last executing test programs: 34.087822403s ago: executing program 4 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) close(r1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2}, 0x10) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000b00), &(0x7f00000000c0)=""/102}, 0x20) 33.916223706s ago: executing program 4 (id=1080): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x44, 0x0}, 0x0) 33.384893212s ago: executing program 4 (id=1088): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="2a057ccfe257ef46f7b17ccd472876fc9968c6df42d4e8cb0e83576e69fefef75f6e1655ad1f3f3e4bca27d6776b3e7ae086992428ef8c900f999d7675552dd49bc1d8f5e68052a43ee063369eb6c7d97ccd70f9639b15477eaa47cd7ec110bb11a9b515c1e89a0e0eb0294b6e25fca74af01aea6911", @ANYRESDEC=0x0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x541b, &(0x7f0000000800)) 21.359443643s ago: executing program 4 (id=1088): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="2a057ccfe257ef46f7b17ccd472876fc9968c6df42d4e8cb0e83576e69fefef75f6e1655ad1f3f3e4bca27d6776b3e7ae086992428ef8c900f999d7675552dd49bc1d8f5e68052a43ee063369eb6c7d97ccd70f9639b15477eaa47cd7ec110bb11a9b515c1e89a0e0eb0294b6e25fca74af01aea6911", @ANYRESDEC=0x0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x541b, &(0x7f0000000800)) 3.000351504s ago: executing program 3 (id=1358): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x35, 0x0, 0xfcd8) 2.894094886s ago: executing program 3 (id=1359): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000180)=r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x46, 0x8c, 0x6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x401}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) 2.036063337s ago: executing program 2 (id=1361): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x0, 0x4}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) 2.001386784s ago: executing program 3 (id=1362): socket$kcm(0x2, 0x0, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00'/168) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000200)=0x7fff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) 2.001117031s ago: executing program 1 (id=1363): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095006e00000000006916000000000000bf67000000000000350604000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c88da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba751e4e174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000e90000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c6"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 1.920663495s ago: executing program 2 (id=1364): perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x67, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000a00)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x5, '\x00', 0x0, r2, 0x0, 0x5, 0x2}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000006100000000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 1.781235731s ago: executing program 2 (id=1365): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x1400, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 1.722045694s ago: executing program 3 (id=1366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0xa, 0x0, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) getpid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x48844) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x27, 0x8, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x1], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x7, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x5, 0xe, 0x2}, {0x0, 0x1, 0xb, 0x7}, {0x5, 0x2, 0x0, 0x2}, {0x5, 0x0, 0x7, 0x1}, {0x0, 0x0, 0x8, 0x2}, {0x1, 0x1, 0x4, 0x3}, {0x5, 0x0, 0x1, 0x5}], 0x10, 0x7}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0), 0x8) 1.669943088s ago: executing program 1 (id=1367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$kcm(0x10, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40087602, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xc508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.562211906s ago: executing program 0 (id=1368): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x40000, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) 1.492363652s ago: executing program 1 (id=1369): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x35, 0x0, 0xfcd8) 1.470107088s ago: executing program 3 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8943, &(0x7f0000000080)) 1.438053672s ago: executing program 0 (id=1371): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0xd}]}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 1.376719681s ago: executing program 1 (id=1372): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081024e81f783db4cb9040a1d080006007c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.376309096s ago: executing program 4 (id=1088): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="2a057ccfe257ef46f7b17ccd472876fc9968c6df42d4e8cb0e83576e69fefef75f6e1655ad1f3f3e4bca27d6776b3e7ae086992428ef8c900f999d7675552dd49bc1d8f5e68052a43ee063369eb6c7d97ccd70f9639b15477eaa47cd7ec110bb11a9b515c1e89a0e0eb0294b6e25fca74af01aea6911", @ANYRESDEC=0x0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x541b, &(0x7f0000000800)) 1.236590604s ago: executing program 0 (id=1373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000240)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x6, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.231333289s ago: executing program 1 (id=1374): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x4) socket$kcm(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x90) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x10e, 0x2, &(0x7f0000000000)=r3, 0x4) 1.053759282s ago: executing program 0 (id=1375): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7, 0x10001, 0x9}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) mkdir(0x0, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000900)='/..\x00') write$cgroup_int(r2, &(0x7f0000000000)=0x9cb, 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, 0x0, 0x32600) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r3}) 1.045946363s ago: executing program 1 (id=1376): close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/249, 0x101d0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r2, 0x89a0, 0x20000000) 901.463834ms ago: executing program 3 (id=1377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 804.657085ms ago: executing program 2 (id=1378): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x1, 0x0, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 683.741222ms ago: executing program 0 (id=1379): socket$kcm(0x2, 0x0, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00'/168) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000200)=0x7fff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) 677.201398ms ago: executing program 2 (id=1380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0xa, 0x0, 0x73) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) getpid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x48844) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x27, 0x8, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x1], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x7, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x5, 0xe, 0x2}, {0x2, 0x0, 0xb, 0x7}, {0x5, 0x2, 0x0, 0x2}, {0x5, 0x0, 0x7, 0x1}, {0x0, 0x0, 0x8, 0x2}, {0x1, 0x1, 0x4, 0x3}, {0x5, 0x0, 0x1, 0x5}], 0x10, 0x7}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0), 0x8) 447.51261ms ago: executing program 4 (id=1088): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="2a057ccfe257ef46f7b17ccd472876fc9968c6df42d4e8cb0e83576e69fefef75f6e1655ad1f3f3e4bca27d6776b3e7ae086992428ef8c900f999d7675552dd49bc1d8f5e68052a43ee063369eb6c7d97ccd70f9639b15477eaa47cd7ec110bb11a9b515c1e89a0e0eb0294b6e25fca74af01aea6911", @ANYRESDEC=0x0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x541b, &(0x7f0000000800)) 210.156519ms ago: executing program 0 (id=1382): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x35, 0x0, 0xfcd8) 0s ago: executing program 2 (id=1383): perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x67, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000a00)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x5, '\x00', 0x0, r2, 0x0, 0x5, 0x2}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000006100000000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T7007] [ 137.199523][ T7007] dump_stack_lvl+0x241/0x360 [ 137.204200][ T7007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.209389][ T7007] ? __pfx__printk+0x10/0x10 [ 137.213972][ T7007] ? __pfx_lock_release+0x10/0x10 [ 137.218989][ T7007] should_fail_ex+0x3b0/0x4e0 [ 137.223667][ T7007] _copy_from_user+0x2f/0xe0 [ 137.228247][ T7007] generic_map_update_batch+0x5ba/0x900 [ 137.233796][ T7007] ? __pfx_generic_map_update_batch+0x10/0x10 [ 137.239863][ T7007] ? __pfx_generic_map_update_batch+0x10/0x10 [ 137.245922][ T7007] bpf_map_do_batch+0x3e0/0x690 [ 137.250763][ T7007] __sys_bpf+0x377/0x810 [ 137.255003][ T7007] ? __pfx___sys_bpf+0x10/0x10 [ 137.259770][ T7007] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.265742][ T7007] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.272063][ T7007] ? do_syscall_64+0x100/0x230 [ 137.276841][ T7007] __x64_sys_bpf+0x7c/0x90 [ 137.281266][ T7007] do_syscall_64+0xf3/0x230 [ 137.285767][ T7007] ? clear_bhb_loop+0x35/0x90 [ 137.290445][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.296335][ T7007] RIP: 0033:0x7fd93dd75bd9 [ 137.300741][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.320346][ T7007] RSP: 002b:00007fd93ebca048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.328758][ T7007] RAX: ffffffffffffffda RBX: 00007fd93df03f60 RCX: 00007fd93dd75bd9 [ 137.336718][ T7007] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 137.344675][ T7007] RBP: 00007fd93ebca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 137.352633][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.360592][ T7007] R13: 000000000000000b R14: 00007fd93df03f60 R15: 00007fff27e0ef58 [ 137.368580][ T7007] [ 137.606992][ T7018] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 137.798315][ T7028] : renamed from ipvlan1 [ 138.164514][ T7045] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.532'. [ 138.212013][ T7044] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.532'. [ 140.567829][ T7097] FAULT_INJECTION: forcing a failure. [ 140.567829][ T7097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.597979][ T7097] CPU: 0 PID: 7097 Comm: syz.2.551 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 140.607988][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.618035][ T7097] Call Trace: [ 140.621303][ T7097] [ 140.624224][ T7097] dump_stack_lvl+0x241/0x360 [ 140.628898][ T7097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.634089][ T7097] ? __pfx__printk+0x10/0x10 [ 140.638675][ T7097] ? snprintf+0xda/0x120 [ 140.642912][ T7097] should_fail_ex+0x3b0/0x4e0 [ 140.647598][ T7097] _copy_to_user+0x2f/0xb0 [ 140.652010][ T7097] simple_read_from_buffer+0xca/0x150 [ 140.657375][ T7097] proc_fail_nth_read+0x1e9/0x250 [ 140.662388][ T7097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.667925][ T7097] ? rw_verify_area+0x520/0x6b0 [ 140.672763][ T7097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.678301][ T7097] vfs_read+0x204/0xbc0 [ 140.682447][ T7097] ? __pfx_lock_release+0x10/0x10 [ 140.687464][ T7097] ? __pfx_vfs_read+0x10/0x10 [ 140.692130][ T7097] ? __fget_files+0x29/0x470 [ 140.696716][ T7097] ? __fget_files+0x3f6/0x470 [ 140.701394][ T7097] ksys_read+0x1a0/0x2c0 [ 140.705630][ T7097] ? __pfx_ksys_read+0x10/0x10 [ 140.710382][ T7097] ? do_syscall_64+0x100/0x230 [ 140.715140][ T7097] ? do_syscall_64+0xb6/0x230 [ 140.719808][ T7097] do_syscall_64+0xf3/0x230 [ 140.724302][ T7097] ? clear_bhb_loop+0x35/0x90 [ 140.728974][ T7097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.734856][ T7097] RIP: 0033:0x7fd93dd746bc [ 140.739260][ T7097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 140.758856][ T7097] RSP: 002b:00007fd93ebca040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.767259][ T7097] RAX: ffffffffffffffda RBX: 00007fd93df03f60 RCX: 00007fd93dd746bc [ 140.775220][ T7097] RDX: 000000000000000f RSI: 00007fd93ebca0b0 RDI: 0000000000000003 [ 140.783175][ T7097] RBP: 00007fd93ebca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.791132][ T7097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.799086][ T7097] R13: 000000000000000b R14: 00007fd93df03f60 R15: 00007fff27e0ef58 [ 140.807054][ T7097] [ 141.125718][ T7114] FAULT_INJECTION: forcing a failure. [ 141.125718][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 141.170158][ T7114] CPU: 1 PID: 7114 Comm: syz.3.557 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 141.180171][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.190236][ T7114] Call Trace: [ 141.193529][ T7114] [ 141.196476][ T7114] dump_stack_lvl+0x241/0x360 [ 141.201177][ T7114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.206402][ T7114] ? __pfx__printk+0x10/0x10 [ 141.211029][ T7114] should_fail_ex+0x3b0/0x4e0 [ 141.215730][ T7114] ? skb_clone+0x20c/0x390 [ 141.220162][ T7114] should_failslab+0x9/0x20 [ 141.224687][ T7114] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 141.230079][ T7114] ? __pfx_lock_release+0x10/0x10 [ 141.235123][ T7114] skb_clone+0x20c/0x390 [ 141.239392][ T7114] pfkey_broadcast_one+0x99/0x330 [ 141.244428][ T7114] ? pfkey_broadcast+0x45/0x400 [ 141.249271][ T7114] pfkey_broadcast+0x3ca/0x400 [ 141.254035][ T7114] ? pfkey_broadcast+0x45/0x400 [ 141.258878][ T7114] pfkey_sendmsg+0xdec/0x1020 [ 141.263560][ T7114] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 141.268679][ T7114] ? __might_fault+0xaa/0x120 [ 141.273356][ T7114] ? __pfx_lock_release+0x10/0x10 [ 141.278371][ T7114] ? __import_iovec+0x536/0x820 [ 141.283211][ T7114] ? aa_sock_msg_perm+0x91/0x160 [ 141.288145][ T7114] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 141.293422][ T7114] ? security_socket_sendmsg+0x87/0xb0 [ 141.298872][ T7114] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 141.303973][ T7114] __sock_sendmsg+0x221/0x270 [ 141.308646][ T7114] ____sys_sendmsg+0x525/0x7d0 [ 141.313522][ T7114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.318821][ T7114] __sys_sendmsg+0x2b0/0x3a0 [ 141.323409][ T7114] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.328524][ T7114] ? vfs_write+0x7c4/0xc90 [ 141.332969][ T7114] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.339303][ T7114] ? do_syscall_64+0x100/0x230 [ 141.344076][ T7114] ? do_syscall_64+0xb6/0x230 [ 141.348747][ T7114] do_syscall_64+0xf3/0x230 [ 141.353258][ T7114] ? clear_bhb_loop+0x35/0x90 [ 141.357946][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.363836][ T7114] RIP: 0033:0x7f2350175bd9 [ 141.368245][ T7114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.387850][ T7114] RSP: 002b:00007f2350fba048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.396276][ T7114] RAX: ffffffffffffffda RBX: 00007f2350303f60 RCX: 00007f2350175bd9 [ 141.404245][ T7114] RDX: 0000000000000000 RSI: 0000000020003780 RDI: 0000000000000003 [ 141.412206][ T7114] RBP: 