393) Use of int in max_burst socket option deprecated. [ 513.463747][T12393] Use struct sctp_assoc_value instead [ 513.488878][T12312] team0: Port device team_slave_1 added [ 513.682211][ T5341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.735231][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.742244][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.902248][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.033568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 514.086544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 514.143497][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.172830][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.272066][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.377260][T12004] device veth0_vlan entered promiscuous mode [ 514.504968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 514.516750][T12413] sctp: [Deprecated]: syz.0.3124 (pid 12413) Use of int in max_burst socket option deprecated. [ 514.516750][T12413] Use struct sctp_assoc_value instead [ 514.538294][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 514.693115][T12312] device hsr_slave_0 entered promiscuous mode [ 514.721510][T12312] device hsr_slave_1 entered promiscuous mode [ 514.773270][T12312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.815176][T12312] Cannot create hsr debugfs directory [ 514.825149][T12004] device veth1_vlan entered promiscuous mode [ 514.846098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 514.857296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 514.907892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 515.083960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 515.114984][ T3640] Bluetooth: hci2: command tx timeout [ 515.348457][T12004] device veth0_macvtap entered promiscuous mode [ 516.074015][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.087453][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.096681][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.131932][T12004] device veth1_macvtap entered promiscuous mode [ 517.196340][ T3640] Bluetooth: hci2: command tx timeout [ 517.224411][T12004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.280813][T12004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.324997][T12004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.364212][T12004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.385604][T12004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.411686][T12004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.448013][T12004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.479120][T12004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.507531][T12004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.531701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 517.583017][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.652466][T12004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.681323][T12004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.709749][T12004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.754583][T12004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.782052][T12004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.803064][T12004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.831777][T12004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.873954][T12004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.897661][T12004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.948120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 517.966416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 518.052417][T12004] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.104290][T12004] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.124179][T12004] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.132918][T12004] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.676760][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.711214][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.869430][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 518.903336][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.939909][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.008329][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 519.028458][T12477] sctp: [Deprecated]: syz.3.3137 (pid 12477) Use of int in max_burst socket option deprecated. [ 519.028458][T12477] Use struct sctp_assoc_value instead [ 519.477701][T12312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 519.568894][T12312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 520.134975][T12312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 520.177465][T12312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 520.474318][ T5341] device hsr_slave_0 left promiscuous mode [ 520.525318][ T5341] device hsr_slave_1 left promiscuous mode [ 520.536068][ T5341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.560855][ T5341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.644951][ T5341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.652460][ T5341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.677190][ T5341] device bridge_slave_1 left promiscuous mode [ 520.687098][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.712622][ T5341] device bridge_slave_0 left promiscuous mode [ 520.721032][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.812344][ T5341] device veth1_macvtap left promiscuous mode [ 520.834434][ T5341] device veth0_macvtap left promiscuous mode [ 520.854519][ T5341] device veth1_vlan left promiscuous mode [ 520.876246][ T5341] device veth0_vlan left promiscuous mode [ 522.246586][ T5341] team0 (unregistering): Port device team_slave_1 removed [ 522.297231][ T5341] team0 (unregistering): Port device team_slave_0 removed [ 522.352399][ T5341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.415259][ T5341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.071414][ T5341] bond0 (unregistering): Released all slaves [ 523.434495][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.542966][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.562612][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.620969][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.665089][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.690981][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.711575][T12533] sctp: [Deprecated]: syz.1.3151 (pid 12533) Use of int in max_burst socket option deprecated. [ 523.711575][T12533] Use struct sctp_assoc_value instead [ 523.740111][ T3662] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.747306][ T3662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.794697][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.872120][T12537] sctp: [Deprecated]: syz.0.3150 (pid 12537) Use of int in max_burst socket option deprecated. [ 523.872120][T12537] Use struct sctp_assoc_value instead [ 523.929064][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.959106][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.995300][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.002628][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.084569][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 524.094558][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.107346][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.122887][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.193800][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.236506][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.266638][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.332010][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.393752][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.418406][T12312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.493778][T12312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.562535][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 