last executing test programs: 7.518167417s ago: executing program 1 (id=4094): r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27f", 0x88}], 0x1, 0x0, 0x0, 0x7}, 0x0) 7.312888476s ago: executing program 1 (id=4098): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000022c0)=""/249, 0xf9}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x9}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 7.096555356s ago: executing program 1 (id=4101): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="85000000080000007600000000000000270000000000000095000000000000008796f32e8f85d735d047a9414961e3b176c2e0f3fe61d16cbe73a05329f1aec7d7ff37e190c481c9727f532ff99f59a42d192eb233084e7ac96b3fc37457916943cd580e8b156888b7d73f0647eee7bb3fdeb805286004f2f7"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f00000013c0)=r0}, 0x20) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @local}, 0x3, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)="114f7d0129", 0x5}], 0x1, &(0x7f00000007c0)=[{0xc8, 0x119, 0x2b, "512c0545b58f809519726cea882ed48807fa8cce436d5fef9596858837655bc08c80637ef39fc2b5c8c28cc4adf40c7a426190465351f73a74bdb62c58b1254a5c3f4c79d27bfa8a068a658f399b900a2c542d1cda4b4953a97550e88cc905bf441f4ce013f9a8e35c8b898fb813a72bdc41362b41fc959e3d6d5e445e6eab4aae4165bc07bd755128feca1bdba5d881d2d72faf7b57c8af9256994c934d1896182eb0fb9391c3e72e44d088a843270e62cb5d6da587"}, {0xb8, 0x101, 0x1, "619b4bd3652e778b333c79772cdefc7e7db77a5e5012505b7702feaf0091936b8a0d127248d046e3214ef8a7fe031bc1898741de91bf9e954e0705074c3c784dcb1e15e348d9e8259a3281205f3a98281f2e039b27154487b8c0dbb357013bfd888fa31242618b2c54f4b65fbf90eac8a16b61140113defed26740cc0f560b9afa7c68cf7d555f6e9d79832d24f75391ab6a379ad810d784f638fdfa7fa71bc9e488"}], 0x180}, 0x20008045) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78", 0x4}], 0x1}, 0x8400) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x8400) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 6.500060855s ago: executing program 2 (id=4106): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/201, 0xc9}], 0x9}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 5.904290183s ago: executing program 1 (id=4111): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000022c0)=""/249, 0xf9}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f00000003c0)=""/68, 0x44}, {0x0}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000002c0)=""/243, 0xf3}], 0xa}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 5.898527473s ago: executing program 2 (id=4112): r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27f", 0x88}], 0x1, 0x0, 0x0, 0x7}, 0x0) 5.671243932s ago: executing program 1 (id=4115): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9d12}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x7}, 0x104101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 5.588799033s ago: executing program 2 (id=4119): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b9040211080218000000040000a118000200e0009bbb54fd0e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dc934e7ce80b2cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730da4683f5aab00dbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_clone(0xc000, &(0x7f00000000c0)="179350e3dbc360e741cec7d6ca61367231ac0420e7f8c88f1a07a085987391e00b7740d685be06b0503135552ce4ab702852a27b0c5f57cc61d670aa9f49c60334f404606211a0ddf70ed7314ff1644f54312aa79e25b3bac38d7329be066da8bca41db8951c63e63d3fec5becbb3262d4291680d0e9fe1814797d15a8999c13ac9b2bdb9cb2a8f4a1a1266ae91bda54", 0x90, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300)="7b4a19ea1d6661c19e046558274e6bafe02c58afdcb998f9d9964e9148f194c861d6f9e30af1b82e1d5e530aff0071620b912a7cace1e20f81b1bd4bddf1b6d774bb07b48fe30334c43e19871f5965d378afbcc38834919731a05a054a41adbde3e04d1e9646c95c5c25e1a278b1aa0ca98a21f9fda8af5228fc7c9f80c85dbcc198f21f49f3dca5b81fe85e5dee75d6d3257b40c8") 4.57696274s ago: executing program 4 (id=4129): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/201, 0xc9}], 0x9}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 4.48716281s ago: executing program 0 (id=4130): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000022c0)=""/249, 0xf9}, {0x0}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000002c0)=""/243, 0xf3}], 0xa}, 0x10000) 4.42109288s ago: executing program 1 (id=4132): socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x104000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_bp={&(0x7f0000000100), 0xe}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000009}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000c03000000000000000000000201000000000000000000000d000000000000000000005f"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000001e40)='syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r7, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r6, 0x0, 0xfe33) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x4, 0x0, @loopback}, 0x10, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x110, 0xb}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x804, 0x800, &(0x7f0000000000)) 4.35894947s ago: executing program 2 (id=4133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) (fail_nth: 1) 4.34650368s ago: executing program 4 (id=4134): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9d12}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x7}, 0x104101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8], 0x12) 4.164935939s ago: executing program 0 (id=4135): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000022c0)=""/249, 0xf9}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000002c0)=""/243, 0xf3}], 0xa}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 4.099133309s ago: executing program 3 (id=4136): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="870a0000000000006111730000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x20, '\x00', 0x0, r4, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = getpid() (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x5452, &(0x7f00000006c0)) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="14000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=0xee00, @ANYRES32=0x0], 0x60}, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="1e40002000"}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', r8, r0, 0x0, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 3.747021989s ago: executing program 0 (id=4137): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9d12}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x7}, 0x104101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 3.666326238s ago: executing program 4 (id=4138): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9d12}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x7}, 0x104101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8], 0x12) 3.643788238s ago: executing program 3 (id=4139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="85000000080000007600000000000000270000000000000095000000000000008796f32e8f85d735d047a9414961e3b176c2e0f3fe61d16cbe73a05329f1aec7d7ff37e190c481c9727f532ff99f59a42d192eb233084e7ac96b3fc37457916943cd580e8b156888b7d73f0647eee7bb3fdeb805286004f2f7"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f00000013c0)=r0}, 0x20) 2.789513096s ago: executing program 3 (id=4140): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9d12}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x7}, 0x104101, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 2.788632866s ago: executing program 2 (id=4150): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x9}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 750.667862ms ago: executing program 4 (id=4141): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000022c0)=""/249, 0xf9}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000002c0)=""/243, 0xf3}], 0xa}, 0x10000) recvmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 749.999012ms ago: executing program 0 (id=4142): r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121300000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27f", 0x88}], 0x1, 0x0, 0x0, 0x7}, 0x0) 742.222712ms ago: executing program 3 (id=4143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) 650.766881ms ago: executing program 2 (id=4144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) (fail_nth: 1) 543.965081ms ago: executing program 0 (id=4145): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000022c0)=""/249, 0xf9}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/201, 0xc9}], 0xa}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 243.768061ms ago: executing program 4 (id=4146): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000022c0)=""/249, 0xf9}, {0x0}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000002c0)=""/243, 0xf3}], 0xa}, 0x10000) 241.294561ms ago: executing program 0 (id=4157): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="85000000080000007600000000000000270000000000000095000000000000008796f32e8f85d735d047a9414961e3b176c2e0f3fe61d16cbe73a05329f1aec7d7ff37e190c481c9727f532ff99f59a42d192eb233084e7ac96b3fc37457916943cd580e8b156888b7d73f0647eee7bb3fdeb805286004f2f7"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f00000013c0)=r0}, 0x20) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @local}, 0x3, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)="114f7d0129", 0x5}], 0x1, &(0x7f00000007c0)=[{0xc8, 0x119, 0x2b, "512c0545b58f809519726cea882ed48807fa8cce436d5fef9596858837655bc08c80637ef39fc2b5c8c28cc4adf40c7a426190465351f73a74bdb62c58b1254a5c3f4c79d27bfa8a068a658f399b900a2c542d1cda4b4953a97550e88cc905bf441f4ce013f9a8e35c8b898fb813a72bdc41362b41fc959e3d6d5e445e6eab4aae4165bc07bd755128feca1bdba5d881d2d72faf7b57c8af9256994c934d1896182eb0fb9391c3e72e44d088a843270e62cb5d6da587"}, {0xb8, 0x101, 0x1, "619b4bd3652e778b333c79772cdefc7e7db77a5e5012505b7702feaf0091936b8a0d127248d046e3214ef8a7fe031bc1898741de91bf9e954e0705074c3c784dcb1e15e348d9e8259a3281205f3a98281f2e039b27154487b8c0dbb357013bfd888fa31242618b2c54f4b65fbf90eac8a16b61140113defed26740cc0f560b9afa7c68cf7d555f6e9d79832d24f75391ab6a379ad810d784f638fdfa7fa71bc9e488"}], 0x180}, 0x20008045) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78", 0x4}], 0x1}, 0x8400) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}, 0x8400) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) 240.54198ms ago: executing program 3 (id=4147): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/221, 0xdd}, {&(0x7f00000022c0)=""/249, 0xf9}, {&(0x7f0000002400)=""/4089, 0xff9}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000500)=""/62, 0x3e}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f00000002c0)=""/243, 0xf3}], 0xa}, 0x10000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 1.74768ms ago: executing program 4 (id=4148): r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27f", 0x88}], 0x1, 0x0, 0x0, 0x7}, 0x0) 0s ago: executing program 3 (id=4160): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x8, 0x50, &(0x7f0000000140)="f9ad48cc420029fc", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36511002b000c000300030000000003bc24eab556a705251e6182fffffffff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f6985300000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x50, 0x1f, &(0x7f0000000180)="a73956f014d6574c45676ce82a6780b5870baf96e8eaf21b7853b8c126f700c6d6ef7ef1e2ff4adbdede5f7a8af30a90f59acdb8e3bf1c50a94a719f16edff1505c5d9ec3919d7e4acccbaf19a62bef2", &(0x7f0000000200)=""/31, 0x3ff, 0x0, 0x0, 0x60, &(0x7f00000002c0), &(0x7f0000000300)="228cc3cf7a8594c605977c21b88c8bd678f0c84896a51f909daafeb8b78825b874209640ff912514f0fe12721ed58cde0f0a3579c7d01d4ea7ba030bd8661609bf283954e64c35780a52b90ae4098be6db82197935812ba97c91f6a4e9b46b18", 0x0, 0x0, 0xfffffff9}, 0x50) kernel console output (not intermixed with test programs): has an invalid length. [ 442.945299][T11259] netlink: 'syz.2.2444': attribute type 29 has an invalid length. [ 442.976821][T11257] netlink: 'syz.2.2444': attribute type 29 has an invalid length. [ 443.089435][T11260] netlink: 'syz.2.2444': attribute type 29 has an invalid length. [ 443.179918][T11271] netlink: 'syz.2.2444': attribute type 29 has an invalid length. [ 445.164028][T11316] netlink: 'syz.1.2472': attribute type 29 has an invalid length. [ 445.192509][T11316] netlink: 'syz.1.2472': attribute type 29 has an invalid length. [ 445.212536][T11321] netlink: 'syz.1.2472': attribute type 29 has an invalid length. [ 445.234280][T11316] netlink: 'syz.1.2472': attribute type 29 has an invalid length. [ 448.873189][T11410] validate_nla: 2 callbacks suppressed [ 448.873211][T11410] netlink: 'syz.1.2513': attribute type 29 has an invalid length. [ 448.898222][T11410] netlink: 'syz.1.2513': attribute type 29 has an invalid length. [ 448.964676][T11413] netlink: 'syz.1.2513': attribute type 29 has an invalid length. [ 449.046782][T11410] netlink: 'syz.1.2513': attribute type 29 has an invalid length. [ 449.115115][T11413] netlink: 'syz.1.2513': attribute type 29 has an invalid length. [ 449.141442][T11420] netlink: 'syz.1.2513': attribute type 29 has an invalid length. [ 450.765573][T11477] netlink: 'syz.1.2550': attribute type 29 has an invalid length. [ 450.797078][T11477] netlink: 'syz.1.2550': attribute type 29 has an invalid length. [ 450.818277][T11480] netlink: 'syz.1.2550': attribute type 29 has an invalid length. [ 450.845112][T11477] netlink: 'syz.1.2550': attribute type 29 has an invalid length. [ 451.704456][T11502] Driver unsupported XDP return value 0 on prog (id 1112) dev N/A, expect packet loss! [ 453.921767][T11571] validate_nla: 11 callbacks suppressed [ 453.921785][T11571] netlink: 'syz.4.2578': attribute type 29 has an invalid length. [ 453.936392][T11571] netlink: 'syz.4.2578': attribute type 29 has an invalid length. [ 453.952319][T11572] netlink: 'syz.4.2578': attribute type 29 has an invalid length. [ 453.974043][T11571] netlink: 'syz.4.2578': attribute type 29 has an invalid length. [ 453.991914][T11571] netlink: 'syz.4.2578': attribute type 29 has an invalid length. [ 454.001796][T11571] netlink: 'syz.4.2578': attribute type 29 has an invalid length. [ 458.601166][T11698] netlink: 'syz.2.2636': attribute type 29 has an invalid length. [ 458.624392][T11698] netlink: 'syz.2.2636': attribute type 29 has an invalid length. [ 458.736122][T11705] netlink: 'syz.2.2636': attribute type 29 has an invalid length. [ 458.772730][T11698] netlink: 'syz.2.2636': attribute type 29 has an invalid length. [ 459.404741][T11721] validate_nla: 2 callbacks suppressed [ 459.404763][T11721] netlink: 'syz.0.2656': attribute type 29 has an invalid length. [ 459.458359][T11721] netlink: 'syz.0.2656': attribute type 29 has an invalid length. [ 459.476582][T11724] netlink: 'syz.0.2656': attribute type 29 has an invalid length. [ 459.500722][T11721] netlink: 'syz.0.2656': attribute type 29 has an invalid length. [ 459.540626][T11721] netlink: 'syz.0.2656': attribute type 29 has an invalid length. [ 459.583657][T11721] netlink: 'syz.0.2656': attribute type 29 has an invalid length. [ 459.719754][T11731] netlink: 'syz.4.2650': attribute type 29 has an invalid length. [ 459.751463][T11731] netlink: 'syz.4.2650': attribute type 29 has an invalid length. [ 459.770187][T11733] netlink: 'syz.4.2650': attribute type 29 has an invalid length. [ 459.793962][T11731] netlink: 'syz.4.2650': attribute type 29 has an invalid length. [ 463.210317][ T4268] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 464.894393][ T4268] Bluetooth: hci4: unexpected event 0x31 length: 15 > 6 [ 465.131560][ T4268] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 465.521394][ T4268] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 465.792883][ T4268] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 466.134407][T11934] validate_nla: 20 callbacks suppressed [ 466.134443][T11934] netlink: 'syz.4.2725': attribute type 29 has an invalid length. [ 466.159375][T11934] netlink: 'syz.4.2725': attribute type 29 has an