00007f2350fba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.420165][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.428131][ T7114] R13: 000000000000000b R14: 00007f2350303f60 R15: 00007ffd9a1ada18 [ 141.436109][ T7114] [ 141.796098][ T7134] FAULT_INJECTION: forcing a failure. [ 141.796098][ T7134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.838840][ T7134] CPU: 0 PID: 7134 Comm: syz.1.566 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 141.848852][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.858919][ T7134] Call Trace: [ 141.862207][ T7134] [ 141.865149][ T7134] dump_stack_lvl+0x241/0x360 [ 141.869853][ T7134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.875072][ T7134] ? __pfx__printk+0x10/0x10 [ 141.879678][ T7134] ? bpf_cgroup_storage_free+0x8f/0xb0 [ 141.885157][ T7134] ? __pfx_lock_release+0x10/0x10 [ 141.890194][ T7134] ? bpf_test_run+0x840/0x910 [ 141.894898][ T7134] should_fail_ex+0x3b0/0x4e0 [ 141.899600][ T7134] _copy_to_user+0x2f/0xb0 [ 141.904035][ T7134] bpf_test_finish+0x593/0x8b0 [ 141.908826][ T7134] ? __might_fault+0xaa/0x120 [ 141.913523][ T7134] ? __pfx_bpf_test_finish+0x10/0x10 [ 141.918830][ T7134] ? _copy_from_user+0xa6/0xe0 [ 141.923614][ T7134] ? bpf_test_init+0x15a/0x180 [ 141.928396][ T7134] bpf_prog_test_run_xdp+0x905/0x11b0 [ 141.933785][ T7134] ? __pfx_lock_release+0x10/0x10 [ 141.938811][ T7134] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 141.944609][ T7134] ? __fget_files+0x29/0x470 [ 141.949197][ T7134] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 141.954993][ T7134] bpf_prog_test_run+0x33a/0x3b0 [ 141.959922][ T7134] __sys_bpf+0x48d/0x810 [ 141.964167][ T7134] ? __pfx___sys_bpf+0x10/0x10 [ 141.968944][ T7134] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.974916][ T7134] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.981232][ T7134] ? do_syscall_64+0x100/0x230 [ 141.985993][ T7134] __x64_sys_bpf+0x7c/0x90 [ 141.990403][ T7134] do_syscall_64+0xf3/0x230 [ 141.994899][ T7134] ? clear_bhb_loop+0x35/0x90 [ 141.999568][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.005454][ T7134] RIP: 0033:0x7f1d83f75bd9 [ 142.009858][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.029449][ T7134] RSP: 002b:00007f1d84d18048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.037854][ T7134] RAX: ffffffffffffffda RBX: 00007f1d84103f60 RCX: 00007f1d83f75bd9 [ 142.045816][ T7134] RDX: 000000000000000c RSI: 0000000020000500 RDI: 000000000000000a [ 142.053774][ T7134] RBP: 00007f1d84d180a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.061729][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.069686][ T7134] R13: 000000000000000b R14: 00007f1d84103f60 R15: 00007ffd84a73e98 [ 142.077660][ T7134] [ 142.390365][ T7162] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 142.486173][ T7161] netlink: 'syz.4.578': attribute type 29 has an invalid length. [ 142.572613][ T7162] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.610169][ T7161] netlink: 'syz.4.578': attribute type 29 has an invalid length. [ 142.865822][ T7174] FAULT_INJECTION: forcing a failure. [ 142.865822][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 142.913822][ T7174] CPU: 0 PID: 7174 Comm: syz.4.581 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 142.923870][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 142.929468][ T7172] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 142.933934][ T7174] Call Trace: [ 142.933953][ T7174] [ 142.933969][ T7174] dump_stack_lvl+0x241/0x360 [ 142.934019][ T7174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.934054][ T7174] ? __pfx__printk+0x10/0x10 [ 142.934118][ T7174] ? __phys_addr+0xba/0x170 [ 142.934162][ T7174] should_fail_ex+0x3b0/0x4e0 [ 142.971761][ T7174] ? __build_skb+0x4b/0x90 [ 142.976195][ T7174] should_failslab+0x9/0x20 [ 142.980710][ T7174] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 142.986111][ T7174] __build_skb+0x4b/0x90 [ 142.990368][ T7174] netlink_alloc_large_skb+0x65/0x100 [ 142.995761][ T7174] netlink_sendmsg+0x631/0xcb0 [ 143.000573][ T7174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.005877][ T7174] ? __import_iovec+0x536/0x820 [ 143.010734][ T7174] ? aa_sock_msg_perm+0x91/0x160 [ 143.015695][ T7174] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 143.020987][ T7174] ? security_socket_sendmsg+0x87/0xb0 [ 143.026464][ T7174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.031759][ T7174] __sock_sendmsg+0x221/0x270 [ 143.036463][ T7174] ____sys_sendmsg+0x525/0x7d0 [ 143.041265][ T7174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.046610][ T7174] __sys_sendmsg+0x2b0/0x3a0 [ 143.051224][ T7174] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.056349][ T7174] ? vfs_write+0x7c4/0xc90 [ 143.060856][ T7174] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 143.067045][ T7174] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 143.073390][ T7174] ? do_syscall_64+0x100/0x230 [ 143.078176][ T7174] ? do_syscall_64+0xb6/0x230 [ 143.082894][ T7174] do_syscall_64+0xf3/0x230 [ 143.087425][ T7174] ? clear_bhb_loop+0x35/0x90 [ 143.092126][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.098035][ T7174] RIP: 0033:0x7ff3c2775bd9 [ 143.102463][ T7174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.122073][ T7174] RSP: 002b:00007ff3c3597048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.130502][ T7174] RAX: ffffffffffffffda RBX: 00007ff3c2903f60 RCX: 00007ff3c2775bd9 [ 143.138482][ T7174] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 143.146461][ T7174] RBP: 00007ff3c35970a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.154442][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.162420][ T7174] R13: 000000000000000b R14: 00007ff3c2903f60 R15: 00007ffd55f866f8 [ 143.170445][ T7174] [ 143.272347][ T7172] team0: Port device hsr_slave_0 added [ 143.444741][ T7173] netlink: 'syz.1.580': attribute type 21 has an invalid length. [ 143.495244][ T7173] netlink: 164 bytes leftover after parsing attributes in process `syz.1.580'. [ 143.631428][ T7172] syz.3.579 (7172) used greatest stack depth: 18424 bytes left [ 143.920095][ T7193] FAULT_INJECTION: forcing a failure. [ 143.920095][ T7193] name failslab, interval 1, probability 0, space 0, times 0 [ 143.993349][ T7193] CPU: 1 PID: 7193 Comm: syz.2.589 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 144.003350][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 144.013395][ T7193] Call Trace: [ 144.016662][ T7193] [ 144.019582][ T7193] dump_stack_lvl+0x241/0x360 [ 144.024261][ T7193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.029451][ T7193] ? __pfx__printk+0x10/0x10 [ 144.034037][ T7193] ? ref_tracker_alloc+0x332/0x490 [ 144.039140][ T7193] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 144.044594][ T7193] should_fail_ex+0x3b0/0x4e0 [ 144.049264][ T7193] ? skb_clone+0x20c/0x390 [ 144.053671][ T7193] should_failslab+0x9/0x20 [ 144.058165][ T7193] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 144.063531][ T7193] skb_clone+0x20c/0x390 [ 144.067766][ T7193] __netlink_deliver_tap+0x3cc/0x7c0 [ 144.073051][ T7193] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.078237][ T7193] netlink_deliver_tap+0x19d/0x1b0 [ 144.083340][ T7193] netlink_sendskb+0x68/0x140 [ 144.088005][ T7193] netlink_unicast+0x39d/0x980 [ 144.092755][ T7193] ? __asan_memcpy+0x40/0x70 [ 144.097338][ T7193] ? __pfx_netlink_unicast+0x10/0x10 [ 144.102638][ T7193] netlink_rcv_skb+0x262/0x430 [ 144.107396][ T7193] ? __pfx_genl_rcv_msg+0x10/0x10 [ 144.112408][ T7193] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.117697][ T7193] ? __netlink_deliver_tap+0x77e/0x7c0 [ 144.123174][ T7193] genl_rcv+0x28/0x40 [ 144.127159][ T7193] netlink_unicast+0x7ea/0x980 [ 144.131919][ T7193] ? __pfx_netlink_unicast+0x10/0x10 [ 144.137193][ T7193] ? __virt_addr_valid+0x183/0x520 [ 144.142300][ T7193] ? __check_object_size+0x49c/0x900 [ 144.147576][ T7193] ? bpf_lsm_netlink_send+0x9/0x10 [ 144.152682][ T7193] netlink_sendmsg+0x8db/0xcb0 [ 144.157450][ T7193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.162729][ T7193] ? __import_iovec+0x536/0x820 [ 144.167567][ T7193] ? aa_sock_msg_perm+0x91/0x160 [ 144.172496][ T7193] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 144.177779][ T7193] ? security_socket_sendmsg+0x87/0xb0 [ 144.183238][ T7193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.188514][ T7193] __sock_sendmsg+0x221/0x270 [ 144.193191][ T7193] ____sys_sendmsg+0x525/0x7d0 [ 144.197957][ T7193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.203245][ T7193] __sys_sendmsg+0x2b0/0x3a0 [ 144.207829][ T7193] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.212930][ T7193] ? vfs_write+0x7c4/0xc90 [ 144.217376][ T7193] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 144.223541][ T7193] ? do_syscall_64+0xb6/0x230 [ 144.228222][ T7193] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.234540][ T7193] ? do_syscall_64+0x100/0x230 [ 144.239305][ T7193] ? do_syscall_64+0xb6/0x230 [ 144.243976][ T7193] do_syscall_64+0xf3/0x230 [ 144.248472][ T7193] ? clear_bhb_loop+0x35/0x90 [ 144.253147][ T7193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.259047][ T7193] RIP: 0033:0x7fd93dd75bd9 [ 144.263462][ T7193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.283054][ T7193] RSP: 002b:00007fd93ebca048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.291462][ T7193] RAX: ffffffffffffffda RBX: 00007fd93df03f60 RCX: 00007fd93dd75bd9 [ 144.299435][ T7193] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 144.307398][ T7193] RBP: 00007fd93ebca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.315357][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.323325][ T7193] R13: 000000000000000b R14: 00007fd93df03f60 R15: 00007fff27e0ef58 [ 144.331308][ T7193] [ 144.549000][ T7209] netlink: 'syz.2.594': attribute type 3 has an invalid length. [ 144.563018][ T7209] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.594'. [ 146.888000][ T7192] FAULT_INJECTION: forcing a failure. [ 146.888000][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 146.901222][ T7192] CPU: 0 PID: 7192 Comm: syz.4.590 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 146.911231][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 146.921306][ T7192] Call Trace: [ 146.924594][ T7192] [ 146.927520][ T7192] dump_stack_lvl+0x241/0x360 [ 146.932200][ T7192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.937398][ T7192] ? __pfx__printk+0x10/0x10 [ 146.942009][ T7192] should_fail_ex+0x3b0/0x4e0 [ 146.946691][ T7192] ? task_numa_work+0x854/0x13f0 [ 146.951622][ T7192] should_failslab+0x9/0x20 [ 146.956122][ T7192] kmalloc_trace_noprof+0x6c/0x2c0 [ 146.961240][ T7192] task_numa_work+0x854/0x13f0 [ 146.966034][ T7192] ? __pfx_task_numa_work+0x10/0x10 [ 146.971227][ T7192] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.977218][ T7192] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.982410][ T7192] ? lockdep_hardirqs_on+0x99/0x150 [ 146.987614][ T7192] task_work_run+0x24f/0x310 [ 146.992208][ T7192] ? __pfx_task_work_run+0x10/0x10 [ 146.997328][ T7192] get_signal+0x15e6/0x1740 [ 147.001829][ T7192] ? __pfx_bpf_prog_put+0x10/0x10 [ 147.006868][ T7192] ? __pfx_get_signal+0x10/0x10 [ 147.011718][ T7192] ? __sys_bpf+0x48d/0x810 [ 147.016141][ T7192] arch_do_signal_or_restart+0x96/0x860 [ 147.021686][ T7192] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 147.027832][ T7192] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.033824][ T7192] ? syscall_exit_to_user_mode+0xa3/0x360 [ 147.039543][ T7192] syscall_exit_to_user_mode+0xc9/0x360 [ 147.045090][ T7192] do_syscall_64+0x100/0x230 [ 147.049684][ T7192] ? clear_bhb_loop+0x35/0x90 [ 147.054367][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.060259][ T7192] RIP: 0033:0x7ff3c2775bd9 [ 147.064668][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.084274][ T7192] RSP: 002b:00007ff3c3597048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.092694][ T7192] RAX: fffffffffffffffc RBX: 00007ff3c2903f60 RCX: 00007ff3c2775bd9 [ 147.100660][ T7192] RDX: 0000000000000050 RSI: 0000000020000380 RDI: 000000000000000a [ 147.108625][ T7192] RBP: 00007ff3c35970a0 R08: 0000000000000000 R09: 0000000000000000 [ 147.116586][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.124547][ T7192] R13: 000000000000000b R14: 00007ff3c2903f60 R15: 00007ffd55f866f8 [ 147.132529][ T7192] [ 147.278475][ T7217] netlink: 'syz.3.597': attribute type 10 has an invalid length. [ 147.955306][ T7221] netlink: 'syz.0.598': attribute type 21 has an invalid length. [ 148.015656][ T7221] netlink: 164 bytes leftover after parsing attributes in process `syz.0.598'. [ 149.806806][ T7285] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.621'. [ 150.194011][ T7300] netlink: 'syz.4.627': attribute type 29 has an invalid length. [ 150.254801][ T7300] netlink: 'syz.4.627': attribute type 29 has an invalid length. [ 150.276253][ T7305] netlink: 'syz.4.627': attribute type 29 has an invalid length. [ 151.023854][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.033809][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.042807][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.052625][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.062578][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 151.071288][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.492375][ T7328] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.636'. [ 151.731530][ T7337] netlink: 60 bytes leftover after parsing attributes in process `syz.0.639'. [ 151.756064][ T7333] netlink: 'syz.3.638': attribute type 1 has an invalid length. [ 151.809752][ T7333] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.638'. [ 151.847527][ T7337] netlink: 60 bytes leftover after parsing attributes in process `syz.0.639'. [ 151.862701][ T7339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.639'. [ 151.873090][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.639'. [ 151.882290][ T7342] FAULT_INJECTION: forcing a failure. [ 151.882290][ T7342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.898248][ T7342] CPU: 0 PID: 7342 Comm: syz.0.639 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 151.908243][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.918304][ T7342] Call Trace: [ 151.921577][ T7342] [ 151.924501][ T7342] dump_stack_lvl+0x241/0x360 [ 151.929180][ T7342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.934375][ T7342] ? __pfx__printk+0x10/0x10 [ 151.938966][ T7342] ? __pfx_lock_release+0x10/0x10 [ 151.943982][ T7342] ? __lock_acquire+0x1346/0x1fd0 [ 151.949000][ T7342] should_fail_ex+0x3b0/0x4e0 [ 151.953675][ T7342] _copy_from_user+0x2f/0xe0 [ 151.958255][ T7342] kstrtouint_from_user+0xc6/0x190 [ 151.963364][ T7342] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 151.969080][ T7342] ? __pfx_lock_acquire+0x10/0x10 [ 151.974101][ T7342] proc_fail_nth_write+0xaa/0x2d0 [ 151.979117][ T7342] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 151.985003][ T7342] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 151.990628][ T7342] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 151.996249][ T7342] vfs_write+0x2a2/0xc90 [ 152.000494][ T7342] ? __pfx_vfs_write+0x10/0x10 [ 152.005253][ T7342] ? __fget_files+0x29/0x470 [ 152.009837][ T7342] ? __fget_files+0x3f6/0x470 [ 152.014519][ T7342] ksys_write+0x1a0/0x2c0 [ 152.018844][ T7342] ? __pfx_ksys_write+0x10/0x10 [ 152.023687][ T7342] ? do_syscall_64+0x100/0x230 [ 152.028446][ T7342] ? do_syscall_64+0xb6/0x230 [ 152.033125][ T7342] do_syscall_64+0xf3/0x230 [ 152.037621][ T7342] ? clear_bhb_loop+0x35/0x90 [ 152.042292][ T7342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.048181][ T7342] RIP: 0033:0x7fc6a0f7475f [ 152.052586][ T7342] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 152.072180][ T7342] RSP: 002b:00007fc6a1d4e040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 152.080583][ T7342] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6a0f7475f [ 152.088545][ T7342] RDX: 0000000000000001 RSI: 00007fc6a1d4e0b0 RDI: 0000000000000004 [ 152.096503][ T7342] RBP: 00007fc6a1d4e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.104465][ T7342] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 152.112424][ T7342] R13: 000000000000006e R14: 00007fc6a1104110 R15: 00007ffce8807a08 [ 152.120415][ T7342] [ 152.249861][ T7319] chnl_net:caif_netlink_parms(): no params data found [ 152.412778][ T7353] netlink: 'syz.0.643': attribute type 3 has an invalid length. [ 152.420719][ T7353] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.643'. [ 153.146800][ T53] Bluetooth: hci3: command tx timeout [ 153.328580][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.338734][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.346282][ T7319] bridge_slave_0: entered allmulticast mode [ 153.356681][ T7319] bridge_slave_0: entered promiscuous mode [ 153.365940][ T7377] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.650'. [ 153.377694][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.385049][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.392367][ T7319] bridge_slave_1: entered allmulticast mode [ 153.400675][ T7319] bridge_slave_1: entered promiscuous mode [ 153.576047][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.598402][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.707445][ T7319] team0: Port device team_slave_0 added [ 153.720723][ T7319] team0: Port device team_slave_1 added [ 153.782357][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.810244][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.903249][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.938646][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.968701][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.026755][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.202099][ T7399] delete_channel: no stack [ 154.506919][ T7319] hsr_slave_0: entered promiscuous mode [ 154.527382][ T7319] hsr_slave_1: entered promiscuous mode [ 154.648307][ T7319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.691183][ T7319] Cannot create hsr debugfs directory [ 155.233592][ T53] Bluetooth: hci3: command tx timeout [ 155.725513][ T7416] netlink: 'syz.4.664': attribute type 21 has an invalid length. [ 155.746009][ T7416] netlink: 164 bytes leftover after parsing attributes in process `syz.4.664'. [ 155.868414][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.880007][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.888191][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.904964][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.915390][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.923446][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.942490][ T7431] netlink: 'syz.0.669': attribute type 29 has an invalid length. [ 155.953185][ T7431] netlink: 'syz.0.669': attribute type 29 has an invalid length. [ 155.964825][ T7431] netlink: 'syz.0.669': attribute type 29 has an invalid length. [ 156.185630][ T7437] netlink: 'syz.0.672': attribute type 17 has an invalid length. [ 156.513590][ T7319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.626928][ T7319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.313318][ T5103] Bluetooth: hci3: command tx timeout [ 157.503974][ T7319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.518446][ T7454] netlink: 'syz.4.676': attribute type 21 has an invalid length. [ 157.526863][ T7454] netlink: 164 bytes leftover after parsing attributes in process `syz.4.676'. [ 157.542643][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 157.659926][ T7319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.953594][ T5103] Bluetooth: hci2: command tx timeout [ 157.999714][ T7477] netlink: 'syz.4.683': attribute type 280 has an invalid length. [ 158.071409][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.080674][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.088164][ T7425] bridge_slave_0: entered allmulticast mode [ 158.097909][ T7425] bridge_slave_0: entered promiscuous mode [ 158.110576][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.125372][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.132637][ T7425] bridge_slave_1: entered allmulticast mode [ 158.163130][ T7425] bridge_slave_1: entered promiscuous mode [ 158.206065][ T7488] netlink: 'syz.3.685': attribute type 2 has an invalid length. [ 158.216325][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.216445][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.223831][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.231433][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.240106][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.249321][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.256576][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.263830][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.270897][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.278053][ T5103] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 158.291888][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.335973][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.412628][ T7319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.449964][ T7495] netlink: 'syz.4.687': attribute type 10 has an invalid length. [ 158.488590][ T7425] team0: Port device team_slave_0 added [ 158.498602][ T7319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.515573][ T7319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.545212][ T7425] team0: Port device team_slave_1 added [ 158.551119][ T7319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.628518][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.636913][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.684013][ T7425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.697045][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.705556][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.731776][ T7425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.828561][ T7425] hsr_slave_0: entered promiscuous mode [ 158.845323][ T7425] hsr_slave_1: entered promiscuous mode [ 158.873503][ T7425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.887927][ T7425] Cannot create hsr debugfs directory [ 159.128653][ T7513] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.694'. [ 159.291879][ T7425] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.362119][ T7522] FAULT_INJECTION: forcing a failure. [ 159.362119][ T7522] name failslab, interval 1, probability 0, space 0, times 0 [ 159.367513][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.375944][ T7522] CPU: 1 PID: 7522 Comm: syz.0.696 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 159.392207][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 159.402272][ T7522] Call Trace: [ 159.405561][ T7522] [ 159.406167][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.408484][ T7522] dump_stack_lvl+0x241/0x360 [ 159.419735][ T7522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.424956][ T7522] ? __pfx__printk+0x10/0x10 [ 159.429577][ T7522] ? netlink_insert+0x10b7/0x14b0 [ 159.434626][ T7522] should_fail_ex+0x3b0/0x4e0 [ 159.439325][ T7522] ? __alloc_skb+0x1c3/0x440 [ 159.443927][ T7522] should_failslab+0x9/0x20 [ 159.448440][ T7522] kmem_cache_alloc_node_noprof+0x71/0x320 [ 159.454271][ T7522] __alloc_skb+0x1c3/0x440 [ 159.458710][ T7522] ? __pfx___alloc_skb+0x10/0x10 [ 159.463663][ T7522] ? netlink_autobind+0xd6/0x2f0 [ 159.468623][ T7522] ? netlink_autobind+0x2b0/0x2f0 [ 159.470979][ T7319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.473652][ T7522] netlink_sendmsg+0x631/0xcb0 [ 159.473693][ T7522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.494023][ T7522] ? __import_iovec+0x536/0x820 [ 159.496777][ T7319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.498864][ T7522] ? aa_sock_msg_perm+0x91/0x160 [ 159.514104][ T7522] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 159.519397][ T7522] ? security_socket_sendmsg+0x87/0xb0 [ 159.524873][ T7522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.530166][ T7522] __sock_sendmsg+0x221/0x270 [ 159.534850][ T7522] ____sys_sendmsg+0x525/0x7d0 [ 159.539635][ T7522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.544975][ T7522] __sys_sendmsg+0x2b0/0x3a0 [ 159.549593][ T7522] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.554721][ T7522] ? vfs_write+0x7c4/0xc90 [ 159.559188][ T7522] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 159.565360][ T7522] ? do_syscall_64+0xb6/0x230 [ 159.570065][ T7522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.576410][ T7522] ? do_syscall_64+0x100/0x230 [ 159.581199][ T7522] ? do_syscall_64+0xb6/0x230 [ 159.585900][ T7522] do_syscall_64+0xf3/0x230 [ 159.590420][ T7522] ? clear_bhb_loop+0x35/0x90 [ 159.595118][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.601027][ T7522] RIP: 0033:0x7fc6a0f75bd9 [ 159.605455][ T7522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.625063][ T7522] RSP: 002b:00007fc6a1d90048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.633469][ T7522] RAX: ffffffffffffffda RBX: 00007fc6a1103f60 RCX: 00007fc6a0f75bd9 [ 159.641453][ T7522] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 159.649424][ T7522] RBP: 00007fc6a1d900a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.657378][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.665333][ T7522] R13: 000000000000000b R14: 00007fc6a1103f60 R15: 00007ffce8807a08 [ 159.673292][ T7522] [ 159.677927][ T5103] Bluetooth: hci3: command tx timeout [ 159.727342][ T7425] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.755010][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.762150][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.772855][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.779937][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.804329][ T7526] netlink: 'syz.0.697': attribute type 10 has an invalid length. [ 159.812798][ T7526] team0: Device hsr_slave_0 failed to register rx_handler [ 159.949138][ T7425] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.005067][ T7535] FAULT_INJECTION: forcing a failure. [ 160.005067][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.025676][ T5103] Bluetooth: hci2: command tx timeout [ 160.047360][ T7535] CPU: 0 PID: 7535 Comm: syz.0.699 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 160.057365][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 160.067428][ T7535] Call Trace: [ 160.070721][ T7535] [ 160.073661][ T7535] dump_stack_lvl+0x241/0x360 [ 160.078385][ T7535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.083609][ T7535] ? __pfx__printk+0x10/0x10 [ 160.088218][ T7535] ? __pfx_lock_release+0x10/0x10 [ 160.093271][ T7535] should_fail_ex+0x3b0/0x4e0 [ 160.097973][ T7535] _copy_from_iter+0x1f6/0x1960 [ 160.102848][ T7535] ? __virt_addr_valid+0x183/0x520 [ 160.107973][ T7535] ? __pfx_lock_release+0x10/0x10 [ 160.113002][ T7535] ? __alloc_skb+0x28f/0x440 [ 160.117606][ T7535] ? __pfx__copy_from_iter+0x10/0x10 [ 160.122910][ T7535] ? __virt_addr_valid+0x183/0x520 [ 160.128029][ T7535] ? __virt_addr_valid+0x183/0x520 [ 160.133136][ T7535] ? __virt_addr_valid+0x44e/0x520 [ 160.138258][ T7535] ? __check_object_size+0x49c/0x900 [ 160.143543][ T7535] netlink_sendmsg+0x743/0xcb0 [ 160.148307][ T7535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.153584][ T7535] ? __import_iovec+0x536/0x820 [ 160.158422][ T7535] ? aa_sock_msg_perm+0x91/0x160 [ 160.163353][ T7535] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 160.168625][ T7535] ? security_socket_sendmsg+0x87/0xb0 [ 160.174075][ T7535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.179352][ T7535] __sock_sendmsg+0x221/0x270 [ 160.184028][ T7535] ____sys_sendmsg+0x525/0x7d0 [ 160.188794][ T7535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.194085][ T7535] __sys_sendmsg+0x2b0/0x3a0 [ 160.198669][ T7535] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.203773][ T7535] ? vfs_write+0x7c4/0xc90 [ 160.208198][ T7535] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 160.214349][ T7535] ? do_syscall_64+0xb6/0x230 [ 160.219027][ T7535] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.225345][ T7535] ? do_syscall_64+0x100/0x230 [ 160.230102][ T7535] ? do_syscall_64+0xb6/0x230 [ 160.234773][ T7535] do_syscall_64+0xf3/0x230 [ 160.239268][ T7535] ? clear_bhb_loop+0x35/0x90 [ 160.243938][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.249822][ T7535] RIP: 0033:0x7fc6a0f75bd9 [ 160.254225][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.273818][ T7535] RSP: 002b:00007fc6a1d6f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.282220][ T7535] RAX: ffffffffffffffda RBX: 00007fc6a1104038 RCX: 00007fc6a0f75bd9 [ 160.290180][ T7535] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 000000000000000a [ 160.298142][ T7535] RBP: 00007fc6a1d6f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 160.306102][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.314061][ T7535] R13: 000000000000006e R14: 00007fc6a1104038 R15: 00007ffce8807a08 [ 160.322028][ T7535] [ 160.357666][ T7425] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.497096][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.816482][ T7425] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.897925][ T7425] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.948561][ T7425] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.970156][ T7425] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.998169][ T7319] veth0_vlan: entered promiscuous mode [ 161.020490][ T7545] FAULT_INJECTION: forcing a failure. [ 161.020490][ T7545] name failslab, interval 1, probability 0, space 0, times 0 [ 161.024195][ T7550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.705'. [ 161.042683][ T7545] CPU: 1 PID: 7545 Comm: syz.3.704 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 161.052681][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 161.062745][ T7545] Call Trace: [ 161.066017][ T7545] [ 161.068941][ T7545] dump_stack_lvl+0x241/0x360 [ 161.073633][ T7545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.078826][ T7545] ? __pfx__printk+0x10/0x10 [ 161.083418][ T7545] ? perf_trace_lock+0x136/0x490 [ 161.088354][ T7545] should_fail_ex+0x3b0/0x4e0 [ 161.093030][ T7545] ? dev_ethtool+0x145/0x1bc0 [ 161.097703][ T7545] should_failslab+0x9/0x20 [ 161.102200][ T7545] kmalloc_trace_noprof+0x6c/0x2c0 [ 161.107312][ T7545] dev_ethtool+0x145/0x1bc0 [ 161.111822][ T7545] ? dev_load+0x21/0x1f0 [ 161.116066][ T7545] ? __pfx_dev_ethtool+0x10/0x10 [ 161.121017][ T7545] ? dev_load+0x21/0x1f0 [ 161.125257][ T7545] dev_ioctl+0x785/0x1340 [ 161.129586][ T7545] sock_do_ioctl+0x240/0x460 [ 161.134184][ T7545] ? __pfx_sock_do_ioctl+0x10/0x10 [ 161.139310][ T7545] sock_ioctl+0x629/0x8e0 [ 161.143638][ T7545] ? __pfx_sock_ioctl+0x10/0x10 [ 161.148483][ T7545] ? __fget_files+0x29/0x470 [ 161.153070][ T7545] ? __fget_files+0x3f6/0x470 [ 161.157736][ T7545] ? __fget_files+0x29/0x470 [ 161.162323][ T7545] ? bpf_lsm_file_ioctl+0x9/0x10 [ 161.167251][ T7545] ? security_file_ioctl+0x87/0xb0 [ 161.172373][ T7545] ? __pfx_sock_ioctl+0x10/0x10 [ 161.177231][ T7545] __se_sys_ioctl+0xfc/0x170 [ 161.181820][ T7545] do_syscall_64+0xf3/0x230 [ 161.186328][ T7545] ? clear_bhb_loop+0x35/0x90 [ 161.191016][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.196912][ T7545] RIP: 0033:0x7f2350175bd9 [ 161.201316][ T7545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.220912][ T7545] RSP: 002b:00007f2350fba048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.229323][ T7545] RAX: ffffffffffffffda RBX: 00007f2350303f60 RCX: 00007f2350175bd9 [ 161.237287][ T7545] RDX: 0000000020000080 RSI: 0000000000008946 RDI: 0000000000000019 [ 161.245249][ T7545] RBP: 00007f2350fba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.253209][ T7545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.261169][ T7545] R13: 000000000000000b R14: 00007f2350303f60 R15: 00007ffd9a1ada18 [ 161.269147][ T7545] [ 161.291843][ T7319] veth1_vlan: entered promiscuous mode [ 161.426787][ T7319] veth0_macvtap: entered promiscuous mode [ 161.461286][ T7319] veth1_macvtap: entered promiscuous mode [ 161.492385][ T7557] validate_nla: 1 callbacks suppressed [ 161.492400][ T7557] netlink: 'syz.3.708': attribute type 10 has an invalid length. [ 161.584598][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.619761][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.644807][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.662878][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.692930][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.715108][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.741926][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.752244][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.767289][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.777654][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.788910][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.799187][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.811351][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.823881][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.840901][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.851559][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.907215][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.288189][ T5103] Bluetooth: hci2: command tx timeout [ 162.493846][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.538959][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.659053][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.669261][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.680115][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.690376][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.701738][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.712565][ T7319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.726472][ T7319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.740083][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.781637][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.918364][ T7319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.936977][ T7574] netlink: 'syz.0.712': attribute type 29 has an invalid length. [ 162.945765][ T7319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.954529][ T7319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.965311][ T7319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.017659][ T7574] netlink: 'syz.0.712': attribute type 29 has an invalid length. [ 163.043706][ T7575] netlink: 'syz.0.712': attribute type 29 has an invalid length. [ 163.089817][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.097122][ T6068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.125803][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.133080][ T6068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.176121][ T7574] netlink: 'syz.0.712': attribute type 29 has an invalid length. [ 163.534821][ T7582] FAULT_INJECTION: forcing a failure. [ 163.534821][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 163.579628][ T2823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.591767][ T2823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.593046][ T7582] CPU: 0 PID: 7582 Comm: syz.3.714 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 163.609051][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 163.619102][ T7582] Call Trace: [ 163.619115][ T7582] [ 163.619126][ T7582] dump_stack_lvl+0x241/0x360 [ 163.619167][ T7582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.635245][ T7582] ? __pfx__printk+0x10/0x10 [ 163.639875][ T7582] ? ref_tracker_alloc+0x332/0x490 [ 163.645036][ T7582] should_fail_ex+0x3b0/0x4e0 [ 163.649759][ T7582] ? skb_clone+0x20c/0x390 [ 163.654206][ T7582] should_failslab+0x9/0x20 [ 163.658736][ T7582] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 163.664174][ T7582] skb_clone+0x20c/0x390 [ 163.668456][ T7582] __netlink_deliver_tap+0x3cc/0x7c0 [ 163.673793][ T7582] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.679002][ T7582] netlink_deliver_tap+0x19d/0x1b0 [ 163.684114][ T7582] netlink_unicast+0x7b8/0x980 [ 163.688887][ T7582] ? __pfx_netlink_unicast+0x10/0x10 [ 163.694168][ T7582] ? __virt_addr_valid+0x183/0x520 [ 163.699282][ T7582] ? __check_object_size+0x49c/0x900 [ 163.704569][ T7582] ? bpf_lsm_netlink_send+0x9/0x10 [ 163.709688][ T7582] netlink_sendmsg+0x8db/0xcb0 [ 163.714471][ T7582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.719763][ T7582] ? __import_iovec+0x536/0x820 [ 163.724611][ T7582] ? aa_sock_msg_perm+0x91/0x160 [ 163.729556][ T7582] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 163.734837][ T7582] ? security_socket_sendmsg+0x87/0xb0 [ 163.740297][ T7582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.745580][ T7582] __sock_sendmsg+0x221/0x270 [ 163.750267][ T7582] ____sys_sendmsg+0x525/0x7d0 [ 163.755046][ T7582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.760355][ T7582] __sys_sendmsg+0x2b0/0x3a0 [ 163.764954][ T7582] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.770061][ T7582] ? vfs_write+0x7c4/0xc90 [ 163.774530][ T7582] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.780858][ T7582] ? do_syscall_64+0x100/0x230 [ 163.785635][ T7582] ? do_syscall_64+0xb6/0x230 [ 163.790317][ T7582] do_syscall_64+0xf3/0x230 [ 163.794822][ T7582] ? clear_bhb_loop+0x35/0x90 [ 163.799505][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.805400][ T7582] RIP: 0033:0x7f2350175bd9 [ 163.809808][ T7582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.829410][ T7582] RSP: 002b:00007f2350fba048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.837825][ T7582] RAX: ffffffffffffffda RBX: 00007f2350303f60 RCX: 00007f2350175bd9 [ 163.845793][ T7582] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 163.853759][ T7582] RBP: 00007f2350fba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.861721][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.869694][ T7582] R13: 000000000000000b R14: 00007f2350303f60 R15: 00007ffd9a1ada18 [ 163.877689][ T7582] [ 163.926609][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.937023][ T7582] netlink: 'syz.3.714': attribute type 10 has an invalid length. [ 163.948136][ T7582] netlink: 55 bytes leftover after parsing attributes in process `syz.3.714'. [ 163.971137][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.986670][ T7589] netlink: 'syz.4.715': attribute type 39 has an invalid length. [ 164.195724][ T7597] netlink: 'syz.3.717': attribute type 10 has an invalid length. [ 164.270613][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.350399][ T53] Bluetooth: hci2: command tx timeout [ 164.472101][ T7425] veth0_vlan: entered promiscuous mode [ 164.596941][ T5103] Bluetooth: hci4: command 0x0406 tx timeout [ 164.627058][ T7604] pim6reg1: entered allmulticast mode [ 164.670941][ T7425] veth1_vlan: entered promiscuous mode [ 164.938045][ T7425] veth0_macvtap: entered promiscuous mode [ 164.987870][ T7425] veth1_macvtap: entered promiscuous mode [ 165.046264][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.079616][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.097357][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.128811][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.146069][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.157269][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.167212][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.177857][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.194947][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.215929][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.227049][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.237955][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.249602][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.261414][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.281994][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.343454][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.383757][ T7630] FAULT_INJECTION: forcing a failure. [ 165.383757][ T7630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.387559][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.404433][ T7630] CPU: 1 PID: 7630 Comm: syz.0.728 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 165.416614][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 165.426675][ T7630] Call Trace: [ 165.429590][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.429944][ T7630] [ 165.440497][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.443243][ T7630] dump_stack_lvl+0x241/0x360 [ 165.443280][ T7630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.462930][ T7630] ? __pfx__printk+0x10/0x10 [ 165.464839][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.467522][ T7630] ? __pfx_lock_release+0x10/0x10 [ 165.467555][ T7630] should_fail_ex+0x3b0/0x4e0 [ 165.478093][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.482934][ T7630] _copy_from_user+0x2f/0xe0 [ 165.482962][ T7630] copy_msghdr_from_user+0xae/0x680 [ 165.487651][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.497387][ T7630] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 165.497432][ T7630] __sys_sendmsg+0x23d/0x3a0 [ 165.502097][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.507177][ T7630] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.507214][ T7630] ? vfs_write+0x7c4/0xc90 [ 165.507260][ T7630] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 165.507281][ T7630] ? do_syscall_64+0xb6/0x230 [ 165.507316][ T7630] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.507337][ T7630] ? do_syscall_64+0x100/0x230 [ 165.507365][ T7630] ? do_syscall_64+0xb6/0x230 [ 165.507389][ T7630] do_syscall_64+0xf3/0x230 [ 165.507413][ T7630] ? clear_bhb_loop+0x35/0x90 [ 165.507440][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.507464][ T7630] RIP: 0033:0x7fc6a0f75bd9 [ 165.507483][ T7630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.507499][ T7630] RSP: 002b:00007fc6a1d90048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.507519][ T7630] RAX: ffffffffffffffda RBX: 00007fc6a1103f60 RCX: 00007fc6a0f75bd9 [ 165.507534][ T7630] RDX: 0000000000000000 RSI: 0000000020000b40 RDI: 0000000000000004 [ 165.507547][ T7630] RBP: 00007fc6a1d900a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.507560][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.507572][ T7630] R13: 000000000000000b R14: 00007fc6a1103f60 R15: 00007ffce8807a08 [ 165.507601][ T7630] [ 165.679804][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.690416][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.701508][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.713442][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.725770][ T7425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.736366][ T7425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.748748][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.758246][ T7636] netlink: 'syz.1.731': attribute type 10 has an invalid length. [ 165.834172][ T7636] team0: Device hsr_slave_0 failed to register rx_handler [ 165.921040][ T7425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.953069][ T7425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.969110][ T7425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.994399][ T7425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.375850][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.415621][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.611412][ T2823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.645274][ T2823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.175011][ T7681] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 167.287129][ T7685] netlink: 'syz.3.742': attribute type 29 has an invalid length. [ 167.346613][ T7685] netlink: 'syz.3.742': attribute type 29 has an invalid length. [ 167.413055][ T7687] netlink: 'syz.3.742': attribute type 10 has an invalid length. [ 167.451497][ T7687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.742'. [ 167.487743][ T7687] bridge0: port 3(gretap0) entered blocking state [ 167.514119][ T7687] bridge0: port 3(gretap0) entered disabled state [ 167.527221][ T7687] gretap0: entered allmulticast mode [ 167.549179][ T7687] gretap0: entered promiscuous mode [ 167.567170][ T7687] bridge0: port 3(gretap0) entered blocking state [ 167.574739][ T7687] bridge0: port 3(gretap0) entered forwarding state [ 167.670797][ T7692] netlink: 'syz.4.746': attribute type 10 has an invalid length. [ 167.726586][ T7692] team0: Device hsr_slave_0 failed to register rx_handler [ 168.157038][ T7703] netlink: 'syz.0.751': attribute type 64 has an invalid length. [ 168.181334][ T7703] netlink: 44 bytes leftover after parsing attributes in process `syz.0.751'. [ 168.247711][ T7703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.751'. [ 168.466187][ T7724] netlink: 'syz.4.756': attribute type 6 has an invalid length. [ 168.482228][ T7724] netlink: 'syz.4.756': attribute type 8 has an invalid length. [ 168.703748][ T7735] netlink: 'syz.1.759': attribute type 21 has an invalid length. [ 168.729747][ T7737] netlink: 'syz.0.760': attribute type 10 has an invalid length. [ 168.738591][ T7737] team0: Device hsr_slave_0 failed to register rx_handler [ 168.846311][ T7735] netlink: 'syz.1.759': attribute type 29 has an invalid length. [ 169.175694][ T7745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.762'. [ 169.430111][ T7754] pim6reg1: entered promiscuous mode [ 169.435522][ T7754] pim6reg1: entered allmulticast mode [ 170.565079][ T7803] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.782'. [ 170.976808][ T7821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.788'. [ 170.990450][ T7824] FAULT_INJECTION: forcing a failure. [ 