last executing test programs: 6.151359261s ago: executing program 1 (id=2805): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2010c000, 0x0, 0x80000, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5.016567069s ago: executing program 0 (id=2814): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) (async, rerun: 64) r0 = socket$kcm(0x2b, 0x1, 0x0) (rerun: 64) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24008010) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000200), 0x11) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) (rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000980)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x7, 0x4, 0x2, 0x5ba9, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async, rerun: 32) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x3}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0f0000000400000004000000020e000000000000521e3d621d579ad55f58c694ad158152", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000002000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="00000000ffe0885271a8d23de4fce27195"], &(0x7f0000000000)='GPL\x00', 0xc, 0xd8, &(0x7f00000001c0)=""/216, 0x0, 0x59}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000580)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x26, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0xa}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x29b}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x4c, &(0x7f00000001c0)=""/76, 0x41100, 0x3e, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x8}, 0x10, 0xffffffffffffffff, r2, 0x1, &(0x7f0000000780)=[r7, r6, r6, r6, r6, r6, r4, r6], &(0x7f00000007c0)=[{0x2, 0x5, 0xd, 0x8}], 0x10, 0x3}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000001a00000073115c00c9ed00008510000002000000850000007600000095000000002000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0xfffffffffffffd6e, 0x0, 0x0, 0x10, 0x4000}, 0x94) 4.97013698s ago: executing program 1 (id=2815): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000940)="c6", 0x1}], 0x1}, 0x4040004) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000000c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x4024890}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) 4.881471291s ago: executing program 2 (id=2816): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x44490, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b75, 0x4, @perf_config_ext={0x8, 0x7}, 0x14101, 0x32, 0xfffffbff, 0x9, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, r0, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2f0000001800000004000000", @ANYRES32=r2, @ANYBLOB="c1c9bd28bc5b77aed0d15a7d5aec1d82f6f803b4ad79d02b27495de3e795b01389", @ANYRES64=0x0], 0x20) 4.730301143s ago: executing program 0 (id=2818): bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x36, 0x0, &(0x7f0000001880)="cedfb080cd21d308098e000081007e2286dd2db6cc65938e6cf878a76202992d66a9b3c35fdae0c92d67c45a11b3b285ef0400000040", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.729564154s ago: executing program 1 (id=2819): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="110000005a00", @ANYRES64], 0xfe33) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = syz_clone(0x4080080, &(0x7f0000000280)="70611feb75ac271cebb25dd5f8491e24b418cd35d4675434f7becba3f28b39f7f8f0580aadabd615aa170bfadb8b1125c196443f985cec9e498e63c5e0419a38f47afe76cf524e65bac5c4e13eaeaa6eceb1", 0x52, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340)="f75b2497682e96731ca8ade8ade0f0a89af95acdadee554ef46f2babbd9a38a2d32f69a03875df706e54b6ee181e9862c1f6784821f6875ffd6f99438bb24a45db900933ca977788f6e55c975e6e28270bf1891be782aad4592803944c974bee8a95687cca786929feb88c2a9700eafafc834637fecf126769e11a4f74") r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r6, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r4, r6, 0x0, 0x8, &(0x7f00000003c0)='pimreg0\x00'}, 0x30) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001f000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) socket$kcm(0x11, 0xa, 0x300) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[@ANYBLOB='14'], 0x31) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x25, 0x0, 0x2, 0x80000009}, {0x1}, {0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x720}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000a8d479102800000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0x2f, 0x0, &(0x7f0000000040)="2586fcfceafb757788328a0ecdc812ef7f5feef3be6ed86ce650ab36f3e957c4cb77a36d3b5584e8df82fb51a2c5f2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2fb766c414f65514, 0x1100}, 0x50) 4.581395186s ago: executing program 2 (id=2820): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000210000000000711012000000001fab3a320700000000c8ddd5c43591e12528e662e3f81801ee804d38082f39bfb38df02c62331a9075d75cf7a93c3d848b9f9f9405f7c01b3948e002bf699910fcf5534a4120014d9b3f63d2da08592b386b261fdd3ef2533eadbf17"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r3}, 0x18) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000202000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) 3.834820698s ago: executing program 2 (id=2821): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000040)='syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1400000017000be65f0f42d25a80648c2594f90b", 0x14}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x10, 0x1}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b06, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x2f8}, 0x20000081) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.834559868s ago: executing program 3 (id=2822): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x93}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x4e, 0x0, 0xffffffffffffffff, 0x3000000}, 0x48) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x12, &(0x7f0000000280), 0x1}, 0x60000000) 3.830435788s ago: executing program 0 (id=2830): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x161f, 0x0, @perf_config_ext={0x1, 0x4}, 0x300c10, 0xc8, 0x0, 0x6, 0xbe20}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc200b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3a200007"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000001cc0)=ANY=[@ANYBLOB], 0xfdef) 3.478784853s ago: executing program 3 (id=2823): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="c5", 0x1}], 0x1}, 0x4014) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 3) 3.475079714s ago: executing program 0 (id=2824): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2010c000, 0x0, 0x80000, &(0x7f0000000100), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.10800097s ago: executing program 2 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000240000000c0000000010"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0xed, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="36b821a82ea1ff6bb876e1b2f6d4d18b7b7ca307d47f39b8e3c2837dbc32e8f2276434e4c1fda5efd6a17566e4909cfb24f01f85021db4c3f71ba52f32df9c05980b3ef792972274b571f5f620b649c328d76ea5ce102764502c5a24ae7cfccc64f37a0f6640959475de607bca26b2991b07a1b38fad555138074daefe1c69", @ANYRES32=r3, @ANYRESOCT=r4], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000240)="37b3c2ada04a401fc788b676d58c", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, @fallback=0x35}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="090080000010c19d7c2befc620aa37c78afd0900", @ANYRES32, @ANYBLOB="feffffff0000000000001f150000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000050000000000000000000000006859d38f22908a45ceb69b7b6fd0690000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r9}, 0x38) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = gettid() perf_event_open(&(0x7f0000000880)={0x3, 0x80, 0x1, 0x5, 0x5, 0x52, 0x0, 0x2bf8c00000, 0x4a001, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000340), 0x4}, 0x8080, 0x0, 0x3eb, 0x0, 0x7fff, 0x8001, 0x7ff, 0x0, 0x100, 0x0, 0x62b}, r11, 0xe, r7, 0x8) socket$kcm(0x29, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) 3.053287721s ago: executing program 1 (id=2826): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x112931, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x47da, 0x0, 0x0, 0x0, 0x48}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @ldst={0x1, 0x3, 0x3, 0xf, 0x5, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='GPL\x00', 0x52b, 0x3b, &(0x7f0000000180)=""/59, 0x41100, 0x23, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0xd, 0x2}, 0x10, 0x229ef, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x236}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) 2.45859045s ago: executing program 2 (id=2827): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="c5", 0x1}], 0x1}, 0x4014) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.259771543s ago: executing program 3 (id=2829): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700000007000000ec04009ac0f9ab6fe04969e50000ff000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x45, 0x0, 0x2, 0x8}]}) r8 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r8, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000f9788c80000000000400000018430000ffffffff000000f80000000085100000fdffffff360100002020732500000000002020207b1af8ff00000000bfa1000000000000070143330ea9330ffe32000008000000b7030000060000ec850000000600000085200000040000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0xa5, &(0x7f0000000540)=""/165, 0x41000, 0x40, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r1, r6, r6, r1, r1], &(0x7f00000006c0)=[{0x5, 0x1, 0xf, 0xc}, {0x4, 0x1, 0x10, 0x4}, {0x3, 0x5, 0x0, 0xc}, {0x1, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0x5}, {0x5, 0x5, 0x1, 0x6}, {0x3, 0x2, 0xb, 0x8}], 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.010576537s ago: executing program 0 (id=2831): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8915, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000008000000911174000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r0, 0x8915, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7f7f00"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000008000000911174000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) 1.701154473s ago: executing program 1 (id=2832): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x15, 0xb, &(0x7f0000000640)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700000007000000ec04009ac0f9ab6fe04969e50000ff000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000ac0)=""/117, 0x75, 0x0, &(0x7f0000000b40)=""/81, 0x51}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x2, 0x12) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x45, 0x0, 0x2, 0x8}]}) r8 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r8, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000f9788c80000000000400000018430000ffffffff000000f80000000085100000fdffffff360100002020732500000000002020207b1af8ff00000000bfa1000000000000070143330ea9330ffe32000008000000b7030000060000ec850000000600000085200000040000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0xa5, &(0x7f0000000540)=""/165, 0x41000, 0x40, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r1, r6, r6, r1, r1], &(0x7f00000006c0)=[{0x5, 0x1, 0xf, 0xc}, {0x4, 0x1, 0x10, 0x4}, {0x3, 0x5, 0x0, 0xc}, {0x1, 0x4, 0xa, 0x9}, {0x5, 0x3, 0x5}, {0x5, 0x5, 0x1, 0x6}, {0x3, 0x2, 0xb, 0x8}], 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.381837348s ago: executing program 3 (id=2833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x803e}, 0x0) 1.270184069s ago: executing program 0 (id=2834): r0 = socket$kcm(0x2, 0x3, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x2, 0x6, 0x0, &(0x7f0000000380)) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095", @ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x4004000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, 0x0}, 0x20) r5 = socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8282900, &(0x7f0000000740)="8a1eb442a80a1c0e442c8147dd5ddc9ff879e66e9ec50d6f49d8a41c48edb3fcdeb38436410bc3a9d2bfa7752682d059e2fa1ce9309ef6c2b4225623f9a0421f93d2d65222e62e472a61e569c4bf523d7695f3c20e5584496e28f24ab8ead52aa9eab7e6e7d4de2657ed434a4f9a3f5e1f0c26fd1504658fdc153131b893ae14f39a355a0866f851ba9ef87515eed05e19699850a4313f21f1d77e04bb17dbc1af0826363c4afbbda7229e9aa8969cd54ce07e5098cb839835319c29338bbd032f60714d16cf", 0xc6, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="80c89b8bb81c9b534be4f4783d985c1e5ba325fea29364ca2e3091f2b3a41648a6cb78bd1a567438dd5f93d747d01594e09988dc45b862c95727b275b3456a1054624cc4f1dbc5ed0cb38c0e74817e3901cc2bc988b9c3dd291a58381f00c8d5d474ba8f9e282af1ca01211d003b456d4ba8843a408c8494f3608812f55dae9e22e70a7dbd08f0ca5b6066427ea7d72c536514a78b9c31fd307c4d39dbe99632cdfb36c744088d7f63085250471e659fb47f6ed4fa716beb09483aea42dddf4621ca0d33e32783f56c4ee7b9439bedece1732d") r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x6, 0x8, &(0x7f00000002c0)="0000ffffffff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$inet(r5, 0x0, 0x200048cc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000001000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) close(r5) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r2, r4}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf8000000, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) 1.126873092s ago: executing program 2 (id=2835): socket$kcm(0x2, 0x922000000001, 0x106) syz_clone(0x8c000080, &(0x7f0000000040)="3586b4f4f2e98a781dc67d3292e3d2ac8298d496f988b2c7f2225fc0df4b0eb48ce18901aa04ff064d5d1d9231b473aad4f0c8ff2589471ce19b2877febe640466914a1ff71a1bf20eb6527d55b40c45da88555cb12a81163def807498f71a96c2d98839959354c725b129ccbc8340baf3eb46983e17d99313cc737bb246af199424d87c06dfa66571d113ef9ed0739540ded501e7e638e936e29279194d901b29cbcfe9f6c996bac192", 0xaa, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="06b0a08e1cd86e34d086554b32fdee4691faf07dda4f0b2253151c0378c4dc11059afca77196fd84d919081806172cc5b1197ec75f003659c9ce91dbfd82ca83cac183301128f161dbf2c32df6f41c7bb2fd4fa16b258ad25794a1732b599821e0bba23d") r0 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'veth1_macvtap\x00', @remote}) socketpair(0x22, 0x5, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x2, 0x6, 0x0, &(0x7f0000000380)) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095", @ANYRES8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000029"], 0x18}, 0x4004000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, 0x0}, 0x20) r5 = socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8282900, &(0x7f0000000740)="8a1eb442a80a1c0e442c8147dd5ddc9ff879e66e9ec50d6f49d8a41c48edb3fcdeb38436410bc3a9d2bfa7752682d059e2fa1ce9309ef6c2b4225623f9a0421f93d2d65222e62e472a61e569c4bf523d7695f3c20e5584496e28f24ab8ead52aa9eab7e6e7d4de2657ed434a4f9a3f5e1f0c26fd1504658fdc153131b893ae14f39a355a0866f851ba9ef87515eed05e19699850a4313f21f1d77e04bb17dbc1af0826363c4afbbda7229e9aa8969cd54ce07e5098cb839835319c29338bbd032f60714d16cf", 0xc6, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="80c89b8bb81c9b534be4f4783d985c1e5ba325fea29364ca2e3091f2b3a41648a6cb78bd1a567438dd5f93d747d01594e09988dc45b862c95727b275b3456a1054624cc4f1dbc5ed0cb38c0e74817e3901cc2bc988b9c3dd291a58381f00c8d5d474ba8f9e282af1ca01211d003b456d4ba8843a408c8494f3608812f55dae9e22e70a7dbd08f0ca5b6066427ea7d72c536514a78b9c31fd307c4d39dbe99632cdfb36c744088d7f63085250471e659fb47f6ed4fa716beb09483aea42dddf4621ca0d33e32783f56c4ee7b9439bedece1732d") r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x6, 0x8, &(0x7f00000002c0)="0000ffffffff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$inet(r5, 0x0, 0x200048cc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 913.625315ms ago: executing program 3 (id=2836): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000180)=@in6={0xa, 0xce20, 0x0, @mcast2, 0x41}, 0x80, 0x0}, 0x4000000) (fail_nth: 13) 220.035056ms ago: executing program 1 (id=2837): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x6, 0x2}]}]}}}], 0x18}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x41, 0xfffffffffffffffc}, 0x10) 0s ago: executing program 3 (id=2838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700000007000000ec04009ac0f9ab6fe04969e50000ff000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (fail_nth: 3) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x45, 0x0, 0x2, 0x8}]}) r8 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r8, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000f9788c80000000000400000018430000ffffffff000000f80000000085100000fdffffff360100002020732500000000002020207b1af8ff00000000bfa1000000000000070143330ea9330ffe32000008000000b7030000060000ec850000000600000085200000040000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x2, 0xa5, &(0x7f0000000540)=""/165, 0x41000, 0x40, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r1, r6, r6, r1, r1], &(0x7f00000006c0)=[{0x5, 0x1, 0xf, 0xc}, {0x4, 0x1, 0x10, 0x4}, {0x3, 0x5, 0x0, 0xc}, {0x1, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0x5}, {0x5, 0x5, 0x1, 0x6}, {0x3, 0x2, 0xb, 0x8}], 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) kernel console output (not intermixed with test programs): = 127995904 bytes [ 