invalid length. [ 466.249275][T11934] netlink: 'syz.4.2725': attribute type 29 has an invalid length. [ 466.264360][T11934] netlink: 'syz.4.2725': attribute type 29 has an invalid length. [ 466.285119][T11934] netlink: 'syz.4.2725': attribute type 29 has an invalid length. [ 466.317211][T11934] netlink: 'syz.4.2725': attribute type 29 has an invalid length. [ 466.326782][T11934] netlink: 'syz.4.2725': attribute type 29 has an invalid length. [ 466.633175][T11954] netlink: 'syz.3.2733': attribute type 29 has an invalid length. [ 466.641342][T11954] netlink: 'syz.3.2733': attribute type 29 has an invalid length. [ 466.652126][T11954] netlink: 'syz.3.2733': attribute type 29 has an invalid length. [ 466.831310][ T4268] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 467.957339][ T4268] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 468.094002][ T4268] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 468.862964][ T4268] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 469.115578][ T4268] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 469.263114][ T4268] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 470.206010][ T4268] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 470.419477][ T4268] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 470.545564][ T4268] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 471.129425][ T4268] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 471.690069][ T4268] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 472.036281][T12137] validate_nla: 52 callbacks suppressed [ 472.036377][T12137] netlink: 'syz.3.2796': attribute type 29 has an invalid length. [ 472.062934][ T4268] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 472.066891][ T4268] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 472.079837][T12137] netlink: 'syz.3.2796': attribute type 29 has an invalid length. [ 472.107124][T12137] netlink: 'syz.3.2796': attribute type 29 has an invalid length. [ 472.136093][T12137] netlink: 'syz.3.2796': attribute type 29 has an invalid length. [ 472.204159][T12145] netlink: 'syz.3.2796': attribute type 29 has an invalid length. [ 472.305805][T12150] netlink: 'syz.3.2796': attribute type 29 has an invalid length. [ 473.775929][T12190] netlink: 'syz.1.2815': attribute type 29 has an invalid length. [ 473.832868][T12190] netlink: 'syz.1.2815': attribute type 29 has an invalid length. [ 473.882939][T12191] netlink: 'syz.1.2815': attribute type 29 has an invalid length. [ 473.918136][T12195] netlink: 'syz.1.2815': attribute type 29 has an invalid length. [ 474.412723][ T4268] bt_warn_ratelimited: 1 callbacks suppressed [ 474.412741][ T4268] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 475.883000][ T4268] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 477.293546][ T4268] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 478.544753][T12339] device syzkaller0 entered promiscuous mode [ 478.929758][ T4268] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 480.625701][ T4268] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 481.657210][ T4268] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 481.805017][T12426] device syzkaller0 entered promiscuous mode [ 483.252170][ T4268] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 485.192708][T12512] device syzkaller0 entered promiscuous mode [ 486.198365][ T4268] Bluetooth: hci1: Malformed Event: 0x13 [ 487.691156][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 487.700929][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 487.708974][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 487.718593][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 487.727310][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 487.734798][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 487.793704][ T4255] bond0: (slave syz_tun): Releasing backup interface [ 487.931062][T12559] chnl_net:caif_netlink_parms(): no params data found [ 487.982137][T12559] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.989838][T12559] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.002029][T12559] device bridge_slave_0 entered promiscuous mode [ 488.010985][T12559] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.018374][T12559] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.026354][T12559] device bridge_slave_1 entered promiscuous mode [ 488.053434][T12559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.064966][T12559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.095198][T12559] team0: Port device team_slave_0 added [ 488.103846][T12559] team0: Port device team_slave_1 added [ 488.134540][T12559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.143921][T12559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.222031][T12559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.248397][T12559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.255483][T12559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.290348][T12559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.365729][T12559] device hsr_slave_0 entered promiscuous mode [ 488.372969][T12559] device hsr_slave_1 entered promiscuous mode [ 488.379930][T12559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.388682][T12559] Cannot create hsr debugfs directory [ 488.774429][T12559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.852236][T12559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.925134][T12559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.004215][T12559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.135161][T12559] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.146094][T12559] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.157170][T12559] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.168706][T12559] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.243858][T12559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.259588][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 489.268952][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 489.280078][T12559] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.295868][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 489.305769][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 489.315039][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.322913][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.378772][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 489.393023][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 489.402318][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 489.412538][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.419690][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.446372][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 489.458769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 489.487488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 489.506669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 489.518509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 489.537242][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 489.551837][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 489.565975][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 489.582068][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 489.590803][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 489.607412][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 489.627699][T12559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 489.714513][ T4269] Bluetooth: hci4: Malformed Event: 0x13 [ 489.748167][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 489.894644][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 489.903376][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 489.922861][T12559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.945244][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 489.955400][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 489.983529][T12559] device veth0_vlan entered promiscuous mode [ 489.995207][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 490.004612][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.019164][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.027352][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.036588][T12559] device veth1_vlan entered promiscuous mode [ 490.094711][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 490.103396][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 490.111986][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.121261][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.132963][T12559] device veth0_macvtap entered promiscuous mode [ 490.144887][T12559] device veth1_macvtap entered promiscuous mode [ 490.163113][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.174692][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.185280][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.195877][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.205983][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.216610][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.226502][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.237395][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.247708][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.259921][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.271374][T12559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.282456][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.293295][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.304206][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.315204][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.325134][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.335670][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.345573][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.356797][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.374579][T12559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.385165][T12559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.418596][T12559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.429026][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 490.444831][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 490.457324][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 490.478680][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 490.494169][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 490.503613][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 490.525310][T12559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.542557][T12559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.556265][T12559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.583824][T12559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.650232][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.659564][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.706395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 490.715951][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.747221][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.794573][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 491.828122][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 491.992965][ T4269] Bluetooth: hci2: Malformed Event: 0x13 [ 492.569071][ T4257] bond0: (slave syz_tun): Releasing backup interface [ 492.765699][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.776884][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.788270][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.797641][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.806224][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 492.814339][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.034495][T12677] chnl_net:caif_netlink_parms(): no params data found [ 493.102938][T12677] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.115127][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.126850][T12677] device bridge_slave_0 entered promiscuous mode [ 493.147399][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.154836][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.163965][T12677] device bridge_slave_1 entered promiscuous mode [ 493.191059][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.203621][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.237322][T12677] team0: Port device team_slave_0 added [ 493.245293][T12677] team0: Port device team_slave_1 added [ 493.273603][T12677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.281486][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.308701][T12677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.321748][T12677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.330672][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.356871][T12677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.396631][T12677] device hsr_slave_0 entered promiscuous mode [ 493.403574][T12677] device hsr_slave_1 entered promiscuous mode [ 493.410712][T12677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.418631][T12677] Cannot create hsr debugfs directory [ 493.565627][T12677] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.675614][T12677] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.786993][T12677] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.908032][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 493.969885][T12677] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.047095][ T4268] Bluetooth: hci0: Malformed Event: 0x13 [ 494.294653][T12677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 494.345666][T12677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 494.366294][T12677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 494.386731][T12677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 494.545499][T12677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.567335][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 494.576563][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.588643][T12677] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.600547][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 494.611277][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.619927][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.627013][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.635631][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 494.649167][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 494.658589][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.670611][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.677706][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.690513][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 494.704286][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 494.723157][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 494.733528][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 494.742600][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.765248][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 494.775452][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 494.785424][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 494.795467][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.804804][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 494.820619][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.831583][T12677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 494.868227][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 495.060378][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 495.068261][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 495.083029][T12677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.102908][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 495.116411][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 495.138611][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 495.147631][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 495.159193][T12677] device veth0_vlan