524.613938][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.469067][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 525.485900][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.553848][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.614973][T12585] sctp: [Deprecated]: syz.0.3161 (pid 12585) Use of int in max_burst socket option deprecated. [ 525.614973][T12585] Use struct sctp_assoc_value instead [ 525.712380][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.723439][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.763002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.773227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.796214][T12312] device veth0_vlan entered promiscuous mode [ 525.810347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.828840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.864828][T12312] device veth1_vlan entered promiscuous mode [ 525.974372][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 525.995382][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 526.019969][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.054935][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.155897][T12312] device veth0_macvtap entered promiscuous mode [ 526.197513][T12312] device veth1_macvtap entered promiscuous mode [ 526.230919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.240166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.353440][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.404481][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.424374][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.435182][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.459438][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.484440][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.498350][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.515575][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.533522][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.551554][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.572778][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.588713][T12611] sctp: [Deprecated]: syz.1.3165 (pid 12611) Use of int in max_burst socket option deprecated. [ 526.588713][T12611] Use struct sctp_assoc_value instead [ 526.594055][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.687983][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.723830][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.761027][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.794410][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.841093][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.892236][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.975018][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.064909][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.113712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.163845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.219104][T12312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.251386][T12312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.260592][T12312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.289922][T12312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.711679][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.740931][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.859177][ T5341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.864200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 527.918368][ T5341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.936627][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 528.029316][T12645] sctp: [Deprecated]: syz.0.3172 (pid 12645) Use of int in max_burst socket option deprecated. [ 528.029316][T12645] Use struct sctp_assoc_value instead [ 528.624274][T12660] sctp: [Deprecated]: syz.0.3185 (pid 12660) Use of int in max_burst socket option deprecated. [ 528.624274][T12660] Use struct sctp_assoc_value instead [ 528.885586][T12664] sctp: [Deprecated]: syz.4.3177 (pid 12664) Use of int in max_burst socket option deprecated. [ 528.885586][T12664] Use struct sctp_assoc_value instead [ 528.999263][ T3640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 529.011633][ T3640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 529.022099][ T3640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 529.040047][ T3640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 529.048167][ T3640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 529.055830][ T3640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 529.165518][T12670] sctp: [Deprecated]: syz.3.3176 (pid 12670) Use of int in max_burst socket option deprecated. [ 529.165518][T12670] Use struct sctp_assoc_value instead [ 529.387875][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.409599][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.687054][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.903115][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.069962][T12667] chnl_net:caif_netlink_parms(): no params data found [ 531.114445][ T3640] Bluetooth: hci0: command tx timeout [ 531.228704][T12698] sctp: [Deprecated]: syz.2.3189 (pid 12698) Use of int in max_burst socket option deprecated. [ 531.228704][T12698] Use struct sctp_assoc_value instead [ 531.937333][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.957121][T12667] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.970923][T12667] device bridge_slave_0 entered promiscuous mode [ 532.047556][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.104308][T12667] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.122886][T12667] device bridge_slave_1 entered promiscuous mode [ 532.173096][T12715] sctp: [Deprecated]: syz.4.3194 (pid 12715) Use of int in max_burst socket option deprecated. [ 532.173096][T12715] Use struct sctp_assoc_value instead [ 532.194382][T12712] sctp: [Deprecated]: syz.0.3192 (pid 12712) Use of int in max_burst socket option deprecated. [ 532.194382][T12712] Use struct sctp_assoc_value instead [ 532.539919][T12722] sctp: [Deprecated]: syz.3.3193 (pid 12722) Use of int in max_burst socket option deprecated. [ 532.539919][T12722] Use struct sctp_assoc_value instead [ 533.150889][T12667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.205474][ T3640] Bluetooth: hci0: command tx timeout [ 533.505403][T12667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.932143][T12667] team0: Port device team_slave_0 added [ 534.040086][T12667] team0: Port device team_slave_1 added [ 534.629514][T12768] sctp: [Deprecated]: syz.0.3205 (pid 12768) Use of int in max_burst socket option deprecated. [ 534.629514][T12768] Use struct sctp_assoc_value instead [ 534.938447][T12667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.971102][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.094125][T12667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.274523][ T3640] Bluetooth: hci0: command tx timeout [ 535.474736][T12667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.492053][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.595657][T12667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.714024][T12794] sctp: [Deprecated]: syz.3.3209 (pid 12794) Use of int in max_burst socket option deprecated. [ 535.714024][T12794] Use struct sctp_assoc_value instead [ 536.221777][T12667] device hsr_slave_0 entered promiscuous mode [ 536.245383][T12667] device hsr_slave_1 entered promiscuous mode [ 536.263917][T12667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.287134][T12667] Cannot create hsr debugfs directory [ 537.354370][ T3640] Bluetooth: hci0: command tx timeout [ 539.155239][ T11] device hsr_slave_0 left promiscuous mode [ 539.170024][ T11] device hsr_slave_1 left promiscuous mode [ 539.178190][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.196325][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.237774][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.257919][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.283770][ T11] device macsec0 left promiscuous mode [ 539.305854][ T11] bridge0: port 4(macsec0) entered disabled state [ 539.316054][ T11] bridge0: port 3(team0) entered disabled state [ 539.359882][ T11] device bridge_slave_1 left promiscuous mode [ 539.368678][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.391716][ T11] device bridge_slave_0 left promiscuous mode [ 539.410980][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.466906][ T11] device veth1_vlan left promiscuous mode [ 539.477557][ T11] device veth0_vlan left promiscuous mode [ 540.643552][ T11] device team_slave_1 left promiscuous mode [ 540.665394][ T11] team0 (unregistering): Port device team_slave_1 removed [ 540.790465][ T11] device team_slave_0 left promiscuous mode [ 540.820147][ T11] team0 (unregistering): Port device team_slave_0 removed [ 540.950774][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.036204][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.281700][ T11] device batadv0 left promiscuous mode [ 541.289393][ T11] team0 (unregistering): Port device batadv0 removed [ 541.644812][ T11] bond0 (unregistering): Released all slaves [ 542.048867][T12667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 542.353335][T12667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 542.452697][T12667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 542.480225][T12667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 542.933009][T12667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.999744][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 543.029602][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 543.091201][T12667] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.160084][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 543.185460][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 543.210489][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.217956][ T5342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.247669][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 543.318002][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.368646][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.375915][ T5342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.468575][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 543.476910][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 543.506039][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 543.525740][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.556522][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.598248][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.646820][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.683302][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.713100][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.770412][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.790074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.800920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 543.830532][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.493637][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.535080][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.549434][T12667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.664532][T12964] FAULT_INJECTION: forcing a failure. [ 544.664532][T12964] name failslab, interval 1, probability 0, space 0, times 0 [ 544.736016][T12964] CPU: 0 PID: 12964 Comm: syz.0.3251 Not tainted 6.1.109-syzkaller #0 [ 544.744277][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 544.754373][T12964] Call Trace: [ 544.757666][T12964] [ 544.760612][T12964] dump_stack_lvl+0x1e3/0x2cb [ 544.765327][T12964] ? nf_tcp_handle_invalid+0x642/0x642 [ 544.770821][T12964] ? panic+0x764/0x764 [ 544.774919][T12964] ? __might_sleep+0xb0/0xb0 [ 544.779977][T12964] ? 0xffffffffa00007dc [ 544.784163][T12964] should_fail_ex+0x3a6/0x4d0 [ 544.788882][T12964] should_failslab+0x5/0x20 [ 544.793411][T12964] slab_pre_alloc_hook+0x59/0x300 [ 544.798461][T12964] ? __kernel_text_address+0x9/0x40 [ 544.803689][T12964] ? rtnl_newlink+0xe6/0x2050 [ 544.808400][T12964] __kmem_cache_alloc_node+0x47/0x260 [ 544.813844][T12964] ? rtnl_newlink+0xe6/0x2050 [ 544.818560][T12964] kmalloc_trace+0x26/0xe0 [ 544.823027][T12964] rtnl_newlink+0xe6/0x2050 [ 544.827582][T12964] ? read_lock_is_recursive+0x10/0x10 [ 544.832988][T12964] ? __mutex_trylock_common+0x17e/0x2e0 [ 544.838567][T12964] ? __might_sleep+0xb0/0xb0 [ 544.843186][T12964] ? rtnl_setlink+0x560/0x560 [ 544.847898][T12964] ? trace_raw_output_contention_end+0xd0/0xd0 [ 544.854085][T12964] ? rcu_is_watching+0x11/0xb0 [ 544.858876][T12964] ? trace_contention_end+0x61/0x170 [ 544.864193][T12964] ? __mutex_lock+0x2f7/0xd80 [ 544.868915][T12964] ? rtnetlink_rcv_msg+0x7c1/0xff0 [ 544.874082][T12964] ? mutex_lock_nested+0x10/0x10 [ 544.879069][T12964] ? rtnl_setlink+0x560/0x560 [ 544.883784][T12964] rtnetlink_rcv_msg+0x818/0xff0 [ 544.888816][T12964] ? rtnetlink_bind+0x80/0x80 [ 544.893556][T12964] ? __local_bh_enable_ip+0x164/0x1f0 [ 544.899061][T12964] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 544.904207][T12964] ? _local_bh_enable+0xa0/0xa0 [ 544.909098][T12964] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 544.914361][T12964] ? __dev_queue_xmit+0x1790/0x3cf0 [ 544.919694][T12964] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 544.924847][T12964] ? netdev_core_pick_tx+0x320/0x320 [ 544.930174][T12964] ? ref_tracker_free+0x638/0x7d0 [ 544.935249][T12964] ? memcpy+0x3c/0x60 [ 544.939285][T12964] ? refcount_inc+0x80/0x80 [ 544.943827][T12964] ? __copy_skb_header+0x47b/0x600 [ 544.948994][T12964] netlink_rcv_skb+0x1cd/0x410 [ 544.953799][T12964] ? rtnetlink_bind+0x80/0x80 [ 544.958518][T12964] ? netlink_ack+0x1290/0x1290 [ 544.963318][T12964] ? __netlink_deliver_tap+0x73e/0x770 [ 544.968943][T12964] ? netlink_deliver_tap+0x2e/0x1b0 [ 544.974228][T12964] netlink_unicast+0x7d8/0x970 [ 544.979064][T12964] ? netlink_detachskb+0x90/0x90 [ 544.984034][T12964] ? __virt_addr_valid+0x45b/0x530 [ 544.989173][T12964] ? __phys_addr_symbol+0x2b/0x70 [ 544.994277][T12964] ? __check_object_size+0x4dd/0xa30 [ 544.999595][T12964] ? bpf_lsm_netlink_send+0x5/0x10 [ 545.004754][T12964] netlink_sendmsg+0xa26/0xd60 [ 545.009566][T12964] ? netlink_getsockopt+0x580/0x580 [ 545.014809][T12964] ? aa_sock_msg_perm+0x91/0x150 [ 545.019787][T12964] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 545.025108][T12964] ? security_socket_sendmsg+0x7d/0xa0 [ 545.030596][T12964] ? netlink_getsockopt+0x580/0x580 [ 545.035830][T12964] ____sys_sendmsg+0x5a5/0x8f0 [ 545.040644][T12964] ? __sys_sendmsg_sock+0x30/0x30 [ 545.045721][T12964] __sys_sendmsg+0x2a9/0x390 [ 545.050352][T12964] ? ____sys_sendmsg+0x8f0/0x8f0 [ 545.055319][T12964] ? vfs_write+0x6cf/0xbc0 [ 545.059820][T12964] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 545.065855][T12964] ? syscall_enter_from_user_mode+0x2e/0x230 [ 545.071937][T12964] ? syscall_enter_from_user_mode+0x2e/0x230 [ 545.077952][T12964] ? lockdep_hardirqs_on+0x94/0x130 [ 545.083199][T12964] ? syscall_enter_from_user_mode+0x2e/0x230 [ 545.089232][T12964] do_syscall_64+0x3b/0xb0 [ 545.093701][T12964] ? clear_bhb_loop+0x45/0xa0 [ 545.098509][T12964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.104532][T12964] RIP: 0033:0x7fd575f7cef9 [ 