84.397559][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.930910][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.954357][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.962566][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.971318][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.979248][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.986831][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.065152][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.074166][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.084595][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.093009][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.105441][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.114334][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.168781][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.177804][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.215555][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.224890][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.233646][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.234390][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.241737][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.260173][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.260834][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.286473][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.295482][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.303258][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.629544][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 86.829745][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.900559][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 86.928522][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.935874][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.943395][ T5784] bridge_slave_0: entered allmulticast mode [ 86.952285][ T5784] bridge_slave_0: entered promiscuous mode [ 86.990926][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.999285][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.006739][ T5784] bridge_slave_1: entered allmulticast mode [ 87.013794][ T5784] bridge_slave_1: entered promiscuous mode [ 87.037919][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.128279][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.135629][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.143215][ T5789] bridge_slave_0: entered allmulticast mode [ 87.152193][ T5789] bridge_slave_0: entered promiscuous mode [ 87.162627][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.192719][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.200137][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.208462][ T5789] bridge_slave_1: entered allmulticast mode [ 87.216024][ T5789] bridge_slave_1: entered promiscuous mode [ 87.226151][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.300943][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.308233][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.315559][ T5787] bridge_slave_0: entered allmulticast mode [ 87.322730][ T5787] bridge_slave_0: entered promiscuous mode [ 87.370292][ T5784] team0: Port device team_slave_0 added [ 87.376753][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.384725][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.392004][ T5787] bridge_slave_1: entered allmulticast mode [ 87.399268][ T5787] bridge_slave_1: entered promiscuous mode [ 87.408926][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.421748][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.443605][ T5784] team0: Port device team_slave_1 added [ 87.518540][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.526166][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.552672][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.594391][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.601630][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.609413][ T5790] bridge_slave_0: entered allmulticast mode [ 87.617650][ T5790] bridge_slave_0: entered promiscuous mode [ 87.629160][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.636413][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.663899][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.685551][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.699334][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.714711][ T5789] team0: Port device team_slave_0 added [ 87.723316][ T5789] team0: Port device team_slave_1 added [ 87.740659][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.748141][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.756927][ T5790] bridge_slave_1: entered allmulticast mode [ 87.766936][ T5790] bridge_slave_1: entered promiscuous mode [ 87.861610][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.868922][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.895138][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.908138][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.915851][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.942375][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.956942][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.973398][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.000906][ T5787] team0: Port device team_slave_0 added [ 88.010489][ T5787] team0: Port device team_slave_1 added [ 88.048157][ T5784] hsr_slave_0: entered promiscuous mode [ 88.055791][ T5786] Bluetooth: hci0: command tx timeout [ 88.055972][ T5784] hsr_slave_1: entered promiscuous mode [ 88.110580][ T5790] team0: Port device team_slave_0 added [ 88.134475][ T5786] Bluetooth: hci1: command tx timeout [ 88.151373][ T5789] hsr_slave_0: entered promiscuous mode [ 88.158003][ T5789] hsr_slave_1: entered promiscuous mode [ 88.164677][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.172631][ T5789] Cannot create hsr debugfs directory [ 88.179318][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.186703][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.212880][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.225762][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.232768][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.259005][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.272089][ T5790] team0: Port device team_slave_1 added [ 88.294747][ T5786] Bluetooth: hci3: command tx timeout [ 88.361081][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.369042][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.395901][ T5786] Bluetooth: hci2: command tx timeout [ 88.400874][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.416129][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.423333][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.449582][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.565478][ T5787] hsr_slave_0: entered promiscuous mode [ 88.572202][ T5787] hsr_slave_1: entered promiscuous mode [ 88.579421][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.587142][ T5787] Cannot create hsr debugfs directory [ 88.669829][ T5790] hsr_slave_0: entered promiscuous mode [ 88.677260][ T5790] hsr_slave_1: entered promiscuous mode [ 88.683441][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.691521][ T5790] Cannot create hsr debugfs directory [ 89.057706][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.096979][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.109074][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.147804][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.238675][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.254610][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.291152][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.325034][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.410978][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.430212][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.458497][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.497159][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.545563][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.569964][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.582532][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.593832][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.657805][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.766565][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.800022][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.807709][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.832559][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.839907][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.860561][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.910600][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.950492][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.989061][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.996417][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.020111][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.033328][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.064461][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.071767][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.082399][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.089618][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.135735][ T5786] Bluetooth: hci0: command tx timeout [ 90.149003][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.162593][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.169887][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.216129][ T5786] Bluetooth: hci1: command tx timeout [ 90.232530][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.239796][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.260196][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.267451][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.374733][ T5786] Bluetooth: hci3: command tx timeout [ 90.455180][ T5786] Bluetooth: hci2: command tx timeout [ 90.578911][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.693603][ T5784] veth0_vlan: entered promiscuous mode [ 90.742549][ T5784] veth1_vlan: entered promiscuous mode [ 90.807959][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.901638][ T5784] veth0_macvtap: entered promiscuous mode [ 90.947516][ T5784] veth1_macvtap: entered promiscuous mode [ 90.983204][ T5789] veth0_vlan: entered promiscuous mode [ 91.009572][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.035170][ T5789] veth1_vlan: entered promiscuous mode [ 91.053353][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.080082][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.089678][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.099912][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.110884][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.136305][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.186225][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.241434][ T5789] veth0_macvtap: entered promiscuous mode [ 91.302877][ T5789] veth1_macvtap: entered promiscuous mode [ 91.331274][ T5787] veth0_vlan: entered promiscuous mode [ 91.360920][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.369359][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.409335][ T5787] veth1_vlan: entered promiscuous mode [ 91.444950][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.457053][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.469588][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.496460][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.498525][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.508563][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.524308][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.528975][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.545487][ T5790] veth0_vlan: entered promiscuous mode [ 91.588216][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.599218][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.610473][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.619574][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.663907][ T5787] veth0_macvtap: entered promiscuous mode [ 91.698691][ T5787] veth1_macvtap: entered promiscuous mode [ 91.707448][ T5790] veth1_vlan: entered promiscuous mode [ 91.829952][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.843119][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.853153][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.864463][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.877813][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.947078][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.949144][ T5790] veth0_macvtap: entered promiscuous mode [ 91.961478][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.000492][ T5790] veth1_macvtap: entered promiscuous mode [ 92.010990][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.025968][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.036132][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.047071][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.060957][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.098960][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.111966][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.120861][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.132301][ C0] hrtimer: interrupt took 71139 ns [ 92.135276][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.192190][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.203437][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.214389][ T5786] Bluetooth: hci0: command tx timeout [ 92.226682][ T5867] netlink: 'syz.3.5': attribute type 10 has an invalid length. [ 92.294853][ T5786] Bluetooth: hci1: command tx timeout [ 92.361126][ T5867] team0: Port device wlan1 added [ 92.370201][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.381904][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.394376][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.405861][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.418816][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.422620][ T5866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.432720][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.452595][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.460327][ T5786] Bluetooth: hci3: command tx timeout [ 92.497750][ T5867] syz.3.5 (5867) used greatest stack depth: 18312 bytes left [ 92.515512][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.541984][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.541984][ T5786] Bluetooth: hci2: command tx timeout [ 92.542002][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.599093][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.609859][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.621904][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.636379][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.711095][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.721472][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.731880][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.741760][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.855904][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.863807][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.039114][ T5874] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.068049][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.095922][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.110293][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.133662][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.169624][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.178000][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.665959][ T5879] Zero length message leads to an empty skb [ 94.297807][ T5794] Bluetooth: hci0: command tx timeout [ 94.342069][ T5890] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.8'. [ 94.375169][ T5794] Bluetooth: hci1: command tx timeout [ 94.474852][ T5894] netlink: 'syz.0.17': attribute type 13 has an invalid length. [ 94.537403][ T5794] Bluetooth: hci3: command tx timeout [ 94.614910][ T5794] Bluetooth: hci2: command tx timeout [ 94.776984][ T5902] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 94.826210][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.834954][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.909595][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.917091][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.925651][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.932919][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.973210][ T5902] team0: Port device bridge0 added [ 94.981987][ T5794] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 95.205455][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.273437][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.364792][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.373681][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.013152][ T5931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19'. [ 98.435907][ T5949] netlink: 'syz.1.23': attribute type 13 has an invalid length. [ 98.938156][ T54] cfg80211: failed to load regulatory.db [ 99.037809][ T5963] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 99.064554][ T5963] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 99.118514][ T5963] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 99.163932][ T5964] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 99.219000][ T5963] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 99.498948][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.36'. [ 101.583899][ T6001] netlink: 'syz.0.46': attribute type 29 has an invalid length. [ 101.616660][ T6001] netlink: 'syz.0.46': attribute type 29 has an invalid length. [ 101.626425][ T6001] netlink: 'syz.0.46': attribute type 29 has an invalid length. [ 101.642336][ T6001] netlink: 'syz.0.46': attribute type 29 has an invalid length. [ 102.022827][ T6013] netlink: 49920 bytes leftover after parsing attributes in process `syz.1.52'. [ 103.816451][ T6049] validate_nla: 5 callbacks suppressed [ 103.816473][ T6049] netlink: 'syz.1.67': attribute type 5 has an invalid length. [ 103.856748][ T6049] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 