last executing test programs: 1m4.483633025s ago: executing program 4 (id=908): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0bdd7000000", 0x5b}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) socket$kcm(0xa, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002cc0)={&(0x7f0000000b40), 0x0, 0x0, 0x0, 0x1, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 52.168805762s ago: executing program 4 (id=908): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0bdd7000000", 0x5b}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) socket$kcm(0xa, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002cc0)={&(0x7f0000000b40), 0x0, 0x0, 0x0, 0x1, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 39.613640808s ago: executing program 4 (id=908): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0bdd7000000", 0x5b}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) socket$kcm(0xa, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002cc0)={&(0x7f0000000b40), 0x0, 0x0, 0x0, 0x1, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 26.904791455s ago: executing program 4 (id=908): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0bdd7000000", 0x5b}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) socket$kcm(0xa, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002cc0)={&(0x7f0000000b40), 0x0, 0x0, 0x0, 0x1, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 15.784191896s ago: executing program 4 (id=908): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0bdd7000000", 0x5b}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) socket$kcm(0xa, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002cc0)={&(0x7f0000000b40), 0x0, 0x0, 0x0, 0x1, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 4.565301651s ago: executing program 4 (id=908): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0bdd7000000", 0x5b}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) socket$kcm(0xa, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002cc0)={&(0x7f0000000b40), 0x0, 0x0, 0x0, 0x1, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.526383869s ago: executing program 0 (id=2438): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000003200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000100000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x12) 2.514384534s ago: executing program 3 (id=2441): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000300)=@hci={0x1f, 0x8, 0xf}, 0x80, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x1000000, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) 2.295331496s ago: executing program 3 (id=2442): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@initr0]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000019c0)="9257ef7814f0894f2b296cfd717bdb15b985ad41b78d6f84016e7f0d72ce3e5cca0ac618532d2f36345c8028e6045e736d834605386dd44d8d42b9f1683043a504fc72ceea3c88812f0df2aacb6c85f323584dc65af3959b10e904746449a87d517805de5d14c8f1bd3c1f939c73047c2d85cf0f324903ee6a6291e705e8bced91760b6be097ed260f556538da30373c472dee51fdcaf89589034c26f29d9ee05584b8dfa2dec4369ca751d1c11b96ba56d2e3cee4f874fbd216e8dba45cf10298be39671e9c01", 0xc7}], 0x1}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90724fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.22816241s ago: executing program 0 (id=2444): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd00, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (fail_nth: 5) 1.426596138s ago: executing program 3 (id=2446): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x110104, 0x36, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000200c7ef6c590738cdc3bf4f9192434f9e83b2c6c9f501772836cdc03cb137ba8800000000002902000000006100bd51ab8e95b8d759465b7c8ef5317727897bb0e47991475c5086faf5b797735c6ed4a87d4148455703e284c909fa9197e4fb8a431c77a368ffce429ea5866b57c252b65ff19282b1fe80452136caa6002397c7936fcdd68fc67de6d6360f85613162ae88b518a3b2c63697387cb0435684a27b528eab8991764e6f6f5e1aecd98446561df09fd3"], 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000005bd14bbf574d914a1b000000080000009500"/41], 0x0, 0x5, 0xaa, &(0x7f0000000580)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4c80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000003c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000140)=""/22, 0x16}], 0x4, &(0x7f0000000b00)=""/223, 0xdf}, 0x140) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x3, &(0x7f0000000180)=""/149, 0x0, 0x2c, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x2c, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022000b48f1f403c5c0de7af90124fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000d80)="bc14", 0x2}], 0x1, 0x0, 0x0, 0x4000010}, 0x20004011) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000f0000000000000000001600"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000e000000720a4d0a0000000066000000ffffff80950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 1.194617246s ago: executing program 1 (id=2447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="ffff1fc42f5a0092733b80c6907c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.136072706s ago: executing program 0 (id=2448): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x65, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f00000003c0), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), 0x20000000}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) 1.080675824s ago: executing program 2 (id=2449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.005951219s ago: executing program 1 (id=2450): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x8}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2, 0x0, 0x0, 0x301}, {}, {0x85, 0x0, 0x0, 0x31}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 990.811949ms ago: executing program 2 (id=2451): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0x8, 0x1, 0x0, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x6b, &(0x7f0000000340)=""/107, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r0, r0, 0xffffffffffffffff, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000c80)=[{0x0, 0x2, 0x7, 0x3}, {0x0, 0x1, 0x3, 0xb}, {0x5, 0x4, 0xb, 0x5}], 0x10, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000540)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 985.959583ms ago: executing program 0 (id=2452): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext, 0x2140, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x2000000, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1, @ANYRES8=r0, @ANYRES8=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f00000001c0)="d6991de097b5c343995b2bfa08c5ce7ba40377454bdf203e7a27ae16738879579813a0acca628c19a46e85a8e10c42fc9d0151b2ca", &(0x7f0000001200)=""/4096, &(0x7f00000007c0)="47cd236194ff7a91aa554b63c1833a4d60c5b66620c71b479ba056095932200edabefeca1eb2e50f32378f14a5432502d9a3b4879a02ae1a17d6c8e5f55603662e76241810813773c0cb4ea4b8906d80ca0ef8a3055d83a763c5034e90927fb49e3c8b6711226a8bf855baf2da3583a8169374be1f4317d66ab61d3355d71ff1518e", &(0x7f0000000880)="4482d8056132dc4398427457756482207322845d4d3d80aced5e6c1a487c35b04f2f7f204e5c7983346cca1db5bad3415db85db76ef222bcfe887e5a9844b4a029f47e64846d1fc008161be941365b8417621148013ff41e9c43defa266b616f83b2981510a58b9473648e89c97a245b0b992ad0d7bed6a50aab971d1d926fa7711d38772dda4f8f96be06eaeba6fe6284972e98f1687be0d5b6f5568f7f42875942213d49f66f825a3d946d49c69145313079e78eab0398a3a9c4c3b6484bc629bf36bbde1ae0a936dd069ee8c26f83f0025b1ca99144557a2060e8334e5396c25d989d727142248aac259dc12386", 0x80, 0xffffffffffffffff, 0x4}, 0x38) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1600000000000000ff0f0000050000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r8, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000580)}}, 0x2) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000000700)=r10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) close(r11) (async) ioctl$SIOCSIFHWADDR(r11, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='A\b\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="210000e00200c261581c040000ffcf5c4073c4d3c719a1157af70ffb982e48e3ae", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0310000000923083dd000009000000000000000000000000000000005b66fe628ea654bbce5a3f665e6522"], 0x50) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) (async) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 796.656054ms ago: executing program 1 (id=2453): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001000f0ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002340)={r1, 0xe0, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x1000000000000002, 0x0) 663.032251ms ago: executing program 1 (id=2454): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000003200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000100000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x12) 548.7444ms ago: executing program 1 (id=2455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 432.123801ms ago: executing program 1 (id=2456): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x80000001, 0x804, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000007e2d140300000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x86c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc4, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xb}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000002711222000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f0000000180), 0x43) 431.001174ms ago: executing program 3 (id=2457): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000003200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000100000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x12) 326.12026ms ago: executing program 3 (id=2458): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@jmp={0x5, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x1, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0xffffffff, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 273.376838ms ago: executing program 2 (id=2459): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = syz_clone(0x48040000, &(0x7f0000001300)="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", 0x1000, &(0x7f0000001040), &(0x7f0000001140), &(0x7f0000002300)="0507a93c3e8e5a8d28b6b59472eacdd61214cc746b301d20fdabddf4ef9f063c0cd8bef2b2399689b5a30fdc75a25251f3f726a988e3f8e3664593cad030aa0efb92a63593dd71b1fb8def649d6ebec01bab8634ff27d84d16ea8b94f96b9113937618766f6d42feebcbc1711a9a81ed2bc4bcc71b1f7f07fb92ef15e998d233ea0b0f4163957cc170b06ece6c5fa3be251465148a014fbe95ae4451e28266a95e4d3262e0c31a2c3962361dff90f98336bf8167a3989a253d92f34f51e8120a732936bfe487adf3dd10325404a90852cf69cdb0ae22009d9f061827406ca94d") r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002400), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002480)={r1, r2, 0x0, 0x4, &(0x7f0000002440)='%-{\x00'}, 0x30) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x24, 0x29, 0x37}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x10}}], 0x50}, 0x0) 160.571186ms ago: executing program 0 (id=2460): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="ffff1fc42f5a0092733b80c6907c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 134.668572ms ago: executing program 2 (id=2461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x10, 0x0, &(0x7f0000000580)="ffff1fc42f5a0092733b80c6907c26f0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 87.958999ms ago: executing program 2 (id=2462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 63.924382ms ago: executing program 3 (id=2463): r0 = syz_clone(0x24280100, &(0x7f0000000440)="f8", 0x1, &(0x7f00000001c0), 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x4}, 0x0, 0x0, 0x400, 0x0, 0x6, 0xea2, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4000}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = socket$kcm(0x18, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x60000e4) perf_event_open(&(0x7f0000000380)={0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x1}, r0, 0x200000, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x4, 0x80, 0x1, 0xef, 0x2, 0x3, 0x0, 0xfe, 0x20000, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffff7f, 0x0, @perf_config_ext={0x40, 0x2}, 0x100000, 0x800, 0x8, 0x1, 0x8, 0xa0, 0x5, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x5, 0xe, 0x3, 0x0, 0x0, 0x0, 0x8, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000100), 0x3}, 0x3, 0xf, 0x4, 0x8, 0x2, 0x7, 0x2, 0x0, 0x3027, 0x0, 0x2}, r0, 0x8, r6, 0xb) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000600000000000000fc730000090000000002000095000000cbcf440183ec47cb7c884ede5ac4cf10861bec8111e8241f9886d0a4c461727c32e1994179c545dcca70087a605663c9d3a7d9af1ed7986ee6709211223d367a50bd2deba0531ec8e8d6d7f13dc571d6d8dcc8c81452e38f93c8251f6b3be089"], &(0x7f0000000880)='GPL\x00', 0x1f, 0x93, &(0x7f0000000cc0)=""/147, 0x0, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000fd01e5450900000081000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="09000000050000"], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$kcm(0x2b, 0x1, 0x0) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$sock(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)="1c661377715e831430aff310b259f58dc8140e2c08920e30b3484493d9e53c91eb9b5d04a6a00b15a5", 0x29}], 0x1}, 0x400c0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r11, &(0x7f0000007940)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x3}, @timestamp={0x7, 0x4}]}}}], 0x18}, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 733.923µs ago: executing program 0 (id=2464): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x200048cc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x40092cc) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000012c0)="a4", 0x1}], 0x1}, 0x0) (fail_nth: 6) 0s ago: executing program 2 (id=2465): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x114304, 0x33, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x18, 0x0, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2, 0x200000000000006, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x2b, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000400), &(0x7f0000000580)='%-5lx \x00'}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7ffd, 0xaea}, 0x110024, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x29}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000f00)='\x00') r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) kernel console output (not intermixed with test programs): has an invalid length. [ 285.912279][T10878] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 285.921467][T10889] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1767'. [ 285.936372][T10889] veth0_vlan: entered allmulticast mode [ 285.970802][T10889] bridge0: port 4(veth0_vlan) entered blocking state [ 285.983271][T10889] bridge0: port 4(veth0_vlan) entered disabled state [ 286.022888][T10889] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 286.117578][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.136041][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.168236][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.209706][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.249792][T10695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.289510][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.356395][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.411650][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.451377][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.485321][T10695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.523008][T10695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.534186][T10695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.544776][T10695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.553626][T10695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.563383][T10695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.572161][T10695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.831239][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.860289][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.922928][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.942267][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.987554][T10918] netlink: 'syz.1.1775': attribute type 33 has an invalid length. [ 286.995765][T10918] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1775'. [ 287.249916][T10931] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 287.286857][T10927] netlink: 'syz.2.1778': attribute type 16 has an invalid length. [ 287.337294][T10927] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1778'. [ 287.395497][T10927] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 287.456101][T10927] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 287.766380][ T9774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.912561][ T9774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.150337][ T9774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.273335][ T9774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.508173][ T9774] bridge_slave_1: left allmulticast mode [ 288.513901][ T9774] bridge_slave_1: left promiscuous mode [ 288.526347][ T9774] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.535460][ T9774] bridge_slave_0: left allmulticast mode [ 288.546106][ T9774] bridge_slave_0: left promiscuous mode [ 288.552414][ T9774] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.289112][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.317083][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.327764][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.341053][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.360541][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 289.372127][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.868791][ T9774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.881289][ T9774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.902457][ T9774] bond0 (unregistering): Released all slaves [ 289.957206][T10971] netlink: 'syz.1.1791': attribute type 33 has an invalid length. [ 289.977830][T10971] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1791'. [ 290.885173][ T9774] hsr_slave_0: left promiscuous mode [ 290.921532][ T9774] hsr_slave_1: left promiscuous mode [ 290.939638][ T9774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.989036][ T9774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.027046][ T9774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.055477][ T9774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.119117][ T9774] veth1_macvtap: left promiscuous mode [ 291.124974][ T9774] veth0_macvtap: left promiscuous mode [ 291.135111][ T9774] veth1_vlan: left promiscuous mode [ 291.144509][ T9774] veth0_vlan: left promiscuous mode [ 291.443041][ T5844] Bluetooth: hci2: command tx timeout [ 291.754094][ T9774] team0 (unregistering): Port device team_slave_1 removed [ 291.798843][ T9774] team0 (unregistering): Port device team_slave_0 removed [ 292.233992][T11018] netlink: 'syz.3.1807': attribute type 3 has an invalid length. [ 292.246145][T11018] netlink: 196520 bytes leftover after parsing attributes in process `syz.3.1807'. [ 292.258781][T10955] chnl_net:caif_netlink_parms(): no params data found [ 292.466613][T11030] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1810'. [ 292.491413][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.498633][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.505905][T10955] bridge_slave_0: entered allmulticast mode [ 292.514007][T10955] bridge_slave_0: entered promiscuous mode [ 292.522771][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.529963][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.537506][T10955] bridge_slave_1: entered allmulticast mode [ 292.545000][T10955] bridge_slave_1: entered promiscuous mode [ 292.619915][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.670241][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.813253][T10955] team0: Port device team_slave_0 added [ 292.872949][T10955] team0: Port device team_slave_1 added [ 292.939738][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.951432][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.984714][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.006505][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.013995][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.040594][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.084084][T11058] netlink: 199356 bytes leftover after parsing attributes in process `syz.2.1820'. [ 293.120728][T10955] hsr_slave_0: entered promiscuous mode [ 293.137257][T10955] hsr_slave_1: entered promiscuous mode [ 293.156133][T10955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.164327][T10955] Cannot create hsr debugfs directory [ 293.409491][ T5844] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 293.516092][ T5844] Bluetooth: hci2: command tx timeout [ 293.673879][T11081] delete_channel: no stack [ 293.796826][T11088] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1831'. [ 293.825340][T11088] netlink: 'syz.3.1831': attribute type 29 has an invalid length. [ 293.842480][T11088] netlink: 'syz.3.1831': attribute type 3 has an invalid length. [ 293.851837][T11088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1831'. [ 294.063907][T11100] netlink: 'syz.3.1835': attribute type 29 has an invalid length. [ 294.099080][T11100] netlink: 'syz.3.1835': attribute type 29 has an invalid length. [ 294.151766][T10955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 294.189099][T10955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 294.226712][T10955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 294.279855][T10955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.520523][T10955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.551422][T10955] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.565403][T11115] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1841'. [ 294.590750][T11118] delete_channel: no stack [ 294.598747][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.606041][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.630778][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.637996][ T4942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.018428][T11132] netlink: 'syz.0.1847': attribute type 9 has an invalid length. [ 295.042511][T11132] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1847'. [ 295.181633][T10955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.388110][T11136] netlink: 'syz.0.1847': attribute type 9 has an invalid length. [ 295.418049][T11136] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1847'. [ 295.510886][T11157] FAULT_INJECTION: forcing a failure. [ 295.510886][T11157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.536434][T11157] CPU: 1 UID: 0 PID: 11157 Comm: syz.3.1852 Not tainted 6.12.0-syzkaller #0 [ 295.545176][T11157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 295.555268][T11157] Call Trace: [ 295.558578][T11157] [ 295.561538][T11157] dump_stack_lvl+0x241/0x360 [ 295.566260][T11157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.571499][T11157] ? __pfx__printk+0x10/0x10 [ 295.576128][T11157] ? __pfx_lock_release+0x10/0x10 [ 295.581196][T11157] should_fail_ex+0x3b0/0x4e0 [ 295.585911][T11157] _copy_from_iter+0x21f/0x1e70 [ 295.590793][T11157] ? __virt_addr_valid+0x183/0x530 [ 295.595933][T11157] ? __pfx_lock_release+0x10/0x10 [ 295.597382][ T5844] Bluetooth: hci2: command tx timeout [ 295.600979][T11157] ? __pfx__copy_from_iter+0x10/0x10 [ 295.611672][T11157] ? __virt_addr_valid+0x183/0x530 [ 295.616817][T11157] ? __virt_addr_valid+0x183/0x530 [ 295.621965][T11157] ? __virt_addr_valid+0x45f/0x530 [ 295.627112][T11157] ? __check_object_size+0x48e/0x900 [ 295.632437][T11157] tipc_msg_build+0x87c/0x1070 [ 295.637252][T11157] ? __pfx_tipc_msg_build+0x10/0x10 [ 295.642493][T11157] ? tipc_group_bc_cong+0x1dc/0x290 [ 295.647720][T11157] tipc_send_group_bcast+0x889/0xbd0 [ 295.653033][T11157] ? process_measurement+0x1aea/0x1fb0 [ 295.658502][T11157] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 295.664322][T11157] ? __pfx_woken_wake_function+0x10/0x10 [ 295.669961][T11157] ? __pfx_validate_chain+0x10/0x10 [ 295.675167][T11157] ? __lock_acquire+0x1384/0x2050 [ 295.680233][T11157] __tipc_sendmsg+0x363/0x35f0 [ 295.685006][T11157] ? validate_chain+0x11e/0x5920 [ 295.689977][T11157] ? __pfx___tipc_sendmsg+0x10/0x10 [ 295.695205][T11157] ? __pfx_validate_chain+0x10/0x10 [ 295.700423][T11157] ? mark_lock+0x9a/0x360 [ 295.704790][T11157] ? __lock_acquire+0x1384/0x2050 [ 295.709861][T11157] ? mark_lock+0x9a/0x360 [ 295.714208][T11157] ? __lock_acquire+0x1384/0x2050 [ 295.719348][T11157] ? mark_lock+0x9a/0x360 [ 295.723684][T11157] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.729677][T11157] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.736030][T11157] ? __local_bh_enable_ip+0x168/0x200 [ 295.741411][T11157] ? tipc_sendmsg+0x47/0x70 [ 295.745924][T11157] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.751649][T11157] ? do_raw_spin_unlock+0x13c/0x8b0 [ 295.756855][T11157] ? __pfx_tipc_sendmsg+0x10/0x10 [ 295.761879][T11157] tipc_sendmsg+0x55/0x70 [ 295.766230][T11157] __sock_sendmsg+0x221/0x270 [ 295.770913][T11157] sock_write_iter+0x2d7/0x3f0 [ 295.775765][T11157] ? __pfx_sock_write_iter+0x10/0x10 [ 295.781352][T11157] ? bpf_lsm_file_permission+0x9/0x10 [ 295.786740][T11157] ? security_file_permission+0x74/0x280 [ 295.792403][T11157] vfs_write+0xaeb/0xd30 [ 295.796665][T11157] ? __pfx_sock_write_iter+0x10/0x10 [ 295.802009][T11157] ? __pfx_vfs_write+0x10/0x10 [ 295.806889][T11157] ? fdget_pos+0x19a/0x320 [ 295.811336][T11157] ksys_write+0x183/0x2b0 [ 295.815754][T11157] ? __pfx_ksys_write+0x10/0x10 [ 295.820606][T11157] ? do_syscall_64+0x100/0x230 [ 295.825380][T11157] ? do_syscall_64+0xb6/0x230 [ 295.830069][T11157] do_syscall_64+0xf3/0x230 [ 295.834585][T11157] ? clear_bhb_loop+0x35/0x90 [ 295.839270][T11157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.845169][T11157] RIP: 0033:0x7f500c17e759 [ 295.849671][T11157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.869283][T11157] RSP: 002b:00007f500ce8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.877699][T11157] RAX: ffffffffffffffda RBX: 00007f500c335f80 RCX: 00007f500c17e759 [ 295.885706][T11157] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000003 [ 295.894207][T11157] RBP: 00007f500ce8f090 R08: 0000000000000000 R09: 0000000000000000 [ 295.902181][T11157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.910155][T11157] R13: 0000000000000000 R14: 00007f500c335f80 R15: 00007ffd0548da98 [ 295.918143][T11157] [ 296.111887][T10955] veth0_vlan: entered promiscuous mode [ 296.164904][T10955] veth1_vlan: entered promiscuous mode [ 296.235642][T10955] veth0_macvtap: entered promiscuous mode [ 296.258121][T10955] veth1_macvtap: entered promiscuous mode [ 296.270954][T11167] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1856'. [ 296.279087][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.291629][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.307677][T11167] openvswitch: netlink: Key type 29 is not supported [ 296.324950][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.343520][T11167] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 296.357562][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.542921][T10955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.589050][T11167] netlink: 103 bytes leftover after parsing attributes in process `syz.0.1856'. [ 296.655631][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.717340][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.766506][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.818353][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.862384][T10955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.897297][T10955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.955786][T10955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.025414][T10955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.072933][T10955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.128592][T10955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.179926][T10955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.328054][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.373832][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.534115][T11195] netlink: 'syz.2.1865': attribute type 10 has an invalid length. [ 297.610828][T11195] dummy0: entered promiscuous mode [ 297.623271][T11195] dummy0: entered allmulticast mode [ 297.632978][T11195] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 297.679560][ T5844] Bluetooth: hci2: command tx timeout [ 297.692076][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.703079][T11206] FAULT_INJECTION: forcing a failure. [ 297.703079][T11206] name failslab, interval 1, probability 0, space 0, times 0 [ 297.727406][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.751371][T11206] CPU: 1 UID: 0 PID: 11206 Comm: syz.0.1868 Not tainted 6.12.0-syzkaller #0 [ 297.760112][T11206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 297.770199][T11206] Call Trace: [ 297.773502][T11206] [ 297.776461][T11206] dump_stack_lvl+0x241/0x360 [ 297.781178][T11206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.786411][T11206] ? __pfx__printk+0x10/0x10 [ 297.791052][T11206] should_fail_ex+0x3b0/0x4e0 [ 297.795765][T11206] should_failslab+0xac/0x100 [ 297.800481][T11206] ? sctp_add_bind_addr+0x89/0x3a0 [ 297.805626][T11206] __kmalloc_cache_noprof+0x6c/0x2c0 [ 297.810954][T11206] sctp_add_bind_addr+0x89/0x3a0 [ 297.815934][T11206] sctp_copy_local_addr_list+0x311/0x500 [ 297.821609][T11206] ? sctp_copy_local_addr_list+0xab/0x500 [ 297.827400][T11206] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 297.833613][T11206] ? sctp_v4_is_any+0x35/0x60 [ 297.838435][T11206] sctp_bind_addr_copy+0xad/0x3b0 [ 297.843502][T11206] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 297.849886][T11206] sctp_connect_new_asoc+0x2f3/0x6c0 [ 297.855212][T11206] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 297.861050][T11206] ? sctp_sendmsg+0xbb9/0x3520 [ 297.865855][T11206] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 297.871702][T11206] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 297.877282][T11206] sctp_sendmsg+0x219a/0x3520 [ 297.881976][T11206] ? aa_sk_perm+0x96d/0xab0 [ 297.886480][T11206] ? __pfx_sctp_sendmsg+0x10/0x10 [ 297.891509][T11206] ? __pfx_aa_sk_perm+0x10/0x10 [ 297.896366][T11206] ? inet_sendmsg+0x330/0x390 [ 297.901063][T11206] __sock_sendmsg+0x1a6/0x270 [ 297.905735][T11206] ____sys_sendmsg+0x52a/0x7e0 [ 297.910506][T11206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.915798][T11206] __sys_sendmsg+0x292/0x380 [ 297.920411][T11206] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.925520][T11206] ? trace_call_bpf+0x613/0x8a0 [ 297.930394][T11206] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 297.936638][T11206] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 297.942875][T11206] ? do_syscall_64+0xb6/0x230 [ 297.947559][T11206] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.953886][T11206] ? do_syscall_64+0x100/0x230 [ 297.958651][T11206] ? do_syscall_64+0xb6/0x230 [ 297.963328][T11206] do_syscall_64+0xf3/0x230 [ 297.967831][T11206] ? clear_bhb_loop+0x35/0x90 [ 297.972516][T11206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.978498][T11206] RIP: 0033:0x7f4f9a37e759 [ 297.982909][T11206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.002539][T11206] RSP: 002b:00007f4f9b229038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.010977][T11206] RAX: ffffffffffffffda RBX: 00007f4f9a535f80 RCX: 00007f4f9a37e759 [ 298.018962][T11206] RDX: 00000000000001f4 RSI: 0000000020001680 RDI: 0000000000000003 [ 298.026932][T11206] RBP: 00007f4f9b229090 R08: 0000000000000000 R09: 0000000000000000 [ 298.034921][T11206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.042898][T11206] R13: 0000000000000000 R14: 00007f4f9a535f80 R15: 00007ffe455da308 [ 298.050892][T11206] [ 298.571683][T11221] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1875'. [ 298.789183][ T5844] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 298.815423][T11232] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1878'. [ 299.612649][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.670936][T11249] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.731398][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.823231][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.905012][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.992516][ T52] bridge_slave_1: left allmulticast mode [ 299.999434][ T52] bridge_slave_1: left promiscuous mode [ 300.005146][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.014962][ T52] bridge_slave_0: left allmulticast mode [ 300.021050][ T52] bridge_slave_0: left promiscuous mode [ 300.027000][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.324287][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.340468][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.350883][ T52] bond0 (unregistering): Released all slaves [ 300.591415][ T52] hsr_slave_0: left promiscuous mode [ 300.597486][ T52] hsr_slave_1: left promiscuous mode [ 300.603470][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.611160][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.619112][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.626682][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.643339][ T52] veth1_macvtap: left promiscuous mode [ 300.649294][ T52] veth0_macvtap: left promiscuous mode [ 300.654838][ T52] veth1_vlan: left promiscuous mode [ 300.660212][ T52] veth0_vlan: left promiscuous mode [ 301.259158][T11271] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1887'. [ 301.339276][ T5844] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 301.498080][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.567168][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.576872][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.593036][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.623660][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 301.631540][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.745589][ T52] team0 (unregistering): Port device team_slave_1 removed [ 301.790411][ T52] team0 (unregistering): Port device team_slave_0 removed [ 302.174721][T11268] netlink: 'syz.3.1887': attribute type 10 has an invalid length. [ 302.195075][T11268] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 302.250356][ T11] wlan1: Trigger new scan to find an IBSS to join [ 302.494722][T11289] netlink: 'syz.3.1897': attribute type 21 has an invalid length. [ 302.517719][T11289] netlink: 'syz.3.1897': attribute type 21 has an invalid length. [ 302.631217][ T5844] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 302.677730][T11274] chnl_net:caif_netlink_parms(): no params data found [ 302.840171][ T5844] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 302.889387][T11274] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.903787][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.912494][T11274] bridge_slave_0: entered allmulticast mode [ 302.919890][T11274] bridge_slave_0: entered promiscuous mode [ 302.928211][T11274] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.935523][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.944043][T11274] bridge_slave_1: entered allmulticast mode [ 302.951820][T11274] bridge_slave_1: entered promiscuous mode [ 303.021692][T11274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.047846][T11274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.160301][T11274] team0: Port device team_slave_0 added [ 303.181145][T11274] team0: Port device team_slave_1 added [ 303.378950][T11274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.420517][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.565288][T11274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.611053][T11347] netlink: 'syz.3.1916': attribute type 10 has an invalid length. [ 303.630487][T11347] bridge0: left allmulticast mode [ 303.644883][T11347] team0: Device bridge0 is already an upper device of the team interface [ 303.664992][T11274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.693941][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.733078][ T5844] Bluetooth: hci2: command tx timeout [ 303.807570][T11274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.023316][T11274] hsr_slave_0: entered promiscuous mode [ 304.035462][T11274] hsr_slave_1: entered promiscuous mode [ 304.050265][T11274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.060226][T11274] Cannot create hsr debugfs directory [ 304.481360][T11385] FAULT_INJECTION: forcing a failure. [ 304.481360][T11385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.495751][T11385] CPU: 0 UID: 0 PID: 11385 Comm: syz.0.1934 Not tainted 6.12.0-syzkaller #0 [ 304.505010][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 304.515108][T11385] Call Trace: [ 304.518411][T11385] [ 304.521362][T11385] dump_stack_lvl+0x241/0x360 [ 304.526084][T11385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.531321][T11385] ? __pfx__printk+0x10/0x10 [ 304.535937][T11385] ? __pfx_lock_release+0x10/0x10 [ 304.540986][T11385] should_fail_ex+0x3b0/0x4e0 [ 304.545682][T11385] _copy_from_user+0x2f/0xc0 [ 304.550287][T11385] generic_map_update_batch+0x567/0x900 [ 304.555851][T11385] ? __pfx_generic_map_update_batch+0x10/0x10 [ 304.561937][T11385] ? __fget_files+0x29/0x470 [ 304.566551][T11385] ? __pfx_generic_map_update_batch+0x10/0x10 [ 304.572645][T11385] bpf_map_do_batch+0x39a/0x660 [ 304.577515][T11385] __sys_bpf+0x377/0x810 [ 304.581763][T11385] ? __pfx___sys_bpf+0x10/0x10 [ 304.586623][T11385] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 304.592785][T11385] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 304.599122][T11385] ? do_syscall_64+0x100/0x230 [ 304.603889][T11385] __x64_sys_bpf+0x7c/0x90 [ 304.608306][T11385] do_syscall_64+0xf3/0x230 [ 304.612809][T11385] ? clear_bhb_loop+0x35/0x90 [ 304.617490][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.623380][T11385] RIP: 0033:0x7f4f9a37e759 [ 304.627794][T11385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.647410][T11385] RSP: 002b:00007f4f9b229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.655828][T11385] RAX: ffffffffffffffda RBX: 00007f4f9a535f80 RCX: 00007f4f9a37e759 [ 304.663797][T11385] RDX: 0000000000000038 RSI: 0000000020000400 RDI: 000000000000001a [ 304.671773][T11385] RBP: 00007f4f9b229090 R08: 0000000000000000 R09: 0000000000000000 [ 304.679740][T11385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.687706][T11385] R13: 0000000000000000 R14: 00007f4f9a535f80 R15: 00007ffe455da308 [ 304.695683][T11385] [ 304.871411][T11392] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1936'. [ 304.893007][T11399] FAULT_INJECTION: forcing a failure. [ 304.893007][T11399] name failslab, interval 1, probability 0, space 0, times 0 [ 304.898584][T11397] netlink: 'syz.0.1937': attribute type 33 has an invalid length. [ 304.920045][T11397] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1937'. [ 304.920150][T11399] CPU: 1 UID: 0 PID: 11399 Comm: syz.1.1939 Not tainted 6.12.0-syzkaller #0 [ 