entered promiscuous mode [ 495.169255][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 495.179360][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.191710][T12677] device veth1_vlan entered promiscuous mode [ 495.218972][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 495.227697][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 495.236584][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 495.246581][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 495.266992][T12677] device veth0_macvtap entered promiscuous mode [ 495.292136][T12677] device veth1_macvtap entered promiscuous mode [ 495.314025][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.325526][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.335879][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.367951][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.387732][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.413999][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.437276][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.456742][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.467292][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.487163][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.497111][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.510618][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.522020][T12677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.534142][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 495.561825][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.570491][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.579665][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.600971][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.618883][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.637865][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.656375][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.666386][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.681658][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.694066][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.704823][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.728282][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.743687][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.764633][T12677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.778226][T12677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.801950][T12677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.840489][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.852106][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.864652][T12677] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.901271][T12677] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.921356][T12677] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.936901][T12677] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.988370][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 496.306593][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.346679][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.400401][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 496.454488][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.483849][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.506501][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 496.615646][T12779] validate_nla: 2 callbacks suppressed [ 496.615664][T12779] netlink: 'syz.3.2996': attribute type 29 has an invalid length. [ 496.642393][T12779] netlink: 'syz.3.2996': attribute type 29 has an invalid length. [ 496.948487][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 497.668826][T12813] netlink: 'syz.4.3009': attribute type 29 has an invalid length. [ 497.723611][T12813] netlink: 'syz.4.3009': attribute type 29 has an invalid length. [ 498.223090][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.243226][ T4269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.254659][ T4269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.263372][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.272567][ T4269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 498.280442][ T4269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.650338][T12851] netlink: 'syz.1.3019': attribute type 29 has an invalid length. [ 498.666050][T12851] netlink: 'syz.1.3019': attribute type 29 has an invalid length. [ 498.678658][T12851] netlink: 'syz.1.3019': attribute type 29 has an invalid length. [ 498.687366][T12851] netlink: 'syz.1.3019': attribute type 29 has an invalid length. [ 498.700589][T12831] chnl_net:caif_netlink_parms(): no params data found [ 498.817866][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.827477][T12831] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.835700][T12831] device bridge_slave_0 entered promiscuous mode [ 498.845679][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.853168][T12831] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.862684][T12831] device bridge_slave_1 entered promiscuous mode [ 498.893913][T12831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.905841][T12831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.946136][T12831] team0: Port device team_slave_0 added [ 498.954583][T12831] team0: Port device team_slave_1 added [ 498.983607][T12831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.998069][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.024592][T12831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.036123][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 499.078843][T12864] netlink: 'syz.2.3021': attribute type 29 has an invalid length. [ 499.084896][T12831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.103161][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.130085][T12831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.143016][T12864] netlink: 'syz.2.3021': attribute type 29 has an invalid length. [ 499.184574][T12831] device hsr_slave_0 entered promiscuous mode [ 499.193795][T12831] device hsr_slave_1 entered promiscuous mode [ 499.203651][T12831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.211469][T12831] Cannot create hsr debugfs directory [ 499.540416][T12831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.704554][T12831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.860517][T12831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.999972][T12831] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.205153][T12831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.230920][T12831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.255814][T12831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.288129][T12831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.309154][ T4269] Bluetooth: hci5: command 0x0409 tx timeout [ 500.436749][T12831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.455061][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.473333][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.485934][T12831] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.499071][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.508331][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.516858][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.524008][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.539524][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.547571][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.557180][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.565786][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.572933][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.582266][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.602920][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.612682][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.623762][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.634127][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.645496][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.654813][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.667129][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.675952][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.692396][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.701031][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.713610][T12831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.867642][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.877050][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.892675][T12831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.915648][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 500.924926][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 500.946894][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 500.955844][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 500.967682][T12831] device veth0_vlan entered promiscuous mode [ 500.975414][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 500.983642][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.005072][T12831] device veth1_vlan entered promiscuous mode [ 501.049551][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 501.059706][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 501.068724][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.077543][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.089762][T12831] device veth0_macvtap entered promiscuous mode [ 501.108903][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 501.116738][T12831] device veth1_macvtap entered promiscuous mode [ 501.149603][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.160488][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.171397][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.182662][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.193172][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.217553][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.236521][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.262960][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.274042][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.285232][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.295142][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.306019][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.323286][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.334952][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.346373][T12831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.368614][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 501.385542][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 501.409289][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.431899][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.438311][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.456355][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.478829][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.503167][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.523639][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.539307][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.549263][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.566417][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.604830][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.615606][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.626322][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.656496][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.675414][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.694018][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.716513][T12831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.744950][T12831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.770151][T12831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.789341][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.803380][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.831423][T12831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.847025][T12831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.877924][T12831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.895801][T12831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.926389][T12938] validate_nla: 19 callbacks suppressed [ 501.926407][T12938] netlink: 'syz.1.3045': attribute type 29 has an invalid length. [ 501.951739][T12938] netlink: 'syz.1.3045': attribute type 29 has an invalid length. [ 501.970744][T12938] netlink: 'syz.1.3045': attribute type 29 has an invalid length. [ 501.985007][T12938] netlink: 'syz.1.3045': attribute type 29 has an invalid length. [ 502.102202][T12940] netlink: 'syz.3.3047': attribute type 29 has an invalid length. [ 502.149817][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.167875][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.177625][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 502.217081][T12940] netlink: 'syz.3.3047': attribute type 29 has an invalid length. [ 502.248433][T12941] netlink: 'syz.3.3047': attribute type 29 has an invalid length. [ 502.275664][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.296726][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.320760][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 502.388300][ T4268] Bluetooth: hci5: command 0x041b tx timeout [ 502.456724][T12952] netlink: 'syz.3.3051': attribute type 29 has an invalid length. [ 502.467405][T12952] netlink: 'syz.3.3051': attribute type 29 has an invalid length. [ 502.477717][T12952] netlink: 'syz.3.3051': attribute type 29 has an invalid length. [ 504.039097][ T4269] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.065810][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.074257][ T4269] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.089030][ T4269] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.096566][ T4269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 504.104331][ T4269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.444149][T12999] chnl_net:caif_netlink_parms(): no params data found [ 504.477848][ T4268] Bluetooth: hci5: command 0x040f tx timeout [ 504.528973][T12999] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.546184][T12999] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.563814][T12999] device bridge_slave_0 entered promiscuous mode [ 504.577094][T12999] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.599521][T12999] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.608717][T12999] device bridge_slave_1 entered promiscuous mode [ 504.641250][T12999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.653601][T12999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.713050][T12999] team0: Port device team_slave_0 added [ 504.722383][T12999] team0: Port device team_slave_1 added [ 504.748221][T12999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.755264][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.781973][T12999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.795087][T12999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.804201][T12999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.830805][T12999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.866914][T12999] device hsr_slave_0 entered promiscuous mode [ 504.874269][T12999] device hsr_slave_1 entered promiscuous mode [ 504.881946][T12999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.890769][T12999] Cannot create hsr debugfs directory [ 505.302703][T12999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.504176][T12999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.692174][T12999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.836516][T12999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.051714][T12999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.074259][T12999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 506.090767][T12999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 