170.990450][ T7824] name failslab, interval 1, probability 0, space 0, times 0 [ 171.003288][ T7824] CPU: 0 PID: 7824 Comm: syz.0.789 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 171.013279][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.017892][ T7821] bridge0: port 3(gretap0) entered blocking state [ 171.023325][ T7824] Call Trace: [ 171.023338][ T7824] [ 171.023347][ T7824] dump_stack_lvl+0x241/0x360 [ 171.023382][ T7824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.023408][ T7824] ? __pfx__printk+0x10/0x10 [ 171.023447][ T7824] should_fail_ex+0x3b0/0x4e0 [ 171.023479][ T7824] ? skb_clone+0x20c/0x390 [ 171.023502][ T7824] should_failslab+0x9/0x20 [ 171.023526][ T7824] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 171.023557][ T7824] skb_clone+0x20c/0x390 [ 171.073688][ T7824] bpf_clone_redirect+0xab/0x3d0 [ 171.078629][ T7824] ? bpf_test_run+0x31e/0x910 [ 171.083306][ T7824] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 171.088757][ T7824] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 171.094903][ T7824] ? __local_bh_enable_ip+0x168/0x200 [ 171.100267][ T7824] ? bpf_test_run+0x31e/0x910 [ 171.104935][ T7824] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 171.110644][ T7824] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.116968][ T7824] ? bpf_test_run+0x31e/0x910 [ 171.121634][ T7824] ? __pfx___cant_migrate+0x10/0x10 [ 171.126823][ T7824] ? bpf_test_run+0x31e/0x910 [ 171.131490][ T7824] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 171.137198][ T7824] ? bpf_test_timer_continue+0x11a/0x350 [ 171.142820][ T7824] ? bpf_test_run+0x31e/0x910 [ 171.147500][ T7824] bpf_test_run+0x409/0x910 [ 171.152021][ T7824] ? __pfx_bpf_test_run+0x10/0x10 [ 171.157043][ T7824] ? eth_type_trans+0x3d1/0x7a0 [ 171.161892][ T7824] ? __pfx_eth_type_trans+0x10/0x10 [ 171.167082][ T7824] ? convert___skb_to_skb+0x41/0x620 [ 171.172360][ T7824] bpf_prog_test_run_skb+0xafa/0x13a0 [ 171.177726][ T7824] ? __pfx_lock_release+0x10/0x10 [ 171.182753][ T7824] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 171.188556][ T7824] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 171.194364][ T7824] bpf_prog_test_run+0x33a/0x3b0 [ 171.199297][ T7824] __sys_bpf+0x48d/0x810 [ 171.203538][ T7824] ? __pfx___sys_bpf+0x10/0x10 [ 171.208291][ T7824] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.214282][ T7824] __x64_sys_bpf+0x7c/0x90 [ 171.218707][ T7824] do_syscall_64+0xf3/0x230 [ 171.223222][ T7824] ? clear_bhb_loop+0x35/0x90 [ 171.227908][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.233797][ T7824] RIP: 0033:0x7fc6a0f75bd9 [ 171.238201][ T7824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.257799][ T7824] RSP: 002b:00007fc6a1d90048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.266209][ T7824] RAX: ffffffffffffffda RBX: 00007fc6a1103f60 RCX: 00007fc6a0f75bd9 [ 171.274173][ T7824] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 171.282131][ T7824] RBP: 00007fc6a1d900a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.290090][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.298048][ T7824] R13: 000000000000000b R14: 00007fc6a1103f60 R15: 00007ffce8807a08 [ 171.306026][ T7824] [ 171.345242][ T7821] bridge0: port 3(gretap0) entered disabled state [ 171.390814][ T7821] gretap0: entered allmulticast mode [ 171.405732][ T7821] gretap0: entered promiscuous mode [ 171.439215][ T7821] bridge0: port 3(gretap0) entered blocking state [ 171.446134][ T7821] bridge0: port 3(gretap0) entered forwarding state [ 172.075932][ T7850] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.795'. [ 173.306724][ T7899] validate_nla: 14 callbacks suppressed [ 173.306748][ T7899] netlink: 'syz.4.813': attribute type 3 has an invalid length. [ 173.343040][ T7899] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.813'. [ 173.457750][ T7900] netlink: 44 bytes leftover after parsing attributes in process `syz.1.814'. [ 173.515361][ T7900] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 174.615928][ T7943] netlink: 'syz.1.827': attribute type 3 has an invalid length. [ 174.642990][ T7943] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.827'. [ 176.846315][ T7993] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.844'. [ 176.863274][ T7993] netlink: 500 bytes leftover after parsing attributes in process `syz.3.844'. [ 176.971787][ T7997] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 176.996083][ T7997] team0: Device hsr_slave_0 failed to register rx_handler [ 177.220659][ T8012] netlink: 'syz.4.851': attribute type 21 has an invalid length. [ 177.338658][ T8016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.853'. [ 177.379966][ T8016] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.853'. [ 177.441172][ T8012] netlink: 'syz.4.851': attribute type 29 has an invalid length. [ 177.447602][ T8025] netlink: 6 bytes leftover after parsing attributes in process `syz.2.855'. [ 177.450198][ T8012] netlink: 'syz.4.851': attribute type 29 has an invalid length. [ 177.483407][ T8025] netlink: zone id is out of range [ 177.633371][ T8031] FAULT_INJECTION: forcing a failure. [ 177.633371][ T8031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.731717][ T8031] CPU: 0 PID: 8031 Comm: syz.3.858 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 177.741762][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 177.751830][ T8031] Call Trace: [ 177.755118][ T8031] [ 177.758063][ T8031] dump_stack_lvl+0x241/0x360 [ 177.762769][ T8031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.767991][ T8031] ? __pfx__printk+0x10/0x10 [ 177.772857][ T8031] ? __pfx_lock_release+0x10/0x10 [ 177.777906][ T8031] should_fail_ex+0x3b0/0x4e0 [ 177.782602][ T8031] _copy_from_user+0x2f/0xe0 [ 177.787206][ T8031] get_user_ifreq+0xc3/0x200 [ 177.791814][ T8031] sock_do_ioctl+0x1a5/0x460 [ 177.796428][ T8031] ? __pfx_sock_do_ioctl+0x10/0x10 [ 177.801564][ T8031] sock_ioctl+0x629/0x8e0 [ 177.805898][ T8031] ? __pfx_sock_ioctl+0x10/0x10 [ 177.810752][ T8031] ? __fget_files+0x29/0x470 [ 177.815337][ T8031] ? __fget_files+0x3f6/0x470 [ 177.820003][ T8031] ? __fget_files+0x29/0x470 [ 177.824586][ T8031] ? bpf_lsm_file_ioctl+0x9/0x10 [ 177.829511][ T8031] ? security_file_ioctl+0x87/0xb0 [ 177.834611][ T8031] ? __pfx_sock_ioctl+0x10/0x10 [ 177.839455][ T8031] __se_sys_ioctl+0xfc/0x170 [ 177.844037][ T8031] do_syscall_64+0xf3/0x230 [ 177.848539][ T8031] ? clear_bhb_loop+0x35/0x90 [ 177.853214][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.859098][ T8031] RIP: 0033:0x7f2350175bd9 [ 177.863501][ T8031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.883096][ T8031] RSP: 002b:00007f2350fba048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.891500][ T8031] RAX: ffffffffffffffda RBX: 00007f2350303f60 RCX: 00007f2350175bd9 [ 177.899462][ T8031] RDX: 0000000020000280 RSI: 0000000000008914 RDI: 0000000000000004 [ 177.907425][ T8031] RBP: 00007f2350fba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.915386][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.923370][ T8031] R13: 000000000000000b R14: 00007f2350303f60 R15: 00007ffd9a1ada18 [ 177.931342][ T8031] [ 178.168269][ T8045] netlink: 80236 bytes leftover after parsing attributes in process `syz.4.864'. [ 178.461437][ T8069] netlink: 'syz.1.872': attribute type 21 has an invalid length. [ 178.501150][ T8066] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 178.560109][ T8066] bond0: (slave bond_slave_0): Releasing backup interface [ 178.612512][ T8073] netlink: 120 bytes leftover after parsing attributes in process `syz.0.871'. [ 178.657922][ T8069] netlink: 'syz.1.872': attribute type 29 has an invalid length. [ 178.693304][ T8069] netlink: 'syz.1.872': attribute type 29 has an invalid length. [ 178.744165][ T8079] netlink: 'syz.2.874': attribute type 9 has an invalid length. [ 178.746573][ T8077] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.875'. [ 178.751809][ T8079] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.874'. [ 179.360271][ T35] bridge_slave_1: left allmulticast mode [ 179.366881][ T35] bridge_slave_1: left promiscuous mode [ 179.380352][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.418403][ T35] bridge_slave_0: left allmulticast mode [ 179.437486][ T35] bridge_slave_0: left promiscuous mode [ 179.457396][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.972109][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.995592][ T35] bond0 (unregistering): Released all slaves [ 188.034903][ T8118] netlink: 'syz.2.889': attribute type 10 has an invalid length. [ 188.142267][ T8118] bond0: (slave bond_slave_0): Releasing backup interface [ 188.229843][ T8122] netlink: 120 bytes leftover after parsing attributes in process `syz.2.889'. [ 188.363721][ T8160] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.899'. [ 188.438087][ T8169] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.902'. [ 189.071553][ T35] hsr_slave_0: left promiscuous mode [ 189.102150][ T35] hsr_slave_1: left promiscuous mode [ 189.132006][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.143290][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.199034][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.218642][ T8190] netlink: 'syz.1.909': attribute type 2 has an invalid length. [ 189.228237][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.242172][ T8190] netlink: 14191 bytes leftover after parsing attributes in process `syz.1.909'. [ 189.305214][ T35] veth1_macvtap: left promiscuous mode [ 189.310859][ T35] veth0_macvtap: left promiscuous mode [ 189.334527][ T35] veth1_vlan: left promiscuous mode [ 189.344670][ T35] veth0_vlan: left promiscuous mode [ 190.155718][ T8220] netlink: 201400 bytes leftover after parsing attributes in process `syz.2.920'. [ 190.431949][ T35] team0 (unregistering): Port device team_slave_1 removed [ 190.474917][ T35] team0 (unregistering): Port device team_slave_0 removed [ 190.775008][ T8198] netlink: 'syz.0.913': attribute type 21 has an invalid length. [ 190.793029][ T8203] netlink: 'syz.1.912': attribute type 10 has an invalid length. [ 190.854961][ T8203] bond0: (slave bond_slave_0): Releasing backup interface [ 190.887972][ T8205] netlink: 120 bytes leftover after parsing attributes in process `syz.1.912'. [ 190.898308][ T8210] netlink: 40 bytes leftover after parsing attributes in process `syz.4.917'. [ 190.907777][ T8210] netlink: 'syz.4.917': attribute type 3 has an invalid length. [ 191.532305][ T8247] netlink: 188 bytes leftover after parsing attributes in process `syz.2.928'. [ 191.990265][ T8258] FAULT_INJECTION: forcing a failure. [ 191.990265][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 192.032095][ T8258] CPU: 0 PID: 8258 Comm: syz.4.933 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 192.042115][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 192.052186][ T8258] Call Trace: [ 192.055479][ T8258] [ 192.058421][ T8258] dump_stack_lvl+0x241/0x360 [ 192.063145][ T8258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.068374][ T8258] ? __pfx__printk+0x10/0x10 [ 192.072997][ T8258] should_fail_ex+0x3b0/0x4e0 [ 192.077701][ T8258] ? __alloc_skb+0x1c3/0x440 [ 192.082311][ T8258] should_failslab+0x9/0x20 [ 192.086832][ T8258] kmem_cache_alloc_node_noprof+0x71/0x320 [ 192.092665][ T8258] __alloc_skb+0x1c3/0x440 [ 192.097103][ T8258] ? mark_lock+0x9a/0x350 [ 192.101456][ T8258] ? __pfx___alloc_skb+0x10/0x10 [ 192.106425][ T8258] __ip6_append_data+0x2ba6/0x4070 [ 192.111562][ T8258] ? __pfx_raw6_getfrag+0x10/0x10 [ 192.116619][ T8258] ? __pfx___ip6_append_data+0x10/0x10 [ 192.122088][ T8258] ? ip6_setup_cork+0x9fd/0xfb0 [ 192.126943][ T8258] ip6_append_data+0x264/0x3a0 [ 192.131714][ T8258] ? __pfx_raw6_getfrag+0x10/0x10 [ 192.136738][ T8258] rawv6_sendmsg+0x18f1/0x23c0 [ 192.141542][ T8258] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 192.146688][ T8258] ? aa_sk_perm+0x967/0xab0 [ 192.151313][ T8258] ? __pfx_lock_release+0x10/0x10 [ 192.156358][ T8258] ? inet_sendmsg+0x330/0x390 [ 192.161050][ T8258] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 192.166350][ T8258] ? security_socket_sendmsg+0x87/0xb0 [ 192.167140][ T8269] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.936'. [ 192.171810][ T8258] __sock_sendmsg+0x1a6/0x270 [ 192.171887][ T8258] ____sys_sendmsg+0x525/0x7d0 [ 192.171920][ T8258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.195737][ T8258] __sys_sendmsg+0x2b0/0x3a0 [ 192.200350][ T8258] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.205490][ T8258] ? trace_call_bpf+0x613/0x8a0 [ 192.210388][ T8258] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 192.216654][ T8258] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.222999][ T8258] ? do_syscall_64+0x100/0x230 [ 192.227790][ T8258] ? do_syscall_64+0xb6/0x230 [ 192.232664][ T8258] do_syscall_64+0xf3/0x230 [ 192.237191][ T8258] ? clear_bhb_loop+0x35/0x90 [ 192.237330][ T8270] netlink: 'syz.1.935': attribute type 10 has an invalid length. [ 192.241874][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.241904][ T8258] RIP: 0033:0x7ff3c2775bd9 [ 192.259902][ T8258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.266561][ T8270] netlink: 120 bytes leftover after parsing attributes in process `syz.1.935'. [ 192.279502][ T8258] RSP: 002b:00007ff3c3597048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.279529][ T8258] RAX: ffffffffffffffda RBX: 00007ff3c2903f60 RCX: 00007ff3c2775bd9 [ 192.279544][ T8258] RDX: 0000000000000000 RSI: 0000000020001180 RDI: 0000000000000003 [ 192.279557][ T8258] RBP: 00007ff3c35970a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.279570][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.279582][ T8258] R13: 000000000000000b R14: 00007ff3c2903f60 R15: 00007ffd55f866f8 [ 192.279611][ T8258] [ 192.503920][ T8281] netlink: 'syz.0.939': attribute type 3 has an invalid length. [ 192.578832][ T8285] netlink: 'syz.3.940': attribute type 10 has an invalid length. [ 192.747159][ T8289] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 193.198539][ T8315] netlink: 'syz.2.952': attribute type 10 has an invalid length. [ 193.332512][ T8324] netlink: 'syz.4.954': attribute type 3 has an invalid length. [ 193.357345][ T8324] __nla_validate_parse: 3 callbacks suppressed [ 193.357362][ T8324] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.954'. [ 193.371952][ T8326] netlink: 'syz.2.957': attribute type 10 has an invalid length. [ 193.429824][ T8326] team0: Device hsr_slave_0 failed to register rx_handler [ 193.780531][ T8335] delete_channel: no stack [ 193.859227][ T8346] netlink: 'syz.0.965': attribute type 4 has an invalid length. [ 193.904694][ T8346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.965'. [ 194.152355][ T8356] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.966'. [ 194.164135][ T8355] netlink: 'syz.2.967': attribute type 10 has an invalid length. [ 194.194694][ T8355] netlink: 120 bytes leftover after parsing attributes in process `syz.2.967'. [ 194.204119][ T8356] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 194.353665][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.363574][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.374056][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.395904][ T8369] netlink: 'syz.4.971': attribute