545.109151][T12964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.129066][T12964] RSP: 002b:00007fd576dc0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.137692][T12964] RAX: ffffffffffffffda RBX: 00007fd576136058 RCX: 00007fd575f7cef9 [ 545.145690][T12964] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000004 [ 545.153785][T12964] RBP: 00007fd576dc0090 R08: 0000000000000000 R09: 0000000000000000 [ 545.161883][T12964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.170165][T12964] R13: 0000000000000000 R14: 00007fd576136058 R15: 00007fffa73f9e08 [ 545.179337][T12964] [ 545.387649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 545.425568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.613616][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 545.632797][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 545.666946][T12667] device veth0_vlan entered promiscuous mode [ 545.683335][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 545.705858][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 545.792505][T12667] device veth1_vlan entered promiscuous mode [ 545.910647][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 545.925957][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 545.952927][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 545.972057][ T3709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 546.004025][T12667] device veth0_macvtap entered promiscuous mode [ 546.055100][T12667] device veth1_macvtap entered promiscuous mode [ 546.139248][T12667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.174440][T12667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.203736][T12667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.336304][T12999] sctp: [Deprecated]: syz.0.3259 (pid 12999) Use of int in max_burst socket option deprecated. [ 546.336304][T12999] Use struct sctp_assoc_value instead [ 546.367340][T12667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.413977][T12667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.474457][T12667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.542030][T12667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.604154][T12667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.685595][T12667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.887354][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 546.944972][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 546.965107][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 546.987316][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 547.038981][T12667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.080682][T12667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.144184][T12667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.204136][T12667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.236858][T12667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.274200][T12667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.320272][T12667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.367956][T12667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.414467][T12667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.443214][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 547.474398][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 547.517900][T12667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.540960][T12667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.581437][T12667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.611448][T12667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.675331][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.683462][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.760320][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 548.784690][T13028] netlink: 'syz.0.3263': attribute type 10 has an invalid length. [ 548.792780][T13028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.907152][T13028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.970125][T13028] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 549.019584][ T3662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.042028][ T3662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.104295][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 550.269662][ T3640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.281737][ T3640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.298171][ T3640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.307315][ T3640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.323243][ T3640] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 550.340159][ T3640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 550.876078][ T3635] team0: Port device syz_tun removed [ 551.181952][ T3709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.486899][ T3709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.766278][ T3709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.104509][ T3709] bond0: (slave netdevsim0): Releasing backup interface [ 552.118812][ T3709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.395374][ T3640] Bluetooth: hci1: command tx timeout [ 552.427464][T13057] chnl_net:caif_netlink_parms(): no params data found [ 552.685508][T13057] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.692645][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.755520][T13057] device bridge_slave_0 entered promiscuous mode [ 553.616647][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.624638][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.637023][T13057] device bridge_slave_1 entered promiscuous mode [ 553.873941][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.957877][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.242655][T13057] team0: Port device team_slave_0 added [ 554.295911][T13057] team0: Port device team_slave_1 added [ 554.474278][ T3640] Bluetooth: hci1: command tx timeout [ 554.635951][T13057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.653107][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.794747][T13057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.988315][T13057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.004172][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.084147][T13057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.643561][T13057] device hsr_slave_0 entered promiscuous mode [ 555.765357][T13057] device hsr_slave_1 entered promiscuous mode [ 556.558330][ T3640] Bluetooth: hci1: command tx timeout [ 558.419228][ T3709] device hsr_slave_0 left promiscuous mode [ 558.426601][ T3709] device hsr_slave_1 left promiscuous mode [ 558.457054][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.467803][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.501486][ T3709] device bridge_slave_1 left promiscuous mode [ 558.510262][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.540558][ T3709] device bridge_slave_0 left promiscuous mode [ 558.550438][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.618612][ T3709] device veth1_macvtap left promiscuous mode [ 558.625061][ T3709] device veth0_macvtap left promiscuous mode [ 558.631207][ T3709] device veth1_vlan left promiscuous mode [ 558.635797][ T3640] Bluetooth: hci1: command tx timeout [ 558.649767][ T3709] device veth0_vlan left promiscuous mode [ 560.363632][ T3709] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 560.452723][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 560.588744][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.669673][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.331885][ T3709] bond0 (unregistering): Released all slaves [ 562.239900][T13057] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 562.369786][T13057] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 