506.119556][T12999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 506.148788][ T4268] Bluetooth: hci1: command 0x0409 tx timeout [ 506.250177][T12999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.283768][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 506.296804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 506.310326][T12999] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.337363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 506.354096][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.363703][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.371094][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.380041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 506.394056][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.403075][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.412403][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.419660][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.432487][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.447975][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 506.462734][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 506.474038][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 506.496099][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 506.504785][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 506.514535][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 506.523911][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 506.532727][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 506.549259][ T4268] Bluetooth: hci5: command 0x0419 tx timeout [ 506.556629][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 506.566814][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 506.582368][T12999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 506.747073][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 506.755124][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 506.767697][T12999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.021446][T13086] 10: renamed from ipvlan1 [ 507.259004][T13094] validate_nla: 48 callbacks suppressed [ 507.259024][T13094] netlink: 'syz.1.3099': attribute type 29 has an invalid length. [ 507.272511][T13095] netlink: 'syz.2.3100': attribute type 29 has an invalid length. [ 507.280027][T13095] netlink: 'syz.2.3100': attribute type 29 has an invalid length. [ 507.311166][T13094] netlink: 'syz.1.3099': attribute type 29 has an invalid length. [ 507.329987][T13095] netlink: 'syz.2.3100': attribute type 29 has an invalid length. [ 507.350710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 507.370436][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 507.393709][T13097] netlink: 'syz.1.3099': attribute type 29 has an invalid length. [ 507.413316][T13099] netlink: 'syz.1.3099': attribute type 29 has an invalid length. [ 507.446986][T13094] netlink: 'syz.1.3099': attribute type 29 has an invalid length. [ 507.518422][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 507.537673][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 507.548035][T13105] netlink: 'syz.2.3103': attribute type 29 has an invalid length. [ 507.549309][T12999] device veth0_vlan entered promiscuous mode [ 507.572567][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 507.582215][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 507.597504][T12999] device veth1_vlan entered promiscuous mode [ 507.633361][T12999] device veth0_macvtap entered promiscuous mode [ 507.653850][T13105] netlink: 'syz.2.3103': attribute type 29 has an invalid length. [ 507.663224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 507.675693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 507.684335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 507.693661][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 507.703202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 507.724568][T12999] device veth1_macvtap entered promiscuous mode [ 507.756118][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.804213][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.826435][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.848723][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.867388][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.879992][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.891936][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.902928][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.913185][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.924053][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.934102][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.944725][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.954848][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.965376][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.976494][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.987032][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.008933][T12999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.021435][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 508.032224][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 508.041874][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 508.055355][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.076361][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.095369][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.106696][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.117427][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.127988][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.137953][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.162172][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.188026][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.198639][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.208992][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.221040][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.231725][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 508.237938][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.248659][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.260038][T12999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.271059][T12999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.292586][T12999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.309932][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 508.336509][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 508.363281][T12999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.380398][T12999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.407867][T12999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.416732][T12999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.589555][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.617223][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.642025][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 508.695374][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.707645][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.732070][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 508.755194][ T4269] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 508.929158][T13141] 10: renamed from ipvlan1 [ 509.329963][ T4269] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9 [ 509.558372][ T4249] bond0: (slave syz_tun): Releasing backup interface [ 509.656459][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.666264][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.675791][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.688845][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.736056][T13159] 10: renamed from ipvlan1 [ 509.744382][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 509.759582][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.118256][T13155] chnl_net:caif_netlink_parms(): no params data found [ 510.260640][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.269830][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.279058][T13155] device bridge_slave_0 entered promiscuous mode [ 510.287594][T13155] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.295495][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.303914][T13155] device bridge_slave_1 entered promiscuous mode [ 510.310604][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 510.350961][T13155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.369504][T13155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.410463][T13155] team0: Port device team_slave_0 added [ 510.419230][T13155] team0: Port device team_slave_1 added [ 510.472252][T13155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.487859][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.544708][T13155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.559294][T13155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.566607][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.603180][T13155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.616508][ T4269] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9 [ 510.670320][T13155] device hsr_slave_0 entered promiscuous mode [ 510.701875][T13155] device hsr_slave_1 entered promiscuous mode [ 510.729085][T13155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.739261][T13155] Cannot create hsr debugfs directory [ 510.949390][T13155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.975666][ T4269] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9 [ 511.117063][T13155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.164050][T13199] 10: renamed from ipvlan1 [ 511.283716][T13155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.430774][T13155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.744434][T13155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 511.810914][T13155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 511.828268][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 511.841262][T13155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.880670][T13155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 512.133987][T13155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.173241][ T4269] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 512.181531][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.206996][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.219526][T13155] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.240939][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.250961][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.274090][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.281305][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.314469][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 512.346367][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.382749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.390939][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 512.459299][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.466450][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.508707][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 512.542979][T13237] validate_nla: 54 callbacks suppressed [ 512.542997][T13237] netlink: 'syz.4.3148': attribute type 29 has an invalid length. [ 512.559846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.581569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 512.611007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.630034][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 512.652536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 512.671706][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.693094][T13237] netlink: 'syz.4.3148': attribute type 29 has an invalid length. [ 512.720693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 512.738663][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 512.755369][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 512.776978][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 512.804283][T13239] netlink: 'syz.4.3148': attribute type 29 has an invalid length. [ 512.827289][T13241] netlink: 'syz.4.3148': attribute type 29 has an invalid length. [ 512.873548][T13155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.903200][T13243] netlink: 'syz.4.3148': attribute type 29 has an invalid length. [ 512.935955][T13237] netlink: 'syz.4.3148': attribute type 29 has an invalid length. [ 512.963433][T13247] netlink: 'syz.4.3148': attribute type 29 has an invalid length. [ 512.965312][T13251] netlink: 'syz.3.3151': attribute type 29 has an invalid length. [ 513.048306][T13251] netlink: 'syz.3.3151': attribute type 29 has an invalid length. [ 513.067158][T13253] netlink: 'syz.3.3151': attribute type 29 has an invalid length. [ 513.366068][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.374397][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.389773][ T4268] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9 [ 513.423200][T13155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.522354][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 513.552941][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 513.608586][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 513.629187][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 513.660167][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 513.682536][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 513.709239][T13155] device veth0_vlan entered promiscuous mode [ 513.741325][T13155] device veth1_vlan entered promiscuous mode [ 513.840073][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 513.859948][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 513.908434][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 513.909172][T13155] device veth0_macvtap entered promiscuous mode [ 513.956174][T13155] device veth1_macvtap entered promiscuous mode [ 514.002091][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.031922][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.053200][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.076946][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.095928][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.107063][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.125774][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.136762][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.146815][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.157602][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.167886][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.178520][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.188919][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.199857][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.210150][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.222225][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.234236][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.245361][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.257304][T13155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.270744][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.289477][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.313976][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.327654][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.338123][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.358513][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.368933][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.381674][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.392368][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.404421][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.415529][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.429722][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.439825][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.450583][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.461093][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.473201][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.483591][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.494408][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.515695][T13155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.523988][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 