103.911326][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 103.930712][ T6049] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.67'. [ 103.978401][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 104.025942][ T6030] team0 (unregistering): Port device wlan1 removed [ 104.090017][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.097852][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.137956][ T6030] team0 (unregistering): Port device bridge0 removed [ 104.195898][ T6053] netlink: 'syz.2.69': attribute type 29 has an invalid length. [ 104.254565][ T6053] netlink: 'syz.2.69': attribute type 29 has an invalid length. [ 104.279114][ T6054] netlink: 'syz.2.69': attribute type 29 has an invalid length. [ 104.377240][ T6055] netlink: 'syz.2.69': attribute type 29 has an invalid length. [ 105.317096][ T6081] netlink: 'syz.0.81': attribute type 29 has an invalid length. [ 105.341432][ T6081] netlink: 'syz.0.81': attribute type 29 has an invalid length. [ 105.365973][ T6081] netlink: 'syz.0.81': attribute type 29 has an invalid length. [ 105.385915][ T6081] netlink: 'syz.0.81': attribute type 29 has an invalid length. [ 106.130538][ T5794] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17 [ 106.130595][ T5794] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 106.468204][ T6087] team0 (unregistering): Port device team_slave_0 removed [ 106.527069][ T6087] team0 (unregistering): Port device team_slave_1 removed [ 106.810866][ T6117] syz.0.96 uses obsolete (PF_INET,SOCK_PACKET) [ 107.060154][ T6127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.102'. [ 107.091852][ T6125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.101'. [ 108.590200][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 108.666037][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 111.402321][ T6238] validate_nla: 10 callbacks suppressed [ 111.402362][ T6238] netlink: 'syz.0.151': attribute type 21 has an invalid length. [ 111.477834][ T6244] netlink: 'syz.1.154': attribute type 21 has an invalid length. [ 112.315952][ T6277] netlink: 830 bytes leftover after parsing attributes in process `syz.3.168'. [ 113.638073][ T6322] netlink: 'syz.1.188': attribute type 21 has an invalid length. [ 113.675012][ T6326] netlink: 'syz.2.195': attribute type 11 has an invalid length. [ 116.844452][ T6416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.230'. [ 117.041923][ T6424] syzkaller0: entered promiscuous mode [ 117.050089][ T6424] syzkaller0: entered allmulticast mode [ 118.060969][ T6459] netlink: 830 bytes leftover after parsing attributes in process `syz.0.249'. [ 124.064502][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 129.539786][ T6816] delete_channel: no stack [ 130.176968][ T6872] netlink: 56 bytes leftover after parsing attributes in process `syz.2.436'. [ 130.211444][ T6872] netlink: 56 bytes leftover after parsing attributes in process `syz.2.436'. [ 134.783308][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.794460][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.265693][ T5794] Bluetooth: hci3: unexpected event 0x2c length: 82 > 17 [ 145.755929][ T5794] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17 [ 146.320693][ T5794] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17 [ 146.812380][ T5794] Bluetooth: hci0: unexpected event 0x2c length: 82 > 17 [ 147.369442][ T5794] Bluetooth: hci3: unexpected event 0x2c length: 82 > 17 [ 147.934191][ T5794] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17 [ 164.229198][ T8123] netlink: 'syz.0.1009': attribute type 3 has an invalid length. [ 164.245071][ T8123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1009'. [ 164.895162][ T8136] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1014'. [ 164.974703][ T8136] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1014'. [ 165.496721][ T5794] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 165.776298][ T8150] netlink: 'syz.1.1020': attribute type 29 has an invalid length. [ 165.791732][ T8150] netlink: 'syz.1.1020': attribute type 29 has an invalid length. [ 165.801747][ T8150] netlink: 'syz.1.1020': attribute type 29 has an invalid length. [ 165.811021][ T8150] netlink: 'syz.1.1020': attribute type 29 has an invalid length. [ 165.941331][ T8153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.958640][ T8153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.008871][ T8153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.021808][ T8153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.126802][ T8180] netlink: 'syz.3.1032': attribute type 29 has an invalid length. [ 168.140105][ T8180] netlink: 'syz.3.1032': attribute type 29 has an invalid length. [ 168.153213][ T8180] netlink: 'syz.3.1032': attribute type 29 has an invalid length. [ 168.162060][ T8180] netlink: 'syz.3.1032': attribute type 29 has an invalid length. [ 169.012766][ T8200] netlink: 'syz.1.1042': attribute type 29 has an invalid length. [ 169.316702][ T8210] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.1046'. [ 169.805637][ T8223] validate_nla: 3 callbacks suppressed [ 169.805657][ T8223] netlink: 'syz.0.1051': attribute type 11 has an invalid length. [ 169.986620][ T8231] netlink: 'syz.2.1054': attribute type 29 has an invalid length. [ 169.995425][ T8231] netlink: 'syz.2.1054': attribute type 29 has an invalid length. [ 170.006897][ T8231] netlink: 'syz.2.1054': attribute type 29 has an invalid length. [ 170.015903][ T8231] netlink: 'syz.2.1054': attribute type 29 has an invalid length. [ 170.025806][ T8231] netlink: 'syz.2.1054': attribute type 29 has an invalid length. [ 170.142439][ T8236] netlink: 'syz.2.1055': attribute type 5 has an invalid length. [ 170.150460][ T8236] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 170.159303][ T8236] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1055'. [ 173.594295][ T8263] delete_channel: no stack [ 173.859642][ T8294] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1078'. [ 174.466537][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1081'. [ 175.440545][ T8327] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1089'. [ 175.701126][ T8339] netlink: 'syz.3.1097': attribute type 5 has an invalid length. [ 175.710367][ T8339] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1097'. [ 176.898676][ T8366] netlink: 'syz.0.1107': attribute type 5 has an invalid length. [ 176.945532][ T8366] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1107'. [ 178.928384][ T8395] netlink: 'syz.3.1118': attribute type 5 has an invalid length. [ 178.978717][ T8395] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1118'. [ 180.032385][ T8407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1123'. [ 180.345826][ T8417] syzkaller0: entered promiscuous mode [ 180.351400][ T8417] syzkaller0: entered allmulticast mode [ 186.312546][ T8618] netlink: 'syz.1.1218': attribute type 5 has an invalid length. [ 186.346712][ T8618] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1218'. [ 186.972040][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 187.001452][ T8648] netlink: 'syz.0.1232': attribute type 5 has an invalid length. [ 187.019704][ T8648] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1232'. [ 187.567646][ T8672] netlink: 'syz.3.1245': attribute type 5 has an invalid length. [ 187.584639][ T8672] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1245'. [ 188.797558][ T8724] netlink: 'syz.2.1268': attribute type 5 has an invalid length. [ 188.834507][ T8724] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1268'. [ 189.522778][ T8753] netlink: 'syz.1.1278': attribute type 5 has an invalid length. [ 189.543899][ T8753] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1278'. [ 189.566995][ T8751] netlink: 'syz.3.1280': attribute type 3 has an invalid length. [ 189.594475][ T8751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1280'. [ 190.232192][ T8776] netlink: 'syz.1.1291': attribute type 5 has an invalid length. [ 190.240560][ T8776] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1291'. [ 190.822104][ T8803] netlink: 'syz.2.1302': attribute type 5 has an invalid length. [ 190.856236][ T8803] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1302'. [ 191.469257][ T8825] netlink: 'syz.2.1312': attribute type 3 has an invalid length. [ 191.482344][ T8825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1312'. [ 191.766023][ T8837] netlink: 'syz.0.1316': attribute type 5 has an invalid length. [ 191.792495][ T8837] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1316'. [ 192.486622][ T8863] netlink: 'syz.3.1328': attribute type 5 has an invalid length. [ 192.494692][ T8863] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1328'. [ 196.220476][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.227431][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.424176][ T9423] netlink: 'syz.0.1592': attribute type 29 has an invalid length. [ 207.432588][ T9423] netlink: 'syz.0.1592': attribute type 29 has an invalid length. [ 207.446588][ T9423] netlink: 'syz.0.1592': attribute type 29 has an invalid length. [ 207.463620][ T9423] netlink: 'syz.0.1592': attribute type 29 has an invalid length. [ 207.493383][ T9423] netlink: 'syz.0.1592': attribute type 29 has an invalid length. [ 208.534448][ T9395] Bluetooth: hci1: command 0x0406 tx timeout [ 208.544250][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 208.544273][ T9395] Bluetooth: hci3: command 0x0406 tx timeout [ 208.550306][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 208.723728][ T9455] netlink: 'syz.2.1606': attribute type 29 has an invalid length. [ 208.756846][ T9455] netlink: 'syz.2.1606': attribute type 29 has an invalid length. [ 208.779114][ T9455] netlink: 'syz.2.1606': attribute type 29 has an invalid length. [ 208.793015][ T9455] netlink: 'syz.2.1606': attribute type 29 has an invalid length. [ 208.812517][ T9455] netlink: 'syz.2.1606': attribute type 29 has an invalid length. [ 213.002587][ T9561] validate_nla: 5 callbacks suppressed [ 213.002605][ T9561] netlink: 'syz.0.1654': attribute type 29 has an invalid length. [ 213.027335][ T9561] netlink: 'syz.0.1654': attribute type 29 has an invalid length. [ 213.043822][ T9561] netlink: 'syz.0.1654': attribute type 29 has an invalid length. [ 213.053626][ T9561] netlink: 'syz.0.1654': attribute type 29 has an invalid length. [ 213.068175][ T9561] netlink: 'syz.0.1654': attribute type 29 has an invalid length. [ 215.953461][ T9664] netlink: 'syz.3.1703': attribute type 29 has an invalid length. [ 215.962600][ T9664] netlink: 'syz.3.1703': attribute type 29 has an invalid length. [ 215.976538][ T9664] netlink: 'syz.3.1703': attribute type 29 has an invalid length. [ 215.997593][ T9664] netlink: 'syz.3.1703': attribute type 29 has an invalid length. [ 216.014999][ T9664] netlink: 'syz.3.1703': attribute type 29 has an invalid length. [ 218.076585][ T9735] validate_nla: 5 callbacks suppressed [ 218.076606][ T9735] netlink: 'syz.0.1736': attribute type 29 has an invalid length. [ 218.124271][ T9735] netlink: 'syz.0.1736': attribute type 29 has an invalid length. [ 218.144956][ T9739] netlink: 'syz.0.1736': attribute type 29 has an invalid length. [ 218.167182][ T9735] netlink: 'syz.0.1736': attribute type 29 has an invalid length. [ 218.183153][ T9735] netlink: 'syz.0.1736': attribute type 29 has an invalid length. [ 222.793289][ T9890] netlink: 'syz.0.1807': attribute type 29 has an invalid length. [ 222.825425][ T9890] netlink: 'syz.0.1807': attribute type 29 has an invalid length. [ 222.863410][ T9892] netlink: 'syz.0.1807': attribute type 29 has an invalid length. [ 222.895683][ T9890] netlink: 'syz.0.1807': attribute type 29 has an invalid length. [ 222.915613][ T9890] netlink: 'syz.0.1807': attribute type 29 has an invalid length. [ 223.437611][ T9912] netlink: 'syz.3.1818': attribute type 29 has an invalid length. [ 223.455979][ T9912] netlink: 'syz.3.1818': attribute type 29 has an invalid length. [ 223.472734][ T9912] netlink: 'syz.3.1818': attribute type 29 has an invalid length. [ 223.489486][ T9912] netlink: 'syz.3.1818': attribute type 29 has an invalid length. [ 223.514796][ T9912] netlink: 'syz.3.1818': attribute type 29 has an invalid length. [ 223.724518][ T5101] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 223.724584][ T5101] Bluetooth: hci2: unexpected event for opcode 0x2064 [ 223.727917][ T9919] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1821'. [ 223.776580][ T9923] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1820'. [ 224.459578][ T9939] netlink: 'syz.2.1828': attribute type 29 has an invalid length. [ 224.483810][ T9939] netlink: 'syz.2.1828': attribute type 29 has an invalid length. [ 224.497207][ T9939] netlink: 'syz.2.1828': attribute type 29 has an invalid length. [ 224.515053][ T9939] netlink: 'syz.2.1828': attribute type 29 has an invalid length. [ 224.541502][ T9939] netlink: 'syz.2.1828': attribute type 29 has an invalid length. [ 225.354705][ T5101] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 225.355571][ T5101] Bluetooth: hci1: unexpected event for opcode 0x2064 [ 225.385403][ T9961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1839'. [ 225.476112][ T9961] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 228.986468][T10077] validate_nla: 25 callbacks suppressed [ 228.986490][T10077] netlink: 'syz.1.1893': attribute type 29 has an invalid length. [ 229.038517][T10077] netlink: 'syz.1.1893': attribute type 29 has an invalid length. [ 229.094786][T10077] netlink: 'syz.1.1893': attribute type 29 has an invalid length. [ 229.104817][T10077] netlink: 'syz.1.1893': attribute type 29 has an invalid length. [ 229.113533][T10077] netlink: 'syz.1.1893': attribute type 29 has an invalid length. [ 230.211090][T10101] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1904'. [ 232.094476][T10122] netlink: 'syz.0.1913': attribute type 29 has an invalid length. [ 232.114773][T10122] netlink: 'syz.0.1913': attribute type 29 has an invalid length. [ 232.123379][T10126] netlink: 'syz.0.1913': attribute type 29 has an invalid length. [ 232.153404][T10122] netlink: 'syz.0.1913': attribute type 29 has an invalid length. [ 232.178601][T10122] netlink: 'syz.0.1913': attribute type 29 has an invalid length. [ 232.461176][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 232.492473][T10137] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1917'. [ 233.954323][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'. [ 234.465512][T10183] validate_nla: 11 callbacks suppressed [ 234.465531][T10183] netlink: 'syz.0.1940': attribute type 29 has an invalid length. [ 234.507121][T10183] netlink: 'syz.0.1940': attribute type 29 has an invalid length. [ 234.551115][T10183] netlink: 'syz.0.1940': attribute type 29 has an invalid length. [ 234.587335][T10183] netlink: 'syz.0.1940': attribute type 29 has an invalid length. [ 234.620078][T10183] netlink: 'syz.0.1940': attribute type 29 has an invalid length. [ 234.713761][T10180] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1938'. [ 234.795735][T10180] netlink: 'syz.3.1938': attribute type 3 has an invalid length. [ 235.417168][T10207] netlink: 'syz.2.1952': attribute type 29 has an invalid length. [ 235.454700][T10207] netlink: 'syz.2.1952': attribute type 29 has an invalid length. [ 235.485946][T10207] netlink: 'syz.2.1952': attribute type 29 has an invalid length. [ 235.507706][T10207] netlink: 'syz.2.1952': attribute type 29 has an invalid length. [ 240.973897][T10418] validate_nla: 21 callbacks suppressed [ 240.973917][T10418] netlink: 'syz.0.2057': attribute type 29 has an invalid length. [ 241.010059][T10418] netlink: 'syz.0.2057': attribute type 29 has an invalid length. [ 241.031627][T10423] netlink: 'syz.0.2057': attribute type 29 has an invalid length. [ 241.052881][T10418] netlink: 'syz.0.2057': attribute type 29 has an invalid length. [ 241.360932][T10438] netlink: 'syz.1.2066': attribute type 29 has an invalid length. [ 241.369597][T10438] netlink: 'syz.1.2066': attribute type 29 has an invalid length. [ 241.383878][T10438] netlink: 'syz.1.2066': attribute type 29 has an invalid length. [ 241.407985][T10438] netlink: 'syz.1.2066': attribute type 29 has an invalid length. [ 241.431549][T10438] netlink: 'syz.1.2066': attribute type 29 has an invalid length. [ 243.356985][T10512] netlink: 'syz.3.2103': attribute type 29 has an invalid length. [ 246.502598][T10641] validate_nla: 24 callbacks suppressed [ 246.502619][T10641] netlink: 'syz.1.2166': attribute type 29 has an invalid length. [ 246.534354][T10641] netlink: 'syz.1.2166': attribute type 29 has an invalid length. [ 246.556649][T10641] netlink: 'syz.1.2166': attribute type 29 has an invalid length. [ 246.585193][T10641] netlink: 'syz.1.2166': attribute type 29 has an invalid length. [ 246.597338][T10641] netlink: 'syz.1.2166': attribute type 29 has an invalid length. [ 246.987053][T10656] netlink: 'syz.0.2174': attribute type 29 has an invalid length. [ 247.028782][T10656] netlink: 'syz.0.2174': attribute type 29 has an invalid length. [ 247.057883][T10658] netlink: 'syz.0.2174': attribute type 29 has an invalid length. [ 247.088240][T10656] netlink: 'syz.0.2174': attribute type 29 has an invalid length. [ 247.137693][T10656] netlink: 'syz.0.2174': attribute type 29 has an invalid length. [ 251.952616][T10855] validate_nla: 50 callbacks suppressed [ 251.952635][T10855] netlink: 'syz.3.2270': attribute type 29 has an invalid length. [ 251.978685][T10855] netlink: 'syz.3.2270': attribute type 29 has an invalid length. [ 251.997467][T10855] netlink: 'syz.3.2270': attribute type 29 has an invalid length. [ 252.008818][T10855] netlink: 'syz.3.2270': attribute type 29 has an invalid length. [ 252.019622][T10855] netlink: 