562.410081][T13057] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 562.517117][T13057] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 562.882366][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.889307][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.177939][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.267027][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 563.275688][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 563.306946][T13057] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.347435][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 563.365244][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 563.393353][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.400653][ T5342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.458019][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 563.485369][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 563.530465][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 563.565299][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.572608][ T5342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.632982][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 563.677443][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 563.723486][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 563.766158][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 563.806407][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 563.839481][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 563.875674][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 563.917824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 563.939785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 563.989149][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 564.016591][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 564.069009][T13057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.184240][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.191796][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 565.264295][T13057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.375665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 565.403800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 565.471986][T13057] device veth0_vlan entered promiscuous mode [ 565.502189][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 565.511531][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 565.592416][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 565.622010][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 565.691248][T13057] device veth1_vlan entered promiscuous mode [ 565.708188][T13336] FAULT_INJECTION: forcing a failure. [ 565.708188][T13336] name failslab, interval 1, probability 0, space 0, times 0 [ 565.799452][T13336] CPU: 1 PID: 13336 Comm: syz.2.3336 Not tainted 6.1.109-syzkaller #0 [ 565.807659][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 565.818498][T13336] Call Trace: [ 565.821767][T13336] [ 565.824774][T13336] dump_stack_lvl+0x1e3/0x2cb [ 565.829479][T13336] ? nf_tcp_handle_invalid+0x642/0x642 [ 565.834934][T13336] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 565.841102][T13336] should_fail_ex+0x3a6/0x4d0 [ 565.845783][T13336] should_failslab+0x5/0x20 [ 565.850277][T13336] slab_pre_alloc_hook+0x59/0x300 [ 565.855323][T13336] ? prepend_path+0x2f/0xbe0 [ 565.859945][T13336] ? tomoyo_encode+0x26b/0x530 [ 565.864730][T13336] __kmem_cache_alloc_node+0x47/0x260 [ 565.870121][T13336] ? d_absolute_path+0x1c2/0x300 [ 565.875077][T13336] ? tomoyo_encode+0x26b/0x530 [ 565.879850][T13336] __kmalloc+0xa1/0x230 [ 565.884005][T13336] tomoyo_encode+0x26b/0x530 [ 565.888595][T13336] tomoyo_realpath_from_path+0x594/0x5d0 [ 565.894251][T13336] tomoyo_path_number_perm+0x21f/0x7f0 [ 565.899721][T13336] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 565.905351][T13336] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 565.910916][T13336] ? __d_lookup+0x8b/0x790 [ 565.915330][T13336] ? hook_path_mknod+0x15c/0x4b0 [ 565.920260][T13336] ? d_alloc_parallel+0x31a/0x1590 [ 565.925368][T13336] tomoyo_path_mknod+0x172/0x1b0 [ 565.930297][T13336] ? hook_path_mkdir+0x400/0x400 [ 565.935229][T13336] ? tomoyo_path_symlink+0x110/0x110 [ 565.940517][T13336] security_path_mknod+0xf1/0x150 [ 565.945536][T13336] path_openat+0xc29/0x2e60 [ 565.950313][T13336] ? do_filp_open+0x480/0x480 [ 565.954979][T13336] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 565.961144][T13336] do_filp_open+0x230/0x480 [ 565.965641][T13336] ? vfs_tmpfile+0x4a0/0x4a0 [ 565.970269][T13336] ? _raw_spin_unlock+0x24/0x40 [ 565.975158][T13336] ? alloc_fd+0x5a0/0x640 [ 565.979486][T13336] do_sys_openat2+0x13b/0x4f0 [ 565.984187][T13336] ? perf_trace_run_bpf_submit+0xf7/0x1d0 [ 565.989901][T13336] ? do_sys_open+0x220/0x220 [ 565.994498][T13336] __x64_sys_openat+0x243/0x290 [ 565.999366][T13336] ? __ia32_sys_open+0x270/0x270 [ 566.004300][T13336] ? syscall_enter_from_user_mode+0x2e/0x230 [ 566.010374][T13336] ? lockdep_hardirqs_on+0x94/0x130 [ 566.015611][T13336] ? syscall_enter_from_user_mode+0x2e/0x230 [ 566.021585][T13336] do_syscall_64+0x3b/0xb0 [ 566.026003][T13336] ? clear_bhb_loop+0x45/0xa0 [ 566.030691][T13336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.036686][T13336] RIP: 0033:0x7efc12f7cef9 [ 566.041189][T13336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.060792][T13336] RSP: 002b:00007efc13ca2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 566.069198][T13336] RAX: ffffffffffffffda RBX: 00007efc13135f80 RCX: 00007efc12f7cef9 [ 566.077163][T13336] RDX: 000000000000275a RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 566.085207][T13336] RBP: 00007efc13ca2090 R08: 0000000000000000 R09: 0000000000000000 [ 566.093253][T13336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.101300][T13336] R13: 0000000000000000 R14: 00007efc13135f80 R15: 00007ffd55919888 [ 566.109270][T13336] [ 566.174231][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 566.193904][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 566.234909][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 566.243758][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 566.265936][T13057] device veth0_macvtap entered promiscuous mode [ 566.299598][T13336] ERROR: Out of memory at tomoyo_realpath_from_path. [ 566.304380][T13057] device veth1_macvtap entered promiscuous mode [ 566.362078][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.393124][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.437832][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.468825][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.503761][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.532600][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.577351][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.609852][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.649555][T13057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.698630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 566.714633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 566.746449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 566.787335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 566.821149][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.850049][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.879024][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.919181][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.951642][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.992970][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.027961][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.063449][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.108433][T13057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.128258][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 