514.542275][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 514.551374][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 514.560854][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 514.570377][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 514.579882][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 514.600965][T13155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.637780][T13155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.682504][T13155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.711508][T13155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.919282][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.959746][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.995673][ T4269] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 515.019474][ T4449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.042701][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 515.052848][ T4449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.066051][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 515.659253][T13337] 10: renamed from ipvlan1 [ 515.987909][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 516.006871][ T4269] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9 [ 516.937934][ T4269] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 517.569162][T13406] validate_nla: 103 callbacks suppressed [ 517.569185][T13406] netlink: 'syz.2.3210': attribute type 29 has an invalid length. [ 517.619309][T13410] netlink: 'syz.4.3212': attribute type 29 has an invalid length. [ 517.626722][T13409] netlink: 'syz.3.3211': attribute type 29 has an invalid length. [ 517.628081][T13406] netlink: 'syz.2.3210': attribute type 29 has an invalid length. [ 517.644540][T13410] netlink: 'syz.4.3212': attribute type 29 has an invalid length. [ 517.652950][T13409] netlink: 'syz.3.3211': attribute type 29 has an invalid length. [ 517.661876][T13411] netlink: 'syz.2.3210': attribute type 29 has an invalid length. [ 517.674938][T13409] netlink: 'syz.3.3211': attribute type 29 has an invalid length. [ 517.683098][T13410] netlink: 'syz.4.3212': attribute type 29 has an invalid length. [ 517.707002][T13406] netlink: 'syz.2.3210': attribute type 29 has an invalid length. [ 517.953038][ T4269] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 518.071762][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 518.840970][ T4268] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 519.972755][ T4268] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 520.350927][ T4268] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 521.730937][ T4268] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9 [ 523.006011][T13587] validate_nla: 128 callbacks suppressed [ 523.006032][T13587] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 523.093619][T13587] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 523.116412][T13590] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 523.137381][T13592] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 523.172950][T13587] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 523.198957][ T4268] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 523.374637][T13599] netlink: 'syz.3.3290': attribute type 29 has an invalid length. [ 523.390254][T13600] netlink: 'syz.1.3292': attribute type 29 has an invalid length. [ 523.406776][T13599] netlink: 'syz.3.3290': attribute type 29 has an invalid length. [ 523.418004][T13599] netlink: 'syz.3.3290': attribute type 29 has an invalid length. [ 523.447982][T13600] netlink: 'syz.1.3292': attribute type 29 has an invalid length. [ 524.840114][ T4268] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 525.697778][ T4268] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 526.085374][ T4268] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 527.213356][ T4268] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 527.460579][ T4268] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 528.154516][T13729] validate_nla: 130 callbacks suppressed [ 528.154540][T13729] netlink: 'syz.3.3358': attribute type 29 has an invalid length. [ 528.260170][T13729] netlink: 'syz.3.3358': attribute type 29 has an invalid length. [ 528.294252][T13738] netlink: 'syz.3.3358': attribute type 29 has an invalid length. [ 528.323594][T13740] netlink: 'syz.3.3358': attribute type 29 has an invalid length. [ 528.340448][T13739] netlink: 'syz.0.3349': attribute type 29 has an invalid length. [ 528.385790][T13729] netlink: 'syz.3.3358': attribute type 29 has an invalid length. [ 528.438298][T13739] netlink: 'syz.0.3349': attribute type 29 has an invalid length. [ 528.525134][T13741] netlink: 'syz.0.3349': attribute type 29 has an invalid length. [ 528.565157][T13742] netlink: 'syz.0.3349': attribute type 29 has an invalid length. [ 528.579821][T13746] netlink: 'syz.0.3349': attribute type 29 has an invalid length. [ 529.085324][ T4268] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 530.016844][ T4268] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 530.927328][ T4268] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 531.039362][ T4268] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 532.085914][ T4268] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 532.758747][ T4268] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 533.321537][T13898] validate_nla: 130 callbacks suppressed [ 533.321557][T13898] netlink: 'syz.1.3411': attribute type 29 has an invalid length. [ 533.342498][ T4268] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 533.399012][T13898] netlink: 'syz.1.3411': attribute type 29 has an invalid length. [ 533.445901][ T4268] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 533.452851][T13903] netlink: 'syz.0.3423': attribute type 29 has an invalid length. [ 533.468269][T13898] netlink: 'syz.1.3411': attribute type 29 has an invalid length. [ 533.518296][T13903] netlink: 'syz.0.3423': attribute type 29 has an invalid length. [ 533.550945][T13904] netlink: 'syz.0.3423': attribute type 29 has an invalid length. [ 533.639393][T13903] netlink: 'syz.0.3423': attribute type 29 has an invalid length. [ 533.670712][T13908] netlink: 'syz.3.3415': attribute type 29 has an invalid length. [ 533.696323][T13903] netlink: 'syz.0.3423': attribute type 29 has an invalid length. [ 533.736477][T13910] netlink: 'syz.1.3416': attribute type 29 has an invalid length. [ 534.309918][ T4268] Bluetooth: hci5: unexpected event 0x34 length: 15 > 6 [ 534.862543][ T4268] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 535.473621][ T4268] Bluetooth: hci1: unexpected event 0x34 length: 15 > 6 [ 535.852804][ T4268] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 536.979741][ T4268] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 537.094407][ T4268] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 538.338302][T14057] validate_nla: 116 callbacks suppressed [ 538.338325][T14057] netlink: 'syz.4.3465': attribute type 29 has an invalid length. [ 538.444445][T14057] netlink: 'syz.4.3465': attribute type 29 has an invalid length. [ 538.471533][T14059] netlink: 'syz.4.3465': attribute type 29 has an invalid length. [ 538.495823][T14065] netlink: 'syz.0.3467': attribute type 29 has an invalid length. [ 538.509080][T14061] netlink: 'syz.4.3465': attribute type 29 has an invalid length. [ 538.544412][T14065] netlink: 'syz.0.3467': attribute type 29 has an invalid length. [ 538.589325][T14069] netlink: 'syz.0.3467': attribute type 29 has an invalid length. [ 538.597919][ T4268] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 538.614763][T14068] netlink: 'syz.4.3465': attribute type 29 has an invalid length. [ 538.632967][T14057] netlink: 'syz.4.3465': attribute type 29 has an invalid length. [ 538.642429][T14057] netlink: 'syz.4.3465': attribute type 29 has an invalid length. [ 538.974854][ T4268] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 540.216564][ T4268] Bluetooth: hci0: Malformed Event: 0x13 [ 540.946963][ T4268] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 541.159755][ T4268] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 542.470992][ T4268] Bluetooth: hci5: unexpected event 0x33 length: 15 > 10 [ 542.495776][ T4268] Bluetooth: hci3: Malformed Event: 0x13 [ 542.953881][ T4268] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 543.462554][T14229] validate_nla: 118 callbacks suppressed [ 543.462573][T14229] netlink: 'syz.2.3520': attribute type 29 has an invalid length. [ 543.487311][T14230] netlink: 'syz.1.3521': attribute type 29 has an invalid length. [ 543.510837][T14229] netlink: 'syz.2.3520': attribute type 29 has an invalid length. [ 543.538852][T14230] netlink: 'syz.1.3521': attribute type 29 has an invalid length. [ 543.590644][T14229] netlink: 'syz.2.3520': attribute type 29 has an invalid length. [ 543.593431][T14236] netlink: 'syz.0.3522': attribute type 29 has an invalid length. [ 543.614985][T14232] netlink: 'syz.1.3521': attribute type 29 has an invalid length. [ 543.649450][T14236] netlink: 'syz.0.3522': attribute type 29 has an invalid length. [ 543.662111][T14238] netlink: 'syz.0.3522': attribute type 29 has an invalid length. [ 543.714446][T14234] netlink: 'syz.1.3521': attribute type 29 has an invalid length. [ 544.216898][ T4268] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 544.692396][ T4268] Bluetooth: hci1: Malformed Event: 0x13 [ 546.181795][ T4268] Bluetooth: hci2: Malformed Event: 0x2f [ 546.400201][T14324] FAULT_INJECTION: forcing a failure. [ 546.400201][T14324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 546.468675][T14324] CPU: 0 PID: 14324 Comm: syz.0.3548 Not tainted 6.1.124-syzkaller #0 [ 546.476885][T14324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 546.486968][T14324] Call Trace: [ 546.490248][T14324] [ 546.493178][T14324] dump_stack_lvl+0x1e3/0x2cb [ 546.497887][T14324] ? nf_tcp_handle_invalid+0x642/0x642 [ 546.503360][T14324] ? panic+0x764/0x764 [ 546.507441][T14324] ? __lock_acquire+0x1f80/0x1f80 [ 546.512486][T14324] should_fail_ex+0x3a6/0x4d0 [ 546.517176][T14324] _copy_from_user+0x2b/0x170 [ 546.521864][T14324] __sys_bpf+0x226/0x6c0 [ 546.526121][T14324] ? __fget_files+0x435/0x4a0 [ 546.530807][T14324] ? bpf_link_show_fdinfo+0x300/0x300 [ 546.536197][T14324] ? print_irqtrace_events+0x210/0x210 [ 546.541660][T14324] ? print_irqtrace_events+0x210/0x210 [ 546.547128][T14324] ? syscall_enter_from_user_mode+0x2e/0x230 [ 546.553119][T14324] ? lockdep_hardirqs_on+0x94/0x130 [ 546.558320][T14324] __x64_sys_bpf+0x78/0x90 [ 546.562748][T14324] do_syscall_64+0x3b/0xb0 [ 546.567175][T14324] ? clear_bhb_loop+0x45/0xa0 [ 546.571857][T14324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.577761][T14324] RIP: 0033:0x7f70dd785d29 [ 546.582214][T14324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.601831][T14324] RSP: 002b:00007f70de60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 546.610255][T14324] RAX: ffffffffffffffda RBX: 00007f70dd975fa0 RCX: 00007f70dd785d29 [ 546.618224][T14324] RDX: 0000000000000080 RSI: 0000000020000280 RDI: 0000000000000005 [ 546.626193][T14324] RBP: 00007f70de60f090 R08: 0000000000000000 R09: 0000000000000000 [ 546.634164][T14324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.642134][T14324] R13: 0000000000000001 R14: 00007f70dd975fa0 R15: 00007ffef968f588 [ 546.650133][T14324] [ 546.692499][T14326] raw_sendmsg: syz.2.3549 forgot to set AF_INET. Fix it! [ 546.788363][ T4268] Bluetooth: hci2: Malformed Event: 0x13 [ 547.250672][ T4268] Bluetooth: hci5: Malformed Event: 0x2f [ 547.393083][T14358] FAULT_INJECTION: forcing a failure. [ 547.393083][T14358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.479019][T14358] CPU: 0 PID: 14358 Comm: syz.4.3564 Not tainted 6.1.124-syzkaller #0 [ 547.487230][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 547.497330][T14358] Call Trace: [ 547.500634][T14358] [ 547.503589][T14358] dump_stack_lvl+0x1e3/0x2cb [ 547.508303][T14358] ? nf_tcp_handle_invalid+0x642/0x642 [ 547.513832][T14358] ? panic+0x764/0x764 [ 547.517926][T14358] ? __lock_acquire+0x1f80/0x1f80 [ 547.522989][T14358] should_fail_ex+0x3a6/0x4d0 [ 547.527697][T14358] _copy_from_user+0x2b/0x170 [ 547.532416][T14358] __sys_bpf+0x226/0x6c0 [ 547.536695][T14358] ? __fget_files+0x435/0x4a0 [ 547.541398][T14358] ? bpf_link_show_fdinfo+0x300/0x300 [ 547.546828][T14358] ? print_irqtrace_events+0x210/0x210 [ 547.552322][T14358] ? print_irqtrace_events+0x210/0x210 [ 547.557823][T14358] ? syscall_enter_from_user_mode+0x2e/0x230 [ 547.563839][T14358] ? lockdep_hardirqs_on+0x94/0x130 [ 547.569072][T14358] __x64_sys_bpf+0x78/0x90 [ 547.573526][T14358] do_syscall_64+0x3b/0xb0 [ 547.577976][T14358] ? clear_bhb_loop+0x45/0xa0 [ 547.582679][T14358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.588609][T14358] RIP: 0033:0x7fa5b6b85d29 [ 547.593045][T14358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.612672][T14358] RSP: 002b:00007fa5b7906038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.621116][T14358] RAX: ffffffffffffffda RBX: 00007fa5b6d75fa0 RCX: 00007fa5b6b85d29 [ 547.629111][T14358] RDX: 0000000000000048 RSI: 000000002000e000 RDI: 0000000000000005 [ 547.637108][T14358] RBP: 00007fa5b7906090 R08: 0000000000000000 R09: 0000000000000000 [ 547.645105][T14358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.653097][T14358] R13: 0000000000000001 R14: 00007fa5b6d75fa0 R15: 00007ffeb36c2df8 [ 547.661103][T14358] [ 547.948443][T14374] FAULT_INJECTION: forcing a failure. [ 547.948443][T14374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.977837][T14374] CPU: 0 PID: 14374 Comm: syz.3.3573 Not tainted 6.1.124-syzkaller #0 [ 547.986054][T14374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 547.996135][T14374] Call Trace: [ 547.999434][T14374] [ 548.002377][T14374] dump_stack_lvl+0x1e3/0x2cb [ 548.007096][T14374] ? nf_tcp_handle_invalid+0x642/0x642 [ 548.012597][T14374] ? panic+0x764/0x764 [ 548.016698][T14374] ? __lock_acquire+0x1f80/0x1f80 [ 548.021767][T14374] should_fail_ex+0x3a6/0x4d0 [ 548.026473][T14374] _copy_from_user+0x2b/0x170 [ 548.031184][T14374] __sys_bpf+0x226/0x6c0 [ 548.035460][T14374] ? __fget_files+0x435/0x4a0 [ 548.040165][T14374] ? bpf_link_show_fdinfo+0x300/0x300 [ 548.045590][T14374] ? print_irqtrace_events+0x210/0x210 [ 548.051085][T14374] ? print_irqtrace_events+0x210/0x210 [ 548.056714][T14374] ? syscall_enter_from_user_mode+0x2e/0x230 [ 548.062726][T14374] ? lockdep_hardirqs_on+0x94/0x130 [ 548.067948][T14374] __x64_sys_bpf+0x78/0x90 [ 548.072394][T14374] do_syscall_64+0x3b/0xb0 [ 548.076843][T14374] ? clear_bhb_loop+0x45/0xa0 [ 548.081565][T14374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.087504][T14374] RIP: 0033:0x7f7996585d29 [ 548.091941][T14374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.111617][T14374] RSP: 002b:00007f7997368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 548.120065][T14374] RAX: ffffffffffffffda RBX: 00007f7996775fa0 RCX: 00007f7996585d29 [ 548.128074][T14374] RDX: 000000000000002a RSI: 0000000020000240 RDI: 0000000000000005 [ 548.136073][T14374] RBP: 00007f7997368090 R08: 0000000000000000 R09: 0000000000000000 [ 548.144068][T14374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.152067][T14374] R13: 0000000000000001 R14: 00007f7996775fa0 R15: 00007fff14ae0238 [ 548.160084][T14374] [ 548.372530][ T4268] Bluetooth: hci3: Malformed Event: 0x2f [ 548.382821][ T4268] Bluetooth: hci0: Malformed Event: 0x13 [ 548.528899][T14397] validate_nla: 118 callbacks suppressed [ 548.528919][T14397] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 548.557561][T14397] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 