'syz.3.2270': attribute type 29 has an invalid length. [ 252.691297][T10878] netlink: 'syz.2.2280': attribute type 29 has an invalid length. [ 252.700323][T10878] netlink: 'syz.2.2280': attribute type 29 has an invalid length. [ 252.710356][T10878] netlink: 'syz.2.2280': attribute type 29 has an invalid length. [ 252.719230][T10878] netlink: 'syz.2.2280': attribute type 29 has an invalid length. [ 252.735858][T10878] netlink: 'syz.2.2280': attribute type 29 has an invalid length. [ 257.000102][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.018229][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.027007][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.058198][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.070442][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 257.078951][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 257.286042][T11035] validate_nla: 10 callbacks suppressed [ 257.286062][T11035] netlink: 'syz.2.2354': attribute type 29 has an invalid length. [ 257.301495][T11035] netlink: 'syz.2.2354': attribute type 29 has an invalid length. [ 257.313750][T11035] netlink: 'syz.2.2354': attribute type 29 has an invalid length. [ 257.322931][T11035] netlink: 'syz.2.2354': attribute type 29 has an invalid length. [ 257.334919][T11035] netlink: 'syz.2.2354': attribute type 29 has an invalid length. [ 257.630532][T11027] chnl_net:caif_netlink_parms(): no params data found [ 257.666851][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.673903][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.315622][T11056] netlink: 'syz.1.2362': attribute type 29 has an invalid length. [ 258.363299][T11056] netlink: 'syz.1.2362': attribute type 29 has an invalid length. [ 258.382570][T11056] netlink: 'syz.1.2362': attribute type 29 has an invalid length. [ 258.398560][T11056] netlink: 'syz.1.2362': attribute type 29 has an invalid length. [ 258.471422][T11056] netlink: 'syz.1.2362': attribute type 29 has an invalid length. [ 258.492942][T11027] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.530114][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.549106][T11027] bridge_slave_0: entered allmulticast mode [ 258.573087][T11027] bridge_slave_0: entered promiscuous mode [ 258.609146][T11027] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.634214][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.651948][T11027] bridge_slave_1: entered allmulticast mode [ 258.665699][T11027] bridge_slave_1: entered promiscuous mode [ 258.837572][T11027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.850824][T11027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.955902][T11027] team0: Port device team_slave_0 added [ 258.976137][T11027] team0: Port device team_slave_1 added [ 259.045632][T11027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.052665][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.085516][T11027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.103788][T11027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.112636][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.182396][ T5101] Bluetooth: hci0: command tx timeout [ 259.188672][T11027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.263783][T11027] hsr_slave_0: entered promiscuous mode [ 259.278535][T11027] hsr_slave_1: entered promiscuous mode [ 259.286313][T11027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.294411][T11027] Cannot create hsr debugfs directory [ 259.801539][T11027] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.962410][T11027] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.087982][T11027] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.310866][T11027] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.672740][T11027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.738992][T11027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.766914][T11027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.801964][T11027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.108797][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.172016][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.188927][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.196242][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.242475][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.249930][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.265308][ T5101] Bluetooth: hci0: command tx timeout [ 261.634949][T11027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.779885][T11027] veth0_vlan: entered promiscuous mode [ 261.798803][T11027] veth1_vlan: entered promiscuous mode [ 261.853129][T11027] veth0_macvtap: entered promiscuous mode [ 261.879570][T11027] veth1_macvtap: entered promiscuous mode [ 261.930409][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.943137][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.974259][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.004086][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.032967][T11027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.083050][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.133587][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.154673][T11027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.195776][T11027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.219949][T11027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.254916][T11027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.263758][T11027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.294867][T11027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.306845][T11027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.336624][T11181] validate_nla: 20 callbacks suppressed [ 262.336644][T11181] netlink: 'syz.2.2416': attribute type 29 has an invalid length. [ 262.528072][T11190] warning: `syz.1.2420' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 262.644373][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.665822][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.726261][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.764149][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.146535][T11207] netlink: 'syz.1.2428': attribute type 29 has an invalid length. [ 263.175651][T11207] netlink: 'syz.1.2428': attribute type 29 has an invalid length. [ 263.204625][T11207] netlink: 'syz.1.2428': attribute type 29 has an invalid length. [ 263.240566][T11207] netlink: 'syz.1.2428': attribute type 29 has an invalid length. [ 263.344871][ T5101] Bluetooth: hci0: command tx timeout [ 263.808312][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.823736][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.833215][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.842952][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.853797][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.861899][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.148276][T11233] netlink: 'syz.1.2439': attribute type 29 has an invalid length. [ 264.162079][T11233] netlink: 'syz.1.2439': attribute type 29 has an invalid length. [ 264.200069][T11233] netlink: 'syz.1.2439': attribute type 29 has an invalid length. [ 264.218974][T11233] netlink: 'syz.1.2439': attribute type 29 has an invalid length. [ 264.307537][T11222] chnl_net:caif_netlink_parms(): no params data found [ 264.494820][T11222] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.502041][T11222] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.515689][T11222] bridge_slave_0: entered allmulticast mode [ 264.523643][T11222] bridge_slave_0: entered promiscuous mode [ 264.556593][T11222] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.604315][T11222] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.611681][T11222] bridge_slave_1: entered allmulticast mode [ 264.633409][T11222] bridge_slave_1: entered promiscuous mode [ 264.743492][T11222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.771011][T11222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.885334][T11222] team0: Port device team_slave_0 added [ 264.893189][T11262] netlink: 'syz.1.2449': attribute type 10 has an invalid length. [ 264.925606][T11262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.956925][T11262] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 264.978807][T11222] team0: Port device team_slave_1 added [ 265.072384][T11222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.080388][T11222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.109024][T11222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.149468][T11222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.157092][T11222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.185233][T11222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.322366][T11222] hsr_slave_0: entered promiscuous mode [ 265.336201][T11222] hsr_slave_1: entered promiscuous mode [ 265.358099][T11222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.377284][T11222] Cannot create hsr debugfs directory [ 265.414609][ T5794] Bluetooth: hci0: command tx timeout [ 265.503445][T11273] FAULT_INJECTION: forcing a failure. [ 265.503445][T11273] name failslab, interval 1, probability 0, space 0, times 1 [ 265.559557][T11273] CPU: 1 PID: 11273 Comm: syz.1.2453 Not tainted 6.6.100-syzkaller #0 [ 265.568431][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.581901][T11273] Call Trace: [ 265.585653][T11273] [ 265.588875][T11273] dump_stack_lvl+0x16c/0x230 [ 265.593915][T11273] ? show_regs_print_info+0x20/0x20 [ 265.599273][T11273] ? load_image+0x3b0/0x3b0 [ 265.603972][T11273] should_fail_ex+0x39d/0x4d0 [ 265.608748][T11273] should_failslab+0x9/0x20 [ 265.613413][T11273] slab_pre_alloc_hook+0x59/0x310 [ 265.618805][T11273] ? ___neigh_create+0x6d2/0x2440 [ 265.624020][T11273] ? ___neigh_create+0x6d2/0x2440 [ 265.629229][T11273] __kmem_cache_alloc_node+0x53/0x260 [ 265.635089][T11273] ? ___neigh_create+0x6d2/0x2440 [ 265.641055][T11273] __kmalloc+0xa4/0x240 [ 265.645610][T11273] ___neigh_create+0x6d2/0x2440 [ 265.650686][T11273] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0 [ 265.656742][T11273] ip6_finish_output2+0x159e/0x1650 [ 265.662116][T11273] ? ip6_finish_output2+0x661/0x1650 [ 265.667530][T11273] ? ip6_mtu+0x7d/0x3f0 [ 265.671900][T11273] ? nf_hook+0x370/0x370 [ 265.676289][T11273] ? ip6_finish_output+0x57b/0x820 [ 265.681863][T11273] ? ip6_send_skb+0x10f/0x380 [ 265.686823][T11273] ip6_send_skb+0x1d5/0x380 [ 265.691591][T11273] rawv6_push_pending_frames+0x6e8/0x8d0 [ 265.697398][T11273] ? raw6_getfrag+0x3a0/0x3a0 [ 265.702156][T11273] ? rawv6_send_hdrinc+0x1690/0x1690 [ 265.707606][T11273] rawv6_sendmsg+0x131e/0x17f0 [ 265.712765][T11273] ? __might_sleep+0xe0/0xe0 [ 265.717582][T11273] ? compat_rawv6_ioctl+0x70/0x70 [ 265.723010][T11273] ? aa_sk_perm+0x7fc/0x930 [ 265.727739][T11273] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 265.734336][T11273] ? inet_send_prepare+0x260/0x260 [ 265.739632][T11273] ? inet_sendmsg+0x7c/0x2f0 [ 265.744396][T11273] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 265.749839][T11273] ? security_socket_sendmsg+0x80/0xa0 [ 265.755499][T11273] ? inet_send_prepare+0x260/0x260 [ 265.760947][T11273] ____sys_sendmsg+0x5bf/0x950 [ 265.766163][T11273] ? __asan_memset+0x22/0x40 [ 265.771183][T11273] ? __sys_sendmsg_sock+0x30/0x30 [ 265.776487][T11273] ? __import_iovec+0x5f2/0x860 [ 265.781594][T11273] ? import_iovec+0x73/0xa0 [ 265.786133][T11273] ___sys_sendmsg+0x220/0x290 [ 265.790840][T11273] ? __sys_sendmsg+0x270/0x270 [ 265.795653][T11273] ? __lock_acquire+0x7c80/0x7c80 [ 265.800718][T11273] __se_sys_sendmsg+0x1a5/0x270 [ 265.805595][T11273] ? __x64_sys_sendmsg+0x80/0x80 [ 265.810665][T11273] ? lockdep_hardirqs_on+0x98/0x150 [ 265.815890][T11273] do_syscall_64+0x55/0xb0 [ 265.820448][T11273] ? clear_bhb_loop+0x40/0x90 [ 265.825325][T11273] ? clear_bhb_loop+0x40/0x90 [ 265.830049][T11273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.835971][T11273] RIP: 0033:0x7f3bc578e9a9 [ 265.840404][T11273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.860292][T11273] RSP: 002b:00007f3bc55ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.868736][T11273] RAX: ffffffffffffffda RBX: 00007f3bc59b5fa0 RCX: 00007f3bc578e9a9 [ 265.876724][T11273] RDX: 0000000020040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 265.884713][T11273] RBP: 00007f3bc55ff090 R08: 0000000000000000 R09: 0000000000000000 [ 265.892699][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.900686][T11273] R13: 0000000000000000 R14: 00007f3bc59b5fa0 R15: 00007ffeca818298 [ 265.908683][T11273] [ 265.936678][ T5794] Bluetooth: hci2: command tx timeout [ 266.097031][T11222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.285035][T11222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.434705][T11222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.588127][T11222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.839283][T11222] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.850802][T11222] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.880834][T11222] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.911593][T11222] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.249457][T11222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.311813][T11222] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.347469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.355105][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.391676][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.398975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.478329][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 267.491675][T11339] netlink: 'syz.0.2479': attribute type 10 has an invalid length. [ 267.509174][T11339] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2479'. [ 267.805560][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 267.981829][ T5794] Bluetooth: hci2: command tx timeout [ 268.199512][T11222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.331707][T11222] veth0_vlan: entered promiscuous mode [ 268.368163][T11222] veth1_vlan: entered promiscuous mode [ 268.433253][T11362] netlink: 'syz.3.2486': attribute type 10 has an invalid length. [ 268.479718][T11362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.486980][ T5794] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 268.510500][T11362] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 268.551768][T11222] veth0_macvtap: entered promiscuous mode [ 268.582403][T11222] veth1_macvtap: entered promiscuous mode [ 268.693710][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.708549][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.718765][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.729416][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.743007][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.753604][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.769576][T11222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.799575][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.824126][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.839511][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.864115][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.874346][T11222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.885015][T11222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.896830][T11222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.923795][T11222] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.933973][T11222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.951491][T11222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.960626][T11222] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.178327][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.202722][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.282182][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.324273][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.455901][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 270.054749][ T5794] Bluetooth: hci2: command tx timeout [ 270.387154][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.396614][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.406168][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.419288][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.428605][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.438353][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.711012][T11403] chnl_net:caif_netlink_parms(): no params data found [ 272.106132][T11403] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.114832][T11403] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.122185][T11403] bridge_slave_0: entered allmulticast mode [ 272.131630][T11403] bridge_slave_0: entered promiscuous mode [ 272.144415][T11403] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.145503][ T5101] Bluetooth: hci2: command tx timeout [ 272.152035][T11403] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.165724][T11403] bridge_slave_1: entered allmulticast mode [ 272.173460][T11403] bridge_slave_1: entered promiscuous mode [ 272.261732][T11403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.276533][T11403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.331953][T11403] team0: Port device team_slave_0 added [ 272.341801][T11403] team0: Port device team_slave_1 added [ 272.379641][T11403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.386856][T11403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.414571][T11403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.428067][T11403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.435530][T11403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.463383][ T5101] Bluetooth: hci1: command tx timeout [ 