567.153197][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 567.258294][T13057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.270227][T13057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.301310][T13057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.311053][T13057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.546381][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.594901][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.654272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 567.759777][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 567.781414][ T5342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.789684][ T5342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.842187][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 568.422602][T13393] sctp: [Deprecated]: syz.0.3269 (pid 13393) Use of int in max_burst socket option deprecated. [ 568.422602][T13393] Use struct sctp_assoc_value instead [ 569.278226][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.294018][ T3651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 569.335757][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 569.348642][ T3650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 569.356678][ T3650] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 569.364135][ T3650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.466559][T10340] device syz_tun left promiscuous mode [ 569.493703][T10340] team0: Port device syz_tun removed [ 569.846124][ T3709] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.096729][ T3709] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.547763][T13450] sctp: [Deprecated]: syz.0.3366 (pid 13450) Use of int in max_burst socket option deprecated. [ 570.547763][T13450] Use struct sctp_assoc_value instead [ 570.551386][ T3709] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.269834][T13414] chnl_net:caif_netlink_parms(): no params data found [ 571.386718][ T3709] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.448524][ T3650] Bluetooth: hci5: command tx timeout [ 571.896141][T13414] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.927579][T13414] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.945537][T13414] device bridge_slave_0 entered promiscuous mode [ 572.032450][T13414] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.043613][T13414] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.070223][T13414] device bridge_slave_1 entered promiscuous mode [ 572.368142][T13414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.405254][T13414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.436201][T13498] netlink: 'syz.0.3376': attribute type 2 has an invalid length. [ 572.454529][T13498] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3376'. [ 572.644979][T13414] team0: Port device team_slave_0 added [ 572.654544][T13414] team0: Port device team_slave_1 added [ 572.953423][T13519] sctp: [Deprecated]: syz.0.3383 (pid 13519) Use of int in max_burst socket option deprecated. [ 572.953423][T13519] Use struct sctp_assoc_value instead [ 573.530222][ T3650] Bluetooth: hci5: command tx timeout [ 573.611908][T13414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.623763][T13414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.671692][T13414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.692071][T13516] netlink: 'syz.2.3382': attribute type 10 has an invalid length. [ 573.776548][T13516] team0: Device veth0_macvtap failed to register rx_handler [ 573.952730][T13414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.960700][T13414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.990370][T13414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.162983][T13414] device hsr_slave_0 entered promiscuous mode [ 574.219170][T13535] sctp: [Deprecated]: syz.0.3389 (pid 13535) Use of int in max_burst socket option deprecated. [ 574.219170][T13535] Use struct sctp_assoc_value instead [ 574.245151][T13414] device hsr_slave_1 entered promiscuous mode [ 574.267841][T13414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.301668][T13414] Cannot create hsr debugfs directory [ 575.433073][T13576] sctp: [Deprecated]: syz.0.3398 (pid 13576) Use of int in max_burst socket option deprecated. [ 575.433073][T13576] Use struct sctp_assoc_value instead [ 575.594835][ T3650] Bluetooth: hci5: command tx timeout [ 576.469792][T13584] sctp: [Deprecated]: syz.1.3402 (pid 13584) Use of int in max_burst socket option deprecated. [ 576.469792][T13584] Use struct sctp_assoc_value instead [ 602.104634][ T3650] Bluetooth: hci5: command tx timeout [ 605.114306][ T946] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2733 jiffies s: 76345 root: 0x1/. [ 605.200112][ T946] rcu: blocking rcu_node structures (internal RCU debug): [ 605.351161][ T946] Sending NMI from CPU 1 to CPUs 0: [ 605.356526][ C0] NMI backtrace for cpu 0 [ 605.356537][ C0] CPU: 0 PID: 13569 Comm: syz.0.3398 Not tainted 6.1.109-syzkaller #0 [ 605.356551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 605.356560][ C0] RIP: 0010:hrtimer_forward+0x6c/0x2c0 [ 605.356583][ C0] Code: 83 68 00 48 89 6c 24 18 48 8b 6d 00 48 89 de 48 29 ee 31 ff e8 75 06 11 00 49 89 de 49 29 ee 0f 88 85 01 00 00 48 89 6c 24 08 <48> 89 5c 24 20 4c 89 6c 24 10 49 83 c5 38 4c 89 e8 48 c1 e8 03 42 [ 605.356594][ C0] RSP: 0018:ffffc90000006e98 EFLAGS: 00000006 [ 605.356607][ C0] RAX: 0000000000010100 RBX: 0000008cf007ac6f RCX: ffff888056843b80 [ 605.356618][ C0] RDX: 0000000000010100 RSI: 0000000000002fd4 RDI: 0000000000000000 [ 605.356626][ C0] RBP: 0000008cf0077c9b R08: ffffffff8179abdb R09: fffffbfff1d33b6e [ 605.356636][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000002710 [ 605.356645][ C0] R13: ffff888057c9db60 R14: 0000000000002fd4 R15: dffffc0000000000 [ 605.356655][ C0] FS: 00007f24471ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 605.356667][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.356677][ C0] CR2: 00007efc12dddf98 CR3: 0000000068cff000 CR4: 00000000003506f0 [ 605.356689][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 605.356697][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 605.356705][ C0] Call Trace: [ 605.356710][ C0] [ 605.356715][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 605.356736][ C0] ? read_lock_is_recursive+0x10/0x10 [ 605.356757][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 605.356776][ C0] ? nmi_handle+0x25/0x440 [ 605.356808][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 605.356826][ C0] ? nmi_handle+0x12e/0x440 [ 605.356845][ C0] ? nmi_handle+0x25/0x440 [ 605.356863][ C0] ? hrtimer_forward+0x6c/0x2c0 [ 605.356878][ C0] ? default_do_nmi+0x62/0x150 [ 605.356893][ C0] ? exc_nmi+0xa8/0x100 [ 605.356906][ C0] ? end_repeat_nmi+0x16/0x31 [ 605.356929][ C0] ? hrtimer_forward+0x5b/0x2c0 [ 605.356947][ C0] ? hrtimer_forward+0x6c/0x2c0 [ 605.356963][ C0] ? hrtimer_forward+0x6c/0x2c0 [ 605.356979][ C0] ? hrtimer_forward+0x6c/0x2c0 [ 605.356996][ C0] [ 605.356999][ C0] [ 605.357005][ C0] ? ktime_get+0x242/0x270 [ 605.357024][ C0] perf_swevent_hrtimer+0x449/0x4f0 [ 605.357044][ C0] ? __hrtimer_run_queues+0x4b0/0xe50 [ 605.357059][ C0] ? lock_release+0x81/0xa20 [ 605.357078][ C0] ? cpu_clock_event_read+0x50/0x50 [ 605.357123][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 605.357139][ C0] ? _raw_spin_unlock+0x40/0x40 [ 605.357152][ C0] ? debug_object_deactivate+0x63/0x380 [ 605.357176][ C0] ? cpu_clock_event_read+0x50/0x50 [ 605.357194][ C0] ? cpu_clock_event_read+0x50/0x50 [ 605.357212][ C0] __hrtimer_run_queues+0x5a7/0xe50 [ 605.357243][ C0] ? hrtimer_interrupt+0x980/0x980 [ 605.357260][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 