type 3 has an invalid length. [ 194.411956][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.416075][ T8369] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.971'. [ 194.444138][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 194.452152][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.589601][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.596845][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.647891][ T8377] netlink: 'syz.0.975': attribute type 4 has an invalid length. [ 194.672583][ T8377] netlink: 152 bytes leftover after parsing attributes in process `syz.0.975'. [ 194.695014][ T8377] netlink: 5 bytes leftover after parsing attributes in process `syz.0.975'. [ 194.726368][ T8377] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.980065][ T8385] netlink: 'syz.4.978': attribute type 4 has an invalid length. [ 195.001586][ T8385] netlink: 152 bytes leftover after parsing attributes in process `syz.4.978'. [ 195.308067][ T8363] chnl_net:caif_netlink_parms(): no params data found [ 195.361495][ T8397] netlink: 'syz.1.981': attribute type 10 has an invalid length. [ 195.385618][ T8397] netlink: 120 bytes leftover after parsing attributes in process `syz.1.981'. [ 195.435958][ T8403] netlink: 'syz.0.983': attribute type 3 has an invalid length. [ 195.461180][ T8403] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.983'. [ 195.576282][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.603462][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.631747][ T8363] bridge_slave_0: entered allmulticast mode [ 195.644491][ T8363] bridge_slave_0: entered promiscuous mode [ 195.693537][ T8363] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.701299][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.740928][ T8363] bridge_slave_1: entered allmulticast mode [ 195.753142][ T8363] bridge_slave_1: entered promiscuous mode [ 195.891754][ T8433] team0: Device hsr_slave_0 failed to register rx_handler [ 195.922569][ T8363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.967164][ T8363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.120914][ T8363] team0: Port device team_slave_0 added [ 196.219595][ T8363] team0: Port device team_slave_1 added [ 196.306465][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.329290][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.400216][ T8363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.426403][ T8363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.435659][ T8363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.467675][ T8363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.504410][ T5103] Bluetooth: hci4: command tx timeout [ 196.522947][ T8363] hsr_slave_0: entered promiscuous mode [ 196.539919][ T8363] hsr_slave_1: entered promiscuous mode [ 196.661112][ T8455] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.671777][ T8455] bond0: (slave team0): Enslaving as an active interface with an up link [ 196.798990][ T5103] bt_warn_ratelimited: 23 callbacks suppressed [ 196.799009][ T5103] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 197.264255][ T8363] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.482217][ T8363] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.604361][ T8363] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.749893][ T8363] bond0: (slave netdevsim0): Releasing backup interface [ 197.792005][ T8363] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.071484][ T8363] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.113870][ T8363] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.146942][ T8526] team0: Port device netdevsim0 added [ 198.172996][ T8363] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.189320][ T8363] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.209251][ T8526] validate_nla: 18 callbacks suppressed [ 198.209267][ T8526] netlink: 'syz.2.1027': attribute type 29 has an invalid length. [ 198.250849][ T8526] netlink: 'syz.2.1027': attribute type 29 has an invalid length. [ 198.274005][ T8529] netlink: 'syz.2.1027': attribute type 29 has an invalid length. [ 198.449252][ T8363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.507298][ T8363] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.530151][ T8543] __nla_validate_parse: 13 callbacks suppressed [ 198.530168][ T8543] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1034'. [ 198.554551][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.561704][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.587251][ T5103] Bluetooth: hci4: command tx timeout [ 198.646292][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.653479][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.695585][ T8551] netlink: 'syz.4.1036': attribute type 10 has an invalid length. [ 198.747033][ T8556] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 198.767028][ T8556] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1038'. [ 198.784100][ T8556] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1038'. [ 198.825145][ T5103] Bluetooth: hci3: command tx timeout [ 198.902142][ T8551] bond0: (slave bond_slave_0): Releasing backup interface [ 198.987593][ T8557] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1036'. [ 199.168931][ T8575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1044'. [ 199.201487][ T8575] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1044'. [ 199.234365][ T8577] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1044'. [ 199.384475][ T8584] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1047'. [ 199.523276][ T8363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.626976][ T8363] veth0_vlan: entered promiscuous mode [ 199.662559][ T8363] veth1_vlan: entered promiscuous mode [ 199.760929][ T8363] veth0_macvtap: entered promiscuous mode [ 199.789154][ T8363] veth1_macvtap: entered promiscuous mode [ 199.815597][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.829026][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.870320][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.882212][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.893052][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.904733][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.922103][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.957375][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.999695][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.028710][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.049467][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.060290][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.070166][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.082376][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.122575][ T8363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.160738][ T8608] netlink: 'syz.2.1053': attribute type 10 has an invalid length. [ 200.172574][ T8612] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1053'. [ 200.229223][ T8619] netlink: 'syz.1.1057': attribute type 3 has an invalid length. [ 200.233669][ T8613] team0: Port device team_slave_0 removed [ 200.248095][ T8619] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1057'. [ 200.253792][ T8613] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 200.280835][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.322447][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.334493][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.356371][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.377214][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.401859][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.422801][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.442641][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.463406][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.482671][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.506441][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.530695][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.564366][ T8363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.596485][ T8363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.621550][ T8363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.667472][ T5103] Bluetooth: hci4: command tx timeout [ 200.725901][ T8363] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.744608][ T8363] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.762476][ T8363] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.791291][ T8363] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.038283][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.072339][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.112510][ T2477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.124030][ T2477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.526672][ T8659] netlink: 'syz.4.1068': attribute type 10 has an invalid length. [ 201.546640][ T8661] netlink: 'syz.3.1070': attribute type 3 has an invalid length. [ 201.959815][ T8670] netlink: 'syz.3.1071': attribute type 29 has an invalid length. [ 202.478859][ T8698] FAULT_INJECTION: forcing a failure. [ 202.478859][ T8698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.497631][ T8698] CPU: 0 PID: 8698 Comm: syz.1.1086 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 202.507715][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 202.517763][ T8698] Call Trace: [ 202.521029][ T8698] [ 202.523953][ T8698] dump_stack_lvl+0x241/0x360 [ 202.528646][ T8698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.533865][ T8698] ? __pfx__printk+0x10/0x10 [ 202.538453][ T8698] ? __pfx_lock_release+0x10/0x10 [ 202.543473][ T8698] should_fail_ex+0x3b0/0x4e0 [ 202.548145][ T8698] _copy_from_iter+0x1f6/0x1960 [ 202.552996][ T8698] ? __virt_addr_valid+0x183/0x520 [ 202.558096][ T8698] ? skb_set_owner_w+0x238/0x3e0 [ 202.563030][ T8698] ? __pfx__copy_from_iter+0x10/0x10 [ 202.568307][ T8698] ? __pfx__copy_from_iter+0x10/0x10 [ 202.573590][ T8698] ? page_copy_sane+0x154/0x260 [ 202.578434][ T8698] copy_page_from_iter+0x7a/0x100 [ 202.583446][ T8698] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 202.589256][ T8698] tun_get_user+0xe9e/0x4560 [ 202.593857][ T8698] ? __pfx_tun_get_user+0x10/0x10 [ 202.598878][ T8698] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 202.604331][ T8698] ? tun_get+0x1e/0x2f0 [ 202.608498][ T8698] ? tun_get+0x1e/0x2f0 [ 202.612654][ T8698] ? tun_get+0x27d/0x2f0 [ 202.616893][ T8698] tun_chr_write_iter+0x113/0x1f0 [ 202.621915][ T8698] vfs_write+0xa72/0xc90 [ 202.626157][ T8698] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 202.631698][ T8698] ? __pfx_vfs_write+0x10/0x10 [ 202.636467][ T8698] ksys_write+0x1a0/0x2c0 [ 202.640787][ T8698] ? __pfx_ksys_write+0x10/0x10 [ 202.645626][ T8698] ? do_syscall_64+0x100/0x230 [ 202.650382][ T8698] ? do_syscall_64+0xb6/0x230 [ 202.655052][ T8698] do_syscall_64+0xf3/0x230 [ 202.659549][ T8698] ? clear_bhb_loop+0x35/0x90 [ 202.664225][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.670112][ T8698] RIP: 0033:0x7f5fda175bd9 [ 202.674517][ T8698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.694115][ T8698] RSP: 002b:00007f5fdaf8c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.702518][ T8698] RAX: ffffffffffffffda RBX: 00007f5fda303f60 RCX: 00007f5fda175bd9 [ 202.710477][ T8698] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 202.718437][ T8698] RBP: 00007f5fdaf8c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 202.726396][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.734351][ T8698] R13: 000000000000000b R14: 00007f5fda303f60 R15: 00007ffc49ff6db8 [ 202.742320][ T8698] [ 202.754124][ T5103] Bluetooth: hci4: command tx timeout [ 203.515893][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.528595][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.537984][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.558248][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.566311][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 203.574303][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.897086][ T8753] validate_nla: 6 callbacks suppressed [ 203.897105][ T8753] netlink: 'syz.2.1107': attribute type 3 has an invalid length. [ 203.933116][ T8753] __nla_validate_parse: 12 callbacks suppressed [ 203.933135][ T8753] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1107'. [ 204.491792][ T8732] chnl_net:caif_netlink_parms(): no params data found [ 204.853015][ T8786] netlink: 'syz.1.1119': attribute type 3 has an invalid length. [ 204.861629][ T8786] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1119'. [ 204.936477][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.971632][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.012148][ T8732] bridge_slave_0: entered allmulticast mode [ 205.031463][ T8732] bridge_slave_0: entered promiscuous mode [ 205.087980][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.118294][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.140982][ T8732] bridge_slave_1: entered allmulticast mode [ 205.176789][ T8732] bridge_slave_1: entered promiscuous mode [ 205.415298][ T8804] syzkaller0: entered promiscuous mode [ 205.421470][ T8804] syzkaller0: entered allmulticast mode [ 205.467892][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.497671][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.623008][ T5103] Bluetooth: hci1: command tx timeout [ 207.036732][ T8816] netlink: 'syz.3.1127': attribute type 5 has an invalid length. [ 207.082621][ T8823] netlink: 'syz.1.1129': attribute type 10 has an invalid length. [ 207.094810][ T8823] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1129'. [ 207.105132][ T8826] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1129'. [ 207.159041][ T8732] team0: Port device team_slave_0 added [ 207.174594][ T8840] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1135'. [ 207.206198][ T8732] team0: Port device team_slave_1 added [ 207.301736][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.325005][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.404879][ T8732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.462339][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.476423][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.512718][ T8732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.652388][ T8732] hsr_slave_0: entered promiscuous mode [ 207.668283][ T8732] hsr_slave_1: entered promiscuous mode [ 207.687493][ T8732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.699478][ T8732] Cannot create hsr debugfs directory [ 207.713240][ T5103] Bluetooth: hci1: command tx timeout [ 208.165692][ T8732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.325164][ T8732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.537650][ T8732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.755664][ T8732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.268034][ T8732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.289219][ T8732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.307238][ T8732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.362441][ T8901] vxcan1: entered allmulticast mode [ 209.383852][ T8732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.474229][ T8908] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1152'. [ 209.506837][ T8908] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1152'. [ 209.532135][ T8899] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1152'. [ 209.568177][ T8903] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1152'. [ 209.718952][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.783197][ T5103] Bluetooth: hci1: command tx timeout [ 209.797757][ T8732] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.812426][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.819702][ T6068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.890959][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.898161][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.700122][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.424471][ T8732] veth0_vlan: entered promiscuous mode [ 211.470774][ T8732] veth1_vlan: entered promiscuous mode [ 211.675102][ T8732] veth0_macvtap: entered promiscuous mode [ 211.738391][ T8732] veth1_macvtap: entered promiscuous mode [ 211.818529][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.829057][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.839808][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.850616][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.860858][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.872080][ T53] Bluetooth: hci1: command tx timeout [ 211.878910][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.889133][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.899902][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.914831][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.925610][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.935836][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.946866][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.957023][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.967810][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.982908][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.993664][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.011622][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.026625][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 212.084546][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.120132][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.147543][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.164226][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.174837][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.186022][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.196443][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.208143][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.221514][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.243095][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.262496][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.286477][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.306547][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.323035][ T8965] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1169'. [ 212.329467][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.352365][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.372500][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.394711][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.402613][ T8965] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1169'. [ 212.422614][ T8732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.434389][ T8732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.443610][ T8732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.452319][ T8732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.505179][ T8960] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1169'. [ 212.822711][ T8964] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1169'. [ 212.856441][ T8969] netlink: 'syz.1.1171': attribute type 21 has an invalid length. [ 212.882486][ T8969] netlink: 'syz.1.1171': attribute type 20 has an invalid length. [ 212.904411][ T8969] IPv6: NLM_F_CREATE should be specified when creating new route [ 213.024032][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.058270][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.119136][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.150359][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.011892][ T8998] netlink: 'syz.3.1177': attribute type 39 has an invalid length. [ 214.414788][ T9012] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1182'. [ 214.997272][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.227445][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.330110][ T9044] netlink: 'syz.1.1194': attribute type 3 has an invalid length. [ 215.356920][ T9044] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1194'. [ 215.357255][ T9045] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1193'. [ 215.408158][ T9045] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1193'. [ 215.456147][ T9040] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1193'. [ 215.539818][ T9043] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1193'. [ 215.621275][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.634779][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.642429][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.652382][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.663342][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.670678][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.744544][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.930988][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.137274][ T9086] netlink: 'syz.3.1207': attribute type 3 has an invalid length. [ 216.161533][ T9086] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1207'. [ 216.337814][ T9091] syz.2.1209[9091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.338102][ T9091] syz.2.1209[9091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.424038][ T35] bridge_slave_1: left allmulticast mode [ 216.463242][ T35] bridge_slave_1: left promiscuous mode [ 216.469107][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.519468][ T35] bridge_slave_0: left allmulticast mode [ 216.530785][ T35] bridge_slave_0: left promiscuous mode [ 216.537636][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.639800][ T9111] netlink: 'syz.0.1211': attribute type 2 has an invalid length. [ 216.673046][ T9111] netlink: 'syz.0.1211': attribute type 1 has an invalid length. [ 216.689862][ T9111] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1211'. [ 217.053459][ T9125] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1215'. [ 217.343249][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.378792][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.392707][ T35] bond0 (unregistering): Released all slaves [ 217.418679][ T9058] chnl_net:caif_netlink_parms(): no params data found [ 217.439380][ T9125] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1215'. [ 217.525763][ T9122] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1215'. [ 217.545992][ T9135] netlink: 'syz.0.1221': attribute type 3 has an invalid length. [ 217.704089][ T5103] Bluetooth: hci1: command tx timeout [ 218.317403][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.345769][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.389348][ T9058] bridge_slave_0: entered allmulticast mode [ 218.404319][ T9058] bridge_slave_0: entered promiscuous mode [ 218.460026][ T35] hsr_slave_0: left promiscuous mode [ 218.476261][ T35] hsr_slave_1: left promiscuous mode [ 218.513322][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.521819][ T9189] netlink: 'syz.3.1231': attribute type 2 has an invalid length. [ 218.530286][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.537839][ T9189] netlink: 'syz.3.1231': attribute type 1 has an invalid length. [ 218.547215][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.560539][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.574217][ T9191] netlink: 'syz.1.1235': attribute type 3 has an invalid length. [ 218.624465][ T35] veth1_macvtap: left promiscuous mode [ 218.630386][ T35] veth0_macvtap: left promiscuous mode [ 218.645078][ T35] veth1_vlan: left promiscuous mode [ 218.657663][ T35] veth0_vlan: left promiscuous mode [ 219.173496][ T35] team0 (unregistering): Port device team_slave_1 removed [ 219.213148][ T35] team0 (unregistering): Port device team_slave_0 removed [ 219.572815][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.580873][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.591577][ T9058] bridge_slave_1: entered allmulticast mode [ 219.599008][ T9058] bridge_slave_1: entered promiscuous mode [ 219.739749][ T9058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.769060][ T9058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.785008][ T5103] Bluetooth: hci1: command tx timeout [ 220.187410][ T9058] team0: Port device team_slave_0 added [ 220.245752][ T9058] team0: Port device team_slave_1 added [ 220.451525][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.481848][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.528465][ T9227] netlink: 'syz.2.1247': attribute type 3 has an invalid length. [ 220.530089][ T9058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.543548][ T9227] __nla_validate_parse: 4 callbacks suppressed [ 220.543561][ T9227] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1247'. [ 220.567005][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.598463][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.637484][ T9058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.959739][ T9058] hsr_slave_0: entered promiscuous mode [ 220.974693][ T9058] hsr_slave_1: entered promiscuous mode [ 221.004284][ T9058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.053316][ T9058] Cannot create hsr debugfs directory [ 221.338080][ T35] gretap0: left allmulticast mode [ 221.358046][ T35] gretap0: left promiscuous mode [ 221.389111][ T35] bridge0: port 3(gretap0) entered disabled state [ 221.429049][ T35] bridge_slave_1: left allmulticast mode [ 221.444895][ T35] bridge_slave_1: left promiscuous mode [ 221.457991][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.493193][ T35] bridge_slave_0: left allmulticast mode [ 221.506656][ T35] bridge_slave_0: left promiscuous mode [ 221.519804][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.544341][ T35] bridge_slave_1: left allmulticast mode [ 221.558528][ T35] bridge_slave_1: left promiscuous mode [ 221.573182][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.577131][ T9280] netlink: 'syz.3.1261': attribute type 3 has an invalid length. [ 221.597303][ T35] bridge_slave_0: left allmulticast mode [ 221.613198][ T9280] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1261'. [ 221.613242][ T35] bridge_slave_0: left promiscuous mode [ 221.644945][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.863724][ T5103] Bluetooth: hci1: command tx timeout [ 222.482242][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.499356][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.510134][ T35] bond0 (unregistering): Released all slaves [ 222.691297][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.718285][ T35] bond0 (unregistering): Released all slaves [ 223.943851][ T5103] Bluetooth: hci1: command tx timeout [ 223.958498][ T9353] netlink: 'syz.3.1277': attribute type 2 has an invalid length. [ 223.989153][ T9352] netlink: 'syz.2.1278': attribute type 3 has an invalid length. [ 224.043014][ T9353] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 224.050764][ T9353] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1277'. [ 224.074836][ T9352] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1278'. [ 224.767617][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.792996][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.875167][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.908087][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.040600][ T35] hsr_slave_0: left promiscuous mode [ 225.047171][ T35] hsr_slave_1: left promiscuous mode [ 225.055015][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.062439][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.084293][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.091716][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.238686][ T35] veth1_macvtap: left promiscuous mode [ 225.253378][ T35] veth0_macvtap: left promiscuous mode [ 225.263473][ T35] veth1_vlan: left promiscuous mode [ 225.268850][ T35] veth0_vlan: left promiscuous mode [ 225.327696][ T35] veth1_macvtap: left promiscuous mode [ 225.346152][ T35] veth0_macvtap: left promiscuous mode [ 225.357420][ T35] veth1_vlan: left promiscuous mode [ 225.368826][ T35] veth0_vlan: left promiscuous mode [ 225.380154][ T9395] FAULT_INJECTION: forcing a failure. [ 225.380154][ T9395] name failslab, interval 1, probability 0, space 0, times 0 [ 225.422662][ T9395] CPU: 0 PID: 9395 Comm: syz.3.1292 Not tainted 6.10.0-rc6-syzkaller-00175-gf153831097b4 #0 [ 225.432756][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 225.442813][ T9395] Call Trace: [ 225.446098][ T9395] [ 225.449016][ T9395] dump_stack_lvl+0x241/0x360 [ 225.453691][ T9395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.458889][ T9395] ? __pfx__printk+0x10/0x10 [ 225.463480][ T9395] should_fail_ex+0x3b0/0x4e0 [ 225.468150][ T9395] ? __alloc_skb+0x1c3/0x440 [ 225.472726][ T9395] should_failslab+0x9/0x20 [ 225.477220][ T9395] kmem_cache_alloc_node_noprof+0x71/0x320 [ 225.483023][ T9395] __alloc_skb+0x1c3/0x440 [ 225.487432][ T9395] ? __pfx___alloc_skb+0x10/0x10 [ 225.492355][ T9395] ? is_bpf_text_address+0x285/0x2a0 [ 225.497634][ T9395] alloc_skb_with_frags+0xc3/0x770 [ 225.502739][ T9395] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 225.508970][ T9395] sock_alloc_send_pskb+0x91a/0xa60 [ 225.514173][ T9395] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 225.519887][ T9395] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 225.525427][ T9395] ? __ip_append_data+0x2a33/0x40b0 [ 225.530620][ T9395] __ip_append_data+0x2c55/0x40b0 [ 225.535657][ T9395] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 225.541199][ T9395] ? __kasan_kmalloc+0x98/0xb0 [ 225.545951][ T9395] ? ip_setup_cork+0x53f/0x8b0 [ 225.550833][ T9395] ? __pfx___ip_append_data+0x10/0x10 [ 225.556215][ T9395] ? ip_setup_cork+0x4ae/0x8b0 [ 225.560984][ T9395] ip_make_skb+0x198/0x420 [ 225.565415][ T9395] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 225.570975][ T9395] ? __pfx_ip_make_skb+0x10/0x10 [ 225.575919][ T9395] udp_sendmsg+0x1bef/0x2a60 [ 225.580514][ T9395] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 225.586050][ T9395] ? __pfx_udp_sendmsg+0x10/0x10 [ 225.590980][ T9395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.597298][ T9395] ? __local_bh_enable_ip+0x168/0x200 [ 225.602663][ T9395] ? inet_sendmsg+0x16b/0x390 [ 225.607326][ T9395] ? do_raw_spin_unlock+0x13c/0x8b0 [ 225.612523][ T9395] ? inet_sendmsg+0x2ba/0x390 [ 225.617190][ T9395] __sock_sendmsg+0x1a6/0x270 [ 225.621862][ T9395] ____sys_sendmsg+0x525/0x7d0 [ 225.626627][ T9395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.631912][ T9395] __sys_sendmsg+0x2b0/0x3a0 [ 