272.469781][T11403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.524986][T11403] hsr_slave_0: entered promiscuous mode [ 272.531718][T11403] hsr_slave_1: entered promiscuous mode [ 272.539747][T11403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.547494][T11403] Cannot create hsr debugfs directory [ 272.719535][T11403] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.812565][T11403] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.921694][T11403] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.146702][T11403] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.164837][T11438] netlink: 'syz.2.2517': attribute type 10 has an invalid length. [ 273.190633][T11438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.208465][T11438] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 273.621806][T11403] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.660621][T11403] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.747472][T11403] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.796567][T11403] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.819372][ T5101] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 274.159704][T11403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.220263][T11403] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.265319][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.273395][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.328548][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.335848][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.432196][T11403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.534545][ T5101] Bluetooth: hci1: command tx timeout [ 275.016987][ T5101] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 275.130465][T11403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.268742][T11403] veth0_vlan: entered promiscuous mode [ 275.286422][T11403] veth1_vlan: entered promiscuous mode [ 275.366136][T11403] veth0_macvtap: entered promiscuous mode [ 275.378264][T11403] veth1_macvtap: entered promiscuous mode [ 275.418746][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.439271][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.456874][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.475468][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.502614][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.513373][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.538413][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.549010][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.566551][T11403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.608532][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.628084][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.645527][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.666536][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.685030][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.706404][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.724210][T11403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.743057][T11403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.756489][T11403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.792061][T11403] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.809852][T11403] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.822443][T11403] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.832189][T11403] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.078233][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.101764][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.155615][T11489] FAULT_INJECTION: forcing a failure. [ 276.155615][T11489] name failslab, interval 1, probability 0, space 0, times 0 [ 276.168778][T11489] CPU: 0 PID: 11489 Comm: syz.2.2536 Not tainted 6.6.100-syzkaller #0 [ 276.176998][T11489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.187105][T11489] Call Trace: [ 276.190420][T11489] [ 276.193405][T11489] dump_stack_lvl+0x16c/0x230 [ 276.197688][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.198121][T11489] ? show_regs_print_info+0x20/0x20 [ 276.211251][T11489] ? load_image+0x3b0/0x3b0 [ 276.215838][T11489] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 276.219297][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.221441][T11489] should_fail_ex+0x39d/0x4d0 [ 276.221488][T11489] should_failslab+0x9/0x20 [ 276.238061][T11489] slab_pre_alloc_hook+0x59/0x310 [ 276.243155][T11489] ? verify_lock_unused+0x140/0x140 [ 276.248424][T11489] kmem_cache_alloc+0x5a/0x2e0 [ 276.253276][T11489] ? dst_alloc+0x105/0x170 [ 276.257841][T11489] dst_alloc+0x105/0x170 [ 276.262212][T11489] ip_route_output_key_hash_rcu+0x1413/0x2320 [ 276.268313][T11489] ? ip_route_output_key_hash+0x12f/0x340 [ 276.274059][T11489] ip_route_output_key_hash+0x20b/0x340 [ 276.279630][T11489] ? inet_addr_type_table+0x30/0x30 [ 276.284852][T11489] ? ip_route_input_rcu+0x3010/0x3010 [ 276.290255][T11489] ? l3mdev_fib_table+0x18/0x160 [ 276.295225][T11489] ? l3mdev_fib_table+0x18/0x160 [ 276.300200][T11489] ip_route_output_flow+0x2a/0x150 [ 276.305331][T11489] icmp_route_lookup+0x590/0x880 [ 276.310741][T11489] ? rcu_read_unlock+0xa0/0xa0 [ 276.315618][T11489] ? __asan_memset+0x22/0x40 [ 276.320254][T11489] ? ip_options_build+0x530/0x530 [ 276.325319][T11489] ? __icmp_send+0x1b5/0x1320 [ 276.330022][T11489] __icmp_send+0xd20/0x1320 [ 276.334558][T11489] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 276.340482][T11489] ? __icmp_send+0x1b5/0x1320 [ 276.345194][T11489] ? icmp_out_count+0x90/0x90 [ 276.349903][T11489] ? xfrm_policy_lookup_bytype+0x1013/0x1070 [ 276.355943][T11489] ? ip_route_output_key_hash_rcu+0x18f5/0x2320 [ 276.362217][T11489] ? xfrm_expand_policies+0xc7/0x690 [ 276.367733][T11489] ? ipv4_link_failure+0x3c3/0xa20 [ 276.372865][T11489] ipv4_link_failure+0x64f/0xa20 [ 276.377943][T11489] ? ipv4_negative_advice+0x1a0/0x1a0 [ 276.383344][T11489] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 276.389088][T11489] ? ipv4_negative_advice+0x1a0/0x1a0 [ 276.394478][T11489] xfrmi_xmit+0x988/0x1810 [ 276.398931][T11489] ? xfrmi_dev_uninit+0x200/0x200 [ 276.403993][T11489] dev_hard_start_xmit+0x246/0x740 [ 276.409153][T11489] __dev_queue_xmit+0x1a64/0x35a0 [ 276.414315][T11489] ? __might_fault+0xc6/0x120 [ 276.419122][T11489] ? __virt_addr_valid+0x18c/0x540 [ 276.424261][T11489] ? __dev_queue_xmit+0x245/0x35a0 [ 276.429392][T11489] ? sock_alloc_send_pskb+0x875/0x990 [ 276.434881][T11489] ? netdev_core_pick_tx+0x340/0x340 [ 276.440185][T11489] ? packet_parse_headers+0x7c8/0xad0 [ 276.445600][T11489] ? packet_parse_headers+0x7d9/0xad0 [ 276.451014][T11489] ? __virt_addr_valid+0x18c/0x540 [ 276.456175][T11489] ? __check_object_size+0x506/0xa30 [ 276.461522][T11489] ? skb_setup_tx_timestamp+0x1e0/0x1e0 [ 276.467112][T11489] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 276.473127][T11489] ? packet_xmit+0x66/0x330 [ 276.477673][T11489] ? packet_sendmsg+0x3a04/0x4d30 [ 276.482749][T11489] packet_sendmsg+0x3b47/0x4d30 [ 276.487647][T11489] ? __might_sleep+0xe0/0xe0 [ 276.492299][T11489] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 276.498915][T11489] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 276.504662][T11489] ? aa_sk_perm+0x7fc/0x930 [ 276.509463][T11489] ? packet_getsockopt+0xa20/0xa20 [ 276.514609][T11489] ? aa_sock_msg_perm+0x94/0x150 [ 276.519572][T11489] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 276.524889][T11489] ? security_socket_sendmsg+0x80/0xa0 [ 276.530488][T11489] ? packet_getsockopt+0xa20/0xa20 [ 276.535728][T11489] ____sys_sendmsg+0x5bf/0x950 [ 276.540532][T11489] ? __asan_memset+0x22/0x40 [ 276.545233][T11489] ? __sys_sendmsg_sock+0x30/0x30 [ 276.550315][T11489] ? __import_iovec+0x5f2/0x860 [ 276.555203][T11489] ? import_iovec+0x73/0xa0 [ 276.559736][T11489] ___sys_sendmsg+0x220/0x290 [ 276.564709][T11489] ? __sys_sendmsg+0x270/0x270 [ 276.569635][T11489] ? __lock_acquire+0x7c80/0x7c80 [ 276.574757][T11489] __se_sys_sendmsg+0x1a5/0x270 [ 276.579670][T11489] ? __x64_sys_sendmsg+0x80/0x80 [ 276.584666][T11489] ? lockdep_hardirqs_on+0x98/0x150 [ 276.589899][T11489] do_syscall_64+0x55/0xb0 [ 276.594338][T11489] ? clear_bhb_loop+0x40/0x90 [ 276.599028][T11489] ? clear_bhb_loop+0x40/0x90 [ 276.603723][T11489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.609643][T11489] RIP: 0033:0x7f691fb8e9a9 [ 276.614087][T11489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.633739][T11489] RSP: 002b:00007f6920ab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.642182][T11489] RAX: ffffffffffffffda RBX: 00007f691fdb5fa0 RCX: 00007f691fb8e9a9 [ 276.650200][T11489] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 276.658291][T11489] RBP: 00007f6920ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 276.666284][T11489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.674269][T11489] R13: 0000000000000000 R14: 00007f691fdb5fa0 R15: 00007fff362fd608 [ 276.682271][T11489] [ 276.730194][ T5101] Bluetooth: hci1: command tx timeout [ 277.175545][T11500] FAULT_INJECTION: forcing a failure. [ 277.175545][T11500] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 277.215547][T11500] CPU: 1 PID: 11500 Comm: syz.1.2540 Not tainted 6.6.100-syzkaller #0 [ 277.223794][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.234052][T11500] Call Trace: [ 277.237355][T11500] [ 277.240298][T11500] dump_stack_lvl+0x16c/0x230 [ 277.245001][T11500] ? show_regs_print_info+0x20/0x20 [ 277.250218][T11500] ? load_image+0x3b0/0x3b0 [ 277.254751][T11500] ? __might_fault+0xaa/0x120 [ 277.259555][T11500] ? __lock_acquire+0x7c80/0x7c80 [ 277.264606][T11500] should_fail_ex+0x39d/0x4d0 [ 277.269333][T11500] _copy_to_user+0x2f/0xa0 [ 277.273766][T11500] bpf_test_finish+0x4d8/0x620 [ 277.278916][T11500] ? convert_skb_to___skb+0x420/0x420 [ 277.284315][T11500] ? _copy_from_user+0xa5/0xe0 [ 277.289098][T11500] ? bpf_test_init+0x134/0x150 [ 277.293887][T11500] bpf_prog_test_run_xdp+0x7fa/0xfa0 [ 277.299234][T11500] ? dev_put+0x80/0x80 [ 277.303334][T11500] ? dev_put+0x80/0x80 [ 277.307446][T11500] bpf_prog_test_run+0x321/0x390 [ 277.312402][T11500] __sys_bpf+0x440/0x800 [ 277.316664][T11500] ? bpf_link_show_fdinfo+0x350/0x350 [ 277.322069][T11500] ? lock_chain_count+0x20/0x20 [ 277.326946][T11500] __x64_sys_bpf+0x7c/0x90 [ 277.331379][T11500] do_syscall_64+0x55/0xb0 [ 277.335817][T11500] ? clear_bhb_loop+0x40/0x90 [ 277.340527][T11500] ? clear_bhb_loop+0x40/0x90 [ 277.345218][T11500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.351141][T11500] RIP: 0033:0x7fd98d98e9a9 [ 277.355579][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.375226][T11500] RSP: 002b:00007fd98e7fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.383758][T11500] RAX: ffffffffffffffda RBX: 00007fd98dbb5fa0 RCX: 00007fd98d98e9a9 [ 277.391757][T11500] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 277.399744][T11500] RBP: 00007fd98e7fc090 R08: 0000000000000000 R09: 0000000000000000 [ 277.407753][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.415750][T11500] R13: 0000000000000000 R14: 00007fd98dbb5fa0 R15: 00007ffe0318e6d8 [ 277.423751][T11500] [ 278.111648][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.122711][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.144582][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.153847][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.162193][ T5794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.170525][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.601886][T11516] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 278.788740][ T5794] Bluetooth: hci1: command tx timeout [ 278.939649][T11512] chnl_net:caif_netlink_parms(): no params data found [ 279.030776][T11532] FAULT_INJECTION: forcing a failure. [ 279.030776][T11532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.052626][T11532] CPU: 0 PID: 11532 Comm: syz.2.2553 Not tainted 6.6.100-syzkaller #0 [ 279.061029][T11532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.071147][T11532] Call Trace: [ 279.074467][T11532] [ 279.077452][T11532] dump_stack_lvl+0x16c/0x230 [ 279.082196][T11532] ? show_regs_print_info+0x20/0x20 [ 279.087453][T11532] ? load_image+0x3b0/0x3b0 [ 279.092053][T11532] ? __lock_acquire+0x7c80/0x7c80 [ 279.097139][T11532] ? __virt_addr_valid+0x18c/0x540 [ 279.102290][T11532] should_fail_ex+0x39d/0x4d0 [ 279.107009][T11532] _copy_from_user+0x2f/0xe0 [ 279.111629][T11532] bpf_test_init+0xf9/0x150 [ 279.116177][T11532] bpf_prog_test_run_xdp+0x382/0xfa0 [ 279.121516][T11532] ? dev_put+0x80/0x80 [ 279.125655][T11532] ? dev_put+0x80/0x80 [ 279.129758][T11532] bpf_prog_test_run+0x321/0x390 [ 279.134733][T11532] __sys_bpf+0x440/0x800 [ 279.138998][T11532] ? bpf_link_show_fdinfo+0x350/0x350 [ 279.144402][T11532] ? lock_chain_count+0x20/0x20 [ 279.149280][T11532] __x64_sys_bpf+0x7c/0x90 [ 279.153720][T11532] do_syscall_64+0x55/0xb0 [ 279.158158][T11532] ? clear_bhb_loop+0x40/0x90 [ 279.162852][T11532] ? clear_bhb_loop+0x40/0x90 [ 279.167548][T11532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.173476][T11532] RIP: 0033:0x7f691fb8e9a9 [ 279.177969][T11532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.197692][T11532] RSP: 002b:00007f6920ab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.206147][T11532] RAX: ffffffffffffffda RBX: 00007f691fdb5fa0 RCX: 00007f691fb8e9a9 [ 279.214338][T11532] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 279.222393][T11532] RBP: 00007f6920ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 279.230409][T11532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.238429][T11532] R13: 0000000000000000 R14: 00007f691fdb5fa0 R15: 00007fff362fd608 [ 279.246444][T11532] [ 279.349893][T11512] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.358751][T11512] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.373657][T11512] bridge_slave_0: entered allmulticast mode [ 279.383497][T11512] bridge_slave_0: entered promiscuous mode [ 279.410804][T11512] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.437173][T11512] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.451583][T11512] bridge_slave_1: entered allmulticast mode [ 279.459413][T11512] bridge_slave_1: entered promiscuous mode [ 279.552931][T11512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.588076][T11512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.690824][T11512] team0: Port device team_slave_0 added [ 279.702081][T11512] team0: Port device team_slave_1 added [ 279.799113][T11512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.818015][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.888631][T11512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.917535][T11552] netlink: 'syz.1.2560': attribute type 10 has an invalid length. [ 279.945048][T11552] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.970977][T11552] bridge_slave_1: left allmulticast mode [ 279.978418][T11552] bridge_slave_1: left promiscuous mode [ 279.985946][T11552] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.007962][T11552] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 280.034668][T11512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.042200][T11512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.169220][T11512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.285417][T11558] @ÿ: renamed from bond_slave_0 (while UP) [ 280.374196][ T5794] Bluetooth: hci4: command tx timeout [ 280.437599][T11512] hsr_slave_0: entered promiscuous mode [ 280.474994][T11512] hsr_slave_1: entered promiscuous mode [ 280.494960][T11564] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2566'. [ 280.513580][T11512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.523705][T11512] Cannot create hsr debugfs directory [ 280.566229][ T5794] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 280.809435][ T5794] Bluetooth: hci0: unexpected subevent 0x12 length: 14 > 5 [ 280.991665][T11512] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.036123][T11580] netlink: 'syz.2.2570': attribute type 1 has an invalid length. [ 281.044373][T11580] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2570'. [ 281.207538][T11512] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.836160][T11512] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.878001][T11592] @ÿ: renamed from bond_slave_0 (while UP) [ 282.033756][T11512] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.071388][T11599] FAULT_INJECTION: forcing a failure. [ 282.071388][T11599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.089338][T11599] CPU: 0 PID: 11599 Comm: syz.1.2580 Not tainted 6.6.100-syzkaller #0 [ 282.097842][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.107942][T11599] Call Trace: [ 282.111241][T11599] [ 282.114195][T11599] dump_stack_lvl+0x16c/0x230 [ 282.118898][T11599] ? show_regs_print_info+0x20/0x20 [ 282.124167][T11599] ? load_image+0x3b0/0x3b0 [ 282.128720][T11599] ? __might_fault+0xaa/0x120 [ 282.133416][T11599] ? __lock_acquire+0x7c80/0x7c80 [ 282.138468][T11599] ? trace_event_raw_event_lock+0x230/0x230 [ 282.144414][T11599] should_fail_ex+0x39d/0x4d0 [ 282.149135][T11599] _copy_from_user+0x2f/0xe0 [ 282.153750][T11599] get_user_ifreq+0x6b/0x180 [ 282.158375][T11599] inet_ioctl+0x308/0x4c0 [ 282.162723][T11599] ? tomoyo_path_number_perm+0x1ba/0x590 [ 282.168380][T11599] ? inet_shutdown+0x370/0x370 [ 282.173178][T11599] ? slab_free_freelist_hook+0x130/0x1b0 [ 282.178838][T11599] ? tomoyo_path_number_perm+0x477/0x590 [ 282.184492][T11599] ? __kmem_cache_free+0xba/0x1f0 [ 282.189642][T11599] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 282.195268][T11599] sock_do_ioctl+0xd7/0x2f0 [ 282.200439][T11599] ? sock_show_fdinfo+0xb0/0xb0 [ 282.205437][T11599] sock_ioctl+0x623/0x7a0 [ 