605.357291][ C0] hrtimer_interrupt+0x392/0x980 [ 605.357327][ C0] __sysvec_apic_timer_interrupt+0x156/0x580 [ 605.357345][ C0] sysvec_apic_timer_interrupt+0x3e/0xb0 [ 605.357360][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.357377][ C0] RIP: 0010:unwind_get_return_address+0x64/0x80 [ 605.357392][ C0] Code: 89 df e8 2f 7b a5 00 48 8b 3b e8 c7 dc 1e 00 85 c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 14 7b a5 00 48 8b 03 eb 02 31 c0 5b <41> 5e 41 5f c3 89 d9 80 e1 07 80 c1 03 38 c1 7c ad 48 89 df e8 e3 [ 605.357403][ C0] RSP: 0018:ffffc900000074c8 EFLAGS: 00000246 [ 605.357414][ C0] RAX: ffffffff81786ac3 RBX: ffffc900000074e0 RCX: ffffffff8fdb1000 [ 605.357423][ C0] RDX: ffffffff8ff0ac01 RSI: ffffc90000000000 RDI: ffffffff81786ac3 [ 605.357433][ C0] RBP: ffffc90000007570 R08: ffffc90000007570 R09: ffffc90000007530 [ 605.357442][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888056843b80 [ 605.357451][ C0] R13: ffffffff81786b70 R14: dffffc0000000000 R15: 1ffff92000000ea5 [ 605.357463][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 605.357483][ C0] ? stack_trace_save+0x113/0x1c0 [ 605.357499][ C0] ? __init_begin+0x3d000/0x3d000 [ 605.357515][ C0] ? no_hash_pointers_enable+0x5d/0xd0 [ 605.357533][ C0] ? stack_trace_save+0x113/0x1c0 [ 605.357553][ C0] arch_stack_walk+0xf3/0x140 [ 605.357572][ C0] ? stack_trace_save+0x113/0x1c0 [ 605.357593][ C0] stack_trace_save+0x113/0x1c0 [ 605.357612][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 605.357634][ C0] ? rcu_is_watching+0x11/0xb0 [ 605.357652][ C0] ref_tracker_alloc+0x179/0x470 [ 605.357670][ C0] ? ref_tracker_dir_print+0x150/0x150 [ 605.357697][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.357716][ C0] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 605.357738][ C0] dst_init+0xee/0x440 [ 605.357754][ C0] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 605.357773][ C0] dst_alloc+0x155/0x190 [ 605.357791][ C0] icmp6_dst_alloc+0x7b/0x470 [ 605.357813][ C0] ndisc_send_skb+0x344/0x14e0 [ 605.357829][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 605.357852][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.357873][ C0] ? ndisc_mc_map+0x7d0/0x7d0 [ 605.357885][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 605.357901][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.357930][ C0] ? ndisc_send_rs+0x517/0x6a0 [ 605.357951][ C0] addrconf_rs_timer+0x357/0x610 [ 605.357971][ C0] ? addrconf_disable_policy_idev+0x4e0/0x4e0 [ 605.357985][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 605.358011][ C0] call_timer_fn+0x1ad/0x6b0 [ 605.358026][ C0] ? addrconf_disable_policy_idev+0x4e0/0x4e0 [ 605.358040][ C0] ? call_timer_fn+0xc2/0x6b0 [ 605.358053][ C0] ? __run_timers+0x890/0x890 [ 605.358081][ C0] ? addrconf_disable_policy_idev+0x4e0/0x4e0 [ 605.358095][ C0] __run_timers+0x67c/0x890 [ 605.358119][ C0] ? detach_timer+0x380/0x380 [ 605.358132][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.358163][ C0] run_timer_softirq+0x63/0xf0 [ 605.358178][ C0] handle_softirqs+0x2ee/0xa40 [ 605.358202][ C0] ? __irq_exit_rcu+0x157/0x240 [ 605.358225][ C0] ? do_softirq+0x240/0x240 [ 605.358241][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 605.358259][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 605.358281][ C0] __irq_exit_rcu+0x157/0x240 [ 605.358299][ C0] ? irq_exit_rcu+0x20/0x20 [ 605.358326][ C0] irq_exit_rcu+0x5/0x20 [ 605.358342][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 605.358357][ C0] [ 605.358361][ C0] [ 605.358366][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.358383][ C0] RIP: 0010:smp_call_function_many_cond+0x1e6c/0x3460 [ 605.358400][ C0] Code: ff ff e8 a7 41 0b 00 0f 0b e9 1a e6 ff ff e8 9b 41 0b 00 e8 86 3e 27 09 4d 85 ff 0f 84 34 ff ff ff e8 88 41 0b 00 fb 4d 89 e7 <44> 8b 64 24 50 83 bc 24 e8 00 00 00 00 0f 84 49 12 00 00 44 39 64 [ 605.358411][ C0] RSP: 0018:ffffc900063e7180 EFLAGS: 00000246 [ 605.358421][ C0] RAX: ffffffff817f6ce8 RBX: 0000000000000000 RCX: 0000000000040000 [ 605.358430][ C0] RDX: ffffc9000f55b000 RSI: 000000000003ffff RDI: 0000000000040000 [ 605.358439][ C0] RBP: ffffc900063e7560 R08: ffffffff817f6c00 R09: fffffbfff223b645 [ 605.358449][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b8e3ba80 [ 605.358458][ C0] R13: dffffc0000000000 R14: 0000000000000046 R15: ffff8880b8e3ba80 [ 605.358474][ C0] ? smp_call_function_many_cond+0x1d80/0x3460 [ 605.358489][ C0] ? smp_call_function_many_cond+0x1e68/0x3460 [ 605.358510][ C0] ? asm_exc_int3+0x35/0x40 [ 605.358533][ C0] ? mark_lock+0x9a/0x340 [ 605.358557][ C0] ? text_poke_sync+0x20/0x20 [ 605.358578][ C0] ? __text_poke+0x81a/0x9a0 [ 605.358594][ C0] ? smp_call_function_many+0x30/0x30 [ 605.358609][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.358626][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 605.358646][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 605.358662][ C0] ? mark_lock+0x9a/0x340 [ 605.358681][ C0] ? _raw_spin_unlock+0x24/0x40 [ 605.358695][ C0] ? lock_release+0x7d/0xa20 [ 605.358710][ C0] ? __text_poke+0x81a/0x9a0 [ 605.358729][ C0] ? lock_release+0x7d/0xa20 [ 605.358745][ C0] ? __text_poke+0x9a0/0x9a0 [ 605.358763][ C0] ? text_poke+0x90/0x90 [ 605.358777][ C0] ? lock_release+0x7c/0xa20 [ 605.358793][ C0] ? perf_event_text_poke+0x254/0x320 [ 605.358810][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.358829][ C0] ? perf_event_bpf_output+0x270/0x270 [ 605.358844][ C0] ? lock_release+0x7c/0xa20 [ 605.358865][ C0] ? text_poke_sync+0x20/0x20 [ 605.358882][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 605.358900][ C0] text_poke_bp_batch+0x5f9/0x940 [ 605.358922][ C0] ? lock_release+0x7d/0xa20 [ 605.358939][ C0] ? text_poke_loc_init+0x680/0x680 [ 605.358958][ C0] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 605.358981][ C0] text_poke_finish+0x16/0x30 [ 605.358995][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 605.359008][ C0] static_key_disable_cpuslocked+0xce/0x1b0 [ 605.359026][ C0] static_key_disable+0x16/0x20 [ 605.359042][ C0] tracepoint_probe_unregister+0x6e6/0x980 [ 605.359056][ C0] ? trace_event_raw_event_lock+0x240/0x240 [ 605.359077][ C0] trace_event_reg+0x216/0x250 [ 605.359092][ C0] perf_trace_event_unreg+0xb0/0x1a0 [ 605.359109][ C0] perf_trace_destroy+0x98/0x140 [ 605.359123][ C0] ? perf_swevent_read+0x10/0x10 [ 605.359141][ C0] _free_event+0xd0a/0x1090 [ 605.359166][ C0] perf_event_release_kernel+0x873/0x900 [ 605.359180][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.359200][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.359220][ C0] ? calc_timer_values+0x420/0x420 [ 605.359239][ C0] ? ima_file_free+0xe8/0x3c0 [ 605.359259][ C0] perf_release+0x37/0x40 [ 605.359278][ C0] ? perf_mmap+0x1310/0x1310 [ 605.359293][ C0] __fput+0x3f6/0x8d0 [ 605.359319][ C0] task_work_run+0x246/0x300 [ 605.359342][ C0] ? task_work_cancel+0x2e0/0x2e0 [ 605.359358][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 605.359381][ C0] get_signal+0x15fc/0x17d0 [ 605.359412][ C0] ? ptrace_notify+0x370/0x370 [ 605.359439][ C0] arch_do_signal_or_restart+0xb0/0x1a10 [ 605.359463][ C0] ? create_io_thread+0x180/0x180 [ 605.359487][ C0] ? get_sigframe_size+0x10/0x10 [ 605.359506][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 605.359531][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 605.359546][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 605.359562][ C0] exit_to_user_mode_loop+0x6a/0x100 [ 605.359576][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 605.359590][ C0] syscall_exit_to_user_mode+0x60/0x270 [ 605.359608][ C0] do_syscall_64+0x47/0xb0 [ 605.359625][ C0] ? clear_bhb_loop+0x45/0xa0 [ 605.359643][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.359660][ C0] RIP: 0033:0x7f244737cef9 [ 