304.937846][T11399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 304.947958][T11399] Call Trace: [ 304.951270][T11399] [ 304.954224][T11399] dump_stack_lvl+0x241/0x360 [ 304.958949][T11399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.964191][T11399] ? __pfx__printk+0x10/0x10 [ 304.968829][T11399] should_fail_ex+0x3b0/0x4e0 [ 304.973549][T11399] should_failslab+0xac/0x100 [ 304.978253][T11399] ? sctp_add_bind_addr+0x89/0x3a0 [ 304.983396][T11399] __kmalloc_cache_noprof+0x6c/0x2c0 [ 304.988737][T11399] sctp_add_bind_addr+0x89/0x3a0 [ 304.993806][T11399] sctp_copy_local_addr_list+0x311/0x500 [ 304.999456][T11399] ? sctp_copy_local_addr_list+0xab/0x500 [ 305.005180][T11399] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 305.011458][T11399] ? sctp_v4_is_any+0x35/0x60 [ 305.016152][T11399] sctp_bind_addr_copy+0xad/0x3b0 [ 305.021353][T11399] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 305.027685][T11399] sctp_connect_new_asoc+0x2f3/0x6c0 [ 305.032978][T11399] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 305.038786][T11399] ? sctp_sendmsg+0xbb9/0x3520 [ 305.043556][T11399] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 305.049383][T11399] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 305.054965][T11399] sctp_sendmsg+0x219a/0x3520 [ 305.059852][T11399] ? aa_sk_perm+0x96d/0xab0 [ 305.064370][T11399] ? __pfx_sctp_sendmsg+0x10/0x10 [ 305.069531][T11399] ? __pfx_aa_sk_perm+0x10/0x10 [ 305.074399][T11399] ? inet_sendmsg+0x330/0x390 [ 305.079083][T11399] __sock_sendmsg+0x1a6/0x270 [ 305.083766][T11399] ____sys_sendmsg+0x52a/0x7e0 [ 305.088546][T11399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.093840][T11399] __sys_sendmsg+0x292/0x380 [ 305.098527][T11399] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.103653][T11399] ? __hrtimer_run_queues+0xcdc/0xd50 [ 305.109220][T11399] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 305.115405][T11399] ? do_syscall_64+0xb6/0x230 [ 305.120125][T11399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.126476][T11399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.132818][T11399] ? __irq_exit_rcu+0x100/0x1c0 [ 305.137724][T11399] ? do_syscall_64+0xb6/0x230 [ 305.142503][T11399] do_syscall_64+0xf3/0x230 [ 305.147028][T11399] ? clear_bhb_loop+0x35/0x90 [ 305.151709][T11399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.157598][T11399] RIP: 0033:0x7f7920b7e759 [ 305.162011][T11399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.181619][T11399] RSP: 002b:00007f7921901038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.190058][T11399] RAX: ffffffffffffffda RBX: 00007f7920d35f80 RCX: 00007f7920b7e759 [ 305.198025][T11399] RDX: 00000000000000e0 RSI: 00000000200006c0 RDI: 0000000000000004 [ 305.205998][T11399] RBP: 00007f7921901090 R08: 0000000000000000 R09: 0000000000000000 [ 305.213963][T11399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.221927][T11399] R13: 0000000000000000 R14: 00007f7920d35f80 R15: 00007ffc9a87b3a8 [ 305.229912][T11399] [ 305.236130][T11400] netlink: 'syz.3.1938': attribute type 33 has an invalid length. [ 305.246891][T11400] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1938'. [ 305.276934][ T52] wlan1: Trigger new scan to find an IBSS to join [ 305.394081][T11406] netlink: 'syz.1.1941': attribute type 3 has an invalid length. [ 305.404622][T11274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.411950][T11406] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1941'. [ 305.424097][T11408] netlink: 'syz.2.1942': attribute type 30 has an invalid length. [ 305.434493][T11274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.463244][T11274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.477135][T11274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.540350][T11274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.556968][T11274] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.593848][T11043] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.601067][T11043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.613330][T11043] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.620515][T11043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.643980][T11274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.657863][T11274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.768645][ T5844] Bluetooth: hci2: command tx timeout [ 305.865602][T11274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.222183][T11274] veth0_vlan: entered promiscuous mode [ 306.248470][T11445] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1953'. [ 306.275754][T11274] veth1_vlan: entered promiscuous mode [ 306.332225][T11274] veth0_macvtap: entered promiscuous mode [ 306.369442][T11449] netlink: 'syz.1.1954': attribute type 9 has an invalid length. [ 306.400669][T11274] veth1_macvtap: entered promiscuous mode [ 306.407950][T11449] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1954'. [ 306.451584][T11274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.476966][T11274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.498142][T11274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.518820][T11274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.538361][T11274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.566052][T11274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.605421][T11274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.642917][T11274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.666073][T11274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.692692][T11274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.713691][T11274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.751402][T11274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.782840][T11456] netlink: 'syz.0.1955': attribute type 29 has an invalid length. [ 306.799950][T11274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.824433][T11274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.835197][T11274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.844516][T11274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.090172][T11049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.111297][T11049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.174230][T11049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.199620][T11049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.544083][T11488] validate_nla: 3 callbacks suppressed [ 307.544104][T11488] netlink: 'syz.3.1967': attribute type 3 has an invalid length. [ 307.591472][T11488] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1967'. [ 308.048390][T11502] sctp: [Deprecated]: syz.3.1973 (pid 11502) Use of int in maxseg socket option. [ 308.048390][T11502] Use struct sctp_assoc_value instead [ 308.051998][T11501] netlink: 'syz.1.1972': attribute type 7 has an invalid length. [ 308.236940][T11049] wlan1: Trigger new scan to find an IBSS to join [ 309.004057][T11526] netlink: 'syz.1.1983': attribute type 13 has an invalid length. [ 309.023748][T11526] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1983'. [ 309.267562][ T4942] wlan1: Creating new IBSS network, BSSID 5e:a3:e5:c5:2f:80 [ 309.410720][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.813050][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.903292][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.004538][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.141868][ T11] bridge_slave_1: left allmulticast mode [ 310.147796][ T11] bridge_slave_1: left promiscuous mode [ 310.153547][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.180928][ T11] bridge_slave_0: left allmulticast mode [ 310.186719][ T11] bridge_slave_0: left promiscuous mode [ 310.192471][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.799253][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.826613][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.843400][ T11] bond0 (unregistering): Released all slaves [ 311.029297][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.068398][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.082671][T11544] netlink: 'syz.1.1989': attribute type 33 has an invalid length. [ 311.114578][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.134200][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.143056][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 311.151026][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.169399][T11541] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1990'. [ 311.176248][T11544] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1989'. [ 311.588312][ T5844] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 311.855787][T11548] chnl_net:caif_netlink_parms(): no params data found [ 312.598975][ T11] hsr_slave_0: left promiscuous mode [ 312.605137][ T11] hsr_slave_1: left promiscuous mode [ 312.625782][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.638892][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.655266][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.662871][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.685113][ T11] veth1_macvtap: left promiscuous mode [ 312.693971][ T11] veth0_macvtap: left promiscuous mode [ 312.699787][ T11] veth1_vlan: left promiscuous mode [ 312.709761][ T11] veth0_vlan: left promiscuous mode [ 312.795563][T11595] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2005'. [ 313.196589][ T5844] Bluetooth: hci2: command tx timeout [ 313.480240][ T11] team0 (unregistering): Port device team_slave_1 removed [ 313.522151][ T11] team0 (unregistering): Port device team_slave_0 removed [ 313.909132][T11587] netlink: 'syz.2.2003': attribute type 29 has an invalid length. [ 314.054487][T11548] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.066144][T11548] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.092241][T11548] bridge_slave_0: entered allmulticast mode [ 314.105434][T11548] bridge_slave_0: entered promiscuous mode [ 314.123636][T11548] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.140950][T11548] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.164275][T11548] bridge_slave_1: entered allmulticast mode [ 314.176269][T11548] bridge_slave_1: entered promiscuous mode [ 314.252895][T11609] netlink: 3084 bytes leftover after parsing attributes in process `syz.1.2010'. [ 314.273841][T11609] netlink: 'syz.1.2010': attribute type 1 has an invalid length. [ 314.289294][T11548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.307523][T11609] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2010'. [ 314.328801][T11548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.500717][T11548] team0: Port device team_slave_0 added [ 314.508982][T11548] team0: Port device team_slave_1 added [ 314.537847][T11548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.556664][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.651748][T11548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.701249][T11548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.730569][T11548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.766406][T11548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.861726][T11548] hsr_slave_0: entered promiscuous mode [ 314.881523][T11548] hsr_slave_1: entered promiscuous mode [ 314.890851][T11548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.900240][T11548] Cannot create hsr debugfs directory [ 315.152215][T11630] netlink: 'syz.1.2018': attribute type 10 has an invalid length. [ 315.177090][T11630] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2018'. [ 315.289200][ T5844] Bluetooth: hci2: command tx timeout [ 315.781118][T11633] netlink: 'syz.3.2020': attribute type 3 has an invalid length. [ 315.919419][T11646] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2027'. [ 315.953656][T11652] sctp: [Deprecated]: syz.0.2026 (pid 11652) Use of int in maxseg socket option. [ 315.953656][T11652] Use struct sctp_assoc_value instead [ 315.955188][T11646] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2027'. [ 316.129683][T11660] netlink: 'syz.3.2032': attribute type 16 has an invalid length. [ 316.137840][T11660] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2032'. [ 316.163834][T11660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 316.174037][T11660] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 316.554257][T11668] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2035'. [ 316.577344][T11548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.634576][T11548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.664810][T11548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.681380][T11548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.936038][T11676] bridge0: port 3(team0) entered blocking state [ 316.943240][T11676] bridge0: port 3(team0) entered listening state [ 316.950805][T11676] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.958850][T11676] bridge0: port 2(bridge_slave_1) entered listening state [ 316.968055][T11676] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.975502][T11676] bridge0: port 1(bridge_slave_0) entered listening state [ 316.992049][T11676] bridge0: entered promiscuous mode [ 317.008836][T11548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.034727][T11548] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.058947][T11043] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.066152][T11043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.087698][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.094886][ T4942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.106661][T11681] delete_channel: no stack [ 317.111505][T11681] delete_channel: no stack [ 317.357366][ T5844] Bluetooth: hci2: command tx timeout [ 317.703653][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.711546][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.863770][T11548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.138672][T11705] netlink: 'syz.2.2046': attribute type 39 has an invalid length. [ 318.323043][T11548] veth0_vlan: entered promiscuous mode [ 318.363750][T11548] veth1_vlan: entered promiscuous mode [ 318.449468][T11548] veth0_macvtap: entered promiscuous mode [ 318.461096][T11548] veth1_macvtap: entered promiscuous mode [ 318.476185][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.486823][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.496765][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.507328][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.518611][T11548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.529184][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.539692][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.549706][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.560957][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.571311][T11548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.582011][T11548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.593693][T11548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.675296][T11724] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2051'. [ 318.694059][T11548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.705082][T11548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.717293][T11548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.728994][T11548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.739953][T11727] netlink: 'syz.3.2052': attribute type 10 has an invalid length. [ 318.749472][T11727] team0: left allmulticast mode [ 318.755061][T11727] team_slave_0: left allmulticast mode [ 318.769741][T11727] team_slave_1: left allmulticast mode [ 318.775320][T11727] team0: left promiscuous mode [ 318.780830][T11727] team_slave_0: left promiscuous mode [ 318.786601][T11727] team_slave_1: left promiscuous mode [ 318.792311][T11727] bridge0: port 3(team0) entered disabled state [ 318.802253][ T5844] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 318.804741][T11727] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.824366][T11727] bond0: (slave team0): Enslaving as an active interface with an up link [ 318.834153][T11722] netlink: 'syz.3.2052': attribute type 10 has an invalid length. [ 318.847339][T11722] bond0: (slave team0): Releasing backup interface [ 318.867582][T11722] bridge0: port 3(team0) entered blocking state [ 318.874778][T11722] bridge0: port 3(team0) entered disabled state [ 318.895003][T11722] team0: entered allmulticast mode [ 318.900622][T11722] team_slave_0: entered allmulticast mode [ 318.912565][T11722] team_slave_1: entered allmulticast mode [ 318.940312][T11722] team0: entered promiscuous mode [ 318.963040][T11722] team_slave_0: entered promiscuous mode [ 318.981151][T11722] team_slave_1: entered promiscuous mode [ 319.149176][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.155411][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.165116][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.173922][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.450649][T11748] FAULT_INJECTION: forcing a failure. [ 319.450649][T11748] name failslab, interval 1, probability 0, space 0, times 0 [ 319.489415][T11745] netlink: 'syz.1.2059': attribute type 12 has an invalid length. [ 319.515846][T11748] CPU: 0 UID: 0 PID: 11748 Comm: syz.2.2061 Not tainted 6.12.0-syzkaller #0 [ 319.517234][T11745] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2059'. [ 319.524614][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 319.524645][T11748] Call Trace: [ 319.524665][T11748] [ 319.524690][T11748] dump_stack_lvl+0x241/0x360 [ 319.524762][T11748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.560396][T11748] ? __pfx__printk+0x10/0x10 [ 319.565073][T11748] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 319.571118][T11748] ? __pfx___might_resched+0x10/0x10 [ 319.576499][T11748] should_fail_ex+0x3b0/0x4e0 [ 319.581275][T11748] should_failslab+0xac/0x100 [ 319.586029][T11748] ? __alloc_skb+0x1c3/0x440 [ 319.590702][T11748] kmem_cache_alloc_node_noprof+0x71/0x320 [ 319.596654][T11748] __alloc_skb+0x1c3/0x440 [ 319.601132][T11748] ? __pfx_perf_trace_lock+0x10/0x10 [ 319.606513][T11748] ? __pfx___alloc_skb+0x10/0x10 [ 319.611514][T11748] ? __virt_addr_valid+0x183/0x530 [ 319.616680][T11748] ? __virt_addr_valid+0x183/0x530 [ 319.621882][T11748] tipc_buf_acquire+0x2b/0xe0 [ 319.626627][T11748] tipc_msg_build+0x8dd/0x1070 [ 319.631534][T11748] ? __pfx_tipc_msg_build+0x10/0x10 [ 319.636833][T11748] ? tipc_nametbl_lookup_mcast_nodes+0x2c/0xa30 [ 319.643177][T11748] __tipc_sendmsg+0x2402/0x35f0 [ 319.648193][T11748] ? __pfx___tipc_sendmsg+0x10/0x10 [ 319.653446][T11748] ? __asan_memset+0x23/0x50 [ 319.658129][T11748] ? perf_tp_event+0x972/0x22c0 [ 319.663139][T11748] ? __pfx_woken_wake_function+0x10/0x10 [ 319.668889][T11748] ? lock_release+0x9cc/0xa30 [ 319.673726][T11748] ? trace_call_bpf+0x613/0x8a0 [ 319.678755][T11748] ? perf_trace_run_bpf_submit+0x100/0x180 [ 319.684693][T11748] __tipc_sendstream+0x129b/0x14e0 [ 319.690011][T11748] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.696627][T11748] ? __pfx___tipc_sendstream+0x10/0x10 [ 319.702255][T11748] ? __local_bh_enable_ip+0x168/0x200 [ 319.707718][T11748] ? tipc_sendstream+0x47/0x70 [ 319.712550][T11748] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 319.718325][T11748] ? do_raw_spin_unlock+0x13c/0x8b0 [ 319.723632][T11748] ? __pfx_tipc_sendstream+0x10/0x10 [ 319.728973][T11748] tipc_sendstream+0x55/0x70 [ 319.733662][T11748] __sock_sendmsg+0x221/0x270 [ 319.738422][T11748] ____sys_sendmsg+0x52a/0x7e0 [ 319.743298][T11748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.748741][T11748] __sys_sendmsg+0x292/0x380 [ 319.753412][T11748] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.758656][T11748] ? __pfx_vfs_write+0x10/0x10 [ 319.763574][T11748] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 319.769842][T11748] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.776247][T11748] ? do_syscall_64+0x100/0x230 [ 319.781090][T11748] ? do_syscall_64+0xb6/0x230 [ 319.785845][T11748] do_syscall_64+0xf3/0x230 [ 319.790421][T11748] ? clear_bhb_loop+0x35/0x90 [ 319.795181][T11748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.801136][T11748] RIP: 0033:0x7f1697f7e759 [ 319.805618][T11748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.825369][T11748] RSP: 002b:00007f1698d64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.833858][T11748] RAX: ffffffffffffffda RBX: 00007f1698135f80 RCX: 00007f1697f7e759 [ 319.842060][T11748] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000005 [ 319.850092][T11748] RBP: 00007f1698d64090 R08: 0000000000000000 R09: 0000000000000000 [ 319.858115][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.866153][T11748] R13: 0000000000000000 R14: 00007f1698135f80 R15: 00007ffccab43728 [ 319.874282][T11748] [ 320.531573][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.243467][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.401014][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.463713][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.534834][ T11] bridge_slave_1: left allmulticast mode [ 321.540769][ T11] bridge_slave_1: left promiscuous mode [ 321.546966][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.555510][ T11] bridge_slave_0: left allmulticast mode [ 321.561654][ T11] bridge_slave_0: left promiscuous mode [ 321.567498][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.875311][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.955171][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.001618][ T11] bond0 (unregistering): Released all slaves [ 322.144172][ T5844] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 322.511036][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.530220][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.541617][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.564899][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.615622][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 322.631436][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.129427][ T11] hsr_slave_0: left promiscuous mode [ 323.144688][ T11] hsr_slave_1: left promiscuous mode [ 323.165059][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.214736][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.270780][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.310640][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.448510][ T11] veth1_macvtap: left promiscuous mode [ 323.454181][ T11] veth0_macvtap: left promiscuous mode [ 323.486404][ T11] veth1_vlan: left promiscuous mode [ 323.491906][ T11] veth0_vlan: left promiscuous mode [ 324.206665][T11808] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2082'. [ 324.373232][ T11] team0 (unregistering): Port device team_slave_1 removed [ 324.420776][ T11] team0 (unregistering): Port device team_slave_0 removed [ 324.797186][ T54] Bluetooth: hci2: command tx timeout [ 325.477380][T11825] netlink: 'syz.2.2087': attribute type 39 has an invalid length. [ 325.888285][T11774] chnl_net:caif_netlink_parms(): no params data found [ 325.969823][T11843] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.2092'. [ 326.006334][T11843] netlink: 'syz.2.2092': attribute type 1 has an invalid length. [ 326.043826][T11843] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2092'. [ 326.196602][T11774] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.216859][T11774] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.224228][T11774] bridge_slave_0: entered allmulticast mode [ 326.231901][T11774] bridge_slave_0: entered promiscuous mode [ 326.241833][T11774] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.249369][T11774] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.268045][T11774] bridge_slave_1: entered allmulticast mode [ 326.296125][T11774] bridge_slave_1: entered promiscuous mode [ 326.376841][T11774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.390626][T11774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.491333][T11774] team0: Port device team_slave_0 added [ 326.501023][T11774] team0: Port device team_slave_1 added [ 326.537969][T11850] netlink: 'syz.3.2096': attribute type 3 has an invalid length. [ 326.583783][T11850] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2096'. [ 326.887968][ T54] Bluetooth: hci2: command tx timeout [ 327.070117][T11860] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.2098'. [ 327.187535][T11774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.211406][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.269329][T11860] netlink: zone id is out of range [ 327.321585][T11774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.348405][T11860] netlink: zone id is out of range [ 327.382808][T11774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.386466][T11860] netlink: zone id is out of range [ 327.397349][T11860] netlink: zone id is out of range [ 327.413199][T11774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.427228][T11860] netlink: zone id is out of range [ 327.440054][T11774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.540670][T11860] netlink: zone id is out of range [ 327.560705][T11860] netlink: zone id is out of range [ 327.579354][T11860] netlink: zone id is out of range [ 327.591406][T11860] netlink: zone id is out of range [ 327.600619][T11774] hsr_slave_0: entered promiscuous mode [ 327.610227][T11774] hsr_slave_1: entered promiscuous mode [ 327.636069][T11860] netlink: zone id is out of range [ 327.650541][T11774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.666565][T11774] Cannot create hsr debugfs directory [ 327.879946][T11876] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2103'. [ 328.097538][T11884] batman_adv: The newly added mac address (00:20:00:00:00:00) already exists on: batadv_slave_0 [ 328.114439][T11884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.134125][T11883] netlink: 'syz.2.2103': attribute type 21 has an invalid length. [ 328.160262][T11887] netlink: 'syz.2.2103': attribute type 10 has an invalid length. [ 328.185892][T11887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.215752][T11887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.231228][T11887] batadv_slave_0: entered promiscuous mode [ 328.244824][T11887] batadv_slave_0: entered allmulticast mode [ 328.262468][T11887] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 328.996719][ T54] Bluetooth: hci2: command tx timeout [ 329.859825][T11929] batman_adv: The newly added mac address (00:20:00:00:00:00) already exists on: batadv_slave_0 [ 329.878755][T11929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.921121][T11774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.989322][T11774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.037715][T11774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.088238][T11774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.267944][T11774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.339523][T11951] netlink: 'syz.2.2128': attribute type 3 has an invalid length. [ 330.365511][T11774] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.375495][T11951] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2128'. [ 330.443930][T11043] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.451162][T11043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.509079][T11049] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.516277][T11049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.037099][ T54] Bluetooth: hci2: command tx timeout [ 331.185196][T11774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.805837][T11774] veth0_vlan: entered promiscuous mode [ 331.838582][T11774] veth1_vlan: entered promiscuous mode [ 331.944267][T11774] veth0_macvtap: entered promiscuous mode [ 332.027256][T11774] veth1_macvtap: entered promiscuous mode [ 332.091415][T11774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.145373][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.198348][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.226705][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.246101][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 332.246415][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.253375][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 332.270444][ C1] bridge0: port 3(team0) entered learning state [ 332.277036][T11774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.310737][T11774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.337122][T11774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.369442][T11774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.396870][T11774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.405635][T11774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.426207][T11774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.518873][T12010] FAULT_INJECTION: forcing a failure. [ 332.518873][T12010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.587044][T12010] CPU: 0 UID: 0 PID: 12010 Comm: syz.2.2146 Not tainted 6.12.0-syzkaller #0 [ 332.595792][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 332.605918][T12010] Call Trace: [ 332.609223][T12010] [ 332.612191][T12010] dump_stack_lvl+0x241/0x360 [ 332.616909][T12010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.622233][T12010] ? __pfx__printk+0x10/0x10 [ 332.626875][T12010] should_fail_ex+0x3b0/0x4e0 [ 332.631595][T12010] _copy_to_user+0x31/0xb0 [ 332.636041][T12010] bpf_verifier_vlog+0x520/0x860 [ 332.641024][T12010] __btf_verifier_log+0xd5/0x120 [ 332.646000][T12010] ? __pfx___btf_verifier_log+0x10/0x10 [ 332.651575][T12010] ? stack_depot_save_flags+0x29/0x830 [ 332.657427][T12010] btf_verifier_log_member+0x428/0x7b0 [ 332.662929][T12010] ? do_syscall_64+0xf3/0x230 [ 332.667647][T12010] ? perf_trace_run_bpf_submit+0x100/0x180 [ 332.673483][T12010] ? btf_struct_resolve+0x50c/0x1220 [ 332.678882][T12010] ? btf_parse_type_sec+0xd62/0x2620 [ 332.684201][T12010] ? __pfx_btf_verifier_log_member+0x10/0x10 [ 332.690254][T12010] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 332.697018][T12010] ? irqentry_enter+0x39/0x60 [ 332.701747][T12010] btf_struct_resolve+0xb70/0x1220 [ 332.706914][T12010] btf_resolve+0x4ea/0x1720 [ 332.711470][T12010] ? __pfx_btf_resolve+0x10/0x10 [ 332.716458][T12010] btf_parse_type_sec+0xea8/0x2620 [ 332.721629][T12010] ? irqentry_exit+0x63/0x90 [ 332.726258][T12010] ? btf_check_sec_info+0x379/0x4f0 [ 332.731500][T12010] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 332.737086][T12010] ? btf_parse_hdr+0x53a/0x710 [ 332.741879][T12010] ? btf_parse_hdr+0x558/0x710 [ 332.746676][T12010] ? btf_parse_str_sec+0x21f/0x2b0 [ 332.751914][T12010] btf_new_fd+0x43f/0xd30 [ 332.756292][T12010] ? __pfx_btf_new_fd+0x10/0x10 [ 332.761272][T12010] ? bpf_btf_load+0xcf/0x1a0 [ 332.765903][T12010] __sys_bpf+0x6ef/0x810 [ 332.770177][T12010] ? __pfx___sys_bpf+0x10/0x10 [ 332.774974][T12010] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 332.781036][T12010] __x64_sys_bpf+0x7c/0x90 [ 332.785491][T12010] do_syscall_64+0xf3/0x230 [ 332.790036][T12010] ? clear_bhb_loop+0x35/0x90 [ 332.794822][T12010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.800930][T12010] RIP: 0033:0x7f1697f7e759 [ 332.805372][T12010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.825198][T12010] RSP: 002b:00007f1698d64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.833652][T12010] RAX: ffffffffffffffda RBX: 00007f1698135f80 RCX: 00007f1697f7e759 [ 332.841673][T12010] RDX: 0000000000000020 RSI: 0000000020000400 RDI: 0000000000000012 [ 332.849684][T12010] RBP: 00007f1698d64090 R08: 0000000000000000 R09: 0000000000000000 [ 332.857694][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.865697][T12010] R13: 0000000000000000 R14: 00007f1698135f80 R15: 00007ffccab43728 [ 332.873726][T12010] [ 333.037377][T11043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.058241][T11043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.137023][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.144912][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.207872][T12015] delete_channel: no stack [ 333.253490][T12015] delete_channel: no stack [ 333.326213][T12015] netlink: 'syz.0.2148': attribute type 3 has an invalid length. [ 333.391186][T12015] netlink: 'syz.0.2148': attribute type 4 has an invalid length. [ 333.482594][T12015] netlink: 'syz.0.2148': attribute type 7 has an invalid length. [ 333.563275][T12015] netlink: 'syz.0.2148': attribute type 8 has an invalid length. [ 333.654007][T12015] netlink: 'syz.0.2148': attribute type 7 has an invalid length. [ 333.742443][T12015] netlink: 198140 bytes leftover after parsing attributes in process `syz.0.2148'. [ 334.118820][T12033] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2155'. [ 334.420386][ T4942] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.605887][ T4942] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.708228][ T4942] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.808728][ T4942] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.964456][ T4942] bridge_slave_1: left allmulticast mode [ 334.980355][ T4942] bridge_slave_1: left promiscuous mode [ 334.996406][ T4942] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.018742][ T4942] bridge_slave_0: left allmulticast mode [ 335.024448][ T4942] bridge_slave_0: left promiscuous mode [ 335.046383][ T4942] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.474054][ T4942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.485438][ T4942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.497088][ T4942] bond0 (unregistering): Released all slaves [ 335.691947][ T4942] hsr_slave_0: left promiscuous mode [ 335.698355][ T4942] hsr_slave_1: left promiscuous mode [ 335.704388][ T4942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.712031][ T4942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.719973][ T4942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.728037][ T4942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.744336][ T4942] veth1_macvtap: left promiscuous mode [ 335.749989][ T4942] veth0_macvtap: left promiscuous mode [ 335.755590][ T4942] veth1_vlan: left promiscuous mode [ 335.761369][ T4942] veth0_vlan: left promiscuous mode [ 336.147553][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.157991][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.197047][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.215195][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.236679][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.245096][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.317081][T12059] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2163'. [ 336.330284][T12059] net_ratelimit: 220 callbacks suppressed [ 336.330308][T12059] netlink: zone id is out of range [ 336.341528][T12059] netlink: zone id is out of range [ 336.347142][T12059] netlink: zone id is out of range [ 336.352313][T12059] netlink: zone id is out of range [ 336.357931][T12059] netlink: del zone limit has 8 unknown bytes [ 336.914420][ T4942] team0 (unregistering): Port device team_slave_1 removed [ 337.014856][ T4942] team0 (unregistering): Port device team_slave_0 removed [ 337.881787][T12041] netlink: 'syz.0.2156': attribute type 10 has an invalid length. [ 337.891702][T12041] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2156'. [ 337.913340][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2162'. [ 337.938956][T12071] wg2: entered promiscuous mode [ 337.944596][T12071] wg2: entered allmulticast mode [ 338.316196][ T54] Bluetooth: hci2: command tx timeout [ 338.562068][T12049] chnl_net:caif_netlink_parms(): no params data found [ 338.612436][T12152] netlink: 'syz.2.2177': attribute type 39 has an invalid length. [ 338.707728][T12151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2176'. [ 338.758164][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.765383][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.779883][T12049] bridge_slave_0: entered allmulticast mode [ 338.787665][T12049] bridge_slave_0: entered promiscuous mode [ 338.808479][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.820733][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.829749][T12049] bridge_slave_1: entered allmulticast mode [ 338.837799][T12049] bridge_slave_1: entered promiscuous mode [ 338.838583][T12159] netlink: 2227 bytes leftover after parsing attributes in process `syz.1.2179'. [ 338.944656][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.972900][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.064889][T12049] team0: Port device team_slave_0 added [ 339.093417][T12049] team0: Port device team_slave_1 added [ 339.256721][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.264250][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.311746][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.381799][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.396319][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.434373][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.456980][T12181] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.2189'. [ 339.474056][T12181] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 339.496075][T12181] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2189'. [ 339.516604][T12049] hsr_slave_0: entered promiscuous mode [ 339.534630][T12049] hsr_slave_1: entered promiscuous mode [ 339.545692][T12049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.555754][T12049] Cannot create hsr debugfs directory [ 339.730914][T12193] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2195'. [ 339.742325][T12193] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 339.941902][T12199] FAULT_INJECTION: forcing a failure. [ 339.941902][T12199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.979244][T12201] sctp: [Deprecated]: syz.3.2199 (pid 12201) Use of int in maxseg socket option. [ 339.979244][T12201] Use struct sctp_assoc_value instead [ 340.015883][T12199] CPU: 0 UID: 0 PID: 12199 Comm: syz.1.2198 Not tainted 6.12.0-syzkaller #0 [ 340.024806][T12199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 340.034899][T12199] Call Trace: [ 340.038212][T12199] [ 340.041167][T12199] dump_stack_lvl+0x241/0x360 [ 340.045893][T12199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.051132][T12199] ? __pfx__printk+0x10/0x10 [ 340.055763][T12199] ? __pfx_lock_release+0x10/0x10 [ 340.060831][T12199] should_fail_ex+0x3b0/0x4e0 [ 340.065546][T12199] _copy_from_user+0x2f/0xc0 [ 340.070245][T12199] __sys_bpf+0x1a4/0x810 [ 340.074531][T12199] ? __pfx___sys_bpf+0x10/0x10 [ 340.079356][T12199] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.085589][T12199] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.091962][T12199] ? do_syscall_64+0x100/0x230 [ 340.097553][T12199] __x64_sys_bpf+0x7c/0x90 [ 340.102009][T12199] do_syscall_64+0xf3/0x230 [ 340.106547][T12199] ? clear_bhb_loop+0x35/0x90 [ 340.111354][T12199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.117282][T12199] RIP: 0033:0x7f7920b7e759 [ 340.121723][T12199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.141374][T12199] RSP: 002b:00007f7921901038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.149858][T12199] RAX: ffffffffffffffda RBX: 00007f7920d35f80 RCX: 00007f7920b7e759 [ 340.157864][T12199] RDX: 0000000000000050 RSI: 0000000020000200 RDI: 000000000000001c [ 340.165874][T12199] RBP: 00007f7921901090 R08: 0000000000000000 