282.209798][T11599] ? sock_poll+0x3d0/0x3d0 [ 282.214264][T11599] ? bpf_lsm_file_ioctl+0x9/0x10 [ 282.219225][T11599] ? security_file_ioctl+0x80/0xa0 [ 282.224364][T11599] ? sock_poll+0x3d0/0x3d0 [ 282.228806][T11599] __se_sys_ioctl+0xfd/0x170 [ 282.233421][T11599] do_syscall_64+0x55/0xb0 [ 282.237887][T11599] ? clear_bhb_loop+0x40/0x90 [ 282.242601][T11599] ? clear_bhb_loop+0x40/0x90 [ 282.247307][T11599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.253235][T11599] RIP: 0033:0x7fd98d98e9a9 [ 282.257676][T11599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.277327][T11599] RSP: 002b:00007fd98e7fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.285770][T11599] RAX: ffffffffffffffda RBX: 00007fd98dbb5fa0 RCX: 00007fd98d98e9a9 [ 282.293759][T11599] RDX: 0000200000000100 RSI: 0000000000008917 RDI: 0000000000000005 [ 282.301770][T11599] RBP: 00007fd98e7fc090 R08: 0000000000000000 R09: 0000000000000000 [ 282.310398][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.319283][T11599] R13: 0000000000000000 R14: 00007fd98dbb5fa0 R15: 00007ffe0318e6d8 [ 282.327306][T11599] [ 282.365157][T11602] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 282.373235][T11602] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2581'. [ 282.454282][ T5794] Bluetooth: hci4: command tx timeout [ 282.736314][T11512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.782596][T11512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.797756][T11512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.837953][T11512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 283.123246][T11512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.163738][T11512] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.196600][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.203844][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.282206][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.289570][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.961322][T11512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.095423][T11512] veth0_vlan: entered promiscuous mode [ 284.133649][T11512] veth1_vlan: entered promiscuous mode [ 284.253371][T11512] veth0_macvtap: entered promiscuous mode [ 284.273979][T11512] veth1_macvtap: entered promiscuous mode [ 284.345816][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.361643][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.372610][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.391912][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.403447][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.415444][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.427220][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.440782][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.452039][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.463499][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.476126][T11512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.513754][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.526500][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.544152][ T5794] Bluetooth: hci4: command tx timeout [ 284.555494][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.603706][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.638867][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.673656][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.686527][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.699100][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.713883][T11512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.724728][T11512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.745034][T11512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.757446][T11512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.772631][T11512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.791716][T11512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.801341][T11512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.966325][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.974669][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.063308][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.077758][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.504299][T11697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2617'. [ 286.526740][T11697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2617'. [ 286.563245][T11697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2617'. [ 286.595686][T11697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2617'. [ 286.614901][ T5794] Bluetooth: hci4: command tx timeout [ 286.881996][T11709] FAULT_INJECTION: forcing a failure. [ 286.881996][T11709] name failslab, interval 1, probability 0, space 0, times 0 [ 286.900654][T11709] CPU: 0 PID: 11709 Comm: syz.2.2623 Not tainted 6.6.100-syzkaller #0 [ 286.909251][T11709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.919526][T11709] Call Trace: [ 286.922830][T11709] [ 286.925781][T11709] dump_stack_lvl+0x16c/0x230 [ 286.930515][T11709] ? show_regs_print_info+0x20/0x20 [ 286.935783][T11709] ? load_image+0x3b0/0x3b0 [ 286.940334][T11709] ? __might_sleep+0xe0/0xe0 [ 286.944956][T11709] ? __lock_acquire+0x7c80/0x7c80 [ 286.950028][T11709] should_fail_ex+0x39d/0x4d0 [ 286.954767][T11709] should_failslab+0x9/0x20 [ 286.959322][T11709] slab_pre_alloc_hook+0x59/0x310 [ 286.964394][T11709] ? lockdep_hardirqs_on+0x98/0x150 [ 286.969662][T11709] ? nf_nat_masq_schedule+0x23a/0x550 [ 286.975070][T11709] __kmem_cache_alloc_node+0x53/0x260 [ 286.980487][T11709] ? nf_nat_masq_schedule+0x23a/0x550 [ 286.985889][T11709] kmalloc_trace+0x2a/0xe0 [ 286.990333][T11709] nf_nat_masq_schedule+0x23a/0x550 [ 286.995551][T11709] ? masq_inet_event+0x230/0x230 [ 287.000503][T11709] ? masq_device_event+0xd0/0xd0 [ 287.005460][T11709] ? timer_delete_sync+0x20/0x20 [ 287.010429][T11709] masq_inet_event+0x194/0x230 [ 287.015221][T11709] ? iterate_cleanup_work+0x1f0/0x1f0 [ 287.020629][T11709] ? neigh_ifdown+0x1f/0x30 [ 287.025158][T11709] ? ieee80211_ifa_changed+0xcf/0x5e0 [ 287.030659][T11709] notifier_call_chain+0x197/0x390 [ 287.035800][T11709] blocking_notifier_call_chain+0x6a/0x90 [ 287.041698][T11709] __inet_del_ifa+0x876/0x1020 [ 287.046538][T11709] devinet_ioctl+0xb63/0x1c60 [ 287.051298][T11709] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 287.056460][T11709] ? _copy_from_user+0xa5/0xe0 [ 287.061282][T11709] ? get_user_ifreq+0x12b/0x180 [ 287.066189][T11709] inet_ioctl+0x3c1/0x4c0 [ 287.070536][T11709] ? tomoyo_path_number_perm+0x1ba/0x590 [ 287.076193][T11709] ? inet_shutdown+0x370/0x370 [ 287.081057][T11709] ? slab_free_freelist_hook+0x130/0x1b0 [ 287.086711][T11709] ? tomoyo_path_number_perm+0x477/0x590 [ 287.092371][T11709] ? __kmem_cache_free+0xba/0x1f0 [ 287.097444][T11709] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 287.102969][T11709] sock_do_ioctl+0xd7/0x2f0 [ 287.107712][T11709] ? sock_show_fdinfo+0xb0/0xb0 [ 287.112635][T11709] sock_ioctl+0x623/0x7a0 [ 287.117008][T11709] ? sock_poll+0x3d0/0x3d0 [ 287.121496][T11709] ? bpf_lsm_file_ioctl+0x9/0x10 [ 287.126473][T11709] ? security_file_ioctl+0x80/0xa0 [ 287.131636][T11709] ? sock_poll+0x3d0/0x3d0 [ 287.136087][T11709] __se_sys_ioctl+0xfd/0x170 [ 287.140724][T11709] do_syscall_64+0x55/0xb0 [ 287.145176][T11709] ? clear_bhb_loop+0x40/0x90 [ 287.149883][T11709] ? clear_bhb_loop+0x40/0x90 [ 287.154713][T11709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.161444][T11709] RIP: 0033:0x7f691fb8e9a9 [ 287.165897][T11709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.185631][T11709] RSP: 002b:00007f6920ab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.194605][T11709] RAX: ffffffffffffffda RBX: 00007f691fdb5fa0 RCX: 00007f691fb8e9a9 [ 287.202589][T11709] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 287.210571][T11709] RBP: 00007f6920ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 287.218585][T11709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.226588][T11709] R13: 0000000000000000 R14: 00007f691fdb5fa0 R15: 00007fff362fd608 [ 287.234611][T11709] [ 287.371690][T11716] Driver unsupported XDP return value 0 on prog (id 988) dev N/A, expect packet loss! [ 287.396356][T11713] ipvlan0: entered promiscuous mode [ 287.402269][T11713] ipvlan0: entered allmulticast mode [ 287.414752][T11713] veth0_vlan: entered allmulticast mode [ 287.947494][T11739] lo: entered allmulticast mode [ 288.028695][T11739] lo: entered promiscuous mode [ 288.033644][T11739] lo: left allmulticast mode [ 288.183683][T11748] FAULT_INJECTION: forcing a failure. [ 288.183683][T11748] name failslab, interval 1, probability 0, space 0, times 0 [ 288.196459][T11748] CPU: 1 PID: 11748 Comm: syz.2.2637 Not tainted 6.6.100-syzkaller #0 [ 288.204676][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.214784][T11748] Call Trace: [ 288.218100][T11748] [ 288.221071][T11748] dump_stack_lvl+0x16c/0x230 [ 288.225813][T11748] ? show_regs_print_info+0x20/0x20 [ 288.231073][T11748] ? load_image+0x3b0/0x3b0 [ 288.235745][T11748] should_fail_ex+0x39d/0x4d0 [ 288.240496][T11748] should_failslab+0x9/0x20 [ 288.245062][T11748] slab_pre_alloc_hook+0x59/0x310 [ 288.250137][T11748] ? verify_lock_unused+0x140/0x140 [ 288.255555][T11748] kmem_cache_alloc+0x5a/0x2e0 [ 288.260390][T11748] ? dst_alloc+0x105/0x170 [ 288.264868][T11748] dst_alloc+0x105/0x170 [ 288.269184][T11748] ip_route_output_key_hash_rcu+0x1413/0x2320 [ 288.275331][T11748] ? ip_route_output_key_hash+0x12f/0x340 [ 288.281115][T11748] ip_route_output_key_hash+0x20b/0x340 [ 288.286748][T11748] ? inet_addr_type_table+0x30/0x30 [ 288.292049][T11748] ? ip_route_input_rcu+0x3010/0x3010 [ 288.297496][T11748] ? l3mdev_fib_table+0x18/0x160 [ 288.302501][T11748] ? l3mdev_fib_table+0x18/0x160 [ 288.307511][T11748] ip_route_output_flow+0x2a/0x150 [ 288.312698][T11748] icmp_route_lookup+0x590/0x880 [ 288.317714][T11748] ? rcu_read_unlock+0xa0/0xa0 [ 288.322543][T11748] ? __asan_memset+0x22/0x40 [ 288.327212][T11748] ? ip_options_build+0x530/0x530 [ 288.332300][T11748] ? __icmp_send+0x1b5/0x1320 [ 288.337058][T11748] __icmp_send+0xd20/0x1320 [ 288.341625][T11748] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 288.347550][T11748] ? __icmp_send+0x1b5/0x1320 [ 288.352274][T11748] ? icmp_out_count+0x90/0x90 [ 288.356997][T11748] ? xfrm_policy_lookup_bytype+0x1013/0x1070 [ 288.363063][T11748] ? ip_route_output_key_hash_rcu+0x18f5/0x2320 [ 288.369343][T11748] ? xfrm_expand_policies+0xc7/0x690 [ 288.374664][T11748] ? ipv4_link_failure+0x3c3/0xa20 [ 288.379809][T11748] ipv4_link_failure+0x64f/0xa20 [ 288.384828][T11748] ? ipv4_negative_advice+0x1a0/0x1a0 [ 288.390255][T11748] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 288.396017][T11748] ? ipv4_negative_advice+0x1a0/0x1a0 [ 288.401412][T11748] xfrmi_xmit+0x988/0x1810 [ 288.405866][T11748] ? xfrmi_dev_uninit+0x200/0x200 [ 288.410946][T11748] dev_hard_start_xmit+0x246/0x740 [ 288.416093][T11748] __dev_queue_xmit+0x1a64/0x35a0 [ 288.421164][T11748] ? __might_fault+0xc6/0x120 [ 288.425893][T11748] ? __virt_addr_valid+0x18c/0x540 [ 288.431038][T11748] ? __dev_queue_xmit+0x245/0x35a0 [ 288.436173][T11748] ? sock_alloc_send_pskb+0x875/0x990 [ 288.441571][T11748] ? netdev_core_pick_tx+0x340/0x340 [ 288.446873][T11748] ? packet_parse_headers+0x7c8/0xad0 [ 288.452270][T11748] ? packet_parse_headers+0x7d9/0xad0 [ 288.457659][T11748] ? __virt_addr_valid+0x18c/0x540 [ 288.462798][T11748] ? __check_object_size+0x506/0xa30 [ 288.468107][T11748] ? skb_setup_tx_timestamp+0x1e0/0x1e0 [ 288.473676][T11748] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 288.479681][T11748] ? packet_xmit+0x66/0x330 [ 288.484210][T11748] ? packet_sendmsg+0x3a04/0x4d30 [ 288.489255][T11748] packet_sendmsg+0x3b47/0x4d30 [ 288.494154][T11748] ? __might_sleep+0xe0/0xe0 [ 288.498880][T11748] ? verify_lock_unused+0x140/0x140 [ 288.504111][T11748] ? aa_sk_perm+0x7fc/0x930 [ 288.508647][T11748] ? packet_getsockopt+0xa20/0xa20 [ 288.513806][T11748] ? aa_sock_msg_perm+0x94/0x150 [ 288.518785][T11748] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 288.524112][T11748] ? security_socket_sendmsg+0x80/0xa0 [ 288.529621][T11748] ? packet_getsockopt+0xa20/0xa20 [ 288.536860][T11748] ____sys_sendmsg+0x5bf/0x950 [ 288.541678][T11748] ? __asan_memset+0x22/0x40 [ 288.546291][T11748] ? __sys_sendmsg_sock+0x30/0x30 [ 288.551343][T11748] ? __import_iovec+0x5f2/0x860 [ 288.556243][T11748] ? import_iovec+0x73/0xa0 [ 288.560778][T11748] ___sys_sendmsg+0x220/0x290 [ 288.565486][T11748] ? __sys_sendmsg+0x270/0x270 [ 288.570294][T11748] ? __lock_acquire+0x7c80/0x7c80 [ 288.575537][T11748] __se_sys_sendmsg+0x1a5/0x270 [ 288.580672][T11748] ? __x64_sys_sendmsg+0x80/0x80 [ 288.585749][T11748] ? lockdep_hardirqs_on+0x98/0x150 [ 288.590973][T11748] do_syscall_64+0x55/0xb0 [ 288.595407][T11748] ? clear_bhb_loop+0x40/0x90 [ 288.600112][T11748] ? clear_bhb_loop+0x40/0x90 [ 288.604811][T11748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.610831][T11748] RIP: 0033:0x7f691fb8e9a9 [ 288.615263][T11748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.635096][T11748] RSP: 002b:00007f6920ab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.643528][T11748] RAX: ffffffffffffffda RBX: 00007f691fdb5fa0 RCX: 00007f691fb8e9a9 [ 288.651635][T11748] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000003 [ 288.659657][T11748] RBP: 00007f6920ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 288.667829][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.675835][T11748] R13: 0000000000000000 R14: 00007f691fdb5fa0 R15: 00007fff362fd608 [ 288.683842][T11748] [ 289.693073][T11778] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2649'. [ 289.732310][T11778] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2649'. [ 289.786198][T11779] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2649'. [ 289.816304][T11783] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2649'. [ 290.699723][T11810] netlink: 'syz.0.2661': attribute type 10 has an invalid length. [ 290.733625][T11810] team0: Port device netdevsim0 added [ 290.874248][T11818] netlink: 'syz.1.2664': attribute type 8 has an invalid length. [ 290.882083][T11818] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2664'. [ 294.978595][T11903] FAULT_INJECTION: forcing a failure. [ 294.978595][T11903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.020323][T11905] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.2704'. [ 295.048848][T11903] CPU: 0 PID: 11903 Comm: syz.2.2702 Not tainted 6.6.100-syzkaller #0 [ 295.057136][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.067263][T11903] Call Trace: [ 295.070595][T11903] [ 295.073583][T11903] dump_stack_lvl+0x16c/0x230 [ 295.078351][T11903] ? show_regs_print_info+0x20/0x20 [ 295.083633][T11903] ? load_image+0x3b0/0x3b0 [ 295.088230][T11903] ? __lock_acquire+0x7c80/0x7c80 [ 295.093351][T11903] ? snprintf+0xdb/0x120 [ 295.097709][T11903] should_fail_ex+0x39d/0x4d0 [ 295.102475][T11903] _copy_to_user+0x2f/0xa0 [ 295.106969][T11903] simple_read_from_buffer+0xe7/0x150 [ 295.112438][T11903] proc_fail_nth_read+0x1e3/0x250 [ 295.117517][T11903] ? proc_fault_inject_write+0x340/0x340 [ 295.124259][T11903] ? fsnotify_perm+0x271/0x5e0 [ 295.129097][T11903] ? proc_fault_inject_write+0x340/0x340 [ 295.134802][T11903] vfs_read+0x27e/0x920 [ 295.139027][T11903] ? kernel_read+0x1e0/0x1e0 [ 295.143670][T11903] ? __fget_files+0x28/0x4d0 [ 295.148368][T11903] ? __fget_files+0x44a/0x4d0 [ 295.153202][T11903] ? __fdget_pos+0x2a3/0x330 [ 295.157874][T11903] ? ksys_read+0x75/0x250 [ 295.162299][T11903] ksys_read+0x147/0x250 [ 295.166602][T11903] ? vfs_write+0x940/0x940 [ 295.171083][T11903] ? lockdep_hardirqs_on+0x98/0x150 [ 295.176374][T11903] do_syscall_64+0x55/0xb0 [ 295.180825][T11903] ? clear_bhb_loop+0x40/0x90 [ 295.185533][T11903] ? clear_bhb_loop+0x40/0x90 [ 295.190242][T11903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.196176][T11903] RIP: 0033:0x7f691fb8d3bc [ 295.200625][T11903] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 295.220376][T11903] RSP: 002b:00007f6920ab2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.229037][T11903] RAX: ffffffffffffffda RBX: 00007f691fdb5fa0 RCX: 00007f691fb8d3bc [ 295.237152][T11903] RDX: 000000000000000f RSI: 00007f6920ab20a0 RDI: 0000000000000005 [ 295.245702][T11903] RBP: 00007f6920ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 295.253736][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.261860][T11903] R13: 0000000000000000 R14: 00007f691fdb5fa0 R15: 00007fff362fd608 [ 295.269907][T11903] [ 295.678075][T11923] netlink: 'syz.2.2709': attribute type 10 has an invalid length. [ 295.692661][T11923] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2709'. [ 297.830680][T11987] netlink: 'syz.0.2740': attribute type 3 has an invalid length. [ 297.966069][T11991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2741'. [ 297.986829][T11991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2741'. [ 298.003712][T11991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2741'. [ 298.029210][T11991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2741'. [ 298.235766][T11994] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2743'. [ 298.262516][T11994] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 298.803270][T12007] netlink: 'syz.2.2748': attribute type 11 has an invalid length. [ 299.125598][T12014] FAULT_INJECTION: forcing a failure. [ 299.125598][T12014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.152311][T12014] CPU: 0 PID: 12014 Comm: syz.1.2751 Not tainted 6.6.100-syzkaller #0 [ 299.160566][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.170668][T12014] Call Trace: [ 299.173996][T12014] [ 299.176979][T12014] dump_stack_lvl+0x16c/0x230 [ 