548.612389][T14397] netlink: 'syz.4.3581': attribute type 29 has an invalid length. [ 548.662640][T14403] netlink: 'syz.2.3584': attribute type 29 has an invalid length. [ 548.675664][T14405] FAULT_INJECTION: forcing a failure. [ 548.675664][T14405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.700045][T14405] CPU: 1 PID: 14405 Comm: syz.3.3585 Not tainted 6.1.124-syzkaller #0 [ 548.708265][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 548.710303][T14403] netlink: 'syz.2.3584': attribute type 29 has an invalid length. [ 548.718334][T14405] Call Trace: [ 548.718346][T14405] [ 548.718354][T14405] dump_stack_lvl+0x1e3/0x2cb [ 548.718397][T14405] ? nf_tcp_handle_invalid+0x642/0x642 [ 548.718430][T14405] ? panic+0x764/0x764 [ 548.718455][T14405] ? __lock_acquire+0x1f80/0x1f80 [ 548.718495][T14405] should_fail_ex+0x3a6/0x4d0 [ 548.756464][T14405] _copy_from_user+0x2b/0x170 [ 548.761199][T14405] __sys_bpf+0x226/0x6c0 [ 548.765486][T14405] ? __fget_files+0x435/0x4a0 [ 548.770203][T14405] ? bpf_link_show_fdinfo+0x300/0x300 [ 548.775637][T14405] ? print_irqtrace_events+0x210/0x210 [ 548.777418][T14407] netlink: 'syz.0.3586': attribute type 29 has an invalid length. [ 548.781135][T14405] ? print_irqtrace_events+0x210/0x210 [ 548.781181][T14405] ? syscall_enter_from_user_mode+0x2e/0x230 [ 548.781208][T14405] ? lockdep_hardirqs_on+0x94/0x130 [ 548.781235][T14405] __x64_sys_bpf+0x78/0x90 [ 548.781267][T14405] do_syscall_64+0x3b/0xb0 [ 548.781296][T14405] ? clear_bhb_loop+0x45/0xa0 [ 548.781317][T14405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.781348][T14405] RIP: 0033:0x7f7996585d29 [ 548.781368][T14405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.781387][T14405] RSP: 002b:00007f7997368038 EFLAGS: 00000246 [ 548.793059][T14403] netlink: 'syz.2.3584': attribute type 29 has an invalid length. [ 548.794629][T14405] ORIG_RAX: 0000000000000141 [ 548.794642][T14405] RAX: ffffffffffffffda RBX: 00007f7996775fa0 RCX: 00007f7996585d29 [ 548.794661][T14405] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000012 [ 548.801385][T14407] netlink: 'syz.0.3586': attribute type 29 has an invalid length. [ 548.805814][T14405] RBP: 00007f7997368090 R08: 0000000000000000 R09: 0000000000000000 [ 548.805832][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.805845][T14405] R13: 0000000000000001 R14: 00007f7996775fa0 R15: 00007fff14ae0238 [ 548.863829][T14403] netlink: 'syz.2.3584': attribute type 29 has an invalid length. [ 548.867914][T14405] [ 548.944314][T14408] netlink: 'syz.0.3586': attribute type 29 has an invalid length. [ 549.245244][T14419] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3591'. [ 549.657274][ T4268] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 549.766657][T14434] FAULT_INJECTION: forcing a failure. [ 549.766657][T14434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.871615][T14434] CPU: 0 PID: 14434 Comm: syz.0.3596 Not tainted 6.1.124-syzkaller #0 [ 549.879840][T14434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 549.889919][T14434] Call Trace: [ 549.893216][T14434] [ 549.896165][T14434] dump_stack_lvl+0x1e3/0x2cb [ 549.900883][T14434] ? nf_tcp_handle_invalid+0x642/0x642 [ 549.906386][T14434] ? panic+0x764/0x764 [ 549.910513][T14434] ? __lock_acquire+0x1f80/0x1f80 [ 549.915585][T14434] should_fail_ex+0x3a6/0x4d0 [ 549.920284][T14434] _copy_from_user+0x2b/0x170 [ 549.924983][T14434] __sys_bpf+0x226/0x6c0 [ 549.929248][T14434] ? bpf_link_show_fdinfo+0x300/0x300 [ 549.934670][T14434] ? print_irqtrace_events+0x210/0x210 [ 549.940158][T14434] ? print_irqtrace_events+0x210/0x210 [ 549.945664][T14434] ? syscall_enter_from_user_mode+0x2e/0x230 [ 549.951661][T14434] ? lockdep_hardirqs_on+0x94/0x130 [ 549.956874][T14434] __x64_sys_bpf+0x78/0x90 [ 549.961306][T14434] do_syscall_64+0x3b/0xb0 [ 549.965734][T14434] ? clear_bhb_loop+0x45/0xa0 [ 549.970414][T14434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.976311][T14434] RIP: 0033:0x7f70dd785d29 [ 549.980744][T14434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.000354][T14434] RSP: 002b:00007f70de60f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 550.008791][T14434] RAX: ffffffffffffffda RBX: 00007f70dd975fa0 RCX: 00007f70dd785d29 [ 550.016767][T14434] RDX: 0000000000000094 RSI: 0000000020000700 RDI: 0000000000000005 [ 550.024738][T14434] RBP: 00007f70de60f090 R08: 0000000000000000 R09: 0000000000000000 [ 550.032737][T14434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.040718][T14434] R13: 0000000000000001 R14: 00007f70dd975fa0 R15: 00007ffef968f588 [ 550.048700][T14434] [ 550.156292][T14437] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.3598'. [ 550.190357][T14423] syz.2.3591 (14423) used greatest stack depth: 18600 bytes left [ 550.404883][T14444] FAULT_INJECTION: forcing a failure. [ 550.404883][T14444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.419229][T14444] CPU: 0 PID: 14444 Comm: syz.4.3601 Not tainted 6.1.124-syzkaller #0 [ 550.427419][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 550.437484][T14444] Call Trace: [ 550.440776][T14444] [ 550.443706][T14444] dump_stack_lvl+0x1e3/0x2cb [ 550.448425][T14444] ? nf_tcp_handle_invalid+0x642/0x642 [ 550.453895][T14444] ? panic+0x764/0x764 [ 550.457992][T14444] ? __lock_acquire+0x1f80/0x1f80 [ 550.463040][T14444] should_fail_ex+0x3a6/0x4d0 [ 550.467735][T14444] _copy_from_user+0x2b/0x170 [ 550.472431][T14444] __sys_bpf+0x226/0x6c0 [ 550.476675][T14444] ? __fget_files+0x435/0x4a0 [ 550.481368][T14444] ? bpf_link_show_fdinfo+0x300/0x300 [ 550.486760][T14444] ? print_irqtrace_events+0x210/0x210 [ 550.492226][T14444] ? print_irqtrace_events+0x210/0x210 [ 550.497693][T14444] ? syscall_enter_from_user_mode+0x2e/0x230 [ 550.503694][T14444] ? lockdep_hardirqs_on+0x94/0x130 [ 550.508905][T14444] __x64_sys_bpf+0x78/0x90 [ 550.513327][T14444] do_syscall_64+0x3b/0xb0 [ 550.517751][T14444] ? clear_bhb_loop+0x45/0xa0 [ 550.522432][T14444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 550.528338][T14444] RIP: 0033:0x7fa5b6b85d29 [ 550.532750][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.552352][T14444] RSP: 002b:00007fa5b7906038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 550.560762][T14444] RAX: ffffffffffffffda RBX: 00007fa5b6d75fa0 RCX: 00007fa5b6b85d29 [ 550.568735][T14444] RDX: 0000000000000040 RSI: 0000000020000240 RDI: 000000000000001c [ 550.576704][T14444] RBP: 00007fa5b7906090 R08: 0000000000000000 R09: 0000000000000000 [ 550.584682][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.592662][T14444] R13: 0000000000000000 R14: 00007fa5b6d75fa0 R15: 00007ffeb36c2df8 [ 550.600646][T14444] [ 550.629166][ T4268] Bluetooth: hci2: Malformed Event: 0x13 [ 551.195096][T14462] batman_adv: batadv0: Adding interface: team0 [ 551.224809][T14462] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.267233][T14462] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 551.294358][T14458] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3608'. [ 551.307876][ T4268] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 551.322494][T14458] device team0 entered promiscuous mode [ 551.353822][T14458] device team_slave_0 entered promiscuous mode [ 551.361396][T14470] FAULT_INJECTION: forcing a failure. [ 551.361396][T14470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.376966][T14458] device team_slave_1 entered promiscuous mode [ 551.377956][T14470] CPU: 0 PID: 14470 Comm: syz.1.3612 Not tainted 6.1.124-syzkaller #0 [ 551.391789][T14470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 551.401862][T14470] Call Trace: [ 551.405155][T14470] [ 551.408102][T14470] dump_stack_lvl+0x1e3/0x2cb [ 551.412815][T14470] ? nf_tcp_handle_invalid+0x642/0x642 [ 551.414684][T14458] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.418289][T14470] ? panic+0x764/0x764 [ 551.418318][T14470] ? __lock_acquire+0x1f80/0x1f80 [ 551.418356][T14470] should_fail_ex+0x3a6/0x4d0 [ 551.418385][T14470] _copy_from_user+0x2b/0x170 [ 551.418436][T14470] __sys_bpf+0x226/0x6c0 [ 551.418466][T14470] ? __fget_files+0x435/0x4a0 [ 551.418492][T14470] ? bpf_link_show_fdinfo+0x300/0x300 [ 551.418537][T14470] ? print_irqtrace_events+0x210/0x210 [ 551.418569][T14470] ? print_irqtrace_events+0x210/0x210 [ 551.418604][T14470] ? syscall_enter_from_user_mode+0x2e/0x230 [ 551.418630][T14470] ? lockdep_hardirqs_on+0x94/0x130 [ 551.418659][T14470] __x64_sys_bpf+0x78/0x90 [ 551.418690][T14470] do_syscall_64+0x3b/0xb0 [ 551.418728][T14470] ? clear_bhb_loop+0x45/0xa0 [ 551.418752][T14470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.418785][T14470] RIP: 0033:0x7ff1bd985d29 [ 551.418805][T14470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.418824][T14470] RSP: 002b:00007ff1be787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.418848][T14470] RAX: ffffffffffffffda RBX: 00007ff1bdb75fa0 RCX: 00007ff1bd985d29 [ 551.418865][T14470] RDX: 0000000000000090 RSI: 0000000020000280 RDI: 0000000000000005 [ 551.418880][T14470] RBP: 00007ff1be787090 R08: 0000000000000000 R09: 0000000000000000 [ 551.418895][T14470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.418909][T14470] R13: 0000000000000001 R14: 00007ff1bdb75fa0 R15: 00007ffeb85c2b28 [ 551.418940][T14470] [ 551.647563][T14458] batman_adv: batadv0: Interface activated: team0 [ 551.655848][T14458] batman_adv: batadv0: Interface deactivated: team0 [ 551.666214][T14458] batman_adv: batadv0: Removing interface: team0 [ 551.685642][T14458] bridge0: port 3(team0) entered blocking state [ 551.692492][T14458] bridge0: port 3(team0) entered disabled state [ 551.751406][T14458] bridge0: port 3(team0) entered blocking state [ 551.757996][T14458] bridge0: port 3(team0) entered forwarding state [ 551.839218][T14458] syz.0.3608 (14458) used greatest stack depth: 18112 bytes left [ 552.407431][T14501] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3626'. [ 552.656367][ T4268] Bluetooth: hci5: unexpected event 0x30 length: 15 > 3 [ 552.700612][ T4268] Bluetooth: hci3: Malformed Event: 0x13 [ 552.810771][T14517] FAULT_INJECTION: forcing a failure. [ 552.810771][T14517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.844437][T14517] CPU: 1 PID: 14517 Comm: syz.3.3635 Not tainted 6.1.124-syzkaller #0 [ 552.852654][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 552.862736][T14517] Call Trace: [ 552.866037][T14517] [ 552.868989][T14517] dump_stack_lvl+0x1e3/0x2cb [ 552.873707][T14517] ? nf_tcp_handle_invalid+0x642/0x642 [ 552.879227][T14517] ? panic+0x764/0x764 [ 552.883335][T14517] ? __lock_acquire+0x1f80/0x1f80 [ 552.888408][T14517] should_fail_ex+0x3a6/0x4d0 [ 552.893127][T14517] _copy_from_user+0x2b/0x170 [ 552.897838][T14517] copy_msghdr_from_user+0xaa/0x670 [ 552.903065][T14517] ? sendmsg_copy_msghdr+0x70/0x70 [ 552.908205][T14517] __sys_sendmsg+0x236/0x390 [ 552.912805][T14517] ? ____sys_sendmsg+0x8f0/0x8f0 [ 552.917753][T14517] ? vfs_write+0x6cf/0xbc0 [ 552.922194][T14517] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 552.928196][T14517] ? syscall_enter_from_user_mode+0x2e/0x230 [ 552.934198][T14517] ? lockdep_hardirqs_on+0x94/0x130 [ 552.939411][T14517] ? syscall_enter_from_user_mode+0x2e/0x230 [ 552.945404][T14517] do_syscall_64+0x3b/0xb0 [ 552.949833][T14517] ? clear_bhb_loop+0x45/0xa0 [ 552.954511][T14517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.960415][T14517] RIP: 0033:0x7f7996585d29 [ 552.964854][T14517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.984477][T14517] RSP: 002b:00007f7997368038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.992899][T14517] RAX: ffffffffffffffda RBX: 00007f7996775fa0 RCX: 00007f7996585d29 [ 553.000872][T14517] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 553.008840][T14517] RBP: 00007f7997368090 R08: 0000000000000000 R09: 0000000000000000 [ 553.016834][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.024804][T14517] R13: 0000000000000000 R14: 00007f7996775fa0 R15: 00007fff14ae0238 [ 553.032788][T14517] [ 553.078227][T14523] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3636'. [ 553.308295][T14530] netlink: 14320 bytes leftover after parsing attributes in process `syz.4.3639'. [ 553.560792][T14539] validate_nla: 124 callbacks suppressed [ 553.560810][T14539] netlink: 'syz.4.3642': attribute type 29 has an invalid length. [ 553.589764][T14541] FAULT_INJECTION: forcing a failure. [ 553.589764][T14541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.609175][T14539] netlink: 'syz.4.3642': attribute type 29 has an invalid length. [ 553.640651][T14541] CPU: 0 PID: 14541 Comm: syz.3.3643 Not tainted 6.1.124-syzkaller #0 [ 553.648863][T14541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 553.658951][T14541] Call Trace: [ 553.662255][T14541] [ 553.665213][T14541] dump_stack_lvl+0x1e3/0x2cb [ 553.665709][T14544] netlink: 'syz.2.3645': attribute type 29 has an invalid length. [ 553.669916][T14541] ? nf_tcp_handle_invalid+0x642/0x642 [ 553.669955][T14541] ? panic+0x764/0x764 [ 553.678330][T14544] netlink: 'syz.2.3645': attribute type 29 has an invalid length. [ 553.683213][T14541] ? __lock_acquire+0x1f80/0x1f80 [ 553.691521][T14544] netlink: 'syz.2.3645': attribute type 29 has an invalid length. [ 553.695076][T14541] should_fail_ex+0x3a6/0x4d0 [ 553.710860][T14539] netlink: 'syz.4.3642': attribute type 29 has an invalid length. [ 553.712549][T14541] _copy_from_user+0x2b/0x170 [ 553.724651][T14544] netlink: 'syz.2.3645': attribute type 29 has an invalid length. [ 553.725052][T14541] copy_msghdr_from_user+0xaa/0x670 [ 553.738194][T14541] ? sendmsg_copy_msghdr+0x70/0x70 [ 553.743367][T14541] __sys_sendmsg+0x236/0x390 [ 553.744103][T14544] netlink: 'syz.2.3645': attribute type 29 has an invalid length. [ 553.747982][T14541] ? ____sys_sendmsg+0x8f0/0x8f0 [ 553.748018][T14541] ? vfs_write+0x6cf/0xbc0 [ 553.748065][T14541] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 553.748108][T14541] ? syscall_enter_from_user_mode+0x2e/0x230 [ 553.748133][T14541] ? lockdep_hardirqs_on+0x94/0x130 [ 553.748167][T14541] ? syscall_enter_from_user_mode+0x2e/0x230 [ 553.748195][T14541] do_syscall_64+0x3b/0xb0 [ 553.748224][T14541] ? clear_bhb_loop+0x45/0xa0 [ 553.748246][T14541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.748277][T14541] RIP: 0033:0x7f7996585d29 [ 553.748296][T14541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.748313][T14541] RSP: 002b:00007f7997368038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.748335][T14541] RAX: ffffffffffffffda RBX: 00007f7996775fa0 RCX: 00007f7996585d29 [ 553.748350][T14541] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 553.748364][T14541] RBP: 00007f7997368090 R08: 0000000000000000 R09: 0000000000000000 [ 553.748377][T14541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.748390][T14541] R13: 0000000000000000 R14: 00007f7996775fa0 R15: 00007fff14ae0238 [ 553.748416][T14541] [ 553.802965][T14547] netlink: 'syz.1.3646': attribute type 29 has an invalid length. [ 553.873895][T14546] netlink: 'syz.0.3644': attribute type 29 has an invalid length. [ 553.966271][ T4268] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 554.099097][T14555] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3649'. [ 554.302844][T14563] FAULT_INJECTION: forcing a failure. [ 554.302844][T14563] name failslab, interval 1, probability 0, space 0, times 1 [ 554.338510][T14563] CPU: 1 PID: 14563 Comm: syz.3.3653 Not tainted 6.1.124-syzkaller #0 [ 554.346724][T14563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 554.356807][T14563] Call Trace: [ 554.360105][T14563] [ 554.363066][T14563] dump_stack_lvl+0x1e3/0x2cb [ 554.367779][T14563] ? nf_tcp_handle_invalid+0x642/0x642 [ 554.373279][T14563] ? panic+0x764/0x764 [ 554.377395][T14563] ? __might_sleep+0xb0/0xb0 [ 554.382018][T14563] ? __lock_acquire+0x125b/0x1f80 [ 554.387099][T14563] should_fail_ex+0x3a6/0x4d0 [ 554.391808][T14563] should_failslab+0x5/0x20 [ 554.396324][T14563] slab_pre_alloc_hook+0x59/0x300 [ 554.401361][T14563] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 