605.359672][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.359682][ C0] RSP: 002b:00007f24471fefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 605.359696][ C0] RAX: fffffffffffffff2 RBX: 00007f2447535f80 RCX: 00007f244737cef9 [ 605.359705][ C0] RDX: 0000000000000000 RSI: fffffffffffffda0 RDI: 0000000000801000 [ 605.359714][ C0] RBP: 00007f24473ef046 R08: 0000000000000000 R09: 0000000000000000 [ 605.359722][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 605.359730][ C0] R13: 0000000000000000 R14: 00007f2447535f80 R15: 00007ffe60315248 [ 605.359753][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 607.509203][ T3709] device hsr_slave_0 left promiscuous mode [ 607.599583][ T3709] device hsr_slave_1 left promiscuous mode [ 607.625397][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.632957][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.751780][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.764327][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.810428][ T3709] device macsec0 left promiscuous mode [ 607.861209][ T3709] bridge0: port 4(macsec0) entered disabled state [ 607.965166][ T3709] device team0 left promiscuous mode [ 607.970510][ T3709] device team_slave_0 left promiscuous mode [ 607.986580][ T3709] device team_slave_1 left promiscuous mode [ 607.992629][ T3709] device batadv0 left promiscuous mode [ 608.044625][ T3709] bridge0: port 3(team0) entered disabled state [ 608.063425][ T3709] device bridge_slave_1 left promiscuous mode [ 608.098691][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.144733][ T3709] device bridge_slave_0 left promiscuous mode [ 608.169671][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.215856][ T3709] device veth1_vlan left promiscuous mode [ 608.233896][ T3709] device veth0_vlan left promiscuous mode [ 608.341464][ T3709] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 608.647554][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 608.690282][ T3709] team0 (unregistering): Port device team_slave_0 removed [ 608.727017][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.769985][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.933026][ T3709] team0 (unregistering): Port device batadv0 removed [ 608.959954][ T3709] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 609.167658][ T3709] bond0 (unregistering): Released all slaves [ 610.023048][ T3709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.092141][ T3709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.153966][ T3709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.221834][ T3709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.397655][ T3709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.482309][ T3709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.552431][ T3709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.631850][ T3709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.809007][ T3709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.876331][ T3709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.938441][ T3709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.024921][ T3709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.149222][ T3709] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.226481][ T3709] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.268682][ T3709] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.340630][ T3709] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.797950][ T3709] device hsr_slave_0 left promiscuous mode [ 613.810122][ T3709] device hsr_slave_1 left promiscuous mode [ 613.818261][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.833380][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.841644][ T3709] device bridge_slave_1 left promiscuous mode [ 613.848761][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.857038][ T3709] device bridge_slave_0 left promiscuous mode [ 613.863215][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.873786][ T3709] device hsr_slave_0 left promiscuous mode [ 613.881062][ T3709] device hsr_slave_1 left promiscuous mode [ 613.887541][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.895298][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.902884][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.910636][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.918671][ T3709] device bridge_slave_1 left promiscuous mode [ 613.925014][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.933820][ T3709] device bridge_slave_0 left promiscuous mode [ 613.940345][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.951504][ T3709] device hsr_slave_0 left promiscuous mode [ 613.958032][ T3709] device hsr_slave_1 left promiscuous mode [ 613.964407][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.971820][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.979738][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.987262][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.996544][ T3709] device bridge_slave_1 left promiscuous mode [ 614.002881][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.011489][ T3709] device bridge_slave_0 left promiscuous mode [ 614.018057][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.029645][ T3709] device hsr_slave_0 left promiscuous mode [ 614.036277][ T3709] device hsr_slave_1 left promiscuous mode [ 614.042593][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.050189][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.058644][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.066264][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.073853][ T3709] device bridge_slave_1 left promiscuous mode [ 614.080181][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.088891][ T3709] device bridge_slave_0 left promiscuous mode [ 614.095459][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.108482][ T3709] device hsr_slave_0 left promiscuous mode [ 614.114847][ T3709] device hsr_slave_1 left promiscuous mode [ 614.121087][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.129190][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.136890][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.144343][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.151916][ T3709] device bridge_slave_1 left promiscuous mode [ 614.158224][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.166939][ T3709] device bridge_slave_0 left promiscuous mode [ 614.173235][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.225047][ T3709] device veth1_macvtap left promiscuous mode [ 614.231086][ T3709] device veth0_macvtap left promiscuous mode [ 614.238118][ T3709] device veth1_vlan left promiscuous mode [ 614.243923][ T3709] device veth0_vlan left promiscuous mode [ 614.251786][ T3709] device veth1_macvtap left promiscuous mode [ 614.258780][ T3709] device veth0_macvtap left promiscuous mode [ 614.265066][ T3709] device veth1_vlan left promiscuous mode [ 614.270854][ T3709] device veth0_vlan left promiscuous mode [ 614.279647][ T3709] device veth1_macvtap left promiscuous mode [ 614.285781][ T3709] device veth0_macvtap left promiscuous mode [ 614.292113][ T3709] device veth1_vlan left promiscuous mode [ 614.298290][ T3709] device veth0_vlan left promiscuous mode [ 614.307759][ T3709] device veth1_macvtap left promiscuous mode [ 614.313866][ T3709] device veth1_vlan left promiscuous mode [ 614.319808][ T3709] device veth0_vlan left promiscuous mode [ 614.688357][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 614.712700][ T3709] team0 (unregistering): Port device team_slave_0 removed [ 614.736060][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 614.761092][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.838725][ T3709] bond0 (unregistering): Released all slaves