299.181715][T12014] ? show_regs_print_info+0x20/0x20 [ 299.186984][T12014] ? load_image+0x3b0/0x3b0 [ 299.191545][T12014] ? __might_fault+0xaa/0x120 [ 299.196268][T12014] ? __lock_acquire+0x7c80/0x7c80 [ 299.201347][T12014] should_fail_ex+0x39d/0x4d0 [ 299.206094][T12014] _copy_from_user+0x2f/0xe0 [ 299.210739][T12014] csum_and_copy_from_iter+0x1ed/0x1450 [ 299.216353][T12014] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 299.222043][T12014] ? __kmem_cache_alloc_node+0x13e/0x260 [ 299.227731][T12014] ? __alloc_skb+0x138/0x2c0 [ 299.232368][T12014] ? rcu_is_watching+0x15/0xb0 [ 299.237189][T12014] ip_generic_getfrag+0x145/0x2d0 [ 299.242267][T12014] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 299.247177][T12014] ? skb_put+0x11b/0x210 [ 299.251466][T12014] __ip6_append_data+0x2f08/0x3c40 [ 299.256643][T12014] ? rawv6_send_hdrinc+0x1690/0x1690 [ 299.261974][T12014] ? ip6_setup_cork+0xfe0/0xfe0 [ 299.266857][T12014] ip6_append_data+0x1b0/0x350 [ 299.271643][T12014] ? rawv6_send_hdrinc+0x1690/0x1690 [ 299.276951][T12014] rawv6_sendmsg+0x1262/0x17f0 [ 299.281746][T12014] ? __might_sleep+0xe0/0xe0 [ 299.286354][T12014] ? compat_rawv6_ioctl+0x70/0x70 [ 299.291401][T12014] ? aa_sk_perm+0x7fc/0x930 [ 299.295966][T12014] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 299.302414][T12014] ? inet_send_prepare+0x260/0x260 [ 299.307538][T12014] ? inet_sendmsg+0x7c/0x2f0 [ 299.312141][T12014] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 299.317468][T12014] ? security_socket_sendmsg+0x80/0xa0 [ 299.322966][T12014] ? inet_send_prepare+0x260/0x260 [ 299.328093][T12014] ____sys_sendmsg+0x5bf/0x950 [ 299.332881][T12014] ? __asan_memset+0x22/0x40 [ 299.337494][T12014] ? __sys_sendmsg_sock+0x30/0x30 [ 299.342540][T12014] ? __import_iovec+0x5f2/0x860 [ 299.347424][T12014] ? import_iovec+0x73/0xa0 [ 299.351963][T12014] ___sys_sendmsg+0x220/0x290 [ 299.356673][T12014] ? __sys_sendmsg+0x270/0x270 [ 299.361481][T12014] ? __lock_acquire+0x7c80/0x7c80 [ 299.366541][T12014] __se_sys_sendmsg+0x1a5/0x270 [ 299.371414][T12014] ? __x64_sys_sendmsg+0x80/0x80 [ 299.376383][T12014] ? lockdep_hardirqs_on+0x98/0x150 [ 299.381604][T12014] do_syscall_64+0x55/0xb0 [ 299.386040][T12014] ? clear_bhb_loop+0x40/0x90 [ 299.390748][T12014] ? clear_bhb_loop+0x40/0x90 [ 299.395546][T12014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.401567][T12014] RIP: 0033:0x7fd98d98e9a9 [ 299.406021][T12014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.425736][T12014] RSP: 002b:00007fd98e7fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.434185][T12014] RAX: ffffffffffffffda RBX: 00007fd98dbb5fa0 RCX: 00007fd98d98e9a9 [ 299.442176][T12014] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 299.450249][T12014] RBP: 00007fd98e7fc090 R08: 0000000000000000 R09: 0000000000000000 [ 299.458258][T12014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.466259][T12014] R13: 0000000000000000 R14: 00007fd98dbb5fa0 R15: 00007ffe0318e6d8 [ 299.474983][T12014] [ 299.679548][T12028] netlink: 'syz.1.2756': attribute type 9 has an invalid length. [ 299.705820][T12028] netlink: 371 bytes leftover after parsing attributes in process `syz.1.2756'. [ 299.792702][T12034] netlink: 'syz.1.2758': attribute type 21 has an invalid length. [ 301.312074][T12067] FAULT_INJECTION: forcing a failure. [ 301.312074][T12067] name failslab, interval 1, probability 0, space 0, times 0 [ 301.325294][T12067] CPU: 1 PID: 12067 Comm: syz.2.2774 Not tainted 6.6.100-syzkaller #0 [ 301.333502][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.343702][T12067] Call Trace: [ 301.347031][T12067] [ 301.350094][T12067] dump_stack_lvl+0x16c/0x230 [ 301.354827][T12067] ? stack_trace_snprint+0xf0/0xf0 [ 301.359988][T12067] ? show_regs_print_info+0x20/0x20 [ 301.365243][T12067] ? load_image+0x3b0/0x3b0 [ 301.369847][T12067] ? kasan_set_track+0x5f/0x70 [ 301.374682][T12067] ? __kasan_kmalloc+0x8f/0xa0 [ 301.379515][T12067] ? sctp_inet6addr_event+0x37f/0x730 [ 301.384956][T12067] ? notifier_call_chain+0x197/0x390 [ 301.390297][T12067] should_fail_ex+0x39d/0x4d0 [ 301.395020][T12067] should_failslab+0x9/0x20 [ 301.399560][T12067] slab_pre_alloc_hook+0x59/0x310 [ 301.404619][T12067] ? sctp_addr_wq_mgmt+0x2db/0x6e0 [ 301.409758][T12067] ? sctp_addr_wq_mgmt+0x2db/0x6e0 [ 301.414897][T12067] __kmem_cache_alloc_node+0x53/0x260 [ 301.420301][T12067] ? sctp_addr_wq_mgmt+0x2db/0x6e0 [ 301.425437][T12067] __kmalloc_node_track_caller+0xa2/0x230 [ 301.431451][T12067] kmemdup+0x2b/0x70 [ 301.435377][T12067] sctp_addr_wq_mgmt+0x2db/0x6e0 [ 301.440345][T12067] ? sctp_inet6addr_event+0x46c/0x730 [ 301.445830][T12067] sctp_inet6addr_event+0x56c/0x730 [ 301.451058][T12067] notifier_call_chain+0x197/0x390 [ 301.456204][T12067] ? atomic_notifier_call_chain+0x26/0x180 [ 301.462073][T12067] atomic_notifier_call_chain+0xda/0x180 [ 301.467755][T12067] ipv6_add_addr+0xdad/0x1090 [ 301.472481][T12067] ? ipv6_count_addresses+0x190/0x190 [ 301.477890][T12067] inet6_addr_add+0x57e/0xb60 [ 301.482645][T12067] inet6_rtm_newaddr+0x68d/0x940 [ 301.487656][T12067] ? inet6_dump_ifinfo+0x940/0x940 [ 301.492815][T12067] ? mutex_lock_nested+0x20/0x20 [ 301.497812][T12067] ? inet6_dump_ifinfo+0x940/0x940 [ 301.502974][T12067] rtnetlink_rcv_msg+0x7c7/0xf10 [ 301.508052][T12067] ? __dev_queue_xmit+0x245/0x35a0 [ 301.513195][T12067] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 301.518460][T12067] ? rtnetlink_bind+0x80/0x80 [ 301.523167][T12067] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 301.529164][T12067] ? __dev_queue_xmit+0x245/0x35a0 [ 301.534299][T12067] ? lock_chain_count+0x20/0x20 [ 301.539174][T12067] ? __local_bh_enable_ip+0x12e/0x1c0 [ 301.544586][T12067] ? lockdep_hardirqs_on+0x98/0x150 [ 301.550092][T12067] ? __local_bh_enable_ip+0x12e/0x1c0 [ 301.555490][T12067] ? _local_bh_enable+0xa0/0xa0 [ 301.560363][T12067] ? __dev_queue_xmit+0x245/0x35a0 [ 301.565501][T12067] ? __dev_queue_xmit+0x1449/0x35a0 [ 301.570732][T12067] ? __dev_queue_xmit+0x245/0x35a0 [ 301.575867][T12067] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.581087][T12067] ? perf_trace_lock+0xf7/0x380 [ 301.585985][T12067] ? __copy_skb_header+0xa7/0x550 [ 301.591042][T12067] netlink_rcv_skb+0x216/0x480 [ 301.595827][T12067] ? rtnetlink_bind+0x80/0x80 [ 301.600618][T12067] ? netlink_ack+0x1110/0x1110 [ 301.605415][T12067] ? __lock_acquire+0x7c80/0x7c80 [ 301.610480][T12067] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.615700][T12067] netlink_unicast+0x751/0x8d0 [ 301.620496][T12067] netlink_sendmsg+0x8c1/0xbe0 [ 301.625292][T12067] ? netlink_getsockopt+0x580/0x580 [ 301.630517][T12067] ? aa_sock_msg_perm+0x94/0x150 [ 301.635498][T12067] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 301.640804][T12067] ? security_socket_sendmsg+0x80/0xa0 [ 301.646318][T12067] ? netlink_getsockopt+0x580/0x580 [ 301.651747][T12067] ____sys_sendmsg+0x5bf/0x950 [ 301.656586][T12067] ? __asan_memset+0x22/0x40 [ 301.661211][T12067] ? __sys_sendmsg_sock+0x30/0x30 [ 301.666260][T12067] ? __import_iovec+0x5f2/0x860 [ 301.671142][T12067] ? import_iovec+0x73/0xa0 [ 301.675673][T12067] ___sys_sendmsg+0x220/0x290 [ 301.680374][T12067] ? __sys_sendmsg+0x270/0x270 [ 301.685180][T12067] ? __lock_acquire+0x7c80/0x7c80 [ 301.690253][T12067] __se_sys_sendmsg+0x1a5/0x270 [ 301.695132][T12067] ? __x64_sys_sendmsg+0x80/0x80 [ 301.700109][T12067] ? lockdep_hardirqs_on+0x98/0x150 [ 301.705338][T12067] do_syscall_64+0x55/0xb0 [ 301.709777][T12067] ? clear_bhb_loop+0x40/0x90 [ 301.714509][T12067] ? clear_bhb_loop+0x40/0x90 [ 301.719252][T12067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.725211][T12067] RIP: 0033:0x7f691fb8e9a9 [ 301.729653][T12067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.749412][T12067] RSP: 002b:00007f6920ab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.757860][T12067] RAX: ffffffffffffffda RBX: 00007f691fdb5fa0 RCX: 00007f691fb8e9a9 [ 301.765876][T12067] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 301.773873][T12067] RBP: 00007f6920ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 301.781893][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.790437][T12067] R13: 0000000000000000 R14: 00007f691fdb5fa0 R15: 00007fff362fd608 [ 301.799435][T12067] [ 302.071197][T12077] netlink: 'syz.0.2778': attribute type 29 has an invalid length. [ 302.114957][T12077] netlink: 'syz.0.2778': attribute type 29 has an invalid length. [ 302.164866][T12082] netlink: 'syz.0.2778': attribute type 29 has an invalid length. [ 302.856669][T12100] netlink: 'syz.0.2790': attribute type 10 has an invalid length. [ 303.068661][T12100] team0: Port device wlan1 added [ 303.136607][T12113] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2796'. [ 303.235245][T12112] __sock_release: fasync list not empty! [ 303.325985][T12119] netlink: 'syz.0.2798': attribute type 3 has an invalid length. [ 303.333794][T12119] netlink: 17263 bytes leftover after parsing attributes in process `syz.0.2798'. [ 303.857312][T12126] pim6reg1: entered promiscuous mode [ 303.862726][T12126] pim6reg1: entered allmulticast mode [ 303.869507][T12132] FAULT_INJECTION: forcing a failure. [ 303.869507][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 303.917053][T12132] CPU: 1 PID: 12132 Comm: syz.0.2803 Not tainted 6.6.100-syzkaller #0 [ 303.925304][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.935401][T12132] Call Trace: [ 303.938807][T12132] [ 303.941854][T12132] dump_stack_lvl+0x16c/0x230 [ 303.946762][T12132] ? show_regs_print_info+0x20/0x20 [ 303.952005][T12132] ? load_image+0x3b0/0x3b0 [ 303.956571][T12132] ? __might_sleep+0xe0/0xe0 [ 303.961214][T12132] ? __lock_acquire+0x7c80/0x7c80 [ 303.966291][T12132] should_fail_ex+0x39d/0x4d0 [ 303.971027][T12132] should_failslab+0x9/0x20 [ 303.975578][T12132] slab_pre_alloc_hook+0x59/0x310 [ 303.980653][T12132] ? tomoyo_encode+0x28b/0x540 [ 303.985445][T12132] ? tomoyo_encode+0x28b/0x540 [ 303.990232][T12132] __kmem_cache_alloc_node+0x53/0x260 [ 303.995805][T12132] ? tomoyo_encode+0x28b/0x540 [ 304.000617][T12132] __kmalloc+0xa4/0x240 [ 304.004976][T12132] tomoyo_encode+0x28b/0x540 [ 304.009613][T12132] tomoyo_realpath_from_path+0x592/0x5d0 [ 304.015314][T12132] tomoyo_path_number_perm+0x1ea/0x590 [ 304.020971][T12132] ? tomoyo_path_number_perm+0x1ba/0x590 [ 304.026630][T12132] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 304.032112][T12132] ? ksys_write+0x1c1/0x250 [ 304.036692][T12132] ? __fget_files+0x28/0x4d0 [ 304.041314][T12132] security_file_ioctl+0x70/0xa0 [ 304.046363][T12132] __se_sys_ioctl+0x48/0x170 [ 304.050973][T12132] do_syscall_64+0x55/0xb0 [ 304.055740][T12132] ? clear_bhb_loop+0x40/0x90 [ 304.060430][T12132] ? clear_bhb_loop+0x40/0x90 [ 304.065123][T12132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.071044][T12132] RIP: 0033:0x7f11d538e9a9 [ 304.075474][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.095097][T12132] RSP: 002b:00007f11d6264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.103528][T12132] RAX: ffffffffffffffda RBX: 00007f11d55b5fa0 RCX: 00007f11d538e9a9 [ 304.111514][T12132] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 000000000000000a [ 304.120103][T12132] RBP: 00007f11d6264090 R08: 0000000000000000 R09: 0000000000000000 [ 304.128893][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.136893][T12132] R13: 0000000000000000 R14: 00007f11d55b5fa0 R15: 00007ffe8948dce8 [ 304.144900][T12132] [ 304.186616][T12132] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.279454][T12132] pim6reg1: entered promiscuous mode [ 304.285059][T12132] pim6reg1: entered allmulticast mode [ 304.582470][T12142] netlink: 'syz.3.2807': attribute type 10 has an invalid length. [ 304.626933][T12146] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2809'. [ 304.638039][T12142] team0: Port device wlan1 added [ 304.677890][T12145] __sock_release: fasync list not empty! [ 304.964618][T12156] FAULT_INJECTION: forcing a failure. [ 304.964618][T12156] name failslab, interval 1, probability 0, space 0, times 0 [ 304.977744][T12156] CPU: 0 PID: 12156 Comm: syz.2.2813 Not tainted 6.6.100-syzkaller #0 [ 304.985958][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.996033][T12156] Call Trace: [ 304.999507][T12156] [ 305.002464][T12156] dump_stack_lvl+0x16c/0x230 [ 305.007166][T12156] ? show_regs_print_info+0x20/0x20 [ 305.012380][T12156] ? load_image+0x3b0/0x3b0 [ 305.016915][T12156] ? __might_sleep+0xe0/0xe0 [ 305.021531][T12156] ? __lock_acquire+0x7c80/0x7c80 [ 305.026591][T12156] should_fail_ex+0x39d/0x4d0 [ 305.031299][T12156] should_failslab+0x9/0x20 [ 305.035848][T12156] slab_pre_alloc_hook+0x59/0x310 [ 305.040901][T12156] kmem_cache_alloc_lru+0x4d/0x2e0 [ 305.046033][T12156] ? __d_alloc+0x31/0x730 [ 305.050391][T12156] __d_alloc+0x31/0x730 [ 305.054593][T12156] ? __lock_acquire+0x7c80/0x7c80 [ 305.059634][T12156] ? do_raw_spin_lock+0x121/0x2c0 [ 305.064677][T12156] d_alloc_pseudo+0x1d/0x70 [ 305.069200][T12156] alloc_file_pseudo+0xcc/0x200 [ 305.074076][T12156] ? alloc_empty_backing_file+0xe0/0xe0 [ 305.079647][T12156] ? alloc_fd+0x58f/0x630 [ 305.084023][T12156] anon_inode_getfd+0xca/0x1c0 [ 305.088836][T12156] btf_new_fd+0x7ea/0x980 [ 305.093229][T12156] ? bpf_btf_show_fdinfo+0x80/0x80 [ 305.098477][T12156] ? capable+0x88/0xe0 [ 305.102583][T12156] __sys_bpf+0x60e/0x800 [ 305.106865][T12156] ? bpf_link_show_fdinfo+0x350/0x350 [ 305.112306][T12156] ? lock_chain_count+0x20/0x20 [ 305.117220][T12156] __x64_sys_bpf+0x7c/0x90 [ 305.121683][T12156] do_syscall_64+0x55/0xb0 [ 305.126736][T12156] ? clear_bhb_loop+0x40/0x90 [ 305.131446][T12156] ? clear_bhb_loop+0x40/0x90 [ 305.136156][T12156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.142086][T12156] RIP: 0033:0x7f691fb8e9a9 [ 305.146522][T12156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.166158][T12156] RSP: 002b:00007f6920ab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.175028][T12156] RAX: ffffffffffffffda RBX: 00007f691fdb5fa0 RCX: 00007f691fb8e9a9 [ 305.183018][T12156] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 305.191008][T12156] RBP: 00007f6920ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 305.198997][T12156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.207156][T12156] R13: 0000000000000001 R14: 00007f691fdb5fa0 R15: 00007fff362fd608 [ 305.215198][T12156] [ 306.127750][T12181] netlink: 'syz.2.2820': attribute type 10 has an invalid length. [ 306.215751][T12181] team0: Port device wlan1 added [ 306.873977][T12189] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2821'. [ 307.033604][T12188] __sock_release: fasync list not empty! [ 307.819509][ T3442] wlan1: Trigger new scan to find an IBSS to join [ 309.536826][T12220] FAULT_INJECTION: forcing a failure. [ 309.536826][T12220] name failslab, interval 1, probability 0, space 0, times 0 [ 309.550057][T12220] CPU: 1 PID: 12220 Comm: syz.3.2836 Not tainted 6.6.100-syzkaller #0 [ 309.558302][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.568439][T12220] Call Trace: [ 309.571786][T12220] [ 309.574866][T12220] dump_stack_lvl+0x16c/0x230 [ 309.579648][T12220] ? show_regs_print_info+0x20/0x20 [ 309.584933][T12220] ? load_image+0x3b0/0x3b0 [ 309.589581][T12220] should_fail_ex+0x39d/0x4d0 [ 309.594542][T12220] should_failslab+0x9/0x20 [ 309.599152][T12220] slab_pre_alloc_hook+0x59/0x310 [ 309.604263][T12220] ? find_exception+0x17a/0xa00 [ 309.609220][T12220] kmem_cache_alloc+0x5a/0x2e0 [ 309.614068][T12220] ? dst_alloc+0x105/0x170 [ 309.618589][T12220] dst_alloc+0x105/0x170 [ 309.623116][T12220] ip_route_output_key_hash_rcu+0x1413/0x2320 [ 309.629754][T12220] ? ip_route_output_key_hash+0x12f/0x340 [ 309.635579][T12220] ip_route_output_key_hash+0x20b/0x340 [ 309.641221][T12220] ? rcu_force_quiescent_state+0x230/0x230 [ 309.647129][T12220] ? ip_route_input_rcu+0x3010/0x3010 [ 309.652943][T12220] ? dst_release+0x121/0x1a0 [ 309.657652][T12220] ? dst_cache_per_cpu_get+0x260/0x2d0 [ 309.663225][T12220] ip_route_output_flow+0x2a/0x150 [ 309.668441][T12220] geneve_get_v4_rt+0x7d2/0xc90 [ 309.673608][T12220] ? jhash+0x430/0x430 [ 309.677763][T12220] ? skb_tunnel_info+0x330/0x330 [ 309.682818][T12220] geneve_xmit+0x792/0x3090 [ 309.687471][T12220] ? perf_trace_lock+0x2ed/0x380 [ 309.692532][T12220] ? geneve_xmit+0x13d/0x3090 [ 309.697316][T12220] ? geneve_stop+0x1b0/0x1b0 [ 309.701984][T12220] ? kmem_cache_free+0xf8/0x280 [ 309.706992][T12220] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 309.712286][T12220] ? __lock_acquire+0x7c80/0x7c80 [ 309.717475][T12220] ? dev_queue_xmit_nit+0xa84/0xbb0 [ 309.722923][T12220] dev_hard_start_xmit+0x246/0x740 [ 309.728191][T12220] __dev_queue_xmit+0x1a64/0x35a0 [ 309.733335][T12220] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 309.739426][T12220] ? neigh_resolve_output+0x435/0x730 [ 309.744901][T12220] ? __dev_queue_xmit+0x245/0x35a0 [ 309.750109][T12220] ? read_seqbegin+0x1b5/0x260 [ 309.755000][T12220] ? lockdep_hardirqs_on+0x98/0x150 [ 309.760293][T12220] ? neigh_event_send+0x110/0x110 [ 309.765406][T12220] ? netdev_core_pick_tx+0x340/0x340 [ 309.770819][T12220] ? __asan_memcpy+0x40/0x70 [ 309.775510][T12220] ? eth_header+0x11b/0x200 [ 309.780110][T12220] ? llc_sysctl_exit+0x70/0x70 [ 309.784953][T12220] ? neigh_resolve_output+0x618/0x730 [ 309.790485][T12220] ip6_finish_output2+0xe2e/0x1650 [ 309.795698][T12220] ? ip6_finish_output2+0x661/0x1650 [ 309.801086][T12220] ? nf_hook+0x370/0x370 [ 309.805409][T12220] ? ip6_mtu+0x321/0x3f0 [ 309.809738][T12220] ? ip6_finish_output+0x57b/0x820 [ 309.815053][T12220] ? ip6_send_skb+0x10f/0x380 [ 309.819917][T12220] ip6_send_skb+0x1d5/0x380 [ 309.824523][T12220] udp_v6_send_skb+0xbbb/0x1860 [ 309.829537][T12220] udpv6_sendmsg+0x1bb8/0x22f0 [ 309.834425][T12220] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 309.839443][T12220] ? udp_v6_early_demux+0xf60/0xf60 [ 309.844729][T12220] ? perf_trace_preemptirq_template+0xa4/0x340 [ 309.851006][T12220] ? lock_chain_count+0x20/0x20 [ 309.855999][T12220] ? _local_bh_enable+0xa0/0xa0 [ 309.860969][T12220] ? inet_send_prepare+0x1b3/0x260 [ 309.866171][T12220] ? inet_send_prepare+0x1b3/0x260 [ 309.871377][T12220] ? inet6_sendmsg+0x5f/0xd0 [ 309.876059][T12220] ? inet6_compat_ioctl+0x380/0x380 [ 309.881350][T12220] ____sys_sendmsg+0x5bf/0x950 [ 309.886234][T12220] ? __asan_memset+0x22/0x40 [ 309.890910][T12220] ? __sys_sendmsg_sock+0x30/0x30 [ 309.896010][T12220] ? __import_iovec+0x3fa/0x860 [ 309.900983][T12220] ? import_iovec+0x73/0xa0 [ 309.905590][T12220] ___sys_sendmsg+0x220/0x290 [ 309.910367][T12220] ? __sys_sendmsg+0x270/0x270 [ 309.915313][T12220] ? __lock_acquire+0x7c80/0x7c80 [ 309.920703][T12220] __se_sys_sendmsg+0x1a5/0x270 [ 309.925658][T12220] ? __x64_sys_sendmsg+0x80/0x80 [ 309.930752][T12220] ? lockdep_hardirqs_on+0x98/0x150 [ 309.936070][T12220] do_syscall_64+0x55/0xb0 [ 309.940563][T12220] ? clear_bhb_loop+0x40/0x90 [ 309.945320][T12220] ? clear_bhb_loop+0x40/0x90 [ 309.950091][T12220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.956084][T12220] RIP: 0033:0x7faa1138e9a9 [ 309.960604][T12220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.980292][T12220] RSP: 002b:00007faa12175038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.988806][T12220] RAX: ffffffffffffffda RBX: 00007faa115b5fa0 RCX: 00007faa1138e9a9 [ 309.996884][T12220] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 310.005092][T12220] RBP: 00007faa12175090 R08: 0000000000000000 R09: 0000000000000000 [ 310.013316][T12220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.021372][T12220] R13: 0000000000000000 R14: 00007faa115b5fa0 R15: 00007ffcb99fd208 [ 310.029494][T12220] [ 310.268629][T12221] netlink: set zone limit has 8 unknown bytes [ 310.382792][T12224] netlink: set zone limit has 8 unknown bytes [ 310.667117][T12227] FAULT_INJECTION: forcing a failure. [ 310.667117][T12227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.668219][T12227] [ 310.668226][T12227] ====================================================== [ 310.668233][T12227] WARNING: possible circular locking dependency detected [ 310.668251][T12227] 6.6.100-syzkaller #0 Not tainted [ 310.668261][T12227] ------------------------------------------------------ [ 310.668266][T12227] syz.3.2838/12227 is trying to acquire lock: [ 310.668275][T12227] ffffffff8cd23e00 (console_owner){-...