554.407095][T14563] __kmem_cache_alloc_node+0x47/0x260 [ 554.412480][T14563] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 554.418201][T14563] __kmalloc+0xa1/0x230 [ 554.422358][T14563] ? rcu_is_watching+0x11/0xb0 [ 554.427133][T14563] tomoyo_realpath_from_path+0xcb/0x5d0 [ 554.432708][T14563] tomoyo_path_number_perm+0x21f/0x7f0 [ 554.438183][T14563] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 554.443827][T14563] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 554.449310][T14563] ? __fget_files+0x28/0x4a0 [ 554.453925][T14563] ? __fget_files+0x28/0x4a0 [ 554.458520][T14563] ? __fget_files+0x435/0x4a0 [ 554.463200][T14563] ? __fget_files+0x28/0x4a0 [ 554.467804][T14563] security_file_ioctl+0x6d/0xa0 [ 554.472754][T14563] __se_sys_ioctl+0x47/0x160 [ 554.477349][T14563] do_syscall_64+0x3b/0xb0 [ 554.481786][T14563] ? clear_bhb_loop+0x45/0xa0 [ 554.486468][T14563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.492376][T14563] RIP: 0033:0x7f7996585d29 [ 554.496794][T14563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.516400][T14563] RSP: 002b:00007f7997368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.524820][T14563] RAX: ffffffffffffffda RBX: 00007f7996775fa0 RCX: 00007f7996585d29 [ 554.532820][T14563] RDX: 0000000020000180 RSI: 000000000000541b RDI: 0000000000000003 [ 554.540788][T14563] RBP: 00007f7997368090 R08: 0000000000000000 R09: 0000000000000000 [ 554.548775][T14563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.556755][T14563] R13: 0000000000000000 R14: 00007f7996775fa0 R15: 00007fff14ae0238 [ 554.564739][T14563] [ 554.666235][ T4268] Bluetooth: hci0: Malformed Event: 0x13 [ 554.718725][T14563] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.318635][ T4268] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 555.571083][T14601] FAULT_INJECTION: forcing a failure. [ 555.571083][T14601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.626751][T14601] CPU: 1 PID: 14601 Comm: syz.4.3670 Not tainted 6.1.124-syzkaller #0 [ 555.634993][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 555.645103][T14601] Call Trace: [ 555.648405][T14601] [ 555.651359][T14601] dump_stack_lvl+0x1e3/0x2cb [ 555.656080][T14601] ? nf_tcp_handle_invalid+0x642/0x642 [ 555.661578][T14601] ? panic+0x764/0x764 [ 555.665676][T14601] ? __lock_acquire+0x1f80/0x1f80 [ 555.670749][T14601] should_fail_ex+0x3a6/0x4d0 [ 555.675465][T14601] _copy_from_user+0x2b/0x170 [ 555.680189][T14601] __sys_bpf+0x226/0x6c0 [ 555.684476][T14601] ? bpf_link_show_fdinfo+0x300/0x300 [ 555.689901][T14601] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 555.696140][T14601] __x64_sys_bpf+0x78/0x90 [ 555.700600][T14601] do_syscall_64+0x3b/0xb0 [ 555.705046][T14601] ? clear_bhb_loop+0x45/0xa0 [ 555.709732][T14601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.715631][T14601] RIP: 0033:0x7fa5b6b85d29 [ 555.720049][T14601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.739671][T14601] RSP: 002b:00007fa5b7906038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.748088][T14601] RAX: ffffffffffffffda RBX: 00007fa5b6d75fa0 RCX: 00007fa5b6b85d29 [ 555.756073][T14601] RDX: 0000000000000048 RSI: 00000000200017c0 RDI: 0000000000000005 [ 555.764054][T14601] RBP: 00007fa5b7906090 R08: 0000000000000000 R09: 0000000000000000 [ 555.772035][T14601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.780014][T14601] R13: 0000000000000000 R14: 00007fa5b6d75fa0 R15: 00007ffeb36c2df8 [ 555.788022][T14601] [ 556.795478][ T4268] Bluetooth: hci0: Malformed Event: 0x13 [ 557.081761][ T4268] Bluetooth: hci5: unexpected event 0x30 length: 15 > 3 [ 557.292159][ T4268] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 558.670958][T14672] validate_nla: 106 callbacks suppressed [ 558.670977][T14672] netlink: 'syz.2.3691': attribute type 29 has an invalid length. [ 558.703853][T14673] netlink: 'syz.4.3693': attribute type 29 has an invalid length. [ 558.752869][T14673] netlink: 'syz.4.3693': attribute type 29 has an invalid length. [ 558.786090][T14675] netlink: 'syz.4.3693': attribute type 29 has an invalid length. [ 558.814697][T14672] netlink: 'syz.2.3691': attribute type 29 has an invalid length. [ 558.832210][T14678] netlink: 'syz.4.3693': attribute type 29 has an invalid length. [ 558.847938][T14672] netlink: 'syz.2.3691': attribute type 29 has an invalid length. [ 558.899252][T14673] netlink: 'syz.4.3693': attribute type 29 has an invalid length. [ 558.907687][T14680] netlink: 'syz.2.3691': attribute type 29 has an invalid length. [ 558.935491][T14672] netlink: 'syz.2.3691': attribute type 29 has an invalid length. [ 559.347859][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 559.471365][ T4268] Bluetooth: hci2: Malformed Event: 0x13 [ 560.682065][ T4268] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 561.560356][ T4269] Bluetooth: hci3: Malformed Event: 0x13 [ 562.708046][ T4269] Bluetooth: hci5: command 0x0409 tx timeout [ 562.884527][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.890928][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.915061][ T4269] Bluetooth: hci2: Malformed Event: 0x13 [ 563.991410][T14826] validate_nla: 132 callbacks suppressed [ 563.991443][T14826] netlink: 'syz.1.3746': attribute type 29 has an invalid length. [ 564.041512][T14826] netlink: 'syz.1.3746': attribute type 29 has an invalid length. [ 564.075116][T14829] netlink: 'syz.1.3746': attribute type 29 has an invalid length. [ 564.146283][T14826] netlink: 'syz.1.3746': attribute type 29 has an invalid length. [ 564.186517][T14826] netlink: 'syz.1.3746': attribute type 29 has an invalid length. [ 564.369897][T14835] netlink: 'syz.0.3748': attribute type 29 has an invalid length. [ 564.403842][T14835] netlink: 'syz.0.3748': attribute type 29 has an invalid length. [ 564.458498][T14839] netlink: 'syz.0.3748': attribute type 29 has an invalid length. [ 564.470887][T14842] netlink: 'syz.2.3752': attribute type 29 has an invalid length. [ 564.495237][T14842] netlink: 'syz.2.3752': attribute type 29 has an invalid length. [ 564.928495][ T4269] Bluetooth: hci5: Malformed Event: 0x13 [ 565.611040][ T4269] Bluetooth: hci5: Malformed Event: 0x13 [ 566.540048][ T4269] Bluetooth: hci5: Malformed Event: 0x13 [ 567.806905][ T4269] Bluetooth: hci1: Malformed Event: 0x13 [ 569.053699][T14976] validate_nla: 136 callbacks suppressed [ 569.053719][T14976] netlink: 'syz.3.3804': attribute type 29 has an invalid length. [ 569.093089][T14976] netlink: 'syz.3.3804': attribute type 29 has an invalid length. [ 569.130738][T14976] netlink: 'syz.3.3804': attribute type 29 has an invalid length. [ 569.145416][T14976] netlink: 'syz.3.3804': attribute type 29 has an invalid length. [ 569.164083][T14976] netlink: 'syz.3.3804': attribute type 29 has an invalid length. [ 569.203724][T14982] netlink: 'syz.0.3807': attribute type 29 has an invalid length. [ 569.222826][T14982] netlink: 'syz.0.3807': attribute type 29 has an invalid length. [ 569.254367][T14982] netlink: 'syz.0.3807': attribute type 29 has an invalid length. [ 569.348096][T14984] netlink: 'syz.0.3807': attribute type 29 has an invalid length. [ 569.375504][T14982] netlink: 'syz.0.3807': attribute type 29 has an invalid length. [ 569.840283][ T4269] Bluetooth: hci3: Malformed Event: 0x13 [ 571.327798][ T4269] Bluetooth: hci3: Malformed Event: 0x13 [ 572.202705][ T4269] Bluetooth: hci5: Malformed Event: 0x13 [ 572.383387][ T4269] Bluetooth: hci0: Malformed Event: 0x13 [ 572.735200][ T4269] Bluetooth: hci0: Malformed Event: 0x13 [ 574.208772][T15094] validate_nla: 120 callbacks suppressed [ 574.208792][T15094] netlink: 'syz.1.3855': attribute type 29 has an invalid length. [ 574.285489][ T4269] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 574.286826][T15094] netlink: 'syz.1.3855': attribute type 29 has an invalid length. [ 574.319549][T15100] netlink: 'syz.1.3855': attribute type 29 has an invalid length. [ 574.357237][T15094] netlink: 'syz.1.3855': attribute type 29 has an invalid length. [ 574.408377][T15100] netlink: 'syz.1.3855': attribute type 29 has an invalid length. [ 574.456449][T15094] netlink: 'syz.1.3855': attribute type 29 has an invalid length. [ 574.519156][T15100] netlink: 'syz.1.3855': attribute type 29 has an invalid length. [ 574.661797][T15106] netlink: 'syz.2.3861': attribute type 29 has an invalid length. [ 574.708523][T15106] netlink: 'syz.2.3861': attribute type 29 has an invalid length. [ 574.720764][T15109] netlink: 'syz.4.3862': attribute type 29 has an invalid length. [ 575.988621][ T4269] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 577.668680][ T4269] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 579.579358][T15210] validate_nla: 41 callbacks suppressed [ 579.579379][T15210] netlink: 'syz.4.3909': attribute type 29 has an invalid length. [ 579.778220][T15210] netlink: 'syz.4.3909': attribute type 29 has an invalid length. [ 579.786872][ T4269] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 580.014606][T15212] netlink: 'syz.4.3909': attribute type 29 has an invalid length. [ 581.384582][T15241] netlink: 'syz.1.3905': attribute type 29 has an invalid length. [ 581.420018][T15241] netlink: 'syz.1.3905': attribute type 29 has an invalid length. [ 581.459049][T15241] netlink: 'syz.1.3905': attribute type 29 has an invalid length. [ 581.637485][T15246] netlink: 'syz.4.3908': attribute type 29 has an invalid length. [ 581.691134][T15246] netlink: 'syz.4.3908': attribute type 29 has an invalid length. [ 581.729095][T15246] netlink: 'syz.4.3908': attribute type 29 has an invalid length. [ 581.800688][T15253] netlink: 'syz.4.3908': attribute type 29 has an invalid length. [ 581.896311][ T4269] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 583.458365][ T4269] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 583.862106][ T4269] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 583.937353][ T4269] Bluetooth: hci1: Malformed Event: 0x13 [ 585.689918][T15344] validate_nla: 68 callbacks suppressed [ 585.689953][T15344] netlink: 'syz.2.3950': attribute type 29 has an invalid length. [ 585.732594][ T4269] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 585.778369][T15344] netlink: 'syz.2.3950': attribute type 29 has an invalid length. [ 585.822800][T15345] netlink: 'syz.2.3950': attribute type 29 has an invalid length. [ 585.880761][ T4269] Bluetooth: hci2: Malformed Event: 0x13 [ 585.887692][T15348] netlink: 'syz.2.3950': attribute type 29 has an invalid length. [ 585.918341][T15344] netlink: 'syz.2.3950': attribute type 29 has an invalid length. [ 585.928730][T15344] netlink: 'syz.2.3950': attribute type 29 has an invalid length. [ 585.966749][T15352] netlink: 'syz.0.3953': attribute type 29 has an invalid length. [ 585.967810][T15344] netlink: 'syz.2.3950': attribute type 29 has an invalid length. [ 586.030171][T15352] netlink: 'syz.0.3953': attribute type 29 has an invalid length. [ 586.088701][T15353] netlink: 'syz.0.3953': attribute type 29 has an invalid length. [ 587.515675][ T4269] Bluetooth: hci3: Malformed Event: 0x13 [ 588.020496][ T4269] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 588.452925][ T4269] Bluetooth: hci5: Malformed Event: 0x13 [ 588.960546][ T4269] Bluetooth: hci5: unexpected event 0x32 length: 15 > 9 [ 588.969476][ T4269] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 589.237645][ T4269] Bluetooth: hci3: Malformed Event: 0x13 [ 589.438108][ T4269] Bluetooth: hci2: Malformed Event: 0x13 [ 590.736634][T15490] validate_nla: 104 callbacks suppressed [ 590.736651][T15490] netlink: 'syz.3.4012': attribute type 29 has an invalid length. [ 590.774394][T15490] netlink: 'syz.3.4012': attribute type 29 has an invalid length. [ 590.808873][T15494] netlink: 'syz.3.4012': attribute type 29 has an invalid length. [ 590.831155][T15490] netlink: 'syz.3.4012': attribute type 29 has an invalid length. [ 590.838178][T15495] netlink: 'syz.1.4016': attribute type 29 has an invalid length. [ 590.846157][T15490] netlink: 'syz.3.4012': attribute type 29 has an invalid length. [ 590.856563][T15495] netlink: 'syz.1.4016': attribute type 29 has an invalid length. [ 590.866207][T15495] netlink: 'syz.1.4016': attribute type 29 has an invalid length. [ 590.876241][T15495] netlink: 'syz.1.4016': attribute type 29 has an invalid length. [ 591.113492][T15505] netlink: 'syz.3.4021': attribute type 29 has an invalid length. [ 591.906135][ T4269] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 591.921292][ T4269] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 592.493325][ T4269] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 592.648052][T15561] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4048'. [ 592.938191][ T4269] Bluetooth: hci5: unexpected event 0x30 length: 15 > 3 [ 593.070599][T15570] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.4051'. [ 593.193431][T15570] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 593.858428][T15593] netlink: 14320 bytes leftover after parsing attributes in process `syz.3.4058'. [ 593.868049][ T4269] Bluetooth: hci5: Malformed Event: 0x2f [ 594.621835][T15629] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.4074'. [ 594.648530][T15626] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4073'. [ 594.822489][T15629] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 595.404567][T15645] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4081'. [ 595.508447][ T56] device hsr_slave_0 left promiscuous mode [ 595.527071][ T56] device hsr_slave_1 left promiscuous mode [ 595.567569][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.579921][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.618994][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.643576][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.664584][ T4269] Bluetooth: hci2: Malformed Event: 0x2f [ 595.677675][ T56] device bridge_slave_1 left promiscuous mode [ 595.685941][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.696463][ T56] device bridge_slave_0 left promiscuous mode [ 595.702989][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.742590][ T56] device veth1_macvtap left promiscuous mode [ 595.749414][ T56] device veth0_macvtap left promiscuous mode [ 595.756116][ T56] device veth1_vlan left promiscuous mode [ 595.762273][ T56] device veth0_vlan left promiscuous mode [ 595.877969][ T4269] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 596.255490][ T56] team0 (unregistering): Port device team_slave_1 removed [ 596.302593][ T56] team0 (unregistering): Port device team_slave_0 removed [ 596.339904][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.381151][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.771077][ T56] bond0 (unregistering): Released all slaves [ 596.861734][T15648] validate_nla: 155 callbacks suppressed [ 596.861752][T15648] netlink: 'syz.4.4082': attribute type 29 has an invalid length. [ 596.876264][T15652] netlink: 'syz.0.4083': attribute type 29 has an invalid length. [ 596.893509][T15656] netlink: 'syz.1.4085': attribute type 29 has an invalid length. [ 597.129323][T15672] netlink: 'syz.4.4088': attribute type 29 has an invalid length. [ 597.137466][T15672] netlink: 'syz.4.4088': attribute type 29 has an invalid length. [ 597.147184][T15674] netlink: 'syz.1.4089': attribute type 29 has an invalid length. [ 597.157164][T15675] netlink: 'syz.2.4091': attribute type 29 has an invalid length. [ 597.172255][T15674] netlink: 'syz.1.4089': attribute type 29 has an invalid length. [ 597.173916][T15677] netlink: 'syz.3.4092': attribute type 29 has an invalid length. [ 597.192028][T15675] netlink: 'syz.2.4091': attribute type 29 has an invalid length. [ 598.005533][ T4269] Bluetooth: hci2: Malformed Event: 0x2f [ 598.513366][ T4269] Bluetooth: hci5: Malformed Event: 0x2f [ 598.557742][T15699] batman_adv: batadv0: Adding interface: team0 [ 598.567729][T15699] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.622445][T15699] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 