R09: 0000000000000000 [ 340.173879][T12199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.181977][T12199] R13: 0000000000000000 R14: 00007f7920d35f80 R15: 00007ffc9a87b3a8 [ 340.189999][T12199] [ 340.397003][ T54] Bluetooth: hci2: command tx timeout [ 340.455106][T12049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.474064][T12049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.510637][T12049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.558914][T12049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 340.704245][T12049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.747127][T12049] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.774567][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.781792][T12115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.811947][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.819143][T12115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.855859][T12230] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2210'. [ 340.970886][T12232] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2211'. [ 341.002253][T12232] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 341.013167][T12232] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.061749][T12241] netlink: 'syz.0.2214': attribute type 28 has an invalid length. [ 341.069719][T12241] netlink: 'syz.0.2214': attribute type 4 has an invalid length. [ 341.133915][T12049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.161802][T12244] netlink: 'syz.0.2214': attribute type 29 has an invalid length. [ 341.184628][T12244] netlink: 'syz.0.2214': attribute type 29 has an invalid length. [ 341.204359][T12241] netlink: 'syz.0.2214': attribute type 29 has an invalid length. [ 341.234109][T12248] netlink: 'syz.3.2216': attribute type 2 has an invalid length. [ 341.651986][T12049] veth0_vlan: entered promiscuous mode [ 341.674435][T12049] veth1_vlan: entered promiscuous mode [ 341.744769][T12049] veth0_macvtap: entered promiscuous mode [ 341.778400][T12049] veth1_macvtap: entered promiscuous mode [ 341.819488][T12049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.854064][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.868003][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.878309][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.889028][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.899228][T12049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.910096][T12049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.921592][T12049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.933047][T12049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.942152][T12049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.950994][T12049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.959895][T12049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.106636][T12111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.107187][T12115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.114584][T12111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.122422][T12115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.191874][T12282] syz.1.2227 (12282) used obsolete PPPIOCDETACH ioctl [ 342.232972][T12280] netlink: 'syz.2.2226': attribute type 10 has an invalid length. [ 342.245397][T12280] __nla_validate_parse: 1 callbacks suppressed [ 342.245430][T12280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2226'. [ 342.272679][T12280] ipvlan1: entered promiscuous mode [ 342.279009][T12280] ipvlan1: entered allmulticast mode [ 342.382191][T12280] bridge0: port 4(ipvlan1) entered blocking state [ 342.418956][T12280] bridge0: port 4(ipvlan1) entered disabled state [ 342.466724][T12280] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 342.482953][ T54] Bluetooth: hci2: command tx timeout [ 342.501864][T12286] netlink: 'syz.3.2229': attribute type 10 has an invalid length. [ 342.549982][T12280] syz.2.2226 (12280) used greatest stack depth: 14880 bytes left [ 342.568256][T12286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2229'. [ 343.440892][T12312] FAULT_INJECTION: forcing a failure. [ 343.440892][T12312] name failslab, interval 1, probability 0, space 0, times 0 [ 343.486335][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.2.2241 Not tainted 6.12.0-syzkaller #0 [ 343.495080][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 343.505164][T12312] Call Trace: [ 343.508478][T12312] [ 343.511440][T12312] dump_stack_lvl+0x241/0x360 [ 343.516154][T12312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.521402][T12312] should_fail_ex+0x3b0/0x4e0 [ 343.526113][T12312] should_failslab+0xac/0x100 [ 343.530834][T12312] ? sctp_add_bind_addr+0x89/0x3a0 [ 343.535984][T12312] __kmalloc_cache_noprof+0x6c/0x2c0 [ 343.541308][T12312] sctp_add_bind_addr+0x89/0x3a0 [ 343.546283][T12312] sctp_copy_local_addr_list+0x311/0x500 [ 343.551938][T12312] ? sctp_copy_local_addr_list+0xab/0x500 [ 343.557669][T12312] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 343.563832][T12312] ? sctp_v4_is_any+0x35/0x60 [ 343.568522][T12312] sctp_bind_addr_copy+0xad/0x3b0 [ 343.573548][T12312] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 343.579874][T12312] sctp_connect_new_asoc+0x2f3/0x6c0 [ 343.585162][T12312] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 343.590966][T12312] ? sctp_get_af_specific+0x1a/0x80 [ 343.596176][T12312] ? __pfx_bpf_lsm_sctp_bind_connect+0x10/0x10 [ 343.602422][T12312] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 343.607975][T12312] sctp_sendmsg+0x219a/0x3520 [ 343.612745][T12312] ? __pfx_sctp_sendmsg+0x10/0x10 [ 343.617763][T12312] ? __pfx_sctp_sendmsg+0x10/0x10 [ 343.622781][T12312] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 343.629194][T12312] ? inet_sendmsg+0xf7/0x390 [ 343.633780][T12312] ? __pfx_udp_sendmsg+0x10/0x10 [ 343.638797][T12312] ? inet_sendmsg+0x32b/0x390 [ 343.643469][T12312] ? inet_sendmsg+0x330/0x390 [ 343.648149][T12312] __sock_sendmsg+0x1a6/0x270 [ 343.652822][T12312] ____sys_sendmsg+0x52a/0x7e0 [ 343.657586][T12312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.662877][T12312] ? __sys_sendmsg+0x26b/0x380 [ 343.667634][T12312] ? __sys_sendmsg+0x279/0x380 [ 343.672404][T12312] __sys_sendmsg+0x292/0x380 [ 343.676996][T12312] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.682109][T12312] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 343.688356][T12312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.694697][T12312] do_syscall_64+0xf3/0x230 [ 343.699207][T12312] ? clear_bhb_loop+0x35/0x90 [ 343.703887][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.709774][T12312] RIP: 0033:0x7f1697f7e759 [ 343.714197][T12312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.733795][T12312] RSP: 002b:00007f1698d64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.742242][T12312] RAX: ffffffffffffffda RBX: 00007f1698135f80 RCX: 00007f1697f7e759 [ 343.750215][T12312] RDX: 0000000000008804 RSI: 0000000020000380 RDI: 0000000000000005 [ 343.758185][T12312] RBP: 00007f1698d64090 R08: 0000000000000000 R09: 0000000000000000 [ 343.766150][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.774113][T12312] R13: 0000000000000000 R14: 00007f1698135f80 R15: 00007ffccab43728 [ 343.782092][T12312] [ 344.495543][T12332] validate_nla: 1 callbacks suppressed [ 344.495567][T12332] netlink: 'syz.3.2248': attribute type 1 has an invalid length. [ 344.540869][T12332] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2248'. [ 344.630171][T12332] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2248'. [ 344.838361][T12338] FAULT_INJECTION: forcing a failure. [ 344.838361][T12338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.855797][T12338] CPU: 1 UID: 0 PID: 12338 Comm: syz.3.2249 Not tainted 6.12.0-syzkaller #0 [ 344.864966][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 344.875063][T12338] Call Trace: [ 344.878373][T12338] [ 344.881329][T12338] dump_stack_lvl+0x241/0x360 [ 344.886089][T12338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.891498][T12338] ? __pfx__printk+0x10/0x10 [ 344.896133][T12338] ? __pfx_lock_release+0x10/0x10 [ 344.901205][T12338] should_fail_ex+0x3b0/0x4e0 [ 344.905914][T12338] _copy_from_user+0x2f/0xc0 [ 344.910540][T12338] __sys_bpf+0x1a4/0x810 [ 344.914818][T12338] ? __pfx___sys_bpf+0x10/0x10 [ 344.919624][T12338] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 344.925640][T12338] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.932003][T12338] ? do_syscall_64+0x100/0x230 [ 344.936806][T12338] __x64_sys_bpf+0x7c/0x90 [ 344.941251][T12338] do_syscall_64+0xf3/0x230 [ 344.945781][T12338] ? clear_bhb_loop+0x35/0x90 [ 344.950494][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.956419][T12338] RIP: 0033:0x7f500c17e759 [ 344.960865][T12338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.980520][T12338] RSP: 002b:00007f500ce8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.988983][T12338] RAX: ffffffffffffffda RBX: 00007f500c335f80 RCX: 00007f500c17e759 [ 344.997006][T12338] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 345.005033][T12338] RBP: 00007f500ce8f090 R08: 0000000000000000 R09: 0000000000000000 [ 345.013056][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.021077][T12338] R13: 0000000000000000 R14: 00007f500c335f80 R15: 00007ffd0548da98 [ 345.029108][T12338] [ 346.433388][T12318] netlink: 'syz.0.2244': attribute type 33 has an invalid length. [ 346.441665][T12318] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2244'. [ 346.924383][T12111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.962451][T12369] IPv6: Can't replace route, no match found [ 347.098132][T12111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.189296][T12111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.287194][T12111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.425697][T12111] bridge_slave_1: left allmulticast mode [ 347.432090][T12111] bridge_slave_1: left promiscuous mode [ 347.439090][T12111] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.448478][T12111] bridge_slave_0: left allmulticast mode [ 347.454162][T12111] bridge_slave_0: left promiscuous mode [ 347.460845][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.596073][ C1] bridge0: port 3(team0) entered forwarding state [ 347.602567][ C1] bridge0: topology change detected, propagating [ 347.609161][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.616436][ C1] bridge0: topology change detected, propagating [ 347.622861][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.630132][ C1] bridge0: topology change detected, propagating [ 347.984995][T12111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.998291][T12111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.009944][T12111] bond0 (unregistering): Released all slaves [ 348.275357][T12111] hsr_slave_0: left promiscuous mode [ 348.281311][T12111] hsr_slave_1: left promiscuous mode [ 348.288672][T12111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.297261][T12111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.305334][T12111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.312942][T12111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.331184][T12111] veth1_macvtap: left promiscuous mode [ 348.336772][T12111] veth0_macvtap: left promiscuous mode [ 348.342302][T12111] veth1_vlan: left promiscuous mode [ 348.347717][T12111] veth0_vlan: left promiscuous mode [ 348.745129][ T5844] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 348.765825][T12381] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2263'. [ 349.042090][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.051714][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.073249][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.084344][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.087389][T12396] netlink: 'syz.0.2269': attribute type 1 has an invalid length. [ 349.103731][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.115716][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.135073][T12396] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2269'. [ 349.322447][T12111] team0 (unregistering): Port device team_slave_1 removed [ 349.384750][T12111] team0 (unregistering): Port device team_slave_0 removed [ 349.944550][T12397] batman_adv: The newly added mac address (00:20:00:00:00:00) already exists on: batadv_slave_0 [ 349.966065][T12397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.043811][T12418] FAULT_INJECTION: forcing a failure. [ 350.043811][T12418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.084479][T12418] CPU: 1 UID: 0 PID: 12418 Comm: syz.3.2277 Not tainted 6.12.0-syzkaller #0 [ 350.093215][T12418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 350.103318][T12418] Call Trace: [ 350.106611][T12418] [ 350.109564][T12418] dump_stack_lvl+0x241/0x360 [ 350.114258][T12418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.119465][T12418] ? __pfx__printk+0x10/0x10 [ 350.124074][T12418] should_fail_ex+0x3b0/0x4e0 [ 350.128938][T12418] _copy_from_user+0x2f/0xc0 [ 350.133529][T12418] generic_map_update_batch+0x5ba/0x900 [ 350.139084][T12418] ? __pfx_generic_map_update_batch+0x10/0x10 [ 350.145144][T12418] ? __fget_files+0x29/0x470 [ 350.149767][T12418] ? __pfx_generic_map_update_batch+0x10/0x10 [ 350.155845][T12418] bpf_map_do_batch+0x39a/0x660 [ 350.160735][T12418] __sys_bpf+0x377/0x810 [ 350.165003][T12418] ? __pfx___sys_bpf+0x10/0x10 [ 350.169779][T12418] ? ktime_get+0x9b/0xb0 [ 350.174031][T12418] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.180025][T12418] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.186358][T12418] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.192686][T12418] ? __irq_exit_rcu+0x100/0x1c0 [ 350.197543][T12418] __x64_sys_bpf+0x7c/0x90 [ 350.201957][T12418] do_syscall_64+0xf3/0x230 [ 350.206462][T12418] ? clear_bhb_loop+0x35/0x90 [ 350.211139][T12418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.217028][T12418] RIP: 0033:0x7f500c17e759 [ 350.221438][T12418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.241236][T12418] RSP: 002b:00007f500ce8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.249704][T12418] RAX: ffffffffffffffda RBX: 00007f500c335f80 RCX: 00007f500c17e759 [ 350.257704][T12418] RDX: 0000000000000038 RSI: 0000000020000500 RDI: 000000000000001a [ 350.265670][T12418] RBP: 00007f500ce8f090 R08: 0000000000000000 R09: 0000000000000000 [ 350.273636][T12418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.281969][T12418] R13: 0000000000000000 R14: 00007f500c335f80 R15: 00007ffd0548da98 [ 350.289951][T12418] [ 350.725695][T12393] chnl_net:caif_netlink_parms(): no params data found [ 350.796812][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 351.020870][ T5844] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 351.196480][ T5844] Bluetooth: hci2: command tx timeout [ 351.396375][T12393] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.403520][T12393] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.486323][T12393] bridge_slave_0: entered allmulticast mode [ 351.507118][T12393] bridge_slave_0: entered promiscuous mode [ 351.515508][T12393] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.522745][T12393] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.530275][T12393] bridge_slave_1: entered allmulticast mode [ 351.537240][T12393] bridge_slave_1: entered promiscuous mode [ 351.814544][T12393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.837290][T12464] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2292'. [ 351.925009][T12393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.105823][T12393] team0: Port device team_slave_0 added [ 352.157250][T12393] team0: Port device team_slave_1 added [ 352.341378][T12393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.362474][T12393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.437284][T12393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.458253][T12471] netlink: 'syz.1.2296': attribute type 10 has an invalid length. [ 352.499281][T12471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.540766][T12471] batadv0: entered promiscuous mode [ 352.555517][ T5844] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 352.570821][T12471] batadv0: entered allmulticast mode [ 352.583112][T12471] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 352.609202][T12393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.626381][T12393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.666033][T12393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.877894][T12393] hsr_slave_0: entered promiscuous mode [ 352.907202][T12393] hsr_slave_1: entered promiscuous mode [ 352.937688][T12491] delete_channel: no stack [ 352.949887][T12393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.953277][T12491] delete_channel: no stack [ 352.962342][T12393] Cannot create hsr debugfs directory [ 353.276131][ T5844] Bluetooth: hci2: command tx timeout [ 353.294940][ T5844] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 353.371727][T12511] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2312'. [ 353.756683][T12527] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.764129][T12527] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.786956][T12527] bridge0: left promiscuous mode [ 354.044387][T12393] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.114661][T12393] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.169510][T12393] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.197338][ T5844] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 354.278858][T12393] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.311117][T12542] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2324'. [ 354.469047][T12393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.524339][T12393] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.551776][ T4942] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.558957][ T4942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.586082][T12111] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.593287][T12111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.938844][T12566] netlink: 'syz.1.2331': attribute type 33 has an invalid length. [ 354.952571][T12566] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2331'. [ 355.072413][T12393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.356174][ T5844] Bluetooth: hci2: command tx timeout [ 355.460108][T12393] veth0_vlan: entered promiscuous mode [ 355.472306][T12393] veth1_vlan: entered promiscuous mode [ 355.496924][T12393] veth0_macvtap: entered promiscuous mode [ 355.506743][T12393] veth1_macvtap: entered promiscuous mode [ 355.525665][T12393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.535741][T12393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.546424][T12393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.556314][T12393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.566803][T12393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.576688][T12393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.587183][T12393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.598470][T12393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.714485][T12393] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.723442][T12393] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.732457][T12393] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.741242][T12393] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.040115][T12115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.096512][T12115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.142794][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.158576][ T5844] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 356.160740][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.487575][T12602] netlink: 'syz.3.2344': attribute type 33 has an invalid length. [ 356.504812][T12602] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2344'. [ 356.539238][T12604] FAULT_INJECTION: forcing a failure. [ 356.539238][T12604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.592784][T12604] CPU: 1 UID: 0 PID: 12604 Comm: syz.0.2345 Not tainted 6.12.0-syzkaller #0 [ 356.601520][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 356.611592][T12604] Call Trace: [ 356.614886][T12604] [ 356.617834][T12604] dump_stack_lvl+0x241/0x360 [ 356.622541][T12604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.627756][T12604] ? __pfx__printk+0x10/0x10 [ 356.632376][T12604] ? snprintf+0xda/0x120 [ 356.636644][T12604] should_fail_ex+0x3b0/0x4e0 [ 356.641346][T12604] _copy_to_user+0x31/0xb0 [ 356.645782][T12604] simple_read_from_buffer+0xca/0x150 [ 356.651181][T12604] proc_fail_nth_read+0x1e9/0x250 [ 356.656228][T12604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.661791][T12604] ? rw_verify_area+0x37a/0x6f0 [ 356.666664][T12604] ? rw_verify_area+0x55e/0x6f0 [ 356.671535][T12604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.677098][T12604] vfs_read+0x1fc/0xb70 [ 356.681277][T12604] ? fdget_pos+0x24e/0x320 [ 356.685710][T12604] ? __pfx_vfs_read+0x10/0x10 [ 356.690413][T12604] ? __fget_files+0x3f3/0x470 [ 356.695113][T12604] ? fdget_pos+0x24e/0x320 [ 356.699547][T12604] ksys_read+0x183/0x2b0 [ 356.703824][T12604] ? __pfx_ksys_read+0x10/0x10 [ 356.708630][T12604] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.714996][T12604] ? __irq_exit_rcu+0x100/0x1c0 [ 356.719884][T12604] ? do_syscall_64+0xb6/0x230 [ 356.724657][T12604] do_syscall_64+0xf3/0x230 [ 356.729160][T12604] ? clear_bhb_loop+0x35/0x90 [ 356.733838][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.739815][T12604] RIP: 0033:0x7f4f9a37d19c [ 356.744230][T12604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 356.763849][T12604] RSP: 002b:00007f4f9b229030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.772271][T12604] RAX: ffffffffffffffda RBX: 00007f4f9a535f80 RCX: 00007f4f9a37d19c [ 356.780239][T12604] RDX: 000000000000000f RSI: 00007f4f9b2290a0 RDI: 000000000000000b [ 356.788205][T12604] RBP: 00007f4f9b229090 R08: 0000000000000000 R09: 0000000000000000 [ 356.796178][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.804153][T12604] R13: 0000000000000000 R14: 00007f4f9a535f80 R15: 00007ffe455da308 [ 356.812137][T12604] [ 357.074413][T12616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.098245][T12616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.115482][T12616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.124563][T12616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.140541][T12616] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 357.160105][T12616] batman_adv: batadv0: Removing interface: virt_wifi0 [ 357.900658][T12616] bond0: (slave batadv0): Releasing backup interface [ 358.080773][T12616] batadv0 (unregistering): left allmulticast mode [ 358.182366][T12107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.287135][T12107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.110741][T12107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.190558][T12107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.254009][T12107] bridge_slave_1: left allmulticast mode [ 359.259842][T12107] bridge_slave_1: left promiscuous mode [ 359.265550][T12107] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.274652][T12107] bridge_slave_0: left allmulticast mode [ 359.280692][T12107] bridge_slave_0: left promiscuous mode [ 359.286796][T12107] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.602377][T12107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.614946][T12107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.626153][T12107] bond0 (unregistering): Released all slaves [ 359.926521][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.941911][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.954282][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.965523][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.972876][ T54] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 359.976982][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 360.004559][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.599409][T12107] hsr_slave_0: left promiscuous mode [ 360.610891][T12107] hsr_slave_1: left promiscuous mode [ 360.623100][T12107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.630747][T12107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.639360][T12107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.647213][T12107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.672865][T12107] veth1_macvtap: left promiscuous mode [ 360.678731][T12107] veth0_macvtap: left promiscuous mode [ 360.684307][T12107] veth1_vlan: left promiscuous mode [ 360.690306][T12107] veth0_vlan: left promiscuous mode [ 360.728939][T12669] netlink: 'syz.0.2364': attribute type 9 has an invalid length. [ 360.739812][T12669] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2364'. [ 361.131391][T12107] team0 (unregistering): Port device team_slave_1 removed [ 361.174473][T12107] team0 (unregistering): Port device team_slave_0 removed [ 361.648759][T12670] netlink: 'syz.0.2364': attribute type 9 has an invalid length. [ 361.654081][T12640] chnl_net:caif_netlink_parms(): no params data found [ 361.680439][T12670] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2364'. [ 361.783434][T12681] netlink: 'syz.1.2369': attribute type 1 has an invalid length. [ 361.812081][T12681] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.2369'. [ 361.916284][T12640] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.923440][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.930960][T12640] bridge_slave_0: entered allmulticast mode [ 361.938062][T12640] bridge_slave_0: entered promiscuous mode [ 361.945895][T12640] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.953076][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.960740][T12640] bridge_slave_1: entered allmulticast mode [ 361.968211][T12640] bridge_slave_1: entered promiscuous mode [ 362.076688][ T5844] Bluetooth: hci2: command tx timeout [ 362.288791][T12693] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2373'. [ 362.316758][T12703] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2376'. [ 362.334520][T12709] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.2378'. [ 362.343797][T12709] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2378'. [ 362.553308][T12703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.563507][T12703] bond_slave_0: left promiscuous mode [ 362.569228][T12703] bond_slave_0: left allmulticast mode [ 362.578809][T12703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.588661][T12703] bond_slave_1: left promiscuous mode [ 362.594191][T12703] bond_slave_1: left allmulticast mode [ 362.604156][T12703] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 362.613537][T12703] dummy0: left promiscuous mode [ 362.618987][T12703] dummy0: left allmulticast mode [ 362.626592][T12703] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 362.637917][T12703] batadv_slave_0: left promiscuous mode [ 362.643604][T12703] batadv_slave_0: left allmulticast mode [ 362.651469][T12703] bond0 (unregistering): Released all slaves [ 362.669303][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.678950][T12713] netlink: 'syz.3.2377': attribute type 12 has an invalid length. [ 362.689198][T12713] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2377'. [ 362.710614][T12716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2377'. [ 362.767134][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.871136][T12640] team0: Port device team_slave_0 added [ 362.890095][T12640] team0: Port device team_slave_1 added [ 362.938926][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.963329][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.004512][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.026090][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.033529][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.082894][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.106799][T12736] FAULT_INJECTION: forcing a failure. [ 363.106799][T12736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.151903][T12736] CPU: 1 UID: 0 PID: 12736 Comm: syz.3.2386 Not tainted 6.12.0-syzkaller #0 [ 363.160654][T12736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 363.170716][T12736] Call Trace: [ 363.173996][T12736] [ 363.176928][T12736] dump_stack_lvl+0x241/0x360 [ 363.181611][T12736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.186844][T12736] ? __pfx__printk+0x10/0x10 [ 363.191436][T12736] ? __pfx_lock_release+0x10/0x10 [ 363.196477][T12736] should_fail_ex+0x3b0/0x4e0 [ 363.201175][T12736] _copy_from_user+0x2f/0xc0 [ 363.205787][T12736] __sys_bpf+0x1a4/0x810 [ 363.210054][T12736] ? __pfx___sys_bpf+0x10/0x10 [ 363.214853][T12736] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 363.220839][T12736] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.227176][T12736] ? do_syscall_64+0x100/0x230 [ 363.231949][T12736] __x64_sys_bpf+0x7c/0x90 [ 363.236367][T12736] do_syscall_64+0xf3/0x230 [ 363.240869][T12736] ? clear_bhb_loop+0x35/0x90 [ 363.245548][T12736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.251438][T12736] RIP: 0033:0x7f500c17e759 [ 363.255851][T12736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.275483][T12736] RSP: 002b:00007f500ce8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.283913][T12736] RAX: ffffffffffffffda RBX: 00007f500c335f80 RCX: 00007f500c17e759 [ 363.291892][T12736] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 363.299863][T12736] RBP: 00007f500ce8f090 R08: 0000000000000000 R09: 0000000000000000 [ 363.307833][T12736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.315800][T12736] R13: 0000000000000001 R14: 00007f500c335f80 R15: 00007ffd0548da98 [ 363.323780][T12736] [ 363.387175][T12640] hsr_slave_0: entered promiscuous mode [ 363.445216][T12640] hsr_slave_1: entered promiscuous mode [ 363.488644][T12745] FAULT_INJECTION: forcing a failure. [ 363.488644][T12745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.502281][T12745] CPU: 0 UID: 0 PID: 12745 Comm: syz.0.2388 Not tainted 6.12.0-syzkaller #0 [ 363.511008][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 363.512714][T12640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.521064][T12745] Call Trace: [ 363.521075][T12745] [ 363.521084][T12745] dump_stack_lvl+0x241/0x360 [ 363.521116][T12745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.521138][T12745] ? __pfx__printk+0x10/0x10 [ 363.521164][T12745] ? __pfx_lock_release+0x10/0x10 [ 363.521198][T12745] should_fail_ex+0x3b0/0x4e0 [ 363.521224][T12745] _copy_from_user+0x2f/0xc0 [ 363.528830][T12640] Cannot create hsr debugfs directory [ 363.532027][T12745] __sys_bpf+0x1a4/0x810 [ 363.573393][T12745] ? __pfx___sys_bpf+0x10/0x10 [ 363.578165][T12745] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 363.584140][T12745] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.590463][T12745] ? do_syscall_64+0x100/0x230 [ 363.595242][T12745] __x64_sys_bpf+0x7c/0x90 [ 363.599678][T12745] do_syscall_64+0xf3/0x230 [ 363.604175][T12745] ? clear_bhb_loop+0x35/0x90 [ 363.608860][T12745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.614781][T12745] RIP: 0033:0x7f4f9a37e759 [ 363.619208][T12745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.638894][T12745] RSP: 002b:00007f4f9b229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 363.647406][T12745] RAX: ffffffffffffffda RBX: 00007f4f9a535f80 RCX: 00007f4f9a37e759 [ 363.655369][T12745] RDX: 0000000000000020 RSI: 0000000020001e40 RDI: 0000000000000001 [ 363.663337][T12745] RBP: 00007f4f9b229090 R08: 0000000000000000 R09: 0000000000000000 [ 363.671309][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.679269][T12745] R13: 0000000000000000 R14: 00007f4f9a535f80 R15: 00007ffe455da308 [ 363.687247][T12745] [ 364.080529][T12761] FAULT_INJECTION: forcing a failure. [ 364.080529][T12761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.145775][T12761] CPU: 1 UID: 0 PID: 12761 Comm: syz.1.2395 Not tainted 6.12.0-syzkaller #0 [ 364.154525][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 364.164611][T12761] Call Trace: [ 364.167902][T12761] [ 364.170839][T12761] dump_stack_lvl+0x241/0x360 [ 364.175549][T12761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.180859][T12761] ? __pfx__printk+0x10/0x10 [ 364.185477][T12761] ? snprintf+0xda/0x120 [ 364.189737][T12761] should_fail_ex+0x3b0/0x4e0 [ 364.194425][T12761] _copy_to_user+0x31/0xb0 [ 364.198844][T12761] simple_read_from_buffer+0xca/0x150 [ 364.204225][T12761] proc_fail_nth_read+0x1e9/0x250 [ 364.209255][T12761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.214890][T12761] ? rw_verify_area+0x55e/0x6f0 [ 364.219742][T12761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.225289][T12761] vfs_read+0x1fc/0xb70 [ 364.229454][T12761] ? fdget_pos+0x24e/0x320 [ 364.233867][T12761] ? __pfx_vfs_read+0x10/0x10 [ 364.238547][T12761] ? __fget_files+0x3f3/0x470 [ 364.243258][T12761] ? fdget_pos+0x24e/0x320 [ 364.247688][T12761] ksys_read+0x183/0x2b0 [ 364.251941][T12761] ? __pfx_ksys_read+0x10/0x10 [ 364.256717][T12761] ? do_syscall_64+0x100/0x230 [ 364.261486][T12761] ? do_syscall_64+0xb6/0x230 [ 364.266164][T12761] do_syscall_64+0xf3/0x230 [ 364.270669][T12761] ? clear_bhb_loop+0x35/0x90 [ 364.275344][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.281241][T12761] RIP: 0033:0x7f7920b7d19c [ 364.285652][T12761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 364.305255][T12761] RSP: 002b:00007f7921901030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.313669][T12761] RAX: ffffffffffffffda RBX: 00007f7920d35f80 RCX: 00007f7920b7d19c [ 364.321638][T12761] RDX: 000000000000000f RSI: 00007f79219010a0 RDI: 0000000000000008 [ 364.329607][T12761] RBP: 00007f7921901090 R08: 0000000000000000 R09: 0000000000000000 [ 364.337583][T12761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.345550][T12761] R13: 0000000000000000 R14: 00007f7920d35f80 R15: 00007ffc9a87b3a8 [ 364.353534][T12761] [ 364.373493][ T5844] Bluetooth: hci2: command tx timeout [ 364.472681][T12767] netlink: 'syz.3.2398': attribute type 9 has an invalid length. [ 364.519296][T12767] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.2398'. [ 364.668291][T12640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.689565][T12640] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.713035][T12640] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.764771][T12640] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.031957][T12786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.049774][T12786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.135520][T12786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.173890][T12786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.768478][T12640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.924216][T12640] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.980690][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.988008][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.067002][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.074180][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.234738][T12805] FAULT_INJECTION: forcing a failure. [ 366.234738][T12805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.320428][T12805] CPU: 0 UID: 0 PID: 12805 Comm: syz.0.2413 Not tainted 6.12.0-syzkaller #0 [ 366.329180][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 366.339393][T12805] Call Trace: [ 366.342688][T12805] [ 366.345619][T12805] dump_stack_lvl+0x241/0x360 [ 366.350317][T12805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.355525][T12805] ? __pfx__printk+0x10/0x10 [ 366.360143][T12805] ? snprintf+0xda/0x120 [ 366.364403][T12805] should_fail_ex+0x3b0/0x4e0 [ 366.369095][T12805] _copy_to_user+0x31/0xb0 [ 366.373516][T12805] simple_read_from_buffer+0xca/0x150 [ 366.378923][T12805] proc_fail_nth_read+0x1e9/0x250 [ 366.383967][T12805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 366.389610][T12805] ? rw_verify_area+0x55e/0x6f0 [ 366.394483][T12805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 366.400054][T12805] vfs_read+0x1fc/0xb70 [ 366.404216][T12805] ? fdget_pos+0x24e/0x320 [ 366.408650][T12805] ? __pfx_vfs_read+0x10/0x10 [ 366.413330][T12805] ? __fget_files+0x3f3/0x470 [ 366.418108][T12805] ? fdget_pos+0x24e/0x320 [ 366.422530][T12805] ksys_read+0x183/0x2b0 [ 366.426780][T12805] ? __pfx_ksys_read+0x10/0x10 [ 366.431637][T12805] ? do_syscall_64+0x100/0x230 [ 366.436455][T12805] ? do_syscall_64+0xb6/0x230 [ 366.441185][T12805] do_syscall_64+0xf3/0x230 [ 366.445717][T12805] ? clear_bhb_loop+0x35/0x90 [ 366.450422][T12805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.456326][T12805] RIP: 0033:0x7f4f9a37d19c [ 366.460749][T12805] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 366.480365][T12805] RSP: 002b:00007f4f9b229030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.488795][T12805] RAX: ffffffffffffffda RBX: 00007f4f9a535f80 RCX: 00007f4f9a37d19c [ 366.496798][T12805] RDX: 000000000000000f RSI: 00007f4f9b2290a0 RDI: 0000000000000004 [ 366.504788][T12805] RBP: 00007f4f9b229090 R08: 0000000000000000 R09: 0000000000000000 [ 366.512768][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.520742][T12805] R13: 0000000000000000 R14: 00007f4f9a535f80 R15: 00007ffe455da308 [ 366.528738][T12805] [ 366.591973][ T5844] Bluetooth: hci2: command tx timeout [ 366.598809][T12808] netlink: 'syz.1.2411': attribute type 39 has an invalid length. [ 366.809405][T12813] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2414'. [ 366.829593][T12816] netlink: 'syz.2.2415': attribute type 29 has an invalid length. [ 366.849562][T12816] netlink: 'syz.2.2415': attribute type 29 has an invalid length. [ 366.878679][T12816] netlink: 'syz.2.2415': attribute type 29 has an invalid length. [ 366.906574][T12816] netlink: 'syz.2.2415': attribute type 29 has an invalid length. [ 366.951078][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.531773][T12640] veth0_vlan: entered promiscuous mode [ 367.597908][T12640] veth1_vlan: entered promiscuous mode [ 367.695812][T12640] veth0_macvtap: entered promiscuous mode [ 367.715033][T12640] veth1_macvtap: entered promiscuous mode [ 367.766464][T12640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.800083][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.831683][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.863194][T12640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.901783][T12640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.934237][T12640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.966382][T12640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.975154][T12640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.436745][T12109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.462909][T12109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.494297][T12107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.506849][T12107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.637876][ T5844] Bluetooth: hci2: command tx timeout [ 368.793528][T12859] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2431'. [ 370.578792][T12109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.678852][T12109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.359714][T12109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.777822][T12894] FAULT_INJECTION: forcing a failure. [ 371.777822][T12894] name failslab, interval 1, probability 0, space 0, times 0 [ 371.832798][T12892] netlink: 'syz.3.2442': attribute type 4 has an invalid length. [ 371.879881][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz.0.2444 Not tainted 6.12.0-syzkaller #0 [ 371.888735][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 371.898850][T12894] Call Trace: [ 371.902180][T12894] [ 371.905157][T12894] dump_stack_lvl+0x241/0x360 [ 371.909905][T12894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.915167][T12894] ? __pfx__printk+0x10/0x10 [ 371.919832][T12894] ? ref_tracker_alloc+0x332/0x490 [ 371.925007][T12894] should_fail_ex+0x3b0/0x4e0 [ 371.929747][T12894] ? skb_clone+0x20c/0x390 [ 371.934220][T12894] should_failslab+0xac/0x100 [ 371.938956][T12894] ? skb_clone+0x20c/0x390 [ 371.943422][T12894] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 371.948866][T12894] skb_clone+0x20c/0x390 [ 371.953170][T12894] __netlink_deliver_tap+0x3cc/0x7c0 [ 371.958546][T12894] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.963794][T12894] netlink_deliver_tap+0x19d/0x1b0 [ 371.968960][T12894] netlink_unicast+0x7c4/0x990 [ 371.973800][T12894] ? __pfx_netlink_unicast+0x10/0x10 [ 371.979125][T12894] ? __virt_addr_valid+0x183/0x530 [ 371.984296][T12894] ? __check_object_size+0x48e/0x900 [ 371.989648][T12894] netlink_sendmsg+0x8e4/0xcb0 [ 371.994511][T12894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.999863][T12894] ? aa_sock_msg_perm+0x91/0x160 [ 372.004868][T12894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.010204][T12894] __sock_sendmsg+0x221/0x270 [ 372.014945][T12894] ____sys_sendmsg+0x52a/0x7e0 [ 372.019799][T12894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.025197][T12894] __sys_sendmsg+0x292/0x380 [ 372.029851][T12894] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.035104][T12894] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 372.041408][T12894] ? do_syscall_64+0xb6/0x230 [ 372.046161][T12894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 372.052555][T12894] ? do_syscall_64+0x100/0x230 [ 372.057395][T12894] ? do_syscall_64+0xb6/0x230 [ 372.062135][T12894] do_syscall_64+0xf3/0x230 [ 372.066693][T12894] ? clear_bhb_loop+0x35/0x90 [ 372.071429][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.077369][T12894] RIP: 0033:0x7f4f9a37e759 [ 372.081833][T12894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.101500][T12894] RSP: 002b:00007f4f9b229038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.109983][T12894] RAX: ffffffffffffffda RBX: 00007f4f9a535f80 RCX: 00007f4f9a37e759 [ 372.118011][T12894] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 372.126029][T12894] RBP: 00007f4f9b229090 R08: 0000000000000000 R09: 0000000000000000 [ 372.134050][T12894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.142081][T12894] R13: 0000000000000000 R14: 00007f4f9a535f80 R15: 00007ffe455da308 [ 372.150241][T12894] [ 372.154759][T12892] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 372.175625][T12892] netlink: 88156 bytes leftover after parsing attributes in process `syz.3.2442'. [ 372.371950][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.386935][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.401117][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.411327][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.421957][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 372.431595][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.456861][T12109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.474679][T12894] netlink: 'syz.0.2444': attribute type 21 has an invalid length. [ 372.494385][T12894] netlink: 'syz.0.2444': attribute type 20 has an invalid length. [ 372.692722][T12109] bridge_slave_1: left allmulticast mode [ 372.706016][T12109] bridge_slave_1: left promiscuous mode [ 372.732801][T12109] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.756610][T12109] bridge_slave_0: left allmulticast mode [ 372.762318][T12109] bridge_slave_0: left promiscuous mode [ 372.795596][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.389032][T12109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.401644][T12109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.419547][T12109] bond0 (unregistering): Released all slaves [ 373.439699][T12928] netlink: 'syz.1.2456': attribute type 10 has an invalid length. [ 373.461421][T12928] team0: left allmulticast mode [ 373.476088][T12928] team_slave_0: left allmulticast mode [ 373.481680][T12928] team_slave_1: left allmulticast mode [ 373.489089][T12928] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 373.497929][T12928] team0: left promiscuous mode [ 373.502741][T12928] team_slave_0: left promiscuous mode [ 373.512557][T12928] team_slave_1: left promiscuous mode [ 373.518613][T12928] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 373.527451][T12928] bridge0: port 3(team0) entered disabled state [ 373.572595][T12928] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.581453][ T5844] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 373.629935][T12928] team0: entered promiscuous mode [ 373.696109][T12928] team_slave_0: entered promiscuous mode [ 373.721066][T12928] team_slave_1: entered promiscuous mode [ 373.748876][T12928] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 373.783578][T12928] team0: entered allmulticast mode [ 373.826216][T12953] FAULT_INJECTION: forcing a failure. [ 373.826216][T12953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.827593][T12953] [ 373.827602][T12953] ====================================================== [ 373.827607][T12953] WARNING: possible circular locking dependency detected [ 373.827613][T12953] 6.12.0-syzkaller #0 Not tainted [ 373.827622][T12953] ------------------------------------------------------ [ 373.827628][T12953] syz.2.2465/12953 is trying to acquire lock: [ 373.827636][T12953] ffffffff8e813460 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x1a3/0xeb0 [ 373.827682][T12953] [ 373.827682][T12953] but task is already holding lock: [ 373.827687][T12953] ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 373.827727][T12953] [ 373.827727][T12953] which lock already depends on the new lock. [ 373.827727][T12953] [ 373.827733][T12953] [ 373.827733][T12953] the existing dependency chain (in reverse order) is: [ 373.827738][T12953] [ 373.827738][T12953] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 373.827760][T12953] lock_acquire+0x1ed/0x550 [ 373.827780][T12953] _raw_spin_lock_nested+0x31/0x40 [ 373.827797][T12953] raw_spin_rq_lock_nested+0x2a/0x140 [ 373.827814][T12953] task_rq_lock+0xc6/0x360 [ 373.827831][T12953] cgroup_move_task+0x9b/0x5a0 [ 373.827848][T12953] css_set_move_task+0x72e/0x950 [ 373.827864][T12953] cgroup_post_fork+0x256/0x880 [ 373.827878][T12953] copy_process+0x39e9/0x3d50 [ 373.827897][T12953] kernel_clone+0x226/0x8f0 [ 373.827916][T12953] user_mode_thread+0x132/0x1a0 [ 373.827937][T12953] rest_init+0x23/0x300 [ 373.827956][T12953] start_kernel+0x47f/0x500 [ 373.827972][T12953] x86_64_start_reservations+0x2a/0x30 [ 373.828003][T12953] x86_64_start_kernel+0x9f/0xa0 [ 373.828020][T12953] common_startup_64+0x13e/0x147 [ 373.828036][T12953] [ 373.828036][T12953] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 373.828067][T12953] lock_acquire+0x1ed/0x550 [ 373.828087][T12953] _raw_spin_lock_irqsave+0xd5/0x120 [ 373.828103][T12953] try_to_wake_up+0xbe/0x14b0 [ 373.828117][T12953] __wake_up_common_lock+0x130/0x1e0 [ 373.828138][T12953] tty_port_default_wakeup+0xa6/0xf0 [ 373.828170][T12953] serial8250_tx_chars+0x6e2/0x930 [ 373.828191][T12953] serial8250_handle_irq+0x630/0xb80 [ 373.828212][T12953] serial8250_default_handle_irq+0xd1/0x1f0 [ 373.828228][T12953] serial8250_interrupt+0xa9/0x1f0 [ 373.828245][T12953] __handle_irq_event_percpu+0x29a/0xa80 [ 373.828265][T12953] handle_irq_event+0x89/0x1f0 [ 373.828283][T12953] handle_edge_irq+0x25f/0xc20 [ 373.828307][T12953] __common_interrupt+0x136/0x230 [ 373.828327][T12953] common_interrupt+0xb4/0xd0 [ 373.828329][T12955] FAULT_INJECTION: forcing a failure. [ 373.828329][T12955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.828358][T12953] asm_common_interrupt+0x26/0x40 [ 373.828374][T12953] acpi_safe_halt+0x21/0x30 [ 373.828390][T12953] acpi_idle_enter+0xe4/0x140 [ 373.828405][T12953] cpuidle_enter_state+0x109/0x470 [ 373.828420][T12953] cpuidle_enter+0x5d/0xa0 [ 373.828436][T12953] do_idle+0x375/0x5d0 [ 373.828450][T12953] cpu_startup_entry+0x42/0x60 [ 373.828464][T12953] rest_init+0x2dc/0x300 [ 373.828480][T12953] start_kernel+0x47f/0x500 [ 373.828491][T12953] x86_64_start_reservations+0x2a/0x30 [ 373.828513][T12953] x86_64_start_kernel+0x9f/0xa0 [ 373.828528][T12953] common_startup_64+0x13e/0x147 [ 373.828541][T12953] [ 373.828541][T12953] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 373.828564][T12953] lock_acquire+0x1ed/0x550 [ 373.828580][T12953] _raw_spin_lock_irqsave+0xd5/0x120 [ 373.828597][T12953] __wake_up_common_lock+0x25/0x1e0 [ 373.828614][T12953] tty_port_default_wakeup+0xa6/0xf0 [ 373.828631][T12953] serial8250_tx_chars+0x6e2/0x930 [ 373.828650][T12953] serial8250_handle_irq+0x630/0xb80 [ 373.828666][T12953] serial8250_default_handle_irq+0xd1/0x1f0 [ 373.828682][T12953] serial8250_interrupt+0xa9/0x1f0 [ 373.828695][T12953] __handle_irq_event_percpu+0x29a/0xa80 [ 373.828710][T12953] handle_irq_event+0x89/0x1f0 [ 373.828723][T12953] handle_edge_irq+0x25f/0xc20 [ 373.828736][T12953] __common_interrupt+0x136/0x230 [ 373.828759][T12953] common_interrupt+0xb4/0xd0 [ 373.828775][T12953] asm_common_interrupt+0x26/0x40 [ 373.828789][T12953] acpi_safe_halt+0x21/0x30 [ 373.828804][T12953] acpi_idle_enter+0xe4/0x140 [ 373.828819][T12953] cpuidle_enter_state+0x109/0x470 [ 373.828834][T12953] cpuidle_enter+0x5d/0xa0 [ 373.828848][T12953] do_idle+0x375/0x5d0 [ 373.828861][T12953] cpu_startup_entry+0x42/0x60 [ 373.828874][T12953] rest_init+0x2dc/0x300 [ 373.828890][T12953] start_kernel+0x47f/0x500 [ 373.828902][T12953] x86_64_start_reservations+0x2a/0x30 [ 373.828916][T12953] x86_64_start_kernel+0x9f/0xa0 [ 373.828931][T12953] common_startup_64+0x13e/0x147 [ 373.828944][T12953] [ 373.828944][T12953] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 373.828961][T12953] lock_acquire+0x1ed/0x550 [ 373.828977][T12953] _raw_spin_lock_irqsave+0xd5/0x120 [ 373.828989][T12953] serial8250_console_write+0x1a7/0x1ed0 [ 373.829006][T12953] console_flush_all+0x86b/0xeb0 [ 373.829020][T12953] console_unlock+0x14f/0x3b0 [ 373.829032][T12953] vprintk_emit+0x730/0xa10 [ 373.829045][T12953] _printk+0xd5/0x120 [ 373.829058][T12953] register_console+0xbf5/0xfd0 [ 373.829072][T12953] univ8250_console_init+0x52/0x90 [ 373.829088][T12953] console_init+0x1b8/0x6f0 [ 373.829100][T12953] start_kernel+0x2d8/0x500 [ 373.829112][T12953] x86_64_start_reservations+0x2a/0x30 [ 373.829127][T12953] x86_64_start_kernel+0x9f/0xa0 [ 373.829142][T12953] common_startup_64+0x13e/0x147 [ 373.829155][T12953] [ 373.829155][T12953] -> #0 (console_owner){-.-.}-{0:0}: [ 373.829172][T12953] validate_chain+0x18ef/0x5920 [ 373.829184][T12953] __lock_acquire+0x1384/0x2050 [ 373.829200][T12953] lock_acquire+0x1ed/0x550 [ 373.829216][T12953] console_flush_all+0x7f8/0xeb0 [ 373.829230][T12953] console_unlock+0x14f/0x3b0 [ 373.829242][T12953] vprintk_emit+0x730/0xa10 [ 373.829254][T12953] _printk+0xd5/0x120 [ 373.829267][T12953] should_fail_ex+0x391/0x4e0 [ 373.829279][T12953] strncpy_from_user+0x36/0x260 [ 373.829291][T12953] strncpy_from_user_nofault+0x71/0x140 [ 373.829304][T12953] bpf_probe_read_compat_str+0xe9/0x180 [ 373.829322][T12953] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 373.829335][T12953] bpf_trace_run4+0x334/0x590 [ 373.829353][T12953] __traceiter_sched_switch+0x98/0xd0 [ 373.829366][T12953] __schedule+0x22bb/0x4c30 [ 373.829379][T12953] preempt_schedule_irq+0xfb/0x1c0 [ 373.829392][T12953] irqentry_exit+0x5e/0x90 [ 373.829405][T12953] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.829424][T12953] kasan_check_range+0x86/0x290 [ 373.829439][T12953] __asan_memset+0x23/0x50 [ 373.829450][T12953] inet_diag_dump_icsk+0x12c4/0x2060 [ 373.829461][T12953] inet_diag_dump_compat+0x2cb/0x540 [ 373.829473][T12953] netlink_dump+0x647/0xd80 [ 373.829486][T12953] __netlink_dump_start+0x5a2/0x790 [ 373.829499][T12953] inet_diag_rcv_msg_compat+0x209/0x4e0 [ 373.829515][T12953] sock_diag_rcv_msg+0x3dc/0x5f0 [ 373.829534][T12953] netlink_rcv_skb+0x1e3/0x430 [ 373.829547][T12953] netlink_unicast+0x7f6/0x990 [ 373.829558][T12953] netlink_sendmsg+0x8e4/0xcb0 [ 373.829572][T12953] __sock_sendmsg+0x221/0x270 [ 373.829583][T12953] ____sys_sendmsg+0x52a/0x7e0 [ 373.829598][T12953] __sys_sendmsg+0x292/0x380 [ 373.829612][T12953] do_syscall_64+0xf3/0x230 [ 373.829626][T12953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.829640][T12953] [ 373.829640][T12953] other info that might help us debug this: [ 373.829640][T12953] [ 373.829644][T12953] Chain exists of: [ 373.829644][T12953] console_owner --> &p->pi_lock --> &rq->__lock [ 373.829644][T12953] [ 373.829664][T12953] Possible unsafe locking scenario: [ 373.829664][T12953] [ 373.829668][T12953] CPU0 CPU1 [ 373.829671][T12953] ---- ---- [ 373.829675][T12953] lock(&rq->__lock); [ 373.829683][T12953] lock(&p->pi_lock); [ 373.829692][T12953] lock(&rq->__lock); [ 373.829701][T12953] lock(console_owner); [ 373.829709][T12953] [ 373.829709][T12953] *** DEADLOCK *** [ 373.829709][T12953] [ 373.829712][T12953] 5 locks held by syz.2.2465/12953: [ 373.829725][T12953] #0: ffff888052a2a6c8 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 373.829758][T12953] #1: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 373.829791][T12953] #2: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 373.829821][T12953] #3: ffffffff8e8134c0 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 373.829850][T12953] #4: ffffffff8e8130d0 (console_srcu){....}-{0:0}, at: console_flush_all+0x1a3/0xeb0 [ 373.829882][T12953] [ 373.829882][T12953] stack backtrace: [ 373.829889][T12953] CPU: 1 UID: 0 PID: 12953 Comm: syz.2.2465 Not tainted 6.12.0-syzkaller #0 [ 373.829904][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 373.829912][T12953] Call Trace: [ 373.829918][T12953] [ 373.829925][T12953] dump_stack_lvl+0x241/0x360 [ 373.829946][T12953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.829964][T12953] ? __pfx__printk+0x10/0x10 [ 373.829995][T12953] print_circular_bug+0x13a/0x1b0 [ 373.830015][T12953] check_noncircular+0x36a/0x4a0 [ 373.830037][T12953] ? __pfx_check_noncircular+0x10/0x10 [ 373.830054][T12953] ? lockdep_lock+0x123/0x2b0 [ 373.830079][T12953] ? __pfx_perf_trace_lock+0x10/0x10 [ 373.830102][T12953] validate_chain+0x18ef/0x5920 [ 373.830117][T12953] ? trace_call_bpf+0xbc/0x8a0 [ 373.830160][T12953] ? __pfx_validate_chain+0x10/0x10 [ 373.830184][T12953] ? trace_call_bpf+0x613/0x8a0 [ 373.830201][T12953] ? vsnprintf+0x1cc3/0x1da0 [ 373.830242][T12953] ? perf_trace_run_bpf_submit+0x10b/0x180 [ 373.830265][T12953] ? mark_lock+0x9a/0x360 [ 373.830283][T12953] __lock_acquire+0x1384/0x2050 [ 373.830330][T12953] lock_acquire+0x1ed/0x550 [ 373.830352][T12953] ? console_flush_all+0x1a3/0xeb0 [ 373.830378][T12953] ? __pfx_lock_acquire+0x10/0x10 [ 373.830398][T12953] ? __pfx_lock_release+0x10/0x10 [ 373.830415][T12953] ? do_raw_spin_lock+0x14f/0x370 [ 373.830441][T12953] ? do_raw_spin_unlock+0x13c/0x8b0 [ 373.830459][T12953] ? console_flush_all+0x511/0xeb0 [ 373.830476][T12953] ? console_flush_all+0x1a3/0xeb0 [ 373.830495][T12953] console_flush_all+0x7f8/0xeb0 [ 373.830510][T12953] ? console_flush_all+0x1a3/0xeb0 [ 373.830532][T12953] ? console_flush_all+0x1a3/0xeb0 [ 373.830557][T12953] ? __pfx_console_flush_all+0x10/0x10 [ 373.830576][T12953] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 373.830592][T12953] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.830616][T12953] ? this_cpu_in_panic+0x4f/0x80 [ 373.830630][T12953] ? is_printk_legacy_deferred+0x43/0x50 [ 373.830649][T12953] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 373.830669][T12953] console_unlock+0x14f/0x3b0 [ 373.830687][T12953] ? __pfx_console_unlock+0x10/0x10 [ 373.830708][T12953] ? this_cpu_in_panic+0x4f/0x80 [ 373.830722][T12953] ? is_printk_legacy_deferred+0x43/0x50 [ 373.830740][T12953] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 373.830760][T12953] vprintk_emit+0x730/0xa10 [ 373.830779][T12953] ? __pfx_vprintk_emit+0x10/0x10 [ 373.830805][T12953] ? __pfx_perf_tp_event+0x10/0x10 [ 373.830829][T12953] _printk+0xd5/0x120 [ 373.830852][T12953] ? __pfx__printk+0x10/0x10 [ 373.830881][T12953] should_fail_ex+0x391/0x4e0 [ 373.830901][T12953] strncpy_from_user+0x36/0x260 [ 373.830920][T12953] strncpy_from_user_nofault+0x71/0x140 [ 373.830938][T12953] bpf_probe_read_compat_str+0xe9/0x180 [ 373.830960][T12953] ? bpf_trace_run4+0x244/0x590 [ 373.830976][T12953] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 373.830989][T12953] bpf_trace_run4+0x334/0x590 [ 373.831005][T12953] ? rcu_read_lock_sched_held+0x8d/0x130 [ 373.831022][T12953] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 373.831038][T12953] ? __pfx_bpf_trace_run4+0x10/0x10 [ 373.831061][T12953] ? __pfx_probe_sched_switch+0x10/0x10 [ 373.831078][T12953] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 373.831093][T12953] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 373.831111][T12953] __traceiter_sched_switch+0x98/0xd0 [ 373.831131][T12953] __schedule+0x22bb/0x4c30 [ 373.831159][T12953] ? perf_trace_run_bpf_submit+0x100/0x180 [ 373.831188][T12953] ? __pfx___schedule+0x10/0x10 [ 373.831208][T12953] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.831239][T12953] ? preempt_schedule_irq+0xf0/0x1c0 [ 373.831263][T12953] preempt_schedule_irq+0xfb/0x1c0 [ 373.831279][T12953] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 373.831296][T12953] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.831328][T12953] irqentry_exit+0x5e/0x90 [ 373.831341][T12953] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.831362][T12953] RIP: 0010:kasan_check_range+0x86/0x290 [ 373.831378][T12953] Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc [ 373.831389][T12953] RSP: 0018:ffffc9000490edd0 EFLAGS: 00000246 [ 373.831400][T12953] RAX: ffffc9000490f001 RBX: 1ffff92000921e1e RCX: ffffffff8a5150e4 [ 373.831411][T12953] RDX: 0000000000000001 RSI: 0000000000000040 RDI: ffffc9000490f0f0 [ 373.831420][T12953] RBP: fffffffffffffff9 R08: ffffc9000490f12f R09: 1ffff92000921e25 [ 373.831429][T12953] R10: dffffc0000000000 R11: fffff52000921e1f R12: 0000000000000000 [ 373.831439][T12953] R13: ffff888034e01d80 R14: dffffc0000000001 R15: fffff52000921e26 [ 373.831460][T12953] ? inet_diag_dump_icsk+0x12c4/0x2060 [ 373.831484][T12953] __asan_memset+0x23/0x50 [ 373.831497][T12953] inet_diag_dump_icsk+0x12c4/0x2060 [ 373.831539][T12953] ? __pfx_inet_diag_dump_icsk+0x10/0x10 [ 373.831553][T12953] ? perf_trace_run_bpf_submit+0x100/0x180 [ 373.831577][T12953] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 373.831600][T12953] ? mark_lock+0x9a/0x360 [ 373.831618][T12953] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.831651][T12953] ? lockdep_hardirqs_on+0x99/0x150 [ 373.831676][T12953] ? __pfx_tcp_diag_dump+0x10/0x10 [ 373.831695][T12953] ? tcp_diag_dump+0x64/0xc0 [ 373.831712][T12953] inet_diag_dump_compat+0x2cb/0x540 [ 373.831726][T12953] ? __build_skb_around+0x245/0x3d0 [ 373.831750][T12953] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 373.831783][T12953] netlink_dump+0x647/0xd80 [ 373.831812][T12953] ? __pfx_netlink_dump+0x10/0x10 [ 373.831848][T12953] ? __inet_diag_dump_start+0x8c9/0xa50 [ 