}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 310.668328][T12227] [ 310.668328][T12227] but task is already holding lock: [ 310.668333][T12227] ffff8880b8f3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 310.668381][T12227] [ 310.668381][T12227] which lock already depends on the new lock. [ 310.668381][T12227] [ 310.668386][T12227] [ 310.668386][T12227] the existing dependency chain (in reverse order) is: [ 310.668391][T12227] [ 310.668391][T12227] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 310.668420][T12227] _raw_spin_lock_nested+0x32/0x50 [ 310.668449][T12227] raw_spin_rq_lock_nested+0x2a/0x140 [ 310.668474][T12227] task_fork_fair+0x62/0x1f0 [ 310.668490][T12227] sched_cgroup_fork+0x333/0x3c0 [ 310.668505][T12227] copy_process+0x21e4/0x3d70 [ 310.668522][T12227] kernel_clone+0x21b/0x840 [ 310.668538][T12227] user_mode_thread+0xde/0x130 [ 310.668555][T12227] rest_init+0x27/0x300 [ 310.668580][T12227] arch_call_rest_init+0xe/0x10 [ 310.668630][T12227] start_kernel+0x459/0x4e0 [ 310.668655][T12227] x86_64_start_reservations+0x2a/0x30 [ 310.668677][T12227] copy_bootdata+0x0/0xe0 [ 310.668697][T12227] secondary_startup_64_no_verify+0x179/0x17b [ 310.668722][T12227] [ 310.668722][T12227] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 310.668748][T12227] _raw_spin_lock_irqsave+0xa8/0xf0 [ 310.668776][T12227] try_to_wake_up+0x61/0x10b0 [ 310.668804][T12227] __wake_up_common+0x2a4/0x4e0 [ 310.668825][T12227] __wake_up+0x112/0x190 [ 310.668842][T12227] tty_port_default_wakeup+0xa2/0xf0 [ 310.668862][T12227] serial8250_tx_chars+0x6bd/0x8a0 [ 310.668885][T12227] serial8250_handle_irq+0x534/0x6e0 [ 310.668908][T12227] serial8250_default_handle_irq+0xb8/0x1a0 [ 310.668934][T12227] serial8250_interrupt+0x9f/0x1c0 [ 310.668954][T12227] __handle_irq_event_percpu+0x276/0x930 [ 310.668982][T12227] handle_irq_event+0x8b/0x1e0 [ 310.669009][T12227] handle_edge_irq+0x247/0xb30 [ 310.669028][T12227] __common_interrupt+0x13b/0x230 [ 310.669059][T12227] common_interrupt+0xb4/0xd0 [ 310.669081][T12227] asm_common_interrupt+0x26/0x40 [ 310.669110][T12227] rcu_is_watching+0x0/0xb0 [ 310.669133][T12227] lock_acquire+0xcb/0x410 [ 310.669162][T12227] path_init+0x160/0x1200 [ 310.669181][T12227] path_openat+0x18e/0x3190 [ 310.669209][T12227] do_filp_open+0x1c5/0x3d0 [ 310.669236][T12227] do_sys_openat2+0x12c/0x1c0 [ 310.669256][T12227] __x64_sys_openat+0x139/0x160 [ 310.669277][T12227] do_syscall_64+0x55/0xb0 [ 310.669295][T12227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.669323][T12227] [ 310.669323][T12227] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 310.669348][T12227] _raw_spin_lock_irqsave+0xa8/0xf0 [ 310.669375][T12227] __wake_up+0xf8/0x190 [ 310.669391][T12227] tty_port_default_wakeup+0xa2/0xf0 [ 310.669408][T12227] serial8250_tx_chars+0x6bd/0x8a0 [ 310.669430][T12227] serial8250_handle_irq+0x534/0x6e0 [ 310.669451][T12227] serial8250_default_handle_irq+0xb8/0x1a0 [ 310.669477][T12227] serial8250_interrupt+0x9f/0x1c0 [ 310.669497][T12227] __handle_irq_event_percpu+0x276/0x930 [ 310.669522][T12227] handle_irq_event+0x8b/0x1e0 [ 310.669548][T12227] handle_edge_irq+0x247/0xb30 [ 310.669574][T12227] __common_interrupt+0x13b/0x230 [ 310.669597][T12227] common_interrupt+0xb4/0xd0 [ 310.669618][T12227] asm_common_interrupt+0x26/0x40 [ 310.669645][T12227] _raw_spin_unlock_irqrestore+0xa9/0x110 [ 310.669672][T12227] uart_write+0x45b/0x5d0 [ 310.669698][T12227] n_tty_write+0xd27/0x11d0 [ 310.669722][T12227] file_tty_write+0x54b/0x980 [ 310.669741][T12227] vfs_write+0x43b/0x940 [ 310.669763][T12227] ksys_write+0x147/0x250 [ 310.669786][T12227] do_syscall_64+0x55/0xb0 [ 310.669804][T12227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.669832][T12227] [ 310.669832][T12227] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 310.669855][T12227] _raw_spin_lock_irqsave+0xa8/0xf0 [ 310.669881][T12227] serial8250_console_write+0x16d/0x17a0 [ 310.669905][T12227] console_flush_all+0x6cd/0xd00 [ 310.669925][T12227] console_unlock+0xae/0x340 [ 310.669945][T12227] vprintk_emit+0x477/0x600 [ 310.669964][T12227] _printk+0xd0/0x110 [ 310.669996][T12227] register_console+0x91b/0xe60 [ 310.670017][T12227] univ8250_console_init+0x45/0x50 [ 310.670039][T12227] console_init+0x17b/0x5e0 [ 310.670069][T12227] start_kernel+0x2c0/0x4e0 [ 310.670092][T12227] x86_64_start_reservations+0x2a/0x30 [ 310.670114][T12227] copy_bootdata+0x0/0xe0 [ 310.670134][T12227] secondary_startup_64_no_verify+0x179/0x17b [ 310.670158][T12227] [ 310.670158][T12227] -> #0 (console_owner){-...}-{0:0}: [ 310.670181][T12227] __lock_acquire+0x2ddb/0x7c80 [ 310.670199][T12227] lock_acquire+0x197/0x410 [ 310.670217][T12227] console_flush_all+0x693/0xd00 [ 310.670238][T12227] console_unlock+0xae/0x340 [ 310.670257][T12227] vprintk_emit+0x477/0x600 [ 310.670276][T12227] _printk+0xd0/0x110 [ 310.670302][T12227] should_fail_ex+0x37e/0x4d0 [ 310.670325][T12227] strncpy_from_user+0x36/0x2e0 [ 310.670341][T12227] strncpy_from_user_nofault+0x71/0x140 [ 310.670366][T12227] bpf_probe_read_user_str+0x2a/0x70 [ 310.670394][T12227] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 310.670415][T12227] bpf_trace_run4+0x1f9/0x420 [ 310.670432][T12227] __bpf_trace_sched_switch+0x17b/0x1e0 [ 310.670455][T12227] __traceiter_sched_switch+0x93/0xc0 [ 310.670471][T12227] __schedule+0x2197/0x44d0 [ 310.670491][T12227] schedule+0xbd/0x170 [ 310.670509][T12227] do_freezer_trap+0xe5/0x180 [ 310.670537][T12227] get_signal+0xedd/0x1400 [ 310.670563][T12227] arch_do_signal_or_restart+0x96/0x780 [ 310.670590][T12227] exit_to_user_mode_loop+0x70/0x110 [ 310.670614][T12227] exit_to_user_mode_prepare+0xb1/0x140 [ 310.670638][T12227] syscall_exit_to_user_mode+0x1a/0x50 [ 310.670663][T12227] do_syscall_64+0x61/0xb0 [ 310.670682][T12227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.670710][T12227] [ 310.670710][T12227] other info that might help us debug this: [ 310.670710][T12227] [ 310.670715][T12227] Chain exists of: [ 310.670715][T12227] console_owner --> &p->pi_lock --> &rq->__lock [ 310.670715][T12227] [ 310.670742][T12227] Possible unsafe locking scenario: [ 310.670742][T12227] [ 310.670747][T12227] CPU0 CPU1 [ 310.670751][T12227] ---- ---- [ 310.670756][T12227] lock(&rq->__lock); [ 310.670766][T12227] lock(&p->pi_lock); [ 310.670778][T12227] lock(&rq->__lock); [ 310.670789][T12227] lock(console_owner); [ 310.670800][T12227] [ 310.670800][T12227] *** DEADLOCK *** [ 310.670800][T12227] [ 310.670803][T12227] 4 locks held by syz.3.2838/12227: [ 310.670813][T12227] #0: ffff8880b8f3c458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 310.670863][T12227] #1: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xfd/0x420 [ 310.670905][T12227] #2: ffffffff8cd23ee0 (console_lock){+.+.}-{0:0}, at: _printk+0xd0/0x110 [ 310.670955][T12227] #3: ffffffff8cc0b6f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x10f/0xd00 [ 310.670999][T12227] [ 310.670999][T12227] stack backtrace: [ 310.671005][T12227] CPU: 1 PID: 12227 Comm: syz.3.2838 Not tainted 6.6.100-syzkaller #0 [ 310.671023][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.671034][T12227] Call Trace: [ 310.671041][T12227] [ 310.671056][T12227] dump_stack_lvl+0x16c/0x230 [ 310.671081][T12227] ? load_image+0x3b0/0x3b0 [ 310.671115][T12227] ? show_regs_print_info+0x20/0x20 [ 310.671163][T12227] ? print_circular_bug+0x12b/0x1a0 [ 310.671197][T12227] check_noncircular+0x2bd/0x3c0 [ 310.671237][T12227] ? print_deadlock_bug+0x5d0/0x5d0 [ 310.671258][T12227] ? lockdep_lock+0xe0/0x220 [ 310.671315][T12227] __lock_acquire+0x2ddb/0x7c80 [ 310.671400][T12227] ? verify_lock_unused+0x140/0x140 [ 310.671480][T12227] lock_acquire+0x197/0x410 [ 310.671501][T12227] ? console_flush_all+0x10f/0xd00 [ 310.671547][T12227] ? __lock_acquire+0x7c80/0x7c80 [ 310.671566][T12227] ? do_raw_spin_lock+0x121/0x2c0 [ 310.671593][T12227] ? read_lock_is_recursive+0x20/0x20 [ 310.671619][T12227] ? __rwlock_init+0x150/0x150 [ 310.671655][T12227] ? do_raw_spin_unlock+0x121/0x230 [ 310.671690][T12227] console_flush_all+0x693/0xd00 [ 310.671712][T12227] ? console_flush_all+0x10f/0xd00 [ 310.671745][T12227] ? console_flush_all+0x10f/0xd00 [ 310.671799][T12227] ? is_console_locked+0x20/0x20 [ 310.671829][T12227] ? perf_trace_lock+0x193/0x380 [ 310.671882][T12227] console_unlock+0xae/0x340 [ 310.671914][T12227] ? other_cpu_in_panic+0xf0/0xf0 [ 310.671943][T12227] ? __lock_acquire+0x1260/0x7c80 [ 310.671989][T12227] vprintk_emit+0x477/0x600 [ 310.672022][T12227] ? printk_sprint+0x460/0x460 [ 310.672065][T12227] ? trace_call_bpf+0xc3/0x690 [ 310.672094][T12227] ? trace_call_bpf+0xc3/0x690 [ 310.672139][T12227] _printk+0xd0/0x110 [ 310.672184][T12227] ? load_image+0x3b0/0x3b0 [ 310.672219][T12227] ? trace_call_bpf+0xc3/0x690 [ 310.672273][T12227] should_fail_ex+0x37e/0x4d0 [ 310.672313][T12227] strncpy_from_user+0x36/0x2e0 [ 310.672345][T12227] strncpy_from_user_nofault+0x71/0x140 [ 310.672381][T12227] bpf_probe_read_user_str+0x2a/0x70 [ 310.672418][T12227] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 310.672443][T12227] bpf_trace_run4+0x1f9/0x420 [ 310.672463][T12227] ? bpf_trace_run4+0xfd/0x420 [ 310.672487][T12227] ? bpf_trace_run3+0x400/0x400 [ 310.672517][T12227] ? __lock_acquire+0x7c80/0x7c80 [ 310.672540][T12227] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 310.672579][T12227] __bpf_trace_sched_switch+0x17b/0x1e0 [ 310.672612][T12227] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 310.672639][T12227] ? psi_group_change+0xc80/0x1370 [ 310.672666][T12227] ? rcu_read_lock_sched_held+0x8a/0x100 [ 310.672700][T12227] ? psi_task_switch+0x39c/0x6d0 [ 310.672746][T12227] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 310.672778][T12227] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 310.672806][T12227] __traceiter_sched_switch+0x93/0xc0 [ 310.672838][T12227] __schedule+0x2197/0x44d0 [ 310.672872][T12227] ? perf_trace_preemptirq_template+0xa4/0x340 [ 310.672930][T12227] ? lock_chain_count+0x20/0x20 [ 310.672955][T12227] ? asan.module_dtor+0x20/0x20 [ 310.672989][T12227] ? preempt_schedule+0xab/0xc0 [ 310.673037][T12227] ? do_freezer_trap+0x64/0x180 [ 310.673074][T12227] ? preempt_schedule_thunk+0x1a/0x30 [ 310.673114][T12227] schedule+0xbd/0x170 [ 310.673144][T12227] ? do_freezer_trap+0x64/0x180 [ 310.673175][T12227] do_freezer_trap+0xe5/0x180 [ 310.673209][T12227] get_signal+0xedd/0x1400 [ 310.673289][T12227] arch_do_signal_or_restart+0x96/0x780 [ 310.673318][T12227] ? __fget_files+0x44a/0x4d0 [ 310.673349][T12227] ? get_sigframe_size+0x20/0x20 [ 310.673404][T12227] ? ksys_write+0x1f2/0x250 [ 310.673436][T12227] ? exit_to_user_mode_loop+0x3b/0x110 [ 310.673474][T12227] exit_to_user_mode_loop+0x70/0x110 [ 310.673505][T12227] exit_to_user_mode_prepare+0xb1/0x140 [ 310.673537][T12227] syscall_exit_to_user_mode+0x1a/0x50 [ 310.673566][T12227] do_syscall_64+0x61/0xb0 [ 310.673586][T12227] ? clear_bhb_loop+0x40/0x90 [ 310.673603][T12227] ? clear_bhb_loop+0x40/0x90 [ 310.673627][T12227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.673656][T12227] RIP: 0033:0x7faa1138e9a9 [ 310.673676][T12227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.673692][T12227] RSP: 002b:00007faa12175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.673711][T12227] RAX: 0000000000000012 RBX: 00007faa115b5fa0 RCX: 00007faa1138e9a9 [ 310.673724][T12227] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 310.673736][T12227] RBP: 00007faa12175090 R08: 0000000000000000 R09: 0000000000000000 [ 310.673747][T12227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.673758][T12227] R13: 0000000000000000 R14: 00007faa115b5fa0 R15: 00007ffcb99fd208 [ 310.673805][T12227] [ 311.908316][T12227] CPU: 1 PID: 12227 Comm: syz.3.2838 Not tainted 6.6.100-syzkaller #0 [ 311.916512][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.926733][T12227] Call Trace: [ 311.930032][T12227] [ 311.932993][T12227] dump_stack_lvl+0x16c/0x230 [ 311.937721][T12227] ? show_regs_print_info+0x20/0x20 [ 311.942944][T12227] ? load_image+0x3b0/0x3b0 [ 311.947481][T12227] ? trace_call_bpf+0xc3/0x690 [ 311.952279][T12227] should_fail_ex+0x39d/0x4d0 [ 311.956982][T12227] strncpy_from_user+0x36/0x2e0 [ 311.961923][T12227] strncpy_from_user_nofault+0x71/0x140 [ 311.967492][T12227] bpf_probe_read_user_str+0x2a/0x70 [ 311.972802][T12227] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 311.978279][T12227] bpf_trace_run4+0x1f9/0x420 [ 311.982972][T12227] ? bpf_trace_run4+0xfd/0x420 [ 311.987839][T12227] ? bpf_trace_run3+0x400/0x400 [ 311.992709][T12227] ? __lock_acquire+0x7c80/0x7c80 [ 311.997962][T12227] ? __bpf_trace_sched_switch+0x160/0x1e0 [ 312.003746][T12227] __bpf_trace_sched_switch+0x17b/0x1e0 [ 312.009446][T12227] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 312.015807][T12227] ? psi_group_change+0xc80/0x1370 [ 312.023434][T12227] ? rcu_read_lock_sched_held+0x8a/0x100 [ 312.029176][T12227] ? psi_task_switch+0x39c/0x6d0 [ 312.034308][T12227] ? tracing_record_taskinfo_sched_switch+0x7d/0x360 [ 312.041020][T12227] ? __bpf_trace_sched_wakeup_template+0xe0/0xe0 [ 312.047369][T12227] __traceiter_sched_switch+0x93/0xc0 [ 312.052903][T12227] __schedule+0x2197/0x44d0 [ 312.057443][T12227] ? perf_trace_preemptirq_template+0xa4/0x340 [ 312.063639][T12227] ? lock_chain_count+0x20/0x20 [ 312.068528][T12227] ? asan.module_dtor+0x20/0x20 [ 312.073399][T12227] ? preempt_schedule+0xab/0xc0 [ 312.078275][T12227] ? do_freezer_trap+0x64/0x180 [ 312.083145][T12227] ? preempt_schedule_thunk+0x1a/0x30 [ 312.088539][T12227] schedule+0xbd/0x170 [ 312.092620][T12227] ? do_freezer_trap+0x64/0x180 [ 312.097520][T12227] do_freezer_trap+0xe5/0x180 [ 312.102244][T12227] get_signal+0xedd/0x1400 [ 312.106734][T12227] arch_do_signal_or_restart+0x96/0x780 [ 312.112304][T12227] ? __fget_files+0x44a/0x4d0 [ 312.117002][T12227] ? get_sigframe_size+0x20/0x20 [ 312.121971][T12227] ? ksys_write+0x1f2/0x250 [ 312.126495][T12227] ? exit_to_user_mode_loop+0x3b/0x110 [ 312.132767][T12227] exit_to_user_mode_loop+0x70/0x110 [ 312.138113][T12227] exit_to_user_mode_prepare+0xb1/0x140 [ 312.143688][T12227] syscall_exit_to_user_mode+0x1a/0x50 [ 312.149256][T12227] do_syscall_64+0x61/0xb0 [ 312.153685][T12227] ? clear_bhb_loop+0x40/0x90 [ 312.158374][T12227] ? clear_bhb_loop+0x40/0x90 [ 312.163065][T12227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.169087][T12227] RIP: 0033:0x7faa1138e9a9 [ 312.173516][T12227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.193247][T12227] RSP: 002b:00007faa12175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.201944][T12227] RAX: 0000000000000012 RBX: 00007faa115b5fa0 RCX: 00007faa1138e9a9 [ 312.209925][T12227] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a [ 312.217935][T12227] RBP: 00007faa12175090 R08: 0000000000000000 R09: 0000000000000000 [ 312.225929][T12227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.233912][T12227] R13: 0000000000000000 R14: 00007faa115b5fa0 R15: 00007ffcb99fd208 [ 312.241921][T12227] [ 312.266103][ T3442] wlan1: Trigger new scan to find an IBSS to join [ 313.234855][ T48] wlan1: Creating new IBSS network, BSSID 6e:63:b5:0a:b1:94 [ 319.097922][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.104467][ T1289] ieee802154 phy1 wpan1: encryption failed: -22