598.656478][T15704] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4101'. [ 598.665831][T15704] device team0 entered promiscuous mode [ 598.671468][T15704] device team_slave_0 entered promiscuous mode [ 598.678063][T15704] device team_slave_1 entered promiscuous mode [ 598.690298][T15704] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.697531][T15704] batman_adv: batadv0: Interface activated: team0 [ 598.705624][T15704] batman_adv: batadv0: Interface deactivated: team0 [ 598.740404][T15704] batman_adv: batadv0: Removing interface: team0 [ 598.748855][T15704] bridge0: port 3(team0) entered blocking state [ 598.755402][T15704] bridge0: port 3(team0) entered disabled state [ 598.764592][T15704] bridge0: port 3(team0) entered blocking state [ 598.771031][T15704] bridge0: port 3(team0) entered forwarding state [ 599.342044][T15747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4119'. [ 600.650804][T15782] FAULT_INJECTION: forcing a failure. [ 600.650804][T15782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.718572][T15782] CPU: 1 PID: 15782 Comm: syz.2.4133 Not tainted 6.1.124-syzkaller #0 [ 600.726790][T15782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 600.736876][T15782] Call Trace: [ 600.740184][T15782] [ 600.743135][T15782] dump_stack_lvl+0x1e3/0x2cb [ 600.747853][T15782] ? nf_tcp_handle_invalid+0x642/0x642 [ 600.753382][T15782] ? panic+0x764/0x764 [ 600.757479][T15782] ? __lock_acquire+0x1f80/0x1f80 [ 600.762545][T15782] should_fail_ex+0x3a6/0x4d0 [ 600.767264][T15782] _copy_from_user+0x2b/0x170 [ 600.771986][T15782] __sys_bpf+0x226/0x6c0 [ 600.776265][T15782] ? __fget_files+0x435/0x4a0 [ 600.781003][T15782] ? bpf_link_show_fdinfo+0x300/0x300 [ 600.786416][T15782] ? print_irqtrace_events+0x210/0x210 [ 600.791910][T15782] ? print_irqtrace_events+0x210/0x210 [ 600.797416][T15782] ? syscall_enter_from_user_mode+0x2e/0x230 [ 600.803422][T15782] ? syscall_enter_from_user_mode+0x2e/0x230 [ 600.809439][T15782] ? lockdep_hardirqs_on+0x94/0x130 [ 600.814722][T15782] __x64_sys_bpf+0x78/0x90 [ 600.819180][T15782] do_syscall_64+0x3b/0xb0 [ 600.823653][T15782] ? clear_bhb_loop+0x45/0xa0 [ 600.828356][T15782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.834290][T15782] RIP: 0033:0x7f1329985d29 [ 600.838735][T15782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.858366][T15782] RSP: 002b:00007f132a72d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.866826][T15782] RAX: ffffffffffffffda RBX: 00007f1329b75fa0 RCX: 00007f1329985d29 [ 600.874831][T15782] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 600.882834][T15782] RBP: 00007f132a72d090 R08: 0000000000000000 R09: 0000000000000000 [ 600.890826][T15782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.898822][T15782] R13: 0000000000000000 R14: 00007f1329b75fa0 R15: 00007fffed279fc8 [ 600.906833][T15782] [ 600.998727][ T4318] device hsr_slave_0 left promiscuous mode [ 601.010174][ T4318] device hsr_slave_1 left promiscuous mode [ 601.046715][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.097136][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.140725][ T4318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.167975][ T4318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.198703][ T4318] device bridge_slave_1 left promiscuous mode [ 601.205825][ T4318] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.255058][ T4318] device bridge_slave_0 left promiscuous mode [ 601.272357][ T4318] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.400715][ T4318] device veth1_macvtap left promiscuous mode [ 601.408643][ T4318] device veth0_macvtap left promiscuous mode [ 601.414814][ T4318] device veth1_vlan left promiscuous mode [ 601.481365][ T4318] device veth0_vlan left promiscuous mode [ 602.382760][T15870] validate_nla: 104 callbacks suppressed [ 602.382779][T15870] netlink: 'syz.2.4150': attribute type 29 has an invalid length. [ 602.415481][ T4269] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 602.985451][ T4318] team0 (unregistering): Port device team_slave_1 removed [ 603.096626][ T4318] team0 (unregistering): Port device team_slave_0 removed [ 603.148963][ T4318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.214273][ T4318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.874882][ T4318] bond0 (unregistering): Released all slaves [ 603.955416][T15870] netlink: 'syz.2.4150': attribute type 29 has an invalid length. [ 604.175463][T15881] netlink: 'syz.4.4141': attribute type 29 has an invalid length. [ 604.207628][T15881] netlink: 'syz.4.4141': attribute type 29 has an invalid length. [ 604.250206][T15886] netlink: 'syz.4.4141': attribute type 29 has an invalid length. [ 604.260679][T15885] FAULT_INJECTION: forcing a failure. [ 604.260679][T15885] name failslab, interval 1, probability 0, space 0, times 0 [ 604.293183][T15885] CPU: 1 PID: 15885 Comm: syz.2.4144 Not tainted 6.1.124-syzkaller #0 [ 604.301390][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 604.311469][T15885] Call Trace: [ 604.314764][T15885] [ 604.317711][T15885] dump_stack_lvl+0x1e3/0x2cb [ 604.322418][T15885] ? nf_tcp_handle_invalid+0x642/0x642 [ 604.327632][T15881] netlink: 'syz.4.4141': attribute type 29 has an invalid length. [ 604.327886][T15885] ? panic+0x764/0x764 [ 604.327924][T15885] ? __might_sleep+0xb0/0xb0 [ 604.327944][T15885] ? __lock_acquire+0x125b/0x1f80 [ 604.327979][T15885] should_fail_ex+0x3a6/0x4d0 [ 604.354147][T15885] should_failslab+0x5/0x20 [ 604.358696][T15885] slab_pre_alloc_hook+0x59/0x300 [ 604.363747][T15885] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 604.369515][T15885] __kmem_cache_alloc_node+0x47/0x260 [ 604.371294][T15888] netlink: 'syz.0.4145': attribute type 29 has an invalid length. [ 604.374905][T15885] ? tomoyo_realpath_from_path+0xcb/0x5d0 [ 604.374950][T15885] __kmalloc+0xa1/0x230 [ 604.392366][T15881] netlink: 'syz.4.4141': attribute type 29 has an invalid length. [ 604.392615][T15885] ? rcu_is_watching+0x11/0xb0 [ 604.405200][T15885] tomoyo_realpath_from_path+0xcb/0x5d0 [ 604.405886][T15888] netlink: 'syz.0.4145': attribute type 29 has an invalid length. [ 604.410757][T15885] tomoyo_path_number_perm+0x21f/0x7f0 [ 604.410798][T15885] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 604.410831][T15885] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 604.427371][T15881] netlink: 'syz.4.4141': attribute type 29 has an invalid length. [ 604.429703][T15885] ? __fget_files+0x28/0x4a0 [ 604.429750][T15885] ? __fget_files+0x28/0x4a0 [ 604.429783][T15885] ? __fget_files+0x435/0x4a0 [ 604.429804][T15885] ? __fget_files+0x28/0x4a0 [ 604.461506][T15885] security_file_ioctl+0x6d/0xa0 [ 604.466477][T15885] __se_sys_ioctl+0x47/0x160 [ 604.471117][T15885] do_syscall_64+0x3b/0xb0 [ 604.475570][T15885] ? clear_bhb_loop+0x45/0xa0 [ 604.480281][T15885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.486217][T15885] RIP: 0033:0x7f1329985d29 [ 604.490650][T15885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.510283][T15885] RSP: 002b:00007f132a72d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.518767][T15885] RAX: ffffffffffffffda RBX: 00007f1329b75fa0 RCX: 00007f1329985d29 [ 604.526774][T15885] RDX: 0000000020000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 604.534780][T15885] RBP: 00007f132a72d090 R08: 0000000000000000 R09: 0000000000000000 [ 604.542780][T15885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.550772][T15885] R13: 0000000000000000 R14: 00007f1329b75fa0 R15: 00007fffed279fc8 [ 604.558785][T15885] [ 604.728091][T15885] ERROR: Out of memory at tomoyo_realpath_from_path. [ 604.962719][T15899] ================================================================== [ 604.970837][T15899] BUG: KASAN: use-after-free in cpu_map_enqueue+0x2dd/0x370 [ 604.978148][T15899] Read of size 4 at addr ffff8881b8f00058 by task syz.3.4160/15899 [ 604.986046][T15899] [ 604.988377][T15899] CPU: 1 PID: 15899 Comm: syz.3.4160 Not tainted 6.1.124-syzkaller #0 [ 604.996541][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 605.006610][T15899] Call Trace: [ 605.009903][T15899] [ 605.012848][T15899] dump_stack_lvl+0x1e3/0x2cb [ 605.017555][T15899] ? nf_tcp_handle_invalid+0x642/0x642 [ 605.023041][T15899] ? panic+0x764/0x764 [ 605.027128][T15899] ? _printk+0xd1/0x111 [ 605.031295][T15899] ? __virt_addr_valid+0x17f/0x530 [ 605.036423][T15899] ? __virt_addr_valid+0x17f/0x530 [ 605.041560][T15899] print_report+0x15f/0x4f0 [ 605.046103][T15899] ? __virt_addr_valid+0x17f/0x530 [ 605.051254][T15899] ? __virt_addr_valid+0x17f/0x530 [ 605.056388][T15899] ? __virt_addr_valid+0x45b/0x530 [ 605.061527][T15899] ? __phys_addr+0xb6/0x170 [ 605.066078][T15899] ? cpu_map_enqueue+0x2dd/0x370 [ 605.071036][T15899] kasan_report+0x136/0x160 [ 605.075556][T15899] ? cpu_map_enqueue+0x2dd/0x370 [ 605.080528][T15899] cpu_map_enqueue+0x2dd/0x370 [ 605.085311][T15899] xdp_do_redirect_frame+0x2f0/0x660 [ 605.090615][T15899] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 605.096023][T15899] ? 0xffffffffa0003b40 [ 605.100188][T15899] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 605.105746][T15899] ? xdp_convert_md_to_buff+0x330/0x330 [ 605.111309][T15899] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 605.117228][T15899] ? 0xffffffffa0003b40 [ 605.121419][T15899] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 605.127692][T15899] ? __might_fault+0xbd/0x110 [ 605.132397][T15899] ? _copy_from_user+0x109/0x170 [ 605.137367][T15899] ? bpf_test_init+0x15a/0x180 [ 605.142154][T15899] ? xdp_convert_md_to_buff+0x5b/0x330 [ 605.147637][T15899] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 605.153059][T15899] ? dev_put+0x80/0x80 [ 605.157153][T15899] ? dev_put+0x80/0x80 [ 605.161260][T15899] bpf_prog_test_run+0x32f/0x3a0 [ 605.166243][T15899] __sys_bpf+0x3eb/0x6c0 [ 605.170522][T15899] ? bpf_link_show_fdinfo+0x300/0x300 [ 605.175940][T15899] ? print_irqtrace_events+0x210/0x210 [ 605.181441][T15899] ? print_irqtrace_events+0x210/0x210 [ 605.186934][T15899] ? syscall_enter_from_user_mode+0x2e/0x230 [ 605.192939][T15899] ? syscall_enter_from_user_mode+0x2e/0x230 [ 605.198964][T15899] ? lockdep_hardirqs_on+0x94/0x130 [ 605.204183][T15899] __x64_sys_bpf+0x78/0x90 [ 605.208620][T15899] do_syscall_64+0x3b/0xb0 [ 605.213058][T15899] ? clear_bhb_loop+0x45/0xa0 [ 605.217734][T15899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.223649][T15899] RIP: 0033:0x7f7996585d29 [ 605.228078][T15899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.247707][T15899] RSP: 002b:00007f7997368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.256138][T15899] RAX: ffffffffffffffda RBX: 00007f7996775fa0 RCX: 00007f7996585d29 [ 605.264112][T15899] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 605.272098][T15899] RBP: 00007f7996601b08 R08: 0000000000000000 R09: 0000000000000000 [ 605.280075][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.288066][T15899] R13: 0000000000000000 R14: 00007f7996775fa0 R15: 00007fff14ae0238 [ 605.296054][T15899] [ 605.299074][T15899] [ 605.301404][T15899] The buggy address belongs to the physical page: [ 605.307831][T15899] page:ffffea0006e3c000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1b8f00 [ 605.318080][T15899] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 605.325303][T15899] raw: 057ff00000000000 ffffea0006e3c008 ffffea0006e3c008 0000000000000000 [ 605.333886][T15899] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 605.342466][T15899] page dumped because: kasan: bad access detected [ 605.348896][T15899] page_owner info is not present (never set?) [ 605.354967][T15899] [ 605.357299][T15899] Memory state around the buggy address: [ 605.362920][T15899] ffff8881b8efff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 605.370990][T15899] ffff8881b8efff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 605.379058][T15899] >ffff8881b8f00000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 605.387145][T15899] ^ [ 605.394074][T15899] ffff8881b8f00080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 605.402139][T15899] ffff8881b8f00100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 605.410207][T15899] ================================================================== [ 605.418333][T15899] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 605.425534][T15899] CPU: 1 PID: 15899 Comm: syz.3.4160 Not tainted 6.1.124-syzkaller #0 [ 605.433698][T15899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 605.442389][T15901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4160'. [ 605.443084][T15901] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4160'. [ 605.445852][T15901] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4160'. [ 605.470440][T15899] Call Trace: [ 605.473733][T15899] [ 605.476688][T15899] dump_stack_lvl+0x1e3/0x2cb [ 605.481389][T15899] ? nf_tcp_handle_invalid+0x642/0x642 [ 605.486860][T15899] ? panic+0x764/0x764 [ 605.490935][T15899] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 605.497110][T15899] ? vscnprintf+0x59/0x80 [ 605.501457][T15899] panic+0x318/0x764 [ 605.505353][T15899] ? check_panic_on_warn+0x1d/0xa0 [ 605.510468][T15899] ? memcpy_page_flushcache+0xfc/0xfc [ 605.515852][T15899] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 605.521752][T15899] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 605.527653][T15899] ? _raw_spin_unlock+0x40/0x40 [ 605.532525][T15899] ? print_report+0x4a3/0x4f0 [ 605.537222][T15899] check_panic_on_warn+0x7e/0xa0 [ 605.542162][T15899] ? cpu_map_enqueue+0x2dd/0x370 [ 605.547106][T15899] end_report+0x66/0x110 [ 605.551350][T15899] kasan_report+0x143/0x160 [ 605.555853][T15899] ? cpu_map_enqueue+0x2dd/0x370 [ 605.560791][T15899] cpu_map_enqueue+0x2dd/0x370 [ 605.565554][T15899] xdp_do_redirect_frame+0x2f0/0x660 [ 605.570839][T15899] bpf_test_run_xdp_live+0xbf4/0x1ea0 [ 605.576219][T15899] ? 0xffffffffa0003b40 [ 605.580372][T15899] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 605.585926][T15899] ? xdp_convert_md_to_buff+0x330/0x330 [ 605.591471][T15899] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 605.597359][T15899] ? 0xffffffffa0003b40 [ 605.601521][T15899] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 605.607768][T15899] ? __might_fault+0xbd/0x110 [ 605.612440][T15899] ? _copy_from_user+0x109/0x170 [ 605.617378][T15899] ? bpf_test_init+0x15a/0x180 [ 605.622137][T15899] ? xdp_convert_md_to_buff+0x5b/0x330 [ 605.627593][T15899] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 605.632967][T15899] ? dev_put+0x80/0x80 [ 605.637034][T15899] ? dev_put+0x80/0x80 [ 605.641113][T15899] bpf_prog_test_run+0x32f/0x3a0 [ 605.646055][T15899] __sys_bpf+0x3eb/0x6c0 [ 605.650301][T15899] ? bpf_link_show_fdinfo+0x300/0x300 [ 605.655678][T15899] ? print_irqtrace_events+0x210/0x210 [ 605.661139][T15899] ? print_irqtrace_events+0x210/0x210 [ 605.666614][T15899] ? syscall_enter_from_user_mode+0x2e/0x230 [ 605.672592][T15899] ? syscall_enter_from_user_mode+0x2e/0x230 [ 605.678566][T15899] ? lockdep_hardirqs_on+0x94/0x130 [ 605.683761][T15899] __x64_sys_bpf+0x78/0x90 [ 605.688199][T15899] do_syscall_64+0x3b/0xb0 [ 605.692614][T15899] ? clear_bhb_loop+0x45/0xa0 [ 605.697283][T15899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.703179][T15899] RIP: 0033:0x7f7996585d29 [ 605.707585][T15899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.727185][T15899] RSP: 002b:00007f7997368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 605.735600][T15899] RAX: ffffffffffffffda RBX: 00007f7996775fa0 RCX: 00007f7996585d29 [ 605.743570][T15899] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 605.751536][T15899] RBP: 00007f7996601b08 R08: 0000000000000000 R09: 0000000000000000 [ 605.759507][T15899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.767472][T15899] R13: 0000000000000000 R14: 00007f7996775fa0 R15: 00007fff14ae0238 [ 605.775446][T15899] [ 605.778796][T15899] Kernel Offset: disabled [ 605.783122][T15899] Rebooting in 86400 seconds..