last executing test programs: 1m36.416904942s ago: executing program 1 (id=135): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x1, &(0x7f0000000380)=@raw=[@exit], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000001cc0), 0x8}, 0x90) 1m19.278789207s ago: executing program 1 (id=135): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x1, &(0x7f0000000380)=@raw=[@exit], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000001cc0), 0x8}, 0x90) 59.990293043s ago: executing program 1 (id=135): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x1, &(0x7f0000000380)=@raw=[@exit], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000001cc0), 0x8}, 0x90) 43.231638014s ago: executing program 1 (id=135): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x1, &(0x7f0000000380)=@raw=[@exit], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000001cc0), 0x8}, 0x90) 24.879642207s ago: executing program 1 (id=135): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x1, &(0x7f0000000380)=@raw=[@exit], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000001cc0), 0x8}, 0x90) 13.044021672s ago: executing program 0 (id=1341): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 12.865963702s ago: executing program 0 (id=1344): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x1e, 0x0, 0xfcd8) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000440)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000b00)="87f22558e54d5ab5ce159def2515f7f8d38534026288833481ab8d4b76d2ad902c092791a97ace6d7cab4e22f2951117496c3a35fda4d48b17b4efd9ff321c39812f752b2c9adee75db5366facbc78ee15387d7ff015bcb21656d23d2c7dc26c5290ba9ed1f1cb49984e85cd9bb9f4e57c5022b19de4bd530098325e67a7afc097db494ecc1d033cd45c2201609abc402c7d465f604ab09597b5ff6df130b14ca5c62902c33a0705a9f9cd16862b8079801879be3767b2da2e9cf00a29b1ad4dd3212736f4302a282463825c3078", 0xce}, {&(0x7f0000003140)="1a15c8df6d693b205b98cb3bc4d8ea156c20bee471df2f0528cdcb15d0f65a500b252444041ba1aed2ee3ba140b60a108e791b082c0ce47c2982b56946bb2a2cfe96709319b4c05b23c0389ba0a270aa90f1397d6b25d66d5a6e7f408160d66d67ae2eb81332d22be8fd8314d8f4dc3acde97e727f0a00876e0b2198656575ed0c872e8b4ac95e48da8733c3c34f7ab715cb2ce7d8a15c21c14cb407e35f842f939b78b92ab5ffcf2d3c45044ea30d76468aa6300d36aef206a76225afe4dca87683deac1ba2dacb5025e18b02acec8aaf58a6f969c3747492d8c31a2166c5f258a19c13f66c18e8c97f4196ace320c70787bafb0724c6db8e81e9e1e8193c931812164ed4771a374a34ec5cf7499b95a013061d9d26267bec7d9f71cdbf176db6fc9d2773d8ef76fb691d53a2f3512b596032f5629cc0309da5cdeacc3f46c09a1e479bd20c59c40dbbf7b98962e6fe8764a2731609135049d57a57a594f9f680e825543c7b5754b88967270aaa5092313b0954756e6ba851f09f26a1415875b7dce89a890ae14add4e47cff434ec6813646d7be5ff9874e6caac48babc2200ec172eb46b0d2308ae0dc386b5748c8e562444f3889731ab1e502fdb1666ed7ab17b884a05994d62e2e0a79442e8650b1ea1b0788a03008f02c0d19e04f1c125072e49bcb51bd9cb46cf0440dd8eb955adf7738ddf3f05676d961afa8a926070eab8249fb85b245e0dede99090a8b117dd66de3352104b76594c958619387519dbff7350ce33bedb7a5a6fcf231965de97b8c0d82f7881e94312f048d31c7369a5179799a73dcb5c20a8ce7e97191268e7d11277c5fa31bd466aec70ff1c1201144f4410dd52296ee815103f308faa66163ecc96336b807f22849f371d64fa5cb7557f0e6f171d3d978d91e0ddac51e6efd3e415a76d860acd92b88d8a1f60eaff84f88630a65bbb341f654deb2a66b3f1269499d9417b7d762d4e44e78ce2f33c85dd58265bc31aa9a16407cff3a0bb6430ee07550520bb6d03790cfab8d571934c2cfa42e94bdb17358395ed7ea9d6f03316225d113c9b18fbd7e8a061bd4df126b19e43df0f32a3b39b699e9808a6fb90e932d5674d2b06701399756c51289bbb12fad62cdc9c9b3ad8973206c3257282f8dc1443a751b33e759036e90cbe8033ccb64448614b6884a89d2bf3e37af05f139fbd6e1959de0989b698d4ad2b7afd20e6eedf317bf133c6e4ba9ab1b2141b6de13703cd16ec8786defe48fd6063b366406e23e17ce93fd7422b6f9053bde94be2aa2f47bae364775e1f246ceb04366eb721003294c6c44b41f0701ee84fa1f70f8f43f6a591af760be2e521e69c177ad01531963407dd5458ee381e132f45d952c69103150b48c80648286858974ccb77123650fe0ab5d26d40e620e9d600c812fada5d31a5c37e3e510f7f95ed1fe881308019eba8db828d5d2cf0137136193936748a2d83d28fb1cf8b12ba2184daefcb22c9300bae055581da786fc94c349dfdd7bcde5c6dd9dc88f42bcb53bb3eadf8ed0eee21b87f521ef03eb9b5f4c1acf64aafcfe2837f332f8c64ce3315feccfae2cd2647c89a195f4aeb8b92583172f73a568bc886b9e01d30b48db1886b3b14f5de48705b57aaf764279419238c96b8f00c258fd987ab5e9ed9356a5483f21f768c6763b2e30e78328c54bc17ae34b152bd79feb3344b5d0271333793b1d461b9b1debaa2eea79b8c4b372569aead3c95b1b8b8a71572bde994d669af534969e4cf9aa29d29a5b3990e582b7c6272e599411e90c2425c8ca1d1206dce87f8b8569692510b116968b8c371bb82b9c1c3abfe9019f720691a3f202c984f8e3f95f98f33cfe7da5ea46f4676ea0f8b30f5ecde373384baff0d574c0bbbf647768749b2d314df02c65b32ca1cfe6ade9cbe348827eaf9a11fb4db3d30df6692048b057d53837dec1dcb38325f5e1d48d333480ed4975a611086b0728746a552079fd3d6f2c6a01eece6e055260faa65807ebc469286e6ec8e930422a8c8e6d9d0df1a3b74aa3776b39f4218c9957ef4416038d06b71ec697be3265e0651dcfd9d13e3ceafacc597eee60fb4864ea575e9d72fcf9d664180ecf098edafeb8ca91cd01e129af890e940e24d3d51c0b491fe78b19fb3ff19fb48c92084138f9a338473172d07e2dc0432cdaa8920c164de173baffb2741c817f34f899e5f883553cef35ae0066d6d500fa238524f7172a154d1980f9a7c97ed22870dc7dec3b5869e6746eae8ec05f2fbe52e40220c84084251e47b5897921d54d6dac7b83be6ec0e1cd82031026c86fe4ba4efaf66f9a0c87916330026122fbba8ddf253e3390c13f6fc7819829db0e3ebfe1f3bd47a4350de5cb2325f9f7da7e111aba9e24e575d6d8dab684a06390b7fd2bed79c8992d01b8eea1ef7296aa63f04104cdf944aef242e5f17340c05c8c5cfb1f05e834ff5d76a6e973666a5b51f9a9c660fbae18adeb57840f9beeb7850182d06d27723620ddc43a174803c48dfbb83a8a644a6b17405190265e228737b5574412a3dcee5d731902cba172862353fddc1b473383fd0ed8db6c92f6fb27f9bc1c4c836e38f64a41399ad83e00df8360fbbfec5bb0b39a133b137a53da0bc9666f35b25286c37a8647baa2f627e9db74eadf1937cc198e876cc64a8fc860c994b823bf4a8afba1b68392923d6a03d6bd188fef43935c2084a02e70071d42aef54dd636f6902ffd434ac9e3d9cbd3a370adb311bf1ca999130c6126265d8d9ab2eaa13c1eb1692f6b59661ec25ede6bc029e3e2f8e1ed698e26d9be34636de72636f6927687d373202f772951c8c793856f795b18aefc8ae5c343754528b9674c1ac10743a60472547ff26e54c7f7c73c0f5edac48027c4951eed9ea34dc8af88519269a8607ea44718aeecf5e0b99da5cc61e28dae2c8a5e03cf252060e72eac52c66295c0f6f9f8af4f74a1c604a6c4aad517153b3ae763e0b2996c4c35b3588d06f90c334bcd95432cb33ee06c040a9f58e8fa99b8365af4758af622f2927d71012cfaab8709410b8947b9c4b10abf8d4b88ec39c0a9a21d6a7793278d990bb43fa9f490bced2a3c69ad522f8e2f2ce1793ea0dd048eabd21b2903982ec7b5a165f3a5d43ae14e9c75830b73bb3a1646991ffcf08efb228b703e7ea7192d66b6997def708340998087fcb9fef13d0c647a8763b5e7ab04c84942278078b98732b72d801684c7ae1bcd4b4fc339d411da4fb68d1a7edf38d92055ff0cb523a4a5d7f7f7c639067674817449074e09b4465ad708aaa364a5ca597f49723da4bcaba496e1db24c373d16a3980725a80e50d4e647b43bc5e7df84b2e3c26d7877731c2474d36190f118b28c66dea37edfdd2f141642373ad5dbba14f4a66a5c3582d4325d7480cc14916a5e8011976e07e88b834a0f7ba5fe4adae7042d1be7d16fc00b9b1e27401d33ce5988862bafe94bb908b6ab82ac0184da6bd776df8f48e6293cbb564478ac656850140fd6393b294baadcfbf62b25e14e7055b6c3d5ff239f5e3aaf892358eb51dbd98828dd635e695dd114ba107e0c8008f19fcadf67ae29b712783a33af5deac131e0b33f9574a54664a39afa7c41f31f398dd5dfcbec3165e67f639ea289ef7e2a4dd78855d9898c0d9e52fc73d4032c5e7a6fe6440bae8c16eec2dd3841ce3bb381105c3142606bd35de561a96c746bf5249d9a6abb614920a7fb610de7056aff623fe0396d60c96d7650aae1dff19dc042699b03f804ca9b1e2c7cab60ca8972ff4044b9fba0fd0d3f3d26ad5184bd658e838134334fb5e05a7e1a30f2412403647888317fc0325e4fcc9d7f295d651d4be26137b9bb4acbea675b00334f0e5ade3720393d75b8e657daa928f3be17b24439fd114b3b1a55946b8a3bdd76ca0ca1c66fcdd3dc2e21d6ba23442e92ca0d5161b898a65909a6dce28cb445a7562be982bcad7f4114c5e2c025f0d00f7bfbb4cd2e99acd4dfa4a751afe3449a23d675407644357d3134ee6e15c65a8cd7699ce0adf3be71688415d25c957b54cfcc4d8e3fac8bb324c77568722abdd6f0b4bb0ca9cf5cb5396c3ca960426540296729c2dfb70eb7ca1ac895efef9fec655acbb57a2a96ece045d107b7122af7352e342205e068a67454465476d851f7bf2196da8b0f73450e1ac08c7463c4f41dc58b3792d2091997691b2066fab4a524e670ddf0fc4ea43506c0dfbeb532b5c343c1c9c13f67ced18c03253d37bb4843b5c43b6ca20d70d22d6624ee3b93523e294ab340e69dcf862ad0396ad515c57af8288898de8ede774d4816d75713881b5139004b0451af0fb42989e3108fb17ecc0a78caa3d6bcfc6b0a5b6d8b5821248bd1ed0858e456b0db9ad3779032b4efda9a4a3f9ae394b8e1be12c6011735665f9279440b5d1c427c3f2651691684456f962cf5edd643c59c02a818d0147f07d167faa21e75a319dc073626a1368479b73d098dcce9739e497e663879de1e17b232530a53b422fa7e98cd7a8c165756b09d1b66108ef5bc6316238cb8a68cab4132f20bce6fdf186c002235e1d830ea416225a14e34523a3e657d2d4d001ea4872550165d5c1711ab566ac19ea7cf7505ad5dcdb9433169f0b880d09e0244bb43f509f468430a7e126a8dd13fc050b8cdaccce7743552b0e0a9ea6a5c163ac8df70b1b9179fc13dc71ae69501b478a666339a3804bf9c7bfa1c858a17609d0b5c032ab108188fa25445b484614970d468c4cfff5493ffac4547250f5506fcc190a00918137712b68e9be156f594e243b7c14b11eb6466c31f5fcbda96106caf2ff153da752fea08a85d2899e8df907abc9e96934ff35547c12eb61a6a3b5a5aeff7b44dc34a1aa78cb7942c9306b587b392df47c9c41ca71051f463f5e1e523a33eddc7f2c4b2bd31cb894e4a8f9740664ddcc26883a94c551661659b210197140342ddaf05ff6d02d4546ccc3a6579703c9f7bac4a3d5de2b30e7deb96ddfeaa28b33d3660b785af442f582195c266511d811868ad52253f9fdff09633dd1543043f9ef18ecdbccc0010e51e023b2039bc60ad07bbd4c7fda6d99cc8b677bb672ff5d99fd291287e1f59bd455fa452d09870cdbf79ebbc097833f018b388991e1b05b69c24192a7c7eb1fa241a81f4ea1938e8a7f1ef5ffea47339697daf337cb80c4f639a741beda842dc69488f39baa8bcf6b0312c551204cbb3f109031b4ca9a6ee78a5a431e294a6474d1f2b34f43a374f315702fb669e7e9544c96c14192cd7eba5e50698e637a35e79792654b9d034cb9d368a4fc0dae45962c99768a861f0fa380c9d86548c3c039c1f9bb9d51d910ec623a348eb690dce4aea5118acc347f22fcf45bbf5b02d9a9343ec8d9cc58fc4cb2b1c1a9cd3d1e8ffae41039844294f8847c6be2561d4c0c8c61d1f7868a68ed343c90b21492e5ee53da6c2468ad2be0a1fcc801d68677743982c7d69c4fdaf1cd03c81e1feeff7c08a1ae747d98cd810caf7fd27964a73b0696b5546ea027aecefd4fad367e90e115fe360659bd24f87682fb67ae53a74ede223156717f1110fff156e3772325a3d0753eb3de55ac40f40d4809bc7892cfc61dd6be01ba9fb827752e97808a3fb4e49e0bcd5fd524bc6430d909748f5732a270c24d6653ec2500ba826f7b212396ee52956450caaa9fa883f33ade873cc38f34353063ef43fee8d545eb40ba7a73ef67a8ab0896b5458e1cb30007f95a0d4ff7204ab8c0b10b74b77550cea13237b786690cb7a8d81887ee9", 0x1000}], 0x2, &(0x7f0000000640)=[{0x48, 0x108, 0x7ff, "941bd587c670e1ca5e3123bb465694d2b0cbe076b5fb984ab716ffe6057f09477caf332ce5530e2196d6a51c02330fd456"}], 0x48}, 0x801) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x2, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, 0x0, 0x20000000}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000004680)=""/4094, 0xffe}], 0xb}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000a020000000000000000000003000000000200000001"], 0x0, 0x3e}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=""/86, 0xa1, 0x56, 0x0, 0x4}, 0x20) socketpair(0x11, 0x6, 0x4, &(0x7f0000000340)) 12.662029108s ago: executing program 0 (id=1347): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x2, 0x10001, 0x8}, 0x48) mkdir(0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 12.334876746s ago: executing program 0 (id=1349): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) getpid() gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) socket$kcm(0xa, 0x2, 0x73) 12.061258042s ago: executing program 0 (id=1354): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 11.665019081s ago: executing program 0 (id=1360): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000001340)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xd6, &(0x7f0000000240)=""/214}, 0x90) 9.769321648s ago: executing program 4 (id=1375): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffe32}, 0x90) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0xd, &(0x7f0000000000)=r7, 0x8) 8.723231105s ago: executing program 4 (id=1385): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000340), 0x12) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xea, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1c}, 0x81) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f00000006c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000640)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x90) 8.549864159s ago: executing program 4 (id=1387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x982, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r1, &(0x7f0000000280)="57131f70ad21e7a9edc6", &(0x7f00000003c0)=""/4096, 0x4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2165], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) 8.366916307s ago: executing program 4 (id=1388): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) getpid() gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000}, 0x10) socket$kcm(0xa, 0x2, 0x73) 8.235146017s ago: executing program 4 (id=1389): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202064250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe2, &(0x7f0000000240)=""/226}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.9356585s ago: executing program 4 (id=1394): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000200)=r0, 0x21) 2.86532069s ago: executing program 1 (id=135): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x1, &(0x7f0000000380)=@raw=[@exit], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000001cc0), 0x8}, 0x90) 1.712818213s ago: executing program 2 (id=1433): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x0, 0x4, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2d}, 0x20) gettid() socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001a40)={0x3, 0x80, 0x0, 0x8, 0x1f, 0x80, 0x0, 0xbad, 0x44002, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x303e, 0x4, @perf_bp={&(0x7f00000001c0), 0x6}, 0x0, 0x9948, 0x0, 0x4, 0x80, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f00000005c0)='GPL\x00'}, 0x90) sendmsg$kcm(r3, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000240)=@generic={0x0, "d2ea5881ca4acd3b6232b5a2e06d343e8e2cb66d2c57cd24d53c09c3047fd37c72f259e5c3c73444736d13b408ca26c147fd85ac2c99809327e3c9d838decde33607eed3daa4572e0c1e6dd8194bc9c9d30363d789c364fe209beb10c1ecd0b0cf76bb1580c1d477aa7f2571b7d02a91449914e03496c4806d08eec3dd4b"}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000440)="565870bf49fcb6e0e392a8f5c34ba1be53c72148fbc1b60a35d94a941e080203d899b5422373b7923a48472526b0f9f552f0619c9a5a07cf2ab5b08795a2aeea9bdc992dbef4768188eaebee1e19bebf2b2f35cb1e94370f1b4ac75d6609669e73e994972571905397d0f1d539a2a3b56376d7e56f061e35d3fdb49c3dc358d539cc6eb63c31a61f61e0444305181bdccee5387189c8d6d9f24697799a3011556f24", 0xa2}, {&(0x7f0000000840)}, {&(0x7f0000000140)}, {&(0x7f0000000600)="66bf1dc60a1e93b51e19df8509f3b69d9935edf447157457e21dd63ed49510aff224d198eb366dd9d61832bfb2d459387b1e89423399616e1757481de9f9ae25d095d054718efaaa184d3e5bed99901b625b2488ead28d2c51caa799b3e03ed9b44e0da9a6f8de2bcab5d6f6a1b719c3e720416114d10b7aac882de1dcf25a9b3a2e3d94c9fc822f6a05f038f29afe4d097d8f5b3b97e42969", 0x99}, {&(0x7f0000001840)}, {&(0x7f00000018c0)="0c0008d5006141a8d4068f88ffa6bce2f969036308b59ffbf6f7206fb287fa7c9c34ece00b469b4337dd04532e3a1de479ea8f449be29d9666245ac4b0960d83ee4679e5edcea9f2cbacdf7406ba9b96e1be6fe5ec82ca5fb416", 0x5a}], 0x6, 0x0, 0x12a0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.684906902s ago: executing program 3 (id=1434): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETPERSIST(r0, 0x400454dc, 0x800000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) 1.525119932s ago: executing program 3 (id=1435): bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.375757054s ago: executing program 2 (id=1436): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000611080000000000095000000d2000000005835562c7119b8e4caec5bbdb5f2d49c286af489b35aea8d"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xb6, &(0x7f0000000080)=""/182}, 0x80) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.200883941s ago: executing program 2 (id=1437): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x0, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.200034928s ago: executing program 3 (id=1438): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}], 0x20}, 0x0) 1.056969017s ago: executing program 3 (id=1439): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r0 = socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000090000000000000000000085000000270000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x11b, 0x5, &(0x7f0000000000)=r1, 0x4) 930.081999ms ago: executing program 3 (id=1440): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x1100, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406080016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 892.4122ms ago: executing program 2 (id=1441): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='ext4_mark_inode_dirty\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad8900000000001800"/76], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 752.747935ms ago: executing program 2 (id=1442): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f93224fc60030f030047", 0x19}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 29.512906ms ago: executing program 2 (id=1443): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/213, 0xd5}, {&(0x7f0000000ec0)=""/252, 0xfc}, {&(0x7f0000002140)=""/4058, 0xfda}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000000cc0)=""/59, 0x3b}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000001200)=""/228, 0xe4}], 0x10}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x1a, 0x0}, 0x0) 0s ago: executing program 3 (id=1444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 9': attribute type 2 has an invalid length. [ 92.452919][ T5883] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 92.461266][ T5883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.543280][ T5505] veth1_macvtap: entered promiscuous mode [ 92.592583][ T5894] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 92.620823][ T5894] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.265'. [ 92.628542][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.677690][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.700862][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.736644][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.771160][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.791109][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.824587][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.859180][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.886269][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.926240][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.960745][ T5899] netlink: 'syz.0.266': attribute type 3 has an invalid length. [ 92.988906][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.999110][ T5899] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.266'. [ 93.038333][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.061534][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.082714][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.102315][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.112431][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.129299][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.145009][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.171424][ T5912] netlink: 'syz.0.266': attribute type 39 has an invalid length. [ 93.279389][ T5505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.316411][ T5505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.344241][ T5505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.367900][ T5505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.741058][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.782901][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.805917][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.830394][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.850916][ T5095] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 94.061071][ T5952] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 94.076667][ T5952] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.278'. [ 94.566651][ T5976] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 94.591674][ T5976] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.283'. [ 94.626153][ T5976] nbd: couldn't find device at index 17 [ 94.803877][ T5986] netlink: 'syz.3.285': attribute type 39 has an invalid length. [ 94.909521][ T5986] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.285'. [ 95.655752][ T6002] syzkaller0: entered promiscuous mode [ 95.662649][ T6002] syzkaller0: entered allmulticast mode [ 95.671829][ T6014] validate_nla: 1 callbacks suppressed [ 95.671847][ T6014] netlink: 'syz.4.294': attribute type 29 has an invalid length. [ 96.262385][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.285215][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.298151][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.314173][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.324761][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.336952][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.390754][ T6011] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 97.399176][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.406559][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.425631][ T6014] netlink: 'syz.4.294': attribute type 29 has an invalid length. [ 97.497644][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.602705][ T6048] veth0_vlan: left promiscuous mode [ 97.636675][ T6048] veth0_vlan: entered promiscuous mode [ 97.724965][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.763358][ T6052] netlink: 'syz.2.307': attribute type 10 has an invalid length. [ 97.900811][ T6052] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.979742][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.035070][ T6063] netlink: 3084 bytes leftover after parsing attributes in process `syz.3.313'. [ 98.049205][ T6063] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.313'. [ 98.166481][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.427588][ T5095] Bluetooth: hci2: command tx timeout [ 98.662134][ T61] bridge_slave_1: left allmulticast mode [ 98.675817][ T61] bridge_slave_1: left promiscuous mode [ 98.682537][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.699633][ T61] bridge_slave_0: left allmulticast mode [ 98.710556][ T61] bridge_slave_0: left promiscuous mode [ 98.716490][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.124128][ T5095] Bluetooth: hci4: unexpected event 0x01 length: 15 > 1 [ 99.384121][ T6114] netlink: 134312 bytes leftover after parsing attributes in process `syz.2.332'. [ 99.689643][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.710339][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.739629][ T61] bond0 (unregistering): Released all slaves [ 99.845444][ T6114] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.873304][ T6114] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 99.922116][ T6026] chnl_net:caif_netlink_parms(): no params data found [ 100.503144][ T5095] Bluetooth: hci2: command tx timeout [ 100.736940][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.766799][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.797654][ T6026] bridge_slave_0: entered allmulticast mode [ 100.820978][ T6026] bridge_slave_0: entered promiscuous mode [ 102.027582][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.035020][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.042236][ T6026] bridge_slave_1: entered allmulticast mode [ 102.049780][ T6026] bridge_slave_1: entered promiscuous mode [ 102.145157][ T61] hsr_slave_0: left promiscuous mode [ 102.161058][ T61] hsr_slave_1: left promiscuous mode [ 102.180649][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.207919][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.226393][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.250811][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.322320][ T61] veth1_macvtap: left promiscuous mode [ 102.343270][ T61] veth0_macvtap: left promiscuous mode [ 102.357617][ T61] veth1_vlan: left promiscuous mode [ 102.374724][ T61] veth0_vlan: left promiscuous mode [ 102.573580][ T5095] Bluetooth: hci2: command tx timeout [ 103.262736][ T61] team0 (unregistering): Port device team_slave_1 removed [ 103.300023][ T61] team0 (unregistering): Port device team_slave_0 removed [ 103.666770][ T6205] netlink: 'syz.3.356': attribute type 21 has an invalid length. [ 103.676361][ T6205] netlink: 156 bytes leftover after parsing attributes in process `syz.3.356'. [ 103.734648][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.772681][ T6209] netlink: 'syz.4.357': attribute type 2 has an invalid length. [ 103.802857][ T6209] netlink: 'syz.4.357': attribute type 8 has an invalid length. [ 103.840622][ T6209] netlink: 132 bytes leftover after parsing attributes in process `syz.4.357'. [ 103.867705][ T6210] netlink: 'syz.4.357': attribute type 2 has an invalid length. [ 103.923646][ T6210] netlink: 'syz.4.357': attribute type 8 has an invalid length. [ 103.990323][ T6210] netlink: 132 bytes leftover after parsing attributes in process `syz.4.357'. [ 104.053827][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.080902][ T6212] netlink: 'syz.2.358': attribute type 10 has an invalid length. [ 104.272971][ T5095] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 104.344691][ T6026] team0: Port device team_slave_0 added [ 104.389012][ T6026] team0: Port device team_slave_1 added [ 104.545420][ T6239] netlink: 'syz.0.365': attribute type 64 has an invalid length. [ 104.554122][ T6239] netlink: 164 bytes leftover after parsing attributes in process `syz.0.365'. [ 104.601441][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.641340][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.674612][ T5095] Bluetooth: hci2: command tx timeout [ 104.771337][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.015789][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.062936][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.096553][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.505904][ T6026] hsr_slave_0: entered promiscuous mode [ 105.578533][ T6026] hsr_slave_1: entered promiscuous mode [ 105.590584][ T6026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.599508][ T6026] Cannot create hsr debugfs directory [ 106.535856][ T6309] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.387'. [ 107.400401][ T6337] netlink: 'syz.0.396': attribute type 44 has an invalid length. [ 107.468580][ T6337] ref_ctr_offset mismatch. inode: 0x1d0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 107.801234][ T6351] netlink: 'syz.3.399': attribute type 10 has an invalid length. [ 107.830986][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.399'. [ 107.863111][ T6351] team0: entered promiscuous mode [ 107.878803][ T6351] team_slave_1: entered promiscuous mode [ 107.903368][ T6351] team0: entered allmulticast mode [ 107.908986][ T6351] team_slave_1: entered allmulticast mode [ 107.940992][ T6351] bridge0: port 3(team0) entered blocking state [ 107.968805][ T6351] bridge0: port 3(team0) entered disabled state [ 107.982640][ T6351] bridge0: port 3(team0) entered blocking state [ 107.989285][ T6351] bridge0: port 3(team0) entered forwarding state [ 108.004701][ T6026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.033961][ T6354] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 108.155963][ T6354] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.186809][ T6026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.238792][ T6026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.287001][ T6026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.538191][ T6370] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 108.619941][ T5095] Bluetooth: hci3: unexpected event 0x20 length: 15 > 7 [ 108.674508][ T6370] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 108.848971][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.895990][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.926937][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.934136][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.976014][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.983211][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.113878][ T6391] netlink: 'syz.4.414': attribute type 29 has an invalid length. [ 109.122066][ T6391] netlink: 'syz.4.414': attribute type 29 has an invalid length. [ 109.181203][ T6391] netlink: 'syz.4.414': attribute type 29 has an invalid length. [ 109.238441][ T6391] netlink: 'syz.4.414': attribute type 29 has an invalid length. [ 109.254854][ T6391] netlink: 'syz.4.414': attribute type 29 has an invalid length. [ 109.274845][ T6391] netlink: 'syz.4.414': attribute type 29 has an invalid length. [ 109.302136][ T6391] netlink: 'syz.4.414': attribute type 29 has an invalid length. [ 109.382119][ T5095] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 109.767970][ T6026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.969525][ T6026] veth0_vlan: entered promiscuous mode [ 110.010749][ T6026] veth1_vlan: entered promiscuous mode [ 110.087048][ T6428] netlink: 134312 bytes leftover after parsing attributes in process `syz.0.425'. [ 110.146882][ T6428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.179478][ T6026] veth0_macvtap: entered promiscuous mode [ 110.187655][ T6428] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 110.322000][ T6438] netlink: 'syz.3.427': attribute type 29 has an invalid length. [ 110.327417][ T6026] veth1_macvtap: entered promiscuous mode [ 110.383857][ T6438] netlink: 'syz.3.427': attribute type 29 has an invalid length. [ 110.407475][ T6440] netlink: 'syz.3.427': attribute type 29 has an invalid length. [ 110.490181][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.532895][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.558619][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.580842][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.669459][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.692699][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.702977][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.722976][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.750936][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.895587][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.958056][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.968259][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.985508][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.996021][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.012613][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.027066][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.046627][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.095573][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.146802][ T6026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.182905][ T6026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.223437][ T6026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.251946][ T6026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.626780][ T6478] netlink: 132 bytes leftover after parsing attributes in process `syz.4.436'. [ 111.637993][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.669278][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.789573][ T6484] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.439'. [ 111.810719][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.843100][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.347232][ T6512] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 112.354712][ T6512] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 113.243522][ T6542] netlink: 132 bytes leftover after parsing attributes in process `syz.0.457'. [ 113.277994][ T5095] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 113.479118][ T6550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.460'. [ 113.653780][ T5095] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 114.003870][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.119245][ T6563] validate_nla: 16 callbacks suppressed [ 114.119266][ T6563] netlink: 'syz.2.466': attribute type 29 has an invalid length. [ 114.353967][ T6565] netlink: 'syz.2.466': attribute type 29 has an invalid length. [ 114.383640][ T6566] netlink: 'syz.2.466': attribute type 29 has an