225.636496][ T9395] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.641600][ T9395] ? __hrtimer_run_queues+0xcdc/0xd50 [ 225.646983][ T9395] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 225.653214][ T9395] ? do_syscall_64+0xb6/0x230 [ 225.657888][ T9395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.664205][ T9395] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.670515][ T9395] ? __irq_exit_rcu+0x100/0x1c0 [ 225.675356][ T9395] ? do_syscall_64+0xb6/0x230 [ 225.680025][ T9395] do_syscall_64+0xf3/0x230 [ 225.684521][ T9395] ? clear_bhb_loop+0x35/0x90 [ 225.689193][ T9395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.695080][ T9395] RIP: 0033:0x7fd451775bd9 [ 225.699481][ T9395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.719072][ T9395] RSP: 002b:00007fd452547048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.727482][ T9395] RAX: ffffffffffffffda RBX: 00007fd451903f60 RCX: 00007fd451775bd9 [ 225.735465][ T9395] RDX: 0000000000000000 RSI: 0000000020000b40 RDI: 0000000000000006 [ 225.743424][ T9395] RBP: 00007fd4525470a0 R08: 0000000000000000 R09: 0000000000000000 [ 225.751380][ T9395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.759338][ T9395] R13: 000000000000004d R14: 00007fd451903f60 R15: 00007ffdce08c678 [ 225.767309][ T9395] [ 225.781790][ T9395] netlink: 'syz.3.1292': attribute type 3 has an invalid length. [ 225.805713][ T9395] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1292'. [ 225.877652][ T9400] netlink: 'syz.2.1293': attribute type 3 has an invalid length. [ 225.886925][ T9400] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1293'. [ 226.259801][ T35] team0 (unregistering): Port device hsr_slave_0 removed [ 226.414993][ T35] team0 (unregistering): Port device team_slave_1 removed [ 226.482075][ T35] team0 (unregistering): Port device team_slave_0 removed [ 227.217519][ T35] team0 (unregistering): Port device team_slave_1 removed [ 227.255659][ T35] team0 (unregistering): Port device team_slave_0 removed [ 227.764872][ T9421] delete_channel: no stack [ 227.770085][ T9421] delete_channel: no stack [ 227.838887][ T9058] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.902015][ T9058] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.956933][ T9058] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.007777][ T9058] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.111976][ T9441] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1306'. [ 228.169016][ T9441] openvswitch: netlink: ufid size 3079 bytes exceeds the range (1, 16) [ 228.221939][ T9441] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 228.358270][ T9058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.478235][ T9058] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.548420][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.555663][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.610197][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.617454][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.655228][ T9461] netlink: 'syz.0.1310': attribute type 3 has an invalid length. [ 228.683879][ T9461] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1310'. [ 228.800678][ T9058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.842988][ T9058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.205698][ T9495] IPv6: Can't replace route, no match found [ 229.436653][ T9058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.091894][ T9058] veth0_vlan: entered promiscuous mode [ 230.140161][ T9058] veth1_vlan: entered promiscuous mode [ 230.216943][ T9553] netlink: 'syz.1.1333': attribute type 2 has an invalid length. [ 230.241497][ T9058] veth0_macvtap: entered promiscuous mode [ 230.269566][ T9058] veth1_macvtap: entered promiscuous mode [ 230.270028][ T9553] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1333'. [ 230.361316][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.400378][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.444367][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.462590][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.473007][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.487221][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.500727][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.513239][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.524125][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.544897][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.572972][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.594241][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.636531][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.671658][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.691012][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.701451][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.747489][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.760055][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.770822][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.781501][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.813056][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.834442][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.862890][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.883121][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.902751][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.918488][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.086271][ T9058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.130392][ T9058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.143669][ T9058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.180505][ T9058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.218917][ T12] bridge_slave_1: left allmulticast mode [ 231.238111][ T9605] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 231.253022][ T12] bridge_slave_1: left promiscuous mode [ 231.265206][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.282596][ T12] bridge_slave_0: left allmulticast mode [ 231.291484][ T12] bridge_slave_0: left promiscuous mode [ 231.298687][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.921036][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.934696][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.949330][ T12] bond0 (unregistering): Released all slaves [ 231.990290][ T9605] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 232.040385][ T9611] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 232.082627][ T9613] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 232.096620][ T9616] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 232.163308][ T9619] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 232.258077][ T9621] netlink: 'syz.0.1344': attribute type 29 has an invalid length. [ 232.657934][ T2823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.683140][ T2823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.801800][ T12] hsr_slave_0: left promiscuous mode [ 232.849454][ T12] hsr_slave_1: left promiscuous mode [ 232.886767][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.942568][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.958645][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.988978][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.060622][ T12] veth1_macvtap: left promiscuous mode [ 233.068061][ T12] veth0_macvtap: left promiscuous mode [ 233.074646][ T12] veth1_vlan: left promiscuous mode [ 233.080115][ T12] veth0_vlan: left promiscuous mode [ 233.556402][ T12] team0 (unregistering): Port device team_slave_1 removed [ 233.590813][ T12] team0 (unregistering): Port device team_slave_0 removed [ 233.969959][ T2798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.978262][ T2798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.004652][ T9685] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1357'. [ 234.074748][ T9693] netlink: 'syz.0.1360': attribute type 29 has an invalid length. [ 234.100664][ T9693] netlink: 'syz.0.1360': attribute type 29 has an invalid length. [ 234.747300][ T9724] netlink: 'syz.0.1371': attribute type 11 has an invalid length. [ 234.765813][ T9724] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.1371'. [ 234.797338][ T9726] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1372'. [ 234.818345][ T9726] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.842133][ T9726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.849419][ T9726] IPv6: NLM_F_CREATE should be set when creating new route [ 234.856741][ T9726] IPv6: NLM_F_CREATE should be set when creating new route [ 234.863994][ T9726] IPv6: NLM_F_CREATE should be set when creating new route [ 234.927810][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.080226][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.166225][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.252014][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.264467][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.276353][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.299796][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.316452][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.329762][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.367022][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.711743][ T12] bridge_slave_1: left allmulticast mode [ 235.738462][ T12] bridge_slave_1: left promiscuous mode [ 235.760787][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.787555][ T12] bridge_slave_0: left allmulticast mode [ 235.807914][ T12] bridge_slave_0: left promiscuous mode [ 235.820715][ T12] bridge0: port 1(bridge_slave_0) entered disabled state SYZFAIL: proc resp pipe read failed n=-1 (errno 11: Resource temporarily unavailable) [ 236.636271][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.648608][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.659878][ T12] bond0 (unregistering): Released all slaves [ 237.050534][ T12] hsr_slave_0: left promiscuous mode [ 237.056755][ T12] hsr_slave_1: left promiscuous mode [ 237.075836][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.089248][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.098644][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.106546][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.139346][ T12] veth1_macvtap: left promiscuous mode [ 237.145144][ T12] veth0_macvtap: left promiscuous mode [ 237.150791][ T12] veth1_vlan: left promiscuous mode [ 237.157258][ T12] veth0_vlan: left promiscuous mode [ 237.493740][ T12] team0 (unregistering): Port device team_slave_1 removed [ 237.529536][ T12] team0 (unregistering): Port device team_slave_0 removed [ 238.237524][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.306933][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.399447][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.462121][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.622773][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.704783][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.764809][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.820374][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.026839][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.105232][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.179758][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.250851][ T12] team0: Port device netdevsim0 removed [ 239.259649][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.394136][ T12] bridge_slave_1: left allmulticast mode [ 239.399811][ T12] bridge_slave_1: left promiscuous mode [ 239.405807][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.418287][ T12] bridge_slave_0: left promiscuous mode [ 239.427337][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.438167][ T12] bridge_slave_1: left allmulticast mode [ 239.444045][ T12] bridge_slave_1: left promiscuous mode [ 239.450890][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.459703][ T12] bridge_slave_0: left promiscuous mode [ 239.466742][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.480636][ T12] gretap0: left allmulticast mode [ 239.485803][ T12] gretap0: left promiscuous mode [ 239.490838][ T12] bridge0: port 3(gretap0) entered disabled state [ 239.499682][ T12] bridge_slave_1: left allmulticast mode [ 239.505478][ T12] bridge_slave_1: left promiscuous mode [ 239.511119][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.521649][ T12] bridge_slave_0: left allmulticast mode [ 239.527558][ T12] bridge_slave_0: left promiscuous mode [ 239.533773][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.297758][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.308882][ T12] bond0 (unregistering): Released all slaves [ 240.384139][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.396134][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.406660][ T12] bond0 (unregistering): Released all slaves [ 240.484721][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.495173][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 240.509122][ T12] bond0 (unregistering): Released all slaves [ 241.314966][ T12] hsr_slave_0: left promiscuous mode [ 241.321002][ T12] hsr_slave_1: left promiscuous mode [ 241.327238][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.335859][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.343752][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.351140][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.362728][ T12] hsr_slave_0: left promiscuous mode [ 241.368701][ T12] hsr_slave_1: left promiscuous mode [ 241.375620][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.383094][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.391234][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.399339][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.411493][ T12] hsr_slave_0: left promiscuous mode [ 241.417375][ T12] hsr_slave_1: left promiscuous mode [ 241.423703][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.431090][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.439021][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.447045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.483465][ T12] veth1_macvtap: left promiscuous mode [ 241.488968][ T12] veth0_macvtap: left promiscuous mode [ 241.494660][ T12] veth1_vlan: left promiscuous mode [ 241.500402][ T12] veth0_vlan: left promiscuous mode [ 241.507076][ T12] veth1_macvtap: left promiscuous mode [ 241.512574][ T12] veth0_macvtap: left promiscuous mode [ 241.518808][ T12] veth1_vlan: left promiscuous mode [ 241.524237][ T12] veth0_vlan: left promiscuous mode [ 241.530372][ T12] veth1_macvtap: left promiscuous mode [ 241.536085][ T12] veth0_macvtap: left promiscuous mode [ 241.541636][ T12] veth1_vlan: left promiscuous mode [ 241.547114][ T12] veth0_vlan: left promiscuous mode [ 242.008693][ T12] team0 (unregistering): Port device team_slave_1 removed [ 242.038382][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.537026][ T12] team0 (unregistering): Port device team_slave_1 removed [ 242.567138][ T12] team0 (unregistering): Port device team_slave_0 removed [ 243.071467][ T12] team0 (unregistering): Port device team_slave_1 removed [ 243.108380][ T12] team0 (unregistering): Port device team_slave_0 removed