373.831871][T12953] __netlink_dump_start+0x5a2/0x790 [ 373.831898][T12953] inet_diag_rcv_msg_compat+0x209/0x4e0 [ 373.831916][T12953] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 373.831935][T12953] ? sock_diag_rcv_msg+0xca/0x5f0 [ 373.831953][T12953] ? __pfx_lock_release+0x10/0x10 [ 373.831971][T12953] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 373.831984][T12953] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 373.831996][T12953] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 373.832019][T12953] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 373.832036][T12953] sock_diag_rcv_msg+0x3dc/0x5f0 [ 373.832059][T12953] netlink_rcv_skb+0x1e3/0x430 [ 373.832076][T12953] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 373.832096][T12953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.832139][T12953] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.832159][T12953] netlink_unicast+0x7f6/0x990 [ 373.832183][T12953] ? __pfx_netlink_unicast+0x10/0x10 [ 373.832195][T12953] ? __virt_addr_valid+0x183/0x530 [ 373.832213][T12953] ? __check_object_size+0x48e/0x900 [ 373.832236][T12953] netlink_sendmsg+0x8e4/0xcb0 [ 373.832265][T12953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.832286][T12953] ? ____sys_sendmsg+0x406/0x7e0 [ 373.832301][T12953] ? aa_sock_msg_perm+0x91/0x160 [ 373.832326][T12953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.832340][T12953] __sock_sendmsg+0x221/0x270 [ 373.832363][T12953] ____sys_sendmsg+0x52a/0x7e0 [ 373.832391][T12953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.832427][T12953] __sys_sendmsg+0x292/0x380 [ 373.832448][T12953] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.832463][T12953] ? __hrtimer_run_queues+0xcdc/0xd50 [ 373.832509][T12953] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 373.832525][T12953] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 373.832541][T12953] ? do_syscall_64+0xb6/0x230 [ 373.832569][T12953] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.832589][T12953] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.832606][T12953] ? __irq_exit_rcu+0x100/0x1c0 [ 373.832627][T12953] ? do_syscall_64+0xb6/0x230 [ 373.832648][T12953] do_syscall_64+0xf3/0x230 [ 373.832665][T12953] ? clear_bhb_loop+0x35/0x90 [ 373.832685][T12953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.832699][T12953] RIP: 0033:0x7f1697f7e759 [ 373.832712][T12953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.832722][T12953] RSP: 002b:00007f1698d64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.832736][T12953] RAX: ffffffffffffffda RBX: 00007f1698135f80 RCX: 00007f1697f7e759 [ 373.832746][T12953] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 373.832754][T12953] RBP: 00007f1698d64090 R08: 0000000000000000 R09: 0000000000000000 [ 373.832762][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.832770][T12953] R13: 0000000000000000 R14: 00007f1698135f80 R15: 00007ffccab43728 [ 373.832797][T12953] [ 373.845907][T12953] CPU: 1 UID: 0 PID: 12953 Comm: syz.2.2465 Not tainted 6.12.0-syzkaller #0 [ 373.845940][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 373.845951][T12953] Call Trace: [ 373.845962][T12953] [ 373.845973][T12953] dump_stack_lvl+0x241/0x360 [ 373.846008][T12953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.846031][T12953] ? __pfx__printk+0x10/0x10 [ 373.846070][T12953] should_fail_ex+0x3b0/0x4e0 [ 373.846100][T12953] strncpy_from_user+0x36/0x260 [ 373.846129][T12953] strncpy_from_user_nofault+0x71/0x140 [ 373.846159][T12953] bpf_probe_read_compat_str+0xe9/0x180 [ 373.846190][T12953] ? bpf_trace_run4+0x244/0x590 [ 373.846213][T12953] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 373.846236][T12953] bpf_trace_run4+0x334/0x590 [ 373.846258][T12953] ? rcu_read_lock_sched_held+0x8d/0x130 [ 373.846283][T12953] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 373.846314][T12953] ? __pfx_bpf_trace_run4+0x10/0x10 [ 373.846349][T12953] ? __pfx_probe_sched_switch+0x10/0x10 [ 373.846373][T12953] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 373.846395][T12953] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 373.846422][T12953] __traceiter_sched_switch+0x98/0xd0 [ 373.846454][T12953] __schedule+0x22bb/0x4c30 [ 373.846497][T12953] ? perf_trace_run_bpf_submit+0x100/0x180 [ 373.846541][T12953] ? __pfx___schedule+0x10/0x10 [ 373.846571][T12953] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.846617][T12953] ? preempt_schedule_irq+0xf0/0x1c0 [ 373.846646][T12953] preempt_schedule_irq+0xfb/0x1c0 [ 373.846669][T12953] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 373.846694][T12953] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.846739][T12953] irqentry_exit+0x5e/0x90 [ 373.846761][T12953] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.846786][T12953] RIP: 0010:kasan_check_range+0x86/0x290 [ 373.846813][T12953] Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc [ 373.846831][T12953] RSP: 0018:ffffc9000490edd0 EFLAGS: 00000246 [ 373.846854][T12953] RAX: ffffc9000490f001 RBX: 1ffff92000921e1e RCX: ffffffff8a5150e4 [ 373.846871][T12953] RDX: 0000000000000001 RSI: 0000000000000040 RDI: ffffc9000490f0f0 [ 373.846886][T12953] RBP: fffffffffffffff9 R08: ffffc9000490f12f R09: 1ffff92000921e25 [ 373.846902][T12953] R10: dffffc0000000000 R11: fffff52000921e1f R12: 0000000000000000 [ 373.846918][T12953] R13: ffff888034e01d80 R14: dffffc0000000001 R15: fffff52000921e26 [ 373.846949][T12953] ? inet_diag_dump_icsk+0x12c4/0x2060 [ 373.846986][T12953] __asan_memset+0x23/0x50 [ 373.847008][T12953] inet_diag_dump_icsk+0x12c4/0x2060 [ 373.847068][T12953] ? __pfx_inet_diag_dump_icsk+0x10/0x10 [ 373.847089][T12953] ? perf_trace_run_bpf_submit+0x100/0x180 [ 373.847126][T12953] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 373.847160][T12953] ? mark_lock+0x9a/0x360 [ 373.847187][T12953] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.847234][T12953] ? lockdep_hardirqs_on+0x99/0x150 [ 373.847269][T12953] ? __pfx_tcp_diag_dump+0x10/0x10 [ 373.847297][T12953] ? tcp_diag_dump+0x64/0xc0 [ 373.847331][T12953] inet_diag_dump_compat+0x2cb/0x540 [ 373.847353][T12953] ? __build_skb_around+0x245/0x3d0 [ 373.847389][T12953] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 373.847439][T12953] netlink_dump+0x647/0xd80 [ 373.847483][T12953] ? __pfx_netlink_dump+0x10/0x10 [ 373.847534][T12953] ? __inet_diag_dump_start+0x8c9/0xa50 [ 373.847571][T12953] __netlink_dump_start+0x5a2/0x790 [ 373.847610][T12953] inet_diag_rcv_msg_compat+0x209/0x4e0 [ 373.847637][T12953] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 373.847666][T12953] ? sock_diag_rcv_msg+0xca/0x5f0 [ 373.847693][T12953] ? __pfx_lock_release+0x10/0x10 [ 373.847719][T12953] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 373.847739][T12953] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 373.847759][T12953] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 373.847794][T12953] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 373.847820][T12953] sock_diag_rcv_msg+0x3dc/0x5f0 [ 373.847854][T12953] netlink_rcv_skb+0x1e3/0x430 [ 373.847880][T12953] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 373.847909][T12953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.847971][T12953] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.848000][T12953] netlink_unicast+0x7f6/0x990 [ 373.848036][T12953] ? __pfx_netlink_unicast+0x10/0x10 [ 373.848056][T12953] ? __virt_addr_valid+0x183/0x530 [ 373.848083][T12953] ? __check_object_size+0x48e/0x900 [ 373.848116][T12953] netlink_sendmsg+0x8e4/0xcb0 [ 373.848160][T12953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.848191][T12953] ? ____sys_sendmsg+0x406/0x7e0 [ 373.848214][T12953] ? aa_sock_msg_perm+0x91/0x160 [ 373.848249][T12953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.848270][T12953] __sock_sendmsg+0x221/0x270 [ 373.848298][T12953] ____sys_sendmsg+0x52a/0x7e0 [ 373.848347][T12953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.848399][T12953] __sys_sendmsg+0x292/0x380 [ 373.848430][T12953] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.848453][T12953] ? __hrtimer_run_queues+0xcdc/0xd50 [ 373.848520][T12953] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 373.848545][T12953] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 373.848569][T12953] ? do_syscall_64+0xb6/0x230 [ 373.848609][T12953] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.848639][T12953] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.848664][T12953] ? __irq_exit_rcu+0x100/0x1c0 [ 373.848693][T12953] ? do_syscall_64+0xb6/0x230 [ 373.848723][T12953] do_syscall_64+0xf3/0x230 [ 373.848747][T12953] ? clear_bhb_loop+0x35/0x90 [ 373.848776][T12953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.848798][T12953] RIP: 0033:0x7f1697f7e759 [ 373.848818][T12953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.848834][T12953] RSP: 002b:00007f1698d64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.848858][T12953] RAX: ffffffffffffffda RBX: 00007f1698135f80 RCX: 00007f1697f7e759 [ 373.848875][T12953] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000005 [ 373.848889][T12953] RBP: 00007f1698d64090 R08: 0000000000000000 R09: 0000000000000000 [ 373.848903][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.848917][T12953] R13: 0000000000000000 R14: 00007f1698135f80 R15: 00007ffccab43728 [ 373.848959][T12953] [ 373.876607][T12928] team_slave_0: entered allmulticast mode [ 373.930746][T12955] CPU: 0 UID: 0 PID: 12955 Comm: syz.0.2464 Not tainted 6.12.0-syzkaller #0 [ 374.117417][T12928] team_slave_1: entered allmulticast mode [ 374.118296][T12955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 374.118314][T12955] Call Trace: [ 374.196104][T12928] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 374.199726][T12955] [ 374.199743][T12955] dump_stack_lvl+0x241/0x360 [ 374.300852][T12928] bond0: (slave team0): Enslaving as an active interface with an up link [ 374.303119][T12955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.398791][T12931] netlink: 'syz.1.2456': attribute type 10 has an invalid length. [ 374.402177][T12955] ? __pfx__printk+0x10/0x10 [ 374.402211][T12955] ? trace_call_bpf+0x613/0x8a0 [ 376.233881][T12955] ? __pfx_lock_release+0x10/0x10 [ 376.238926][T12955] ? aa_file_perm+0x137/0xf50 [ 376.243610][T12955] ? aa_file_perm+0x3ef/0xf50 [ 376.248302][T12955] should_fail_ex+0x3b0/0x4e0 [ 376.252990][T12955] _copy_from_user+0x2f/0xc0 [ 376.257583][T12955] kstrtouint_from_user+0xc6/0x190 [ 376.262705][T12955] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 376.268434][T12955] ? __pfx_lock_acquire+0x10/0x10 [ 376.273485][T12955] proc_fail_nth_write+0xaa/0x2d0 [ 376.278513][T12955] ? common_file_perm+0x1a6/0x210 [ 376.283548][T12955] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 376.289192][T12955] ? bpf_lsm_file_permission+0x9/0x10 [ 376.294568][T12955] ? preempt_count_add+0x93/0x190 [ 376.299599][T12955] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 376.305237][T12955] vfs_write+0x2a3/0xd30 [ 376.309491][T12955] ? fdget_pos+0x24e/0x320 [ 376.313939][T12955] ? __pfx_vfs_write+0x10/0x10 [ 376.318713][T12955] ? __fget_files+0x3f3/0x470 [ 376.323400][T12955] ? fdget_pos+0x24e/0x320 [ 376.327856][T12955] ksys_write+0x183/0x2b0 [ 376.332193][T12955] ? __pfx_ksys_write+0x10/0x10 [ 376.337647][T12955] ? rcu_is_watching+0x15/0xb0 [ 376.342432][T12955] ? rcu_is_watching+0x15/0xb0 [ 376.347207][T12955] do_syscall_64+0xf3/0x230 [ 376.351724][T12955] ? clear_bhb_loop+0x35/0x90 [ 376.356416][T12955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.362313][T12955] RIP: 0033:0x7f4f9a37d23f [ 376.366735][T12955] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 376.386458][T12955] RSP: 002b:00007f4f9b229030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 376.394878][T12955] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f9a37d23f [ 376.402857][T12955] RDX: 0000000000000001 RSI: 00007f4f9b2290a0 RDI: 0000000000000006 [ 376.410838][T12955] RBP: 00007f4f9b229090 R08: 0000000000000000 R09: 0000000000000000 [ 376.418848][T12955] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 376.426853][T12955] R13: 0000000000000000 R14: 00007f4f9a535f80 R15: 00007ffe455da308 [ 376.434880][T12955] [ 376.455442][ T54] Bluetooth: hci2: command tx timeout [ 376.483741][T12931] bond0: (slave team0): Releasing backup interface [ 376.495750][T12931] team0: left promiscuous mode [ 376.511899][T12931] team0: left allmulticast mode [ 376.519270][T12931] team_slave_0: left allmulticast mode [ 376.525106][T12931] team_slave_1: left allmulticast mode [ 376.535623][T12931] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 376.543614][T12931] team_slave_0: left promiscuous mode [ 376.549219][T12931] team_slave_1: left promiscuous mode [ 376.554680][T12931] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 376.609997][T12931] bridge0: port 3(team0) entered blocking state [ 376.618109][T12931] bridge0: port 3(team0) entered disabled state [ 376.624627][T12931] team0: entered allmulticast mode [ 376.630663][T12931] team_slave_0: entered allmulticast mode [ 376.637651][T12931] team_slave_1: entered allmulticast mode [ 376.643555][T12931] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 376.654120][T12931] team0: entered promiscuous mode [ 376.660182][T12931] team_slave_0: entered promiscuous mode [ 376.667697][T12931] team_slave_1: entered promiscuous mode [ 376.673582][T12931] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 376.712466][T12950] netlink: 'syz.3.2463': attribute type 10 has an invalid length. [ 376.724346][T12950] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 376.732275][T12950] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 376.742859][T12950] team0: Port device netdevsim0 added [ 376.858733][T12109] hsr_slave_0: left promiscuous mode [ 376.864614][T12109] hsr_slave_1: left promiscuous mode [ 376.870962][T12109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.880515][T12109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.889888][T12109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.897642][T12109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.907165][T12109] veth1_macvtap: left promiscuous mode [ 376.912683][T12109] veth0_macvtap: left promiscuous mode [ 376.918577][T12109] veth1_vlan: left promiscuous mode [ 376.923977][T12109] veth0_vlan: left promiscuous mode [ 377.101881][T12109] team0 (unregistering): Port device team_slave_1 removed [ 377.131206][T12109] team0 (unregistering): Port device team_slave_0 removed [ 377.240498][T12897] chnl_net:caif_netlink_parms(): no params data found [ 377.271457][T12897] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.278660][T12897] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.285881][T12897] bridge_slave_0: entered allmulticast mode [ 377.292459][T12897] bridge_slave_0: entered promiscuous mode [ 377.301698][T12897] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.308906][T12897] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.316562][T12897] bridge_slave_1: entered allmulticast mode [ 377.323309][T12897] bridge_slave_1: entered promiscuous mode [ 377.354497][T12897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.372716][T12897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.399790][T12897] team0: Port device team_slave_0 added [ 377.407826][T12897] team0: Port device team_slave_1 added [ 377.421971][T12897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.429002][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.455600][T12897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.467289][T12897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.474238][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.500276][T12897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.524821][T12897] hsr_slave_0: entered promiscuous mode [ 377.532065][T12897] hsr_slave_1: entered promiscuous mode [ 377.538961][T12897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.546676][T12897] Cannot create hsr debugfs directory [ 377.830952][T12897] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.839467][T12897] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.855747][T12897] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.864484][T12897] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.901816][T12897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.916759][T12897] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.926697][T12113] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.933908][T12113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.945399][T12107] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.952493][T12107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.034802][T12897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.128206][T12897] veth0_vlan: entered promiscuous mode [ 378.137001][T12897] veth1_vlan: entered promiscuous mode [ 378.156550][T12897] veth0_macvtap: entered promiscuous mode [ 378.164424][T12897] veth1_macvtap: entered promiscuous mode [ 378.176216][T12897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.187588][T12897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.198142][T12897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.208918][T12897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.218980][T12897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.227729][T12897] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.237054][T12897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.245751][T12897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.269426][T12897] ieee80211 phy66: Selected rate control algorithm 'minstrel_ht' [ 378.285679][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.288734][T12897] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht' [ 378.293730][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.320660][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.328705][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.957294][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.963668][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.580607][T12111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.220581][T12111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.281522][T12111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.341469][T12111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.420133][T12111] bridge_slave_1: left allmulticast mode [ 382.425841][T12111] bridge_slave_1: left promiscuous mode [ 382.432017][T12111] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.442899][T12111] bridge_slave_0: left allmulticast mode [ 382.449339][T12111] bridge_slave_0: left promiscuous mode [ 382.455697][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.562004][T12111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.572232][T12111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.584883][T12111] bond0 (unregistering): Released all slaves [ 382.745083][T12111] hsr_slave_0: left promiscuous mode [ 382.750942][T12111] hsr_slave_1: left promiscuous mode [ 382.757934][T12111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.765353][T12111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.773468][T12111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.783801][T12111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.793400][T12111] veth1_macvtap: left promiscuous mode [ 382.802002][T12111] veth0_macvtap: left promiscuous mode [ 382.808270][T12111] veth1_vlan: left promiscuous mode [ 382.813542][T12111] veth0_vlan: left promiscuous mode [ 382.938766][T12111] team0 (unregistering): Port device team_slave_1 removed [ 382.955408][T12111] team0 (unregistering): Port device team_slave_0 removed