invalid length. [ 114.402980][ T6563] netlink: 'syz.2.466': attribute type 29 has an invalid length. [ 114.588917][ T6576] netlink: 'syz.3.470': attribute type 2 has an invalid length. [ 114.621041][ T6578] netlink: 'syz.0.471': attribute type 29 has an invalid length. [ 114.632873][ T6576] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.470'. [ 114.709330][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.786027][ T6578] netlink: 'syz.0.471': attribute type 29 has an invalid length. [ 114.884543][ T6582] netlink: 'syz.0.471': attribute type 29 has an invalid length. [ 115.030633][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.110324][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.123135][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.131346][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.148784][ T6583] netlink: 'syz.0.471': attribute type 29 has an invalid length. [ 115.160053][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.195097][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.203142][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.214513][ T6586] netlink: 'syz.0.471': attribute type 29 has an invalid length. [ 115.360054][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.402360][ T6597] netlink: 48 bytes leftover after parsing attributes in process `syz.3.476'. [ 115.417253][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.2.475'. [ 115.437463][ T6595] team0: entered promiscuous mode [ 115.444444][ T6595] team_slave_1: entered promiscuous mode [ 115.462620][ T6595] bridge0: entered promiscuous mode [ 115.471669][ T6595] team0: entered allmulticast mode [ 115.498551][ T6595] team_slave_1: entered allmulticast mode [ 115.523140][ T6595] bridge0: entered allmulticast mode [ 115.536932][ T6595] bridge0: port 3(team0) entered blocking state [ 115.567100][ T6595] bridge0: port 3(team0) entered disabled state [ 115.630869][ T6595] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 115.631261][ T5095] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 116.109005][ T61] bridge_slave_1: left allmulticast mode [ 116.149946][ T61] bridge_slave_1: left promiscuous mode [ 116.157972][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.287680][ T61] bridge_slave_0: left allmulticast mode [ 116.316422][ T6611] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 116.323136][ T6611] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 116.333779][ T61] bridge_slave_0: left promiscuous mode [ 116.339704][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.293431][ T5095] Bluetooth: hci2: command tx timeout [ 118.022682][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.050038][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.082544][ T61] bond0 (unregistering): Released all slaves [ 118.153377][ T6621] netlink: 156 bytes leftover after parsing attributes in process `syz.0.483'. [ 119.251650][ T6655] Driver unsupported XDP return value 0 on prog (id 346) dev N/A, expect packet loss! [ 119.384902][ T5095] Bluetooth: hci2: command tx timeout [ 119.410195][ T6591] chnl_net:caif_netlink_parms(): no params data found [ 119.792476][ T61] hsr_slave_0: left promiscuous mode [ 119.816393][ T5095] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 119.816435][ T5095] Bluetooth: unknown link type 255 [ 119.830045][ T5095] Bluetooth: hci1: connection err: -111 [ 119.945423][ T61] hsr_slave_1: left promiscuous mode [ 120.082621][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.115430][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.196445][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.217421][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.370336][ T61] veth1_macvtap: left promiscuous mode [ 120.445462][ T61] veth0_macvtap: left promiscuous mode [ 120.451238][ T61] veth1_vlan: left promiscuous mode [ 120.472576][ T61] veth0_vlan: left promiscuous mode [ 121.453613][ T5095] Bluetooth: hci2: command tx timeout [ 121.968706][ T61] team0 (unregistering): Port device team_slave_1 removed [ 122.063592][ T61] team0 (unregistering): Port device team_slave_0 removed [ 123.382606][ T6677] bridge0: port 3(hsr0) entered blocking state [ 123.423222][ T6677] bridge0: port 3(hsr0) entered disabled state [ 123.441060][ T6677] hsr0: entered allmulticast mode [ 123.448338][ T6677] hsr_slave_0: entered allmulticast mode [ 123.455065][ T6677] hsr_slave_1: entered allmulticast mode [ 123.462431][ T6677] hsr0: entered promiscuous mode [ 123.469389][ T6677] bridge0: port 3(hsr0) entered blocking state [ 123.475939][ T6677] bridge0: port 3(hsr0) entered forwarding state [ 123.535078][ T5095] Bluetooth: hci2: command tx timeout [ 123.561260][ T6707] validate_nla: 4 callbacks suppressed [ 123.561296][ T6707] netlink: 'syz.0.509': attribute type 4 has an invalid length. [ 123.583986][ T6707] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.509'. [ 123.651747][ T6715] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.509'. [ 123.756489][ T5095] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 123.756524][ T5095] Bluetooth: unknown link type 255 [ 123.768836][ T5095] Bluetooth: hci4: connection err: -111 [ 123.865845][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.927463][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.958450][ T6591] bridge_slave_0: entered allmulticast mode [ 123.986694][ T6591] bridge_slave_0: entered promiscuous mode [ 124.023887][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.056770][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.119744][ T6591] bridge_slave_1: entered allmulticast mode [ 124.170173][ T6591] bridge_slave_1: entered promiscuous mode [ 124.399674][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.472420][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.404902][ T6591] team0: Port device team_slave_0 added [ 125.547244][ T6591] team0: Port device team_slave_1 added [ 125.819330][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.843299][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.961931][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.010492][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.053981][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.153075][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.557952][ T6591] hsr_slave_0: entered promiscuous mode [ 126.587611][ T6591] hsr_slave_1: entered promiscuous mode [ 126.635606][ T6591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.650550][ T6591] Cannot create hsr debugfs directory [ 126.916219][ T6809] netlink: 'syz.3.537': attribute type 10 has an invalid length. [ 126.932416][ T6809] geneve0: entered promiscuous mode [ 126.974137][ T6809] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 127.344622][ T6835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.539'. [ 127.392582][ T6835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.539'. [ 127.498671][ T6822] netlink: 60 bytes leftover after parsing attributes in process `syz.4.539'. [ 127.887337][ T6853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.953957][ T6864] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 129.009016][ T6875] raw_sendmsg: syz.2.553 forgot to set AF_INET. Fix it! [ 129.235539][ T6884] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.555'. [ 129.263057][ T6884] openvswitch: netlink: Duplicate key (type 0). [ 129.527196][ T6591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.601840][ T6591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.664202][ T6591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.757723][ T6591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 130.336223][ T6591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.477584][ T6591] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.567322][ T6908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.672393][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.679777][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.815379][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.822534][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.297765][ T6941] netlink: 'syz.4.572': attribute type 3 has an invalid length. [ 131.319216][ T6941] netlink: 'syz.4.572': attribute type 11 has an invalid length. [ 131.343048][ T6941] netlink: 128512 bytes leftover after parsing attributes in process `syz.4.572'. [ 131.526878][ T6591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.128351][ T6591] veth0_vlan: entered promiscuous mode [ 132.240396][ T6591] veth1_vlan: entered promiscuous mode [ 132.422423][ T6591] veth0_macvtap: entered promiscuous mode [ 132.472300][ T6591] veth1_macvtap: entered promiscuous mode [ 132.558164][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.599019][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.609461][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.620216][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.642357][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.662913][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.702837][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.733332][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.774127][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.877027][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.904791][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.956001][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.985605][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.014721][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.038494][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.060619][ T6591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.081747][ T6591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.108525][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.137426][ T6591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.149891][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.149990][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.202592][ T6591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.235601][ T6591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.252818][ T6591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.439801][ T6993] syzkaller0: entered promiscuous mode [ 133.465186][ T6993] syzkaller0: entered allmulticast mode [ 133.603211][ T7007] syz.4.589 (7007) used greatest stack depth: 17248 bytes left [ 134.005661][ T5095] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 135.016344][ T7075] netlink: 'syz.2.605': attribute type 9 has an invalid length. [ 135.045621][ T7075] netlink: 202268 bytes leftover after parsing attributes in process `syz.2.605'. [ 137.664173][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.672028][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.740385][ T7116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.611'. [ 137.755482][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.765527][ T7114] netlink: 'syz.0.610': attribute type 21 has an invalid length. [ 137.784346][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.791647][ T7114] netlink: 144 bytes leftover after parsing attributes in process `syz.0.610'. [ 138.408789][ T7144] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.619'. [ 138.555166][ T7142] syzkaller0: entered promiscuous mode [ 138.560687][ T7142] syzkaller0: entered allmulticast mode [ 138.888147][ T996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.707341][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.717974][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.730397][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.753700][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.761786][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.769925][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.861982][ T53] Bluetooth: hci2: command tx timeout [ 143.595427][ T996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.610389][ T7167] netlink: 'syz.3.627': attribute type 21 has an invalid length. [ 143.631830][ T7167] netlink: 144 bytes leftover after parsing attributes in process `syz.3.627'. [ 143.933075][ T53] Bluetooth: hci2: command tx timeout [ 143.976649][ T996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.125263][ T996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.164916][ T7164] chnl_net:caif_netlink_parms(): no params data found [ 144.376011][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.385795][ T7207] netlink: 'syz.2.640': attribute type 3 has an invalid length. [ 144.393822][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.401054][ T7164] bridge_slave_0: entered allmulticast mode [ 144.433007][ T7207] netlink: 132 bytes leftover after parsing attributes in process `syz.2.640'. [ 144.450232][ T7164] bridge_slave_0: entered promiscuous mode [ 144.508661][ T7208] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.533079][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.548616][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.579825][ T7164] bridge_slave_1: entered allmulticast mode [ 144.686152][ T7164] bridge_slave_1: entered promiscuous mode [ 144.852084][ T7164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.909975][ T996] bridge_slave_1: left allmulticast mode [ 144.916706][ T996] bridge_slave_1: left promiscuous mode [ 144.922395][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.941056][ T996] bridge_slave_0: left allmulticast mode [ 144.946812][ T996] bridge_slave_0: left promiscuous mode [ 144.952524][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.359746][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.371482][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.386335][ T996] bond0 (unregistering): Released all slaves [ 145.414987][ T7164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.647584][ T7164] team0: Port device team_slave_0 added [ 145.763857][ T7164] team0: Port device team_slave_1 added [ 146.018755][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.030157][ T53] Bluetooth: hci2: command tx timeout [ 146.032919][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.069380][ T7164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.234094][ T7164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.241079][ T7164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.345371][ T7164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.451270][ T7270] netlink: 139364 bytes leftover after parsing attributes in process `syz.2.667'. [ 146.508556][ T7271] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.668'. [ 146.535919][ T996] hsr_slave_0: left promiscuous mode [ 146.563036][ T996] hsr_slave_1: left promiscuous mode [ 146.570804][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.583524][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.625505][ T7274] netlink: 'syz.0.669': attribute type 29 has an invalid length. [ 146.667162][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.684313][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.739519][ T996] veth1_macvtap: left promiscuous mode [ 146.761401][ T996] veth0_macvtap: left promiscuous mode [ 146.785763][ T996] veth1_vlan: left promiscuous mode [ 146.791129][ T996] veth0_vlan: left promiscuous mode [ 147.342671][ T7314] netlink: 139364 bytes leftover after parsing attributes in process `syz.3.681'. [ 147.671880][ T996] team0 (unregistering): Port device team_slave_1 removed [ 147.718578][ T996] team0 (unregistering): Port device team_slave_0 removed [ 148.103120][ T53] Bluetooth: hci2: command tx timeout [ 148.318544][ T7164] hsr_slave_0: entered promiscuous mode [ 148.325893][ T7164] hsr_slave_1: entered promiscuous mode [ 148.332327][ T7164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.340249][ T7164] Cannot create hsr debugfs directory [ 148.346008][ T7274] netlink: 'syz.0.669': attribute type 29 has an invalid length. [ 148.424702][ T7339] delete_channel: no stack [ 149.251777][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.277758][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.366093][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.443236][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.310281][ T7380] netlink: 'syz.0.702': attribute type 29 has an invalid length. [ 150.410967][ T7380] netlink: 'syz.0.702': attribute type 29 has an invalid length. [ 150.703660][ T7164] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.736366][ T7164] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.791219][ T7164] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.829594][ T7164] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.124058][ T7164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.210536][ T7164] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.255399][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.262602][ T5206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.294682][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.301846][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.450242][ T7429] netlink: 'syz.0.718': attribute type 29 has an invalid length. [ 151.506654][ T7429] netlink: 'syz.0.718': attribute type 29 has an invalid length. [ 151.934478][ T7447] netlink: 'syz.3.724': attribute type 4 has an invalid length. [ 151.958149][ T7164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.963956][ T7453] netlink: 'syz.0.725': attribute type 3 has an invalid length. [ 151.976748][ T7453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.725'. [ 152.168608][ T7456] netlink: 132 bytes leftover after parsing attributes in process `syz.4.726'. [ 152.278944][ T7164] veth0_vlan: entered promiscuous mode [ 152.324766][ T7465] netlink: 'syz.4.728': attribute type 2 has an invalid length. [ 152.364245][ T7164] veth1_vlan: entered promiscuous mode [ 152.510506][ T7164] veth0_macvtap: entered promiscuous mode [ 152.539018][ T7471] netlink: 'syz.4.729': attribute type 29 has an invalid length. [ 152.555814][ T7164] veth1_macvtap: entered promiscuous mode [ 152.592307][ T7471] netlink: 'syz.4.729': attribute type 29 has an invalid length. [ 152.618302][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.632578][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.660090][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.683016][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.693231][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.707252][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.763116][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.776851][ T7471] netlink: 'syz.4.729': attribute type 29 has an invalid length. [ 152.832540][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.853348][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.870705][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.899902][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.922553][ T7164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.951146][ T7164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.029312][ T7164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.101053][ T7164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.147818][ T7164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.173432][ T7164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.189852][ T7164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.562927][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.570790][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.585546][ T7506] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.738'. [ 153.671840][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.684133][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.583949][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'. [ 155.076536][ T7583] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.767'. [ 155.102903][ T7583] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.767'. [ 155.185507][ T7587] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.768'. [ 155.355747][ T7599] delete_channel: no stack [ 155.908936][ T1109] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.001813][ T7623] validate_nla: 7 callbacks suppressed [ 156.001833][ T7623] netlink: 'syz.3.780': attribute type 4 has an invalid length. [ 156.146828][ T7634] syzkaller0: entered promiscuous mode [ 156.152452][ T7634] syzkaller0: entered allmulticast mode [ 156.693161][ T7641] batman_adv: batadv0: adding TT local entry 4a:c8:09:e2:00:00 to non-existent VLAN 2358 [ 157.029713][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.042183][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.064171][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.086092][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.101695][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.110708][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.179766][ T1109] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.348031][ T1109] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.510288][ T1109] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.571601][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.629257][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.694136][ T7672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.713599][ T7672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.859047][ T7684] netlink: 'syz.0.806': attribute type 39 has an invalid length. [ 159.214838][ T53] Bluetooth: hci2: command tx timeout [ 159.524979][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 159.567633][ T1109] bridge_slave_1: left allmulticast mode [ 159.573635][ T1109] bridge_slave_1: left promiscuous mode [ 159.579562][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.590481][ T1109] bridge_slave_0: left allmulticast mode [ 159.596354][ T1109] bridge_slave_0: left promiscuous mode [ 159.609359][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.252507][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.265806][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.278275][ T1109] bond0 (unregistering): Released all slaves [ 160.304726][ T7702] sit0: entered allmulticast mode [ 160.753605][ T7719] tun0: tun_chr_ioctl cmd 1074025681 [ 160.889054][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.911959][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.950543][ T7650] bridge_slave_0: entered allmulticast mode [ 160.995466][ T7650] bridge_slave_0: entered promiscuous mode [ 161.305768][ T53] Bluetooth: hci2: command tx timeout [ 161.508169][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.517061][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.543286][ T7650] bridge_slave_1: entered allmulticast mode [ 161.585495][ T7650] bridge_slave_1: entered promiscuous mode [ 161.890364][ T1109] hsr_slave_0: left promiscuous mode [ 161.916518][ T1109] hsr_slave_1: left promiscuous mode [ 161.946753][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.956461][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.980139][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.998640][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.026605][ T1109] veth1_macvtap: left promiscuous mode [ 162.032338][ T1109] veth0_macvtap: left promiscuous mode [ 162.038754][ T1109] veth1_vlan: left promiscuous mode [ 162.044286][ T1109] veth0_vlan: left promiscuous mode [ 163.374838][ T53] Bluetooth: hci2: command tx timeout [ 163.585894][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 163.663811][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 164.015904][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.061956][ T7777] netlink: 'syz.2.834': attribute type 2 has an invalid length. [ 164.110642][ T7777] netlink: 'syz.2.834': attribute type 8 has an invalid length. [ 164.133357][ T7777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.834'. [ 164.173824][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.479023][ T7650] team0: Port device team_slave_0 added [ 164.524219][ T7650] team0: Port device team_slave_1 added [ 164.628262][ T7792] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.841'. [ 164.661214][ T7792] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.841'. [ 164.673504][ T7792] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.841'. [ 164.776098][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.800183][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.922072][ T7650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.043984][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.064566][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.108110][ T7650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.169635][ T7804] veth1_macvtap: left promiscuous mode [ 165.260486][ T7810] veth1_macvtap: entered promiscuous mode [ 165.293079][ T7810] macsec0: entered promiscuous mode [ 165.312683][ T7810] macsec0: entered allmulticast mode [ 165.320736][ T53] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 165.342919][ T7810] veth1_macvtap: entered allmulticast mode [ 165.453050][ T53] Bluetooth: hci2: command tx timeout [ 165.565515][ T7828] netlink: 'syz.0.852': attribute type 10 has an invalid length. [ 165.596164][ T7828] netlink: 128 bytes leftover after parsing attributes in process `syz.0.852'. [ 165.617778][ T7650] hsr_slave_0: entered promiscuous mode [ 165.655573][ T7650] hsr_slave_1: entered promiscuous mode [ 165.686348][ T7650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.732951][ T7650] Cannot create hsr debugfs directory [ 165.874546][ T7831] netlink: 'syz.4.853': attribute type 29 has an invalid length. [ 165.936449][ T7844] pim6reg1: entered allmulticast mode [ 166.033777][ T7831] netlink: 'syz.4.853': attribute type 29 has an invalid length. [ 166.186548][ T7837] pim6reg1: left allmulticast mode [ 166.501287][ T7858] netlink: 'syz.3.861': attribute type 3 has an invalid length. [ 166.531499][ T7858] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.861'. [ 167.822264][ T7905] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.876'. [ 168.133131][ T7908] netlink: 'syz.2.877': attribute type 12 has an invalid length. [ 168.159937][ T7908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.877'. [ 168.171029][ T7909] netlink: 164 bytes leftover after parsing attributes in process `syz.2.877'. [ 168.406833][ T7650] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 168.447170][ T7650] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.479540][ T7650] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.534103][ T7650] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.811542][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.878110][ T7650] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.890377][ T7940] syz.4.888: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 168.905401][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.913036][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.931171][ T7940] CPU: 1 PID: 7940 Comm: syz.4.888 Not tainted 6.10.0-rc6-syzkaller-g7b769adc2612 #0 [ 168.940679][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 168.950771][ T7940] Call Trace: [ 168.954069][ T7940] [ 168.957000][ T7940] dump_stack_lvl+0x241/0x360 [ 168.961690][ T7940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.966885][ T7940] ? __pfx__printk+0x10/0x10 [ 168.971470][ T7940] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 168.977887][ T7940] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 168.984393][ T7940] warn_alloc+0x278/0x410 [ 168.988723][ T7940] ? stack_depot_save_flags+0x6e4/0x830 [ 168.994266][ T7940] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 169.000420][ T7940] ? __pfx_warn_alloc+0x10/0x10 [ 169.005275][ T7940] ? kasan_save_track+0x3f/0x80 [ 169.010130][ T7940] ? __kasan_kmalloc+0x98/0xb0 [ 169.014888][ T7940] ? xsk_setsockopt+0x598/0x950 [ 169.019738][ T7940] ? do_sock_setsockopt+0x3af/0x720 [ 169.025020][ T7940] ? __sys_setsockopt+0x1ae/0x250 [ 169.030036][ T7940] ? __x64_sys_setsockopt+0xb5/0xd0 [ 169.035232][ T7940] ? do_syscall_64+0xf3/0x230 [ 169.039904][ T7940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.045978][ T7940] __vmalloc_node_range_noprof+0x130/0x1460 [ 169.051963][ T7940] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 169.058290][ T7940] ? __kasan_kmalloc+0x98/0xb0 [ 169.063059][ T7940] ? xskq_create+0x54/0x170 [ 169.067563][ T7940] vmalloc_user_noprof+0x74/0x80 [ 169.072524][ T7940] ? xskq_create+0xb6/0x170 [ 169.077106][ T7940] xskq_create+0xb6/0x170 [ 169.081432][ T7940] xsk_init_queue+0xa1/0x100 [ 169.086022][ T7940] xsk_setsockopt+0x598/0x950 [ 169.090704][ T7940] ? __pfx_xsk_setsockopt+0x10/0x10 [ 169.095904][ T7940] ? __pfx_lock_acquire+0x10/0x10 [ 169.100921][ T7940] ? aa_sock_opt_perm+0x79/0x120 [ 169.105854][ T7940] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 169.111393][ T7940] ? security_socket_setsockopt+0x87/0xb0 [ 169.117105][ T7940] ? __pfx_xsk_setsockopt+0x10/0x10 [ 169.122305][ T7940] do_sock_setsockopt+0x3af/0x720 [ 169.127332][ T7940] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 169.132878][ T7940] ? __fget_files+0x29/0x470 [ 169.137467][ T7940] ? __fget_files+0x3f6/0x470 [ 169.142150][ T7940] __sys_setsockopt+0x1ae/0x250 [ 169.147004][ T7940] __x64_sys_setsockopt+0xb5/0xd0 [ 169.152029][ T7940] do_syscall_64+0xf3/0x230 [ 169.156526][ T7940] ? clear_bhb_loop+0x35/0x90 [ 169.161199][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.167269][ T7940] RIP: 0033:0x7f8dca575bd9 [ 169.171684][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.191284][ T7940] RSP: 002b:00007f8dcb275048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 169.199713][ T7940] RAX: ffffffffffffffda RBX: 00007f8dca703f60 RCX: 00007f8dca575bd9 [ 169.207695][ T7940] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 169.215672][ T7940] RBP: 00007f8dca5e4e60 R08: 0000000000000004 R09: 0000000000000000 [ 169.223647][ T7940] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 169.231612][ T7940] R13: 000000000000000b R14: 00007f8dca703f60 R15: 00007ffcb016e848 [ 169.239599][ T7940] [ 169.265462][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.272649][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.309771][ T7940] Mem-Info: [ 169.313268][ T7940] active_anon:4171 inactive_anon:0 isolated_anon:0 [ 169.313268][ T7940] active_file:18654 inactive_file:38182 isolated_file:0 [ 169.313268][ T7940] unevictable:768 dirty:388 writeback:0 [ 169.313268][ T7940] slab_reclaimable:8698 slab_unreclaimable:92851 [ 169.313268][ T7940] mapped:13220 shmem:1269 pagetables:732 [ 169.313268][ T7940] sec_pagetables:0 bounce:0 [ 169.313268][ T7940] kernel_misc_reclaimable:0 [ 169.313268][ T7940] free:1396759 free_pcp:92 free_cma:0 [ 169.425777][ T7940] Node 0 active_anon:16784kB inactive_anon:0kB active_file:74616kB inactive_file:152640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52880kB dirty:1552kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10088kB pagetables:3028kB sec_pagetables:0kB all_unreclaimable? no [ 169.502317][ T7940] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 169.553270][ T7940] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.635479][ T7940] lowmem_reserve[]: 0 2571 2571 0 0 [ 169.686373][ T7940] Node 0 DMA32 free:1621716kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:16744kB inactive_anon:0kB active_file:74616kB inactive_file:152332kB unevictable:1536kB writepending:1552kB present:3129332kB managed:2659864kB mlocked:0kB bounce:0kB free_pcp:2080kB local_pcp:940kB free_cma:0kB [ 169.777605][ T7940] lowmem_reserve[]: 0 0 0 0 0 [ 169.782403][ T7940] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 169.851720][ T7940] lowmem_reserve[]: 0 0 0 0 0 [ 169.862095][ T7940] Node 1 Normal free:3947452kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.901685][ T7940] lowmem_reserve[]: 0 0 0 0 0 [ 169.907946][ T7940] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.962017][ T7940] Node 0 DMA32: 509*4kB (M) 539*8kB (ME) 684*16kB (UME) 711*32kB (UME) 730*64kB (UME) 232*128kB (UME) 91*256kB (UM) 40*512kB (UM) 9*1024kB (UME) 1*2048kB (U) 354*4096kB (ME) = 1621484kB [ 169.998718][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.007022][ T7968] netlink: 'syz.2.895': attribute type 21 has an invalid length. [ 170.026815][ T7940] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 170.039393][ T7968] netlink: 'syz.2.895': attribute type 2 has an invalid length. [ 170.065789][ T7940] Node 1 Normal: 1*4kB (U) 7*8kB (UM) 7*16kB (UM) 8*32kB (UM) 5*64kB (U) 2*128kB (U) 4*256kB (UM) 4*512kB (UM) 3*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3947500kB [ 170.198986][ T7940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.282717][ T7940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.361473][ T7940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.380997][ T7650] veth0_vlan: entered promiscuous mode [ 170.443027][ T7940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.478642][ T7940] 58108 total pagecache pages [ 170.499053][ T7940] 0 pages in swap cache [ 170.514804][ T7650] veth1_vlan: entered promiscuous mode [ 170.523403][ T7940] Free swap = 124996kB [ 170.580473][ T7940] Total swap = 124996kB [ 170.623265][ T7940] 2097051 pages RAM [ 170.636755][ T7650] veth0_macvtap: entered promiscuous mode [ 170.654854][ T7940] 0 pages HighMem/MovableOnly [ 170.661645][ T7940] 400875 pages reserved [ 170.680041][ T7650] veth1_macvtap: entered promiscuous mode [ 170.713150][ T7940] 0 pages cma reserved [ 171.165964][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.194561][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.229774][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.249636][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.309569][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.404962][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.436080][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.449627][ T7650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.465571][ T7650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.479239][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.515648][ T7650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.564338][ T7650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.587137][ T7650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.624616][ T7650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.724212][ T8014] netlink: 74 bytes leftover after parsing attributes in process `syz.2.908'. [ 172.120673][ T8017] syzkaller0: entered promiscuous mode [ 172.156966][ T8017] syzkaller0: entered allmulticast mode [ 172.257494][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.280868][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.687228][ T8061] netlink: 'syz.3.919': attribute type 28 has an invalid length. [ 173.870086][ T8049] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.918'. [ 173.885027][ T8049] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.918'. [ 173.897478][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.905515][ T8049] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.918'. [ 173.923912][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.967894][ T8087] team_slave_0: entered allmulticast mode [ 174.239880][ T8098] netlink: 'syz.4.926': attribute type 3 has an invalid length. [ 174.257848][ T8098] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.926'. [ 174.659322][ T8113] netlink: 'syz.2.930': attribute type 28 has an invalid length. [ 174.953158][ T8126] netlink: 'syz.2.939': attribute type 3 has an invalid length. [ 174.987589][ T8126] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.939'. [ 175.157308][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.241109][ T8136] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.943'. [ 175.367499][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.528579][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.647467][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.836650][ T11] bridge_slave_1: left allmulticast mode [ 175.842936][ T11] bridge_slave_1: left promiscuous mode [ 175.848699][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.860822][ T11] bridge_slave_0: left allmulticast mode [ 175.894721][ T11] bridge_slave_0: left promiscuous mode [ 175.902266][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.094131][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.119249][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.132318][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.147502][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.156613][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.167924][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.326419][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.340693][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.352547][ T11] bond0 (unregistering): Released all slaves [ 177.377726][ T8193] netlink: 188 bytes leftover after parsing attributes in process `syz.4.946'. [ 177.403112][ T8195] netlink: 'syz.0.950': attribute type 10 has an invalid length. [ 177.422508][ T8195] netlink: 'syz.0.950': attribute type 19 has an invalid length. [ 177.430515][ T8195] netlink: 156 bytes leftover after parsing attributes in process `syz.0.950'. [ 177.454680][ T8199] @ÿ: renamed from veth0_vlan (while UP) [ 177.591542][ T8214] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 177.986847][ T11] hsr_slave_0: left promiscuous mode [ 178.268987][ T11] hsr_slave_1: left promiscuous mode [ 178.292167][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.379462][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.835407][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.852936][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.931197][ T11] veth1_macvtap: left promiscuous mode [ 178.936846][ T11] veth0_macvtap: left promiscuous mode [ 178.942609][ T11] veth1_vlan: left promiscuous mode [ 178.963019][ T11] veth0_vlan: left promiscuous mode [ 179.226193][ T5100] Bluetooth: hci2: command tx timeout [ 179.470732][ T11] team0 (unregistering): Port device team_slave_1 removed [ 179.513622][ T11] team0 (unregistering): Port device team_slave_0 removed [ 179.904433][ T8272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.911899][ T8272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.954071][ T8272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.961537][ T8272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.395737][ T8201] chnl_net:caif_netlink_parms(): no params data found [ 180.897638][ T8292] netlink: 188 bytes leftover after parsing attributes in process `syz.4.981'. [ 181.030674][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.058575][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.088845][ T8201] bridge_slave_0: entered allmulticast mode [ 181.125299][ T8201] bridge_slave_0: entered promiscuous mode [ 181.175684][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.193998][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.210634][ T8201] bridge_slave_1: entered allmulticast mode [ 181.261480][ T8201] bridge_slave_1: entered promiscuous mode [ 181.293000][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 181.299162][ T5100] Bluetooth: hci4: command 0x0406 tx timeout [ 181.299206][ T5099] Bluetooth: hci2: command tx timeout [ 182.249714][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.393807][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.451002][ T8351] netlink: 'syz.3.988': attribute type 2 has an invalid length. [ 182.472124][ T8356] syz.4.990: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 182.493418][ T8351] netlink: 'syz.3.988': attribute type 2 has an invalid length. [ 182.515564][ T8356] CPU: 1 PID: 8356 Comm: syz.4.990 Not tainted 6.10.0-rc6-syzkaller-g7b769adc2612 #0 [ 182.521695][ T8351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.988'. [ 182.525047][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 182.525088][ T8356] Call Trace: [ 182.525100][ T8356] [ 182.525111][ T8356] dump_stack_lvl+0x241/0x360 [ 182.525158][ T8356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.525181][ T8356] ? __pfx__printk+0x10/0x10 [ 182.525209][ T8356] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 182.525236][ T8356] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 182.525270][ T8356] warn_alloc+0x278/0x410 [ 182.525299][ T8356] ? stack_depot_save_flags+0x29/0x830 [ 182.525328][ T8356] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 182.525352][ T8356] ? __pfx_warn_alloc+0x10/0x10 [ 182.525380][ T8356] ? kasan_save_track+0x3f/0x80 [ 182.525401][ T8356] ? __kasan_kmalloc+0x98/0xb0 [ 182.525425][ T8356] ? xsk_setsockopt+0x598/0x950 [ 182.525450][ T8356] ? do_sock_setsockopt+0x3af/0x720 [ 182.525475][ T8356] ? __sys_setsockopt+0x1ae/0x250 [ 182.525498][ T8356] ? __x64_sys_setsockopt+0xb5/0xd0 [ 182.525520][ T8356] ? do_syscall_64+0xf3/0x230 [ 182.525537][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.639190][ T8356] __vmalloc_node_range_noprof+0x130/0x1460 [ 182.645113][ T8356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.651439][ T8356] ? __kasan_kmalloc+0x98/0xb0 [ 182.656198][ T8356] ? xskq_create+0x54/0x170 [ 182.660698][ T8356] vmalloc_user_noprof+0x74/0x80 [ 182.665632][ T8356] ? xskq_create+0xb6/0x170 [ 182.670127][ T8356] xskq_create+0xb6/0x170 [ 182.674452][ T8356] xsk_init_queue+0xa1/0x100 [ 182.679036][ T8356] xsk_setsockopt+0x598/0x950 [ 182.683714][ T8356] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.688912][ T8356] ? __pfx_lock_acquire+0x10/0x10 [ 182.693928][ T8356] ? aa_sock_opt_perm+0x79/0x120 [ 182.698859][ T8356] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 182.704395][ T8356] ? security_socket_setsockopt+0x87/0xb0 [ 182.710112][ T8356] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.715307][ T8356] do_sock_setsockopt+0x3af/0x720 [ 182.720334][ T8356] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 182.725878][ T8356] ? __fget_files+0x29/0x470 [ 182.730468][ T8356] ? __fget_files+0x3f6/0x470 [ 182.735152][ T8356] __sys_setsockopt+0x1ae/0x250 [ 182.740003][ T8356] __x64_sys_setsockopt+0xb5/0xd0 [ 182.745027][ T8356] do_syscall_64+0xf3/0x230 [ 182.749524][ T8356] ? clear_bhb_loop+0x35/0x90 [ 182.754199][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.760091][ T8356] RIP: 0033:0x7f8dca575bd9 [ 182.764512][ T8356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.784116][ T8356] RSP: 002b:00007f8dcb275048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.792524][ T8356] RAX: ffffffffffffffda RBX: 00007f8dca703f60 RCX: 00007f8dca575bd9 [ 182.800490][ T8356] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 182.808457][ T8356] RBP: 00007f8dca5e4e60 R08: 0000000000000004 R09: 0000000000000000 [ 182.816423][ T8356] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 182.824386][ T8356] R13: 000000000000000b R14: 00007f8dca703f60 R15: 00007ffcb016e848 [ 182.832367][ T8356] [ 182.848873][ T8356] Mem-Info: [ 182.852044][ T8356] active_anon:4152 inactive_anon:0 isolated_anon:0 [ 182.852044][ T8356] active_file:18654 inactive_file:38190 isolated_file:0 [ 182.852044][ T8356] unevictable:768 dirty:314 writeback:0 [ 182.852044][ T8356] slab_reclaimable:8705 slab_unreclaimable:93636 [ 182.852044][ T8356] mapped:13225 shmem:1231 pagetables:784 [ 182.852044][ T8356] sec_pagetables:0 bounce:0 [ 182.852044][ T8356] kernel_misc_reclaimable:0 [ 182.852044][ T8356] free:1395295 free_pcp:781 free_cma:0 [ 183.068634][ T8356] Node 0 active_anon:16608kB inactive_anon:0kB active_file:74616kB inactive_file:152672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:53000kB dirty:1252kB writeback:0kB shmem:3388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10324kB pagetables:3136kB sec_pagetables:0kB all_unreclaimable? no [ 183.113011][ T8356] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 183.154924][ T8356] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.187018][ T8356] lowmem_reserve[]: 0 2571 2571 0 0 [ 183.192335][ T8356] Node 0 DMA32 free:1619768kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:16368kB inactive_anon:0kB active_file:74616kB inactive_file:152364kB unevictable:1536kB writepending:1264kB present:3129332kB managed:2659864kB mlocked:0kB bounce:0kB free_pcp:2196kB local_pcp:1324kB free_cma:0kB [ 183.200618][ T8371] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.993'. [ 183.234954][ T8356] lowmem_reserve[]: 0 0 0 0 0 [ 183.254079][ T8201] team0: Port device team_slave_0 added [ 183.276469][ T8371] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.993'. [ 183.293804][ T8201] team0: Port device team_slave_1 added [ 183.327251][ T8371] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.993'. [ 183.375548][ T5095] Bluetooth: hci2: command tx timeout [ 183.422839][ T8356] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 183.467126][ T8374] netlink: 3068 bytes leftover after parsing attributes in process `syz.0.994'. [ 183.480245][ T8356] lowmem_reserve[]: 0 0 0 0 0 [ 183.487916][ T8374] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 183.511179][ T8374] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.994'. [ 183.515178][ T8356] Node 1 Normal free:3947504kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.550680][ T8356] lowmem_reserve[]: 0 0 0 0 0 [ 183.561110][ T8356] Node 0 [ 183.568228][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.582418][ T8356] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.590654][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.597480][ T8356] Node 0 DMA32: 546*4kB (UME) 609*8kB (UME) 662*16kB (ME) 834*32kB (UME) 635*64kB (UME) 239*128kB (UME) 93*256kB (UM) 40*512kB (UM) 9*1024kB (UME) 1*2048kB (U) 354*4096kB (ME) = 1621104kB [ 183.641045][ T8201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.652694][ T8356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.667228][ T8356] Node 1 Normal: 2*4kB (U) 7*8kB (UM) 7*16kB (UM) 8*32kB (UM) 5*64kB (U) 2*128kB (U) 4*256kB (UM) 4*512kB (UM) 3*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3947504kB [ 183.685121][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.694929][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.728929][ T8356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.738867][ T8356] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.749381][ T8201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.751705][ T8356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.772199][ T8356] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.795346][ T8356] 58077 total pagecache pages [ 183.800079][ T8356] 0 pages in swap cache [ 183.805286][ T8356] Free swap = 124996kB [ 183.810640][ T8356] Total swap = 124996kB [ 183.818446][ T8356] 2097051 pages RAM [ 183.822287][ T8356] 0 pages HighMem/MovableOnly [ 183.836201][ T8356] 400875 pages reserved [ 183.840472][ T8356] 0 pages cma reserved [ 183.937634][ T8201] hsr_slave_0: entered promiscuous mode [ 183.957777][ T8201] hsr_slave_1: entered promiscuous mode [ 183.976517][ T8201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.991623][ T8201] Cannot create hsr debugfs directory [ 184.351439][ T8400] netlink: 'syz.3.1003': attribute type 2 has an invalid length. [ 184.401907][ T8400] netlink: 'syz.3.1003': attribute type 2 has an invalid length. [ 184.457568][ T8400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1003'. [ 184.458745][ T8404] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1006'. [ 184.580697][ T8405] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1005'. [ 184.618860][ T8405] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1005'. [ 185.183042][ T8434] netlink: 'syz.3.1018': attribute type 2 has an invalid length. [ 185.209728][ T8434] netlink: 'syz.3.1018': attribute type 2 has an invalid length. [ 185.408923][ T8446] netlink: 'syz.2.1022': attribute type 3 has an invalid length. [ 185.453339][ T5095] Bluetooth: hci2: command tx timeout [ 186.202597][ T8201] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.297503][ T8201] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.362319][ T8201] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.414716][ T8201] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.722158][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.800567][ T8201] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.859802][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.867024][ T5206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.905151][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.912359][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.961906][ T8500] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 186.987842][ T8498] @ÿ: renamed from veth0_vlan (while UP) [ 187.211282][ T8511] netlink: 'syz.3.1041': attribute type 4 has an invalid length. [ 187.405360][ T8517] team0: left promiscuous mode [ 187.431999][ T8517] team_slave_1: left promiscuous mode [ 187.460430][ T8517] bridge0: left promiscuous mode [ 187.478546][ T8517] team0: left allmulticast mode [ 187.495675][ T8517] team_slave_1: left allmulticast mode [ 187.518312][ T8517] bridge0: left allmulticast mode [ 187.622161][ T8517] batman_adv: batadv0: Adding interface: team0 [ 187.665073][ T8517] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.702356][ T8517] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 187.703084][ T5095] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 187.983433][ T8201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.003426][ T8542] __nla_validate_parse: 10 callbacks suppressed [ 188.003446][ T8542] netlink: 131752 bytes leftover after parsing attributes in process `syz.4.1047'. [ 188.229040][ T8201] veth0_vlan: entered promiscuous mode [ 188.260327][ T8201] veth1_vlan: entered promiscuous mode [ 188.378276][ T8201] veth0_macvtap: entered promiscuous mode [ 188.412441][ T8201] veth1_macvtap: entered promiscuous mode [ 188.460383][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.479443][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.498701][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.527797][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.551912][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.581451][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.629069][ T8201] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.648087][ T8201] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.658246][ T8201] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.669202][ T8201] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.707682][ T8573] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 188.954249][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.994193][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.174579][ T8590] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1061'. [ 189.178939][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.228980][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.375350][ T8591] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.1061'. [ 189.649660][ T8599] validate_nla: 1 callbacks suppressed [ 189.649677][ T8599] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 189.675618][ T8599] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1063'. [ 189.689600][ T8614] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1066'. [ 189.703650][ T8599] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1063'. [ 189.790081][ T8617] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1068'. [ 189.867049][ T8617] netlink: 'syz.4.1068': attribute type 3 has an invalid length. [ 189.895907][ T8617] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1068'. [ 190.203912][ T8635] tap0: tun_chr_ioctl cmd 1074025677 [ 190.223151][ T8635] tap0: linktype set to 780 [ 190.840050][ T8616] delete_channel: no stack [ 191.240603][ T8653] @ÿ: renamed from veth0_vlan (while UP) [ 191.399081][ T8664] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1080'. [ 191.493263][ T8668] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.507537][ T8668] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1081'. [ 191.747747][ T8684] netlink: 'syz.4.1087': attribute type 10 has an invalid length. [ 192.169110][ T5095] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 192.268906][ T996] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.885098][ T996] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.958855][ T996] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.026214][ T996] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.134562][ T996] bridge_slave_1: left allmulticast mode [ 193.140265][ T996] bridge_slave_1: left promiscuous mode [ 193.146414][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.191508][ T996] bridge_slave_0: left allmulticast mode [ 193.210669][ T996] bridge_slave_0: left promiscuous mode [ 193.234859][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.566914][ T8700] netlink: 'syz.4.1093': attribute type 2 has an invalid length. [ 193.595521][ T8700] netlink: 185032 bytes leftover after parsing attributes in process `syz.4.1093'. [ 194.203139][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.225559][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.252962][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.269189][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.280265][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 194.288314][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.642163][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.648637][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.928930][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.961054][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.981214][ T996] bond0 (unregistering): Released all slaves [ 195.549462][ T8745] netlink: 'syz.4.1110': attribute type 29 has an invalid length. [ 195.580762][ T8745] netlink: 'syz.4.1110': attribute type 29 has an invalid length. [ 195.667457][ T8745] netlink: 'syz.4.1110': attribute type 29 has an invalid length. [ 195.772206][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.842172][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.853184][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.863772][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.871656][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.883395][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.342912][ T5101] Bluetooth: hci2: command tx timeout [ 196.581090][ T8710] chnl_net:caif_netlink_parms(): no params data found [ 196.691737][ T996] hsr_slave_0: left promiscuous mode [ 196.700315][ T996] hsr_slave_1: left promiscuous mode [ 196.727270][ T8773] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 196.735769][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.747747][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.755603][ T8773] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1116'. [ 196.767362][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.788779][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.821591][ T996] veth1_macvtap: left promiscuous mode [ 196.827370][ T996] veth0_macvtap: left promiscuous mode [ 196.833845][ T996] veth1_vlan: left promiscuous mode [ 196.840399][ T996] veth0_vlan: left promiscuous mode [ 197.057677][ T8784] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1121'. [ 197.361772][ T996] team0 (unregistering): Port device team_slave_1 removed [ 197.401888][ T996] team0 (unregistering): Port device team_slave_0 removed [ 197.731586][ T8779] netlink: 'syz.3.1119': attribute type 39 has an invalid length. [ 197.739589][ T8779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1119'. [ 197.765328][ T8779] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 197.798653][ T8785] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.1121'. [ 197.908445][ T8788] netlink: 'syz.3.1122': attribute type 29 has an invalid length. [ 197.933280][ T5101] Bluetooth: hci0: command tx timeout [ 197.968707][ T8788] netlink: 'syz.3.1122': attribute type 29 has an invalid length. [ 198.009960][ T8798] netlink: 'syz.3.1122': attribute type 29 has an invalid length. [ 198.191744][ T8803] netlink: 'syz.4.1127': attribute type 7 has an invalid length. [ 198.207159][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.217188][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.225457][ T8710] bridge_slave_0: entered allmulticast mode [ 198.233794][ T8710] bridge_slave_0: entered promiscuous mode [ 198.243254][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.250576][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.259151][ T8803] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1127'. [ 198.278625][ T8710] bridge_slave_1: entered allmulticast mode [ 198.299068][ T8710] bridge_slave_1: entered promiscuous mode [ 198.306680][ T8808] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1127'. [ 198.413183][ T5101] Bluetooth: hci2: command tx timeout [ 198.855524][ T8797] netlink: 'syz.2.1125': attribute type 4 has an invalid length. [ 198.875466][ T8797] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1125'. [ 198.962010][ T8827] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1132'. [ 199.071015][ T8835] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1133'. [ 199.074286][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.161528][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.212270][ T8710] team0: Port device team_slave_0 added [ 199.256534][ T8839] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.1134'. [ 199.278228][ T8710] team0: Port device team_slave_1 added [ 199.352370][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 199.440927][ T8837] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1134'. [ 199.497663][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.507113][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.538194][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.564595][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.571700][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.601342][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.713800][ T8852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1139'. [ 199.786993][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.817779][ T8856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1139'. [ 200.012967][ T5101] Bluetooth: hci0: command tx timeout [ 200.090426][ T8710] hsr_slave_0: entered promiscuous mode [ 200.129964][ T8710] hsr_slave_1: entered promiscuous mode [ 200.154968][ T8710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.173408][ T8710] Cannot create hsr debugfs directory [ 200.205575][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.213917][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.222014][ T8752] bridge_slave_0: entered allmulticast mode [ 200.232867][ T8752] bridge_slave_0: entered promiscuous mode [ 200.241774][ T8868] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1144'. [ 200.298323][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.314358][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.346014][ T8752] bridge_slave_1: entered allmulticast mode [ 200.358261][ T8752] bridge_slave_1: entered promiscuous mode [ 200.493134][ T5101] Bluetooth: hci2: command tx timeout [ 200.609749][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.654967][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.998960][ T8752] team0: Port device team_slave_0 added [ 201.135469][ T8752] team0: Port device team_slave_1 added [ 201.306354][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.313799][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.340639][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.358787][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.369590][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.398683][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.459633][ T8902] validate_nla: 1 callbacks suppressed [ 201.459654][ T8902] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 201.475424][ T8902] bridge0: port 3(team0) entered disabled state [ 201.482076][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.526781][ T8902] team0: Device bridge0 is already an upper device of the team interface [ 201.737918][ T8752] hsr_slave_0: entered promiscuous mode [ 201.760873][ T8752] hsr_slave_1: entered promiscuous mode [ 201.771857][ T8752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.781233][ T8752] Cannot create hsr debugfs directory [ 201.935220][ T8922] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1161'. [ 201.990687][ T8922] netlink: 'syz.2.1161': attribute type 3 has an invalid length. [ 201.998774][ T8922] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1161'. [ 202.093041][ T5101] Bluetooth: hci0: command tx timeout [ 202.459602][ T8921] delete_channel: no stack [ 202.487491][ T8929] syz.4.1164[8929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.488086][ T8929] syz.4.1164[8929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.573079][ T5101] Bluetooth: hci2: command tx timeout [ 202.725312][ T8710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.750717][ T8710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 202.777847][ T8710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.205488][ T8752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.237034][ T8710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.385449][ T8752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.556732][ T8752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.790191][ T8752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.851720][ T8710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.959055][ T8710] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.994104][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.001272][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.045146][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.052313][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.075143][ T8987] netlink: 'syz.2.1182': attribute type 7 has an invalid length. [ 204.104681][ T8987] netlink: 'syz.2.1182': attribute type 3 has an invalid length. [ 204.112438][ T8987] __nla_validate_parse: 3 callbacks suppressed [ 204.112452][ T8987] netlink: 152988 bytes leftover after parsing attributes in process `syz.2.1182'. [ 204.173197][ T5101] Bluetooth: hci0: command tx timeout [ 204.251175][ T8990] vxcan1: entered promiscuous mode [ 204.312690][ T8752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.369210][ T8752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.419825][ T8752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.459627][ T8752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 204.818007][ T9024] netlink: 'syz.2.1191': attribute type 11 has an invalid length. [ 204.857268][ T9024] netlink: 80220 bytes leftover after parsing attributes in process `syz.2.1191'. [ 204.859314][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.961701][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.011445][ T8710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.050319][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.057534][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.144235][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.151429][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.341093][ T8710] veth0_vlan: entered promiscuous mode [ 205.395370][ T8710] veth1_vlan: entered promiscuous mode [ 205.422394][ T9048] macvtap0: entered promiscuous mode [ 205.441220][ T9048] macvtap0: entered allmulticast mode [ 205.459553][ T9048] veth0_macvtap: entered allmulticast mode [ 205.600612][ T8710] veth0_macvtap: entered promiscuous mode [ 205.649753][ T8710] veth1_macvtap: entered promiscuous mode [ 205.769380][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.832221][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.857720][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.958970][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.980391][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.004926][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.056494][ T8710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.084268][ T8710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.095381][ T8710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.105214][ T8710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.140795][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.674214][ T2485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.696601][ T2485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.703753][ T9100] netlink: 'syz.4.1210': attribute type 3 has an invalid length. [ 206.724752][ T9100] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1210'. [ 206.746045][ T8752] veth0_vlan: entered promiscuous mode [ 206.862997][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.870854][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.896029][ T8752] veth1_vlan: entered promiscuous mode [ 207.175170][ T8752] veth0_macvtap: entered promiscuous mode [ 207.193692][ T9110] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 207.205092][ T9110] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1212'. [ 207.231659][ T8752] veth1_macvtap: entered promiscuous mode [ 207.366025][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.407008][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.422104][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.432924][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.467444][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.577247][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.620634][ T9123] syz.2.1217[9123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.621161][ T9123] syz.2.1217[9123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.623483][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.665434][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.677159][ T9128] netlink: 'syz.3.1218': attribute type 8 has an invalid length. [ 207.682813][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.685090][ T9128] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1218'. [ 207.726179][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.751313][ T8752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.772497][ T8752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.792211][ T8752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.819154][ T8752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.027750][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.041592][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.071483][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.080668][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.181125][ T9147] IPv6: NLM_F_REPLACE set, but no existing node found! [ 209.030241][ T9145] netlink: 'syz.4.1225': attribute type 4 has an invalid length. [ 209.043083][ T9145] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1225'. [ 210.478919][ T2796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.583880][ T9207] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1247'. [ 210.771535][ T9203] syzkaller0: entered promiscuous mode [ 210.777602][ T9203] syzkaller0: entered allmulticast mode [ 210.796561][ T2796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.975373][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.990293][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.004986][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.016713][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.024717][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.032157][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.300734][ T2796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.353961][ T9241] netlink: 'syz.0.1259': attribute type 21 has an invalid length. [ 212.371227][ T9241] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1259'. [ 212.460191][ T2796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.231988][ T2796] bridge_slave_1: left allmulticast mode [ 213.257090][ T2796] bridge_slave_1: left promiscuous mode [ 213.280963][ T2796] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.341906][ T2796] bridge_slave_0: left allmulticast mode [ 213.369277][ T2796] bridge_slave_0: left promiscuous mode [ 213.385539][ T2796] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.922507][ T2796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.936514][ T2796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.949380][ T2796] bond0 (unregistering): Released all slaves [ 214.093736][ T5101] Bluetooth: hci2: command tx timeout [ 214.590560][ T9269] syzkaller0: entered promiscuous mode [ 214.596467][ T9269] syzkaller0: entered allmulticast mode [ 214.633122][ T9295] netlink: 'syz.0.1279': attribute type 21 has an invalid length. [ 214.641228][ T9295] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1279'. [ 214.651657][ T9296] bridge0: port 3(team0) entered blocking state [ 214.658117][ T9296] bridge0: port 3(team0) entered forwarding state [ 214.664977][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.672080][ T9296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.680973][ T9296] bridge0: entered promiscuous mode [ 214.686236][ T9296] bridge0: entered allmulticast mode [ 214.788984][ T9232] chnl_net:caif_netlink_parms(): no params data found [ 215.075809][ T9325] netlink: 'syz.3.1286': attribute type 3 has an invalid length. [ 215.084338][ T9325] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1286'. [ 216.174072][ T5101] Bluetooth: hci2: command tx timeout [ 216.465683][ T2796] hsr_slave_0: left promiscuous mode [ 216.479987][ T2796] hsr_slave_1: left promiscuous mode [ 216.487000][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.495132][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.504973][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.512428][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.538209][ T2796] veth1_macvtap: left promiscuous mode [ 216.544570][ T2796] veth0_macvtap: left promiscuous mode [ 216.550356][ T2796] veth1_vlan: left promiscuous mode [ 216.557160][ T2796] veth0_vlan: left promiscuous mode [ 216.766162][ T9359] netlink: 'syz.3.1298': attribute type 3 has an invalid length. [ 216.774476][ T9359] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1298'. [ 217.284655][ T2796] team0 (unregistering): Port device team_slave_1 removed [ 217.348066][ T2796] team0 (unregistering): Port device team_slave_0 removed [ 217.432093][ T9376] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 217.485321][ T9377] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1305'. [ 217.726345][ T9340] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.734375][ T9340] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.765406][ T9350] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.772656][ T9350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.780200][ T9350] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.787405][ T9350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.797346][ T9350] bridge0: entered promiscuous mode [ 217.802582][ T9350] bridge0: entered allmulticast mode [ 217.825736][ T9376] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 217.927495][ T9378] netlink: 'syz.3.1305': attribute type 29 has an invalid length. [ 218.039291][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.065660][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.096908][ T9232] bridge_slave_0: entered allmulticast mode [ 218.119453][ T9394] netlink: 'syz.3.1309': attribute type 3 has an invalid length. [ 218.124032][ T9232] bridge_slave_0: entered promiscuous mode [ 218.141026][ T9394] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1309'. [ 218.196887][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.232973][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.254862][ T5101] Bluetooth: hci2: command tx timeout [ 218.269933][ T9232] bridge_slave_1: entered allmulticast mode [ 218.290693][ T9232] bridge_slave_1: entered promiscuous mode [ 218.357217][ T9398] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1310'. [ 218.524959][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.595513][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.687109][ T9406] netlink: 'syz.4.1313': attribute type 10 has an invalid length. [ 218.715322][ T9406] bridge0: port 3(hsr0) entered disabled state [ 218.729532][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.760221][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.329182][ T9406] bridge0: port 3(hsr0) entered blocking state [ 219.338905][ T9406] bridge0: port 3(hsr0) entered forwarding state [ 219.354873][ T9406] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.363157][ T9406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.370609][ T9406] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.377816][ T9406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.395800][ T9406] team0: Port device bridge0 added [ 219.442267][ T9414] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1315'. [ 219.520821][ T9232] team0: Port device team_slave_0 added [ 219.559772][ T9232] team0: Port device team_slave_1 added [ 219.659583][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.669333][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.728238][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.760741][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.771447][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.824925][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.990503][ T9436] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1323'. [ 220.051937][ T9232] hsr_slave_0: entered promiscuous mode [ 220.060345][ T9443] netlink: 'syz.0.1325': attribute type 29 has an invalid length. [ 220.159890][ T9446] netlink: 'syz.2.1326': attribute type 6 has an invalid length. [ 220.180292][ T9446] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1326'. [ 220.193600][ T9232] hsr_slave_1: entered promiscuous mode [ 220.332899][ T5101] Bluetooth: hci2: command tx timeout [ 220.597377][ T9232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.608646][ T9232] Cannot create hsr debugfs directory [ 220.614466][ T9443] netlink: 'syz.0.1325': attribute type 29 has an invalid length. [ 220.632501][ T9451] netlink: 'syz.0.1325': attribute type 29 has an invalid length. [ 220.656168][ T9458] netlink: 'syz.0.1325': attribute type 29 has an invalid length. [ 221.409105][ T9491] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1334'. [ 222.337516][ T9524] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1344'. [ 222.446348][ T9530] validate_nla: 7 callbacks suppressed [ 222.446399][ T9530] netlink: 'syz.3.1346': attribute type 10 has an invalid length. [ 222.499325][ T9530] bridge0: port 3(team0) entered disabled state [ 222.508448][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.544351][ T9530] bridge0: left promiscuous mode [ 222.550125][ T9530] bridge0: left allmulticast mode [ 222.643045][ T9530] team0: Device bridge0 is already an upper device of the team interface [ 222.805197][ T9232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.856442][ T9232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.917268][ T9232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.961446][ T9232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.177278][ T9553] netlink: 'syz.2.1353': attribute type 39 has an invalid length. [ 223.180447][ T9557] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1355'. [ 223.348607][ T9232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.519308][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.571915][ T9232] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.649297][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.712194][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.719434][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.852661][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.859883][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.011277][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.195204][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.216004][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.234001][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.250780][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.258820][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.268128][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.324510][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.388025][ T9589] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1367'. [ 224.976791][ T12] bridge_slave_1: left allmulticast mode [ 225.004655][ T12] bridge_slave_1: left promiscuous mode [ 225.010561][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.059140][ T12] bridge_slave_0: left allmulticast mode [ 225.080207][ T12] bridge_slave_0: left promiscuous mode [ 225.090674][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.633851][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.648785][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.664748][ T12] bond0 (unregistering): Released all slaves [ 225.947995][ T9232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.193431][ T9584] chnl_net:caif_netlink_parms(): no params data found [ 226.261334][ T12] hsr_slave_0: left promiscuous mode [ 226.297443][ T12] hsr_slave_1: left promiscuous mode [ 226.311776][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.333151][ T5101] Bluetooth: hci0: command tx timeout [ 226.348015][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.403815][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.422632][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.469527][ T12] veth1_macvtap: left promiscuous mode [ 226.493752][ T12] veth0_macvtap: left promiscuous mode [ 226.501117][ T12] veth1_vlan: left promiscuous mode [ 226.511606][ T12] veth0_vlan: left promiscuous mode [ 226.628810][ T9666] netlink: 'syz.2.1386': attribute type 3 has an invalid length. [ 227.229279][ T12] team0 (unregistering): Port device team_slave_1 removed [ 227.273336][ T12] team0 (unregistering): Port device team_slave_0 removed [ 228.065491][ T9232] veth0_vlan: entered promiscuous mode [ 228.149247][ T9232] veth1_vlan: entered promiscuous mode [ 228.329474][ T9584] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.366967][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.390965][ T9584] bridge_slave_0: entered allmulticast mode [ 228.404773][ T9584] bridge_slave_0: entered promiscuous mode [ 228.465953][ T9232] veth0_macvtap: entered promiscuous mode [ 228.482994][ T5101] Bluetooth: hci0: command tx timeout [ 228.646796][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.689098][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.744389][ T9584] bridge_slave_1: entered allmulticast mode [ 228.760092][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.774359][ T9584] bridge_slave_1: entered promiscuous mode [ 228.776657][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.791160][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.806269][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.815779][ T9232] veth1_macvtap: entered promiscuous mode [ 228.821613][ T5095] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.830584][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.981859][ T9584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.041440][ T9584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.208283][ T9584] team0: Port device team_slave_0 added [ 229.264401][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.287055][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.304250][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.317831][ T9232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.346980][ T9232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.380107][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.404796][ T9584] team0: Port device team_slave_1 added [ 229.439918][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.492147][ T9232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.505160][ T9232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.520647][ T9232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.531086][ T9232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.621020][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.638265][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.680094][ T9584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.729324][ T9769] netlink: 'syz.3.1407': attribute type 4 has an invalid length. [ 229.749387][ T9769] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1407'. [ 229.757054][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.834374][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.841384][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.870234][ T9584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.886575][ T9768] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1408'. [ 229.947018][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.156182][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.189289][ T9584] hsr_slave_0: entered promiscuous mode [ 230.214048][ T9584] hsr_slave_1: entered promiscuous mode [ 230.228371][ T9584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.246841][ T9584] Cannot create hsr debugfs directory [ 230.334499][ T5095] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 230.343502][ T5095] Bluetooth: hci1: Injecting HCI hardware error event [ 230.351739][ T5101] Bluetooth: hci1: hardware error 0x00 [ 230.493132][ T5095] Bluetooth: hci0: command tx timeout [ 230.497260][ T9790] netlink: 'syz.2.1414': attribute type 4 has an invalid length. [ 230.530385][ T9790] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.1414'. [ 230.571181][ T9790] netlink: 18430 bytes leftover after parsing attributes in process `syz.2.1414'. [ 230.649741][ T8175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.687298][ T8175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.741120][ T9734] chnl_net:caif_netlink_parms(): no params data found [ 230.894002][ T5095] Bluetooth: hci3: command tx timeout [ 230.952109][ T12] hsr0: left allmulticast mode [ 230.960579][ T12] hsr_slave_0: left allmulticast mode [ 230.969231][ T12] hsr_slave_1: left allmulticast mode [ 230.977488][ T12] hsr0: left promiscuous mode [ 230.982513][ T12] bridge0: port 3(hsr0) entered disabled state [ 230.992279][ T12] bridge_slave_1: left allmulticast mode [ 230.998291][ T12] bridge_slave_1: left promiscuous mode [ 231.004124][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.019007][ T12] bridge_slave_0: left allmulticast mode [ 231.025246][ T12] bridge_slave_0: left promiscuous mode [ 231.030995][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.301703][ T12] team0: Port device bridge0 removed [ 231.320059][ T9814] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1422'. [ 231.437794][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.454620][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.466806][ T12] bond0 (unregistering): Released all slaves [ 231.505690][ T9818] netlink: 'syz.3.1424': attribute type 13 has an invalid length. [ 231.516355][ T9818] macvtap0: entered allmulticast mode [ 231.521729][ T9818] veth0_macvtap: entered allmulticast mode [ 231.529400][ T9818] macvtap0: refused to change device tx_queue_len [ 231.541339][ T8175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.561064][ T8175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.728899][ T9734] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.771545][ T9734] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.779612][ T9734] bridge_slave_0: entered allmulticast mode [ 231.788032][ T9734] bridge_slave_0: entered promiscuous mode [ 231.802594][ T9734] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.812297][ T9734] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.833398][ T9734] bridge_slave_1: entered allmulticast mode [ 231.840845][ T9734] bridge_slave_1: entered promiscuous mode [ 232.007667][ T9734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.061276][ T9837] netlink: 'syz.2.1430': attribute type 13 has an invalid length. [ 232.073743][ T9837] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1430'. [ 232.091064][ T9734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.232920][ T9842] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 232.327246][ T9842] team0: Device veth0_macvtap failed to register rx_handler [ 232.415669][ T5101] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 232.434716][ T9734] team0: Port device team_slave_0 added [ 232.480197][ T9734] team0: Port device team_slave_1 added [ 232.549145][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.558089][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.584427][ T5101] Bluetooth: hci0: command tx timeout [ 232.591651][ T9734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.614275][ T9734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.621260][ T9734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.648102][ T9734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.711344][ T9584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.725951][ T9734] hsr_slave_0: entered promiscuous mode [ 232.735022][ T9734] hsr_slave_1: entered promiscuous mode [ 232.741369][ T9734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.749119][ T9734] Cannot create hsr debugfs directory [ 232.757455][ T9584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.786635][ T9584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.812454][ T9584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.973827][ T5101] Bluetooth: hci3: command tx timeout [ 233.035646][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.088425][ T9584] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.108218][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.115405][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.167394][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.174590][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.262680][ T9584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.279668][ T9584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.490358][ T9871] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1433'. [ 233.782491][ T9734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.830081][ T9734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.873164][ T9734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.898323][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.915437][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.924969][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.950232][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.968463][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.976015][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.000728][ T12] hsr_slave_0: left promiscuous mode [ 234.019503][ T12] hsr_slave_1: left promiscuous mode [ 234.082824][ T12] veth1_macvtap: left promiscuous mode [ 234.097652][ T12] veth1_vlan: left promiscuous mode [ 234.115993][ T12] veth0_vlan: left promiscuous mode [ 234.539603][ T12] team0 (unregistering): Port device team_slave_1 removed [ 234.574612][ T12] team0 (unregistering): Port device team_slave_0 removed [ 234.870969][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.882175][ T9734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.899892][ T9893] netlink: 'syz.3.1440': attribute type 21 has an invalid length. [ 234.907843][ T9893] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1440'. [ 234.922946][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 234.942225][ T9897] netlink: 'syz.2.1442': attribute type 13 has an invalid length. [ 234.952258][ T9897] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1442'. [ 235.055213][ T53] Bluetooth: hci3: command tx timeout [ 235.078706][ T9899] netlink: 'syz.2.1443': attribute type 29 has an invalid length. [ 235.099264][ T9901] ------------[ cut here ]------------ [ 235.104813][ T9901] WARNING: CPU: 1 PID: 9901 at net/core/filter.c:6596 bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 235.114875][ T9901] Modules linked in: [ 235.118795][ T9901] CPU: 1 PID: 9901 Comm: syz.3.1444 Not tainted 6.10.0-rc6-syzkaller-g7b769adc2612 #0 [ 235.128478][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 235.138592][ T9901] RIP: 0010:bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 235.144898][ T9901] Code: 9f 92 32 f8 eb 05 e8 98 92 32 f8 48 c7 c0 f2 ff ff ff e9 d1 fc ff ff e8 87 92 32 f8 48 63 c3 e9 c4 fc ff ff e8 7a 92 32 f8 90 <0f> 0b 90 4d 85 f6 0f 85 0e f9 ff ff e9 46 fa ff ff e8 63 92 32 f8 [ 235.164591][ T9901] RSP: 0018:ffffc9000d15f7a0 EFLAGS: 00010287 [ 235.170694][ T9901] RAX: ffffffff89639416 RBX: 0000000000000000 RCX: 0000000000040000 [ 235.178743][ T9901] RDX: ffffc900094aa000 RSI: 000000000000081d RDI: 000000000000081e [ 235.186797][ T9901] RBP: ffffc9000d15f8d8 R08: ffffffff89638d1b R09: 1ffffffff1f5bc25 [ 235.194843][ T9901] R10: dffffc0000000000 R11: ffffffffa0001724 R12: 0000000000000000 [ 235.202866][ T9901] R13: ffff8880b953d060 R14: 0000000000000000 R15: dffffc0000000000 [ 235.210857][ T9901] FS: 00007f87fc0116c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 235.219867][ T9901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.226510][ T9901] CR2: 000000110c2bdf2e CR3: 000000006edce000 CR4: 00000000003506f0 [ 235.234564][ T9901] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.242559][ T9901] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.250600][ T9901] Call Trace: [ 235.253925][ T9901] [ 235.256958][ T9901] ? __warn+0x163/0x4e0 [ 235.261144][ T9901] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 235.266872][ T9901] ? report_bug+0x2b3/0x500 [ 235.271398][ T9901] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 235.277107][ T9901] ? handle_bug+0x3e/0x70 [ 235.280681][ T9734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.281431][ T9901] ? exc_invalid_op+0x1a/0x50 [ 235.281468][ T9901] ? asm_exc_invalid_op+0x1a/0x20 [ 235.297821][ T9901] ? 0xffffffffa0001724 [ 235.301998][ T9901] ? bpf_lwt_seg6_adjust_srh+0x17b/0xb30 [ 235.307714][ T9901] ? bpf_lwt_seg6_adjust_srh+0x876/0xb30 [ 235.313516][ T9901] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 235.319185][ T9901] ? lockdep_hardirqs_on+0x99/0x150 [ 235.321978][ T9734] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.324449][ T9901] ? __pfx_bpf_lwt_seg6_adjust_srh+0x10/0x10 [ 235.324495][ T9901] bpf_prog_2088341bddeddc1d+0x40/0x42 [ 235.324516][ T9901] bpf_test_run+0x4f0/0xa90 [ 235.324537][ T9901] ? do_syscall_64+0xf3/0x230 [ 235.351789][ T9901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.357944][ T9901] ? bpf_test_run+0x370/0xa90 [ 235.362671][ T9901] ? __pfx_bpf_test_run+0x10/0x10 [ 235.367787][ T9901] ? eth_type_trans+0x3d1/0x7a0 [ 235.372790][ T9901] ? __pfx_eth_type_trans+0x10/0x10 [ 235.378018][ T9901] ? convert___skb_to_skb+0x41/0x620 [ 235.383374][ T9901] bpf_prog_test_run_skb+0xc97/0x1820 [ 235.388795][ T9901] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 235.394665][ T9901] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 235.398327][ T9899] netlink: 'syz.2.1443': attribute type 29 has an invalid length. [ 235.400475][ T9901] bpf_prog_test_run+0x33a/0x3b0 [ 235.413315][ T9901] __sys_bpf+0x48d/0x810 [ 235.417596][ T9901] ? __pfx___sys_bpf+0x10/0x10 [ 235.422394][ T9901] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.428446][ T9901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.434829][ T9901] ? do_syscall_64+0x100/0x230 [ 235.439620][ T9901] __x64_sys_bpf+0x7c/0x90 [ 235.444101][ T9901] do_syscall_64+0xf3/0x230 [ 235.448624][ T9901] ? clear_bhb_loop+0x35/0x90 [ 235.453363][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.455442][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.459253][ T9901] RIP: 0033:0x7f87fb175bd9 [ 235.459276][ T9901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.459293][ T9901] RSP: 002b:00007f87fc011048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.466424][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.470726][ T9901] RAX: ffffffffffffffda RBX: 00007f87fb303f60 RCX: 00007f87fb175bd9 [ 235.514435][ T9901] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 235.516975][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.522408][ T9901] RBP: 00007f87fb1e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 235.522426][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.522438][ T9901] R13: 000000000000000b R14: 00007f87fb303f60 R15: 00007ffe66e46b78 [ 235.522472][ T9901] [ 235.529599][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.537496][ T9901] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.537511][ T9901] CPU: 1 PID: 9901 Comm: syz.3.1444 Not tainted 6.10.0-rc6-syzkaller-g7b769adc2612 #0 [ 235.537530][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 235.537542][ T9901] Call Trace: [ 235.537550][ T9901] [ 235.537558][ T9901] dump_stack_lvl+0x241/0x360 [ 235.537587][ T9901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.537609][ T9901] ? __pfx__printk+0x10/0x10 [ 235.537636][ T9901] ? vscnprintf+0x5d/0x90 [ 235.537661][ T9901] panic+0x349/0x860 [ 235.537682][ T9901] ? __warn+0x172/0x4e0 [ 235.537706][ T9901] ? __pfx_panic+0x10/0x10 [ 235.537743][ T9901] __warn+0x346/0x4e0 [ 235.537765][ T9901] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 235.537793][ T9901] report_bug+0x2b3/0x500 [ 235.537811][ T9901] ? bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 235.537839][ T9901] handle_bug+0x3e/0x70 [ 235.537860][ T9901] exc_invalid_op+0x1a/0x50 [ 235.537881][ T9901] asm_exc_invalid_op+0x1a/0x20 [ 235.537903][ T9901] RIP: 0010:bpf_lwt_seg6_adjust_srh+0x877/0xb30 [ 235.537927][ T9901] Code: 9f 92 32 f8 eb 05 e8 98 92 32 f8 48 c7 c0 f2 ff ff ff e9 d1 fc ff ff e8 87 92 32 f8 48 63 c3 e9 c4 fc ff ff e8 7a 92 32 f8 90 <0f> 0b 90 4d 85 f6 0f 85 0e f9 ff ff e9 46 fa ff ff e8 63 92 32 f8 [ 235.537942][ T9901] RSP: 0018:ffffc9000d15f7a0 EFLAGS: 00010287 [ 235.537960][ T9901] RAX: ffffffff89639416 RBX: 0000000000000000 RCX: 0000000000040000 [ 235.537973][ T9901] RDX: ffffc900094aa000 RSI: 000000000000081d RDI: 000000000000081e [ 235.537985][ T9901] RBP: ffffc9000d15f8d8 R08: ffffffff89638d1b R09: 1ffffffff1f5bc25 [ 235.537999][ T9901] R10: dffffc0000000000 R11: ffffffffa0001724 R12: 0000000000000000 [ 235.538012][ T9901] R13: ffff8880b953d060 R14: 0000000000000000 R15: dffffc0000000000 [ 235.538031][ T9901] ? 0xffffffffa0001724 [ 235.538047][ T9901] ? bpf_lwt_seg6_adjust_srh+0x17b/0xb30 [ 235.538069][ T9901] ? bpf_lwt_seg6_adjust_srh+0x876/0xb30 [ 235.538102][ T9901] ? lockdep_hardirqs_on+0x99/0x150 [ 235.538131][ T9901] ? __pfx_bpf_lwt_seg6_adjust_srh+0x10/0x10 [ 235.538167][ T9901] bpf_prog_2088341bddeddc1d+0x40/0x42 [ 235.538190][ T9901] bpf_test_run+0x4f0/0xa90 [ 235.538210][ T9901] ? do_syscall_64+0xf3/0x230 [ 235.538228][ T9901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.538254][ T9901] ? bpf_test_run+0x370/0xa90 [ 235.538286][ T9901] ? __pfx_bpf_test_run+0x10/0x10 [ 235.538316][ T9901] ? eth_type_trans+0x3d1/0x7a0 [ 235.538354][ T9901] ? __pfx_eth_type_trans+0x10/0x10 [ 235.538381][ T9901] ? convert___skb_to_skb+0x41/0x620 [ 235.538406][ T9901] bpf_prog_test_run_skb+0xc97/0x1820 [ 235.538448][ T9901] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 235.538475][ T9901] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 235.538497][ T9901] bpf_prog_test_run+0x33a/0x3b0 [ 235.538520][ T9901] __sys_bpf+0x48d/0x810 [ 235.538548][ T9901] ? __pfx___sys_bpf+0x10/0x10 [ 235.538586][ T9901] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.538609][ T9901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.538630][ T9901] ? do_syscall_64+0x100/0x230 [ 235.538655][ T9901] __x64_sys_bpf+0x7c/0x90 [ 235.538680][ T9901] do_syscall_64+0xf3/0x230 [ 235.538700][ T9901] ? clear_bhb_loop+0x35/0x90 [ 235.538740][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.538768][ T9901] RIP: 0033:0x7f87fb175bd9 [ 235.538784][ T9901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.538799][ T9901] RSP: 002b:00007f87fc011048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.538817][ T9901] RAX: ffffffffffffffda RBX: 00007f87fb303f60 RCX: 00007f87fb175bd9 [ 235.538832][ T9901] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 235.538844][ T9901] RBP: 00007f87fb1e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 235.538856][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.538867][ T9901] R13: 000000000000000b R14: 00007f87fb303f60 R15: 00007ffe66e46b78 [ 235.538896][ T9901] [ 235.545661][ T9901] Kernel Offset: disabled