last executing test programs: 1m58.177695725s ago: executing program 1 (id=80): r0 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000a}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42ae, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0x1009d, &(0x7f00000002c0)=[{}, {}], 0x8, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x1e, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xd, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x2, 0x24, &(0x7f00000006c0)=""/36, 0xc88fb49e68b10457, 0x11, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x7, 0x0, &(0x7f0000000380), &(0x7f00000004c0)='GPL\x00', 0xcbd, 0x1000, &(0x7f0000000980)=""/4096, 0x41100, 0x0, '\x00', r3, @fallback, r1, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x7, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff], &(0x7f0000000840)=[{0x3, 0x2, 0xe, 0x4}, {0x0, 0x4, 0xa}, {0x4, 0x5, 0x5, 0x7}, {0x5, 0x3, 0xf, 0x3}], 0x10, 0xc, @void, @value}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000001a40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002000}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x46}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @func]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1e, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1}, 0x0) r10 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x541b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_clone(0x40000000, &(0x7f0000002a00)="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", 0x1000, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000001b40)="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") perf_event_open(&(0x7f0000001ac0)={0x0, 0x80, 0x8, 0x81, 0x10, 0x81, 0x0, 0x4, 0x2200, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x8}, 0x104100, 0x2, 0x8, 0x9, 0x8, 0x8, 0x1, 0x0, 0x4, 0x0, 0x2}, r13, 0x9, r8, 0x1) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r14, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa00"], 0xcfa4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m57.655042226s ago: executing program 1 (id=86): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="660a00000000000061116000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m39.120766135s ago: executing program 1 (id=86): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="660a00000000000061116000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m6.506919946s ago: executing program 1 (id=86): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="660a00000000000061116000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 40.660902721s ago: executing program 1 (id=86): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="660a00000000000061116000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 20.713937727s ago: executing program 1 (id=86): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="660a00000000000061116000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.84199167s ago: executing program 2 (id=553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x60}]}) 2.841041329s ago: executing program 0 (id=554): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073119a000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.740931184s ago: executing program 4 (id=555): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430020005e140602000000000e00120010000000028000001294", 0x2e}], 0x1}, 0x0) 2.464957488s ago: executing program 4 (id=557): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x8004745a, 0x2000000c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r3, 0xa, 0x1, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000740)}, 0x40) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x14, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x14, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000000000001801000000006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x220}, 0x0, 0x0, r5, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x220}, 0x0, 0x0, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x10000, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x10000, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.342683482s ago: executing program 0 (id=558): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x33, 0x0, 0x4) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10021) sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)='\x00', 0xfffffdef}], 0x1}, 0x11) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x3, 0x8, 0x101, 0x88, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x6, @void, @value, @void, @value}, 0x50) 2.336477188s ago: executing program 2 (id=559): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x805, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="2000000020008100090f9becdb4cb96b02000000fd0000010064000020000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f7ff00850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xf70}, 0x18) 2.201574472s ago: executing program 3 (id=560): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aab3dc850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x42) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0x2, 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$unix(0x1, 0x0, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x1, 0x106) 2.025019916s ago: executing program 4 (id=561): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x578}, 0x400, 0x0, 0xd9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0xb1000000}, {0x6}]}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x40047459, 0x0) 1.980875932s ago: executing program 3 (id=562): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018300000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000180900002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5e}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.960473452s ago: executing program 0 (id=563): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010105}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="180000000000000084000000000000004805dc000000090020000000000000008400000008"], 0x38}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8000, 0xd7}, 0x0, 0x0, 0x0, 0x0, 0x7876e8a6}, 0x0, 0x0, r0, 0xa) socketpair(0x1d, 0x800, 0x10001, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(0x0, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)='mem\x00\x0f\xff\xff\xff\xe3\x00\x00I\x0e\x00') r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x48000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='sched_migrate_task\x00'}, 0x10) write$cgroup_subtree(r7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) 1.730795134s ago: executing program 2 (id=564): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba5, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8917, &(0x7f00000001c0)={r0}) (fail_nth: 2) 1.388768295s ago: executing program 0 (id=565): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000069000000040000000500000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00)'], 0x48) 1.388155238s ago: executing program 3 (id=566): socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4f}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac040008007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bd04000000000000009c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f08"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.220800215s ago: executing program 0 (id=567): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_exit\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.153077366s ago: executing program 4 (id=568): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc250000017f03c3f7000000016ee2ffca1b1f00ff0f0000000000d78105001ad6e747033a0093b837dc6cc01e32c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff00"/134, 0x86}], 0x1, 0x0, 0x0, 0x7}, 0x40000) 887.044951ms ago: executing program 4 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x60}]}) 819.771986ms ago: executing program 3 (id=570): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x340040c1) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, 0x20000040) (async, rerun: 64) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) (async, rerun: 64) r3 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r2}, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1}, 0x0) close(r5) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYRES8=r1, @ANYRES16=0x0, @ANYRES16=r6], &(0x7f0000000280)='syzkaller\x00', 0x80, 0x0, 0x0, 0x61780, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='neigh_create\x00', r9}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe8000000000000227bfa7b09303960e2f80ae"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) (async) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0xfdef) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r13, 0x4) (async) r14 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r14, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 768.950869ms ago: executing program 2 (id=571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000675ef0c2a5c38e08628000008ea4"], &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x90) 378.723169ms ago: executing program 2 (id=572): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x200000000000}, 0x8060, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x3, 0x0, 0x0, 0x401, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="b2", 0x34000}], 0x4}, 0x900000000000000) 289.635808ms ago: executing program 3 (id=573): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x33, 0x0, 0x4) socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10021) sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)='\x00', 0xfffffdef}], 0x1}, 0x11) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x3, 0x8, 0x101, 0x88, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x6, @void, @value, @void, @value}, 0x50) 135.436993ms ago: executing program 4 (id=574): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc0600000ca705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 81.046426ms ago: executing program 0 (id=575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000001600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (fail_nth: 8) 55.853199ms ago: executing program 3 (id=576): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="ee", 0x1}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)='b', 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="bb", 0x1}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="e0", 0x19ffe}], 0x1, 0x0, 0x3f4}, 0xccff) 0s ago: executing program 2 (id=577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018300000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000180900002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5e}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): xbc0 [ 91.696568][ T5603] ? __pfx_lock_release+0x10/0x10 [ 91.701655][ T5603] ? __pfx_vfs_read+0x10/0x10 [ 91.706424][ T5603] ? __fget_files+0x3f3/0x470 [ 91.711170][ T5603] ? __fdget_pos+0x24e/0x320 [ 91.715807][ T5603] ksys_read+0x1a0/0x2c0 [ 91.720114][ T5603] ? __pfx_ksys_read+0x10/0x10 [ 91.724932][ T5603] ? do_syscall_64+0x100/0x230 [ 91.729750][ T5603] ? do_syscall_64+0xb6/0x230 [ 91.734476][ T5603] do_syscall_64+0xf3/0x230 [ 91.739023][ T5603] ? clear_bhb_loop+0x35/0x90 [ 91.743794][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.749733][ T5603] RIP: 0033:0x7f7793d7c93c [ 91.754193][ T5603] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 91.773854][ T5603] RSP: 002b:00007f7794b84030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.782325][ T5603] RAX: ffffffffffffffda RBX: 00007f7793f35f80 RCX: 00007f7793d7c93c [ 91.790431][ T5603] RDX: 000000000000000f RSI: 00007f7794b840a0 RDI: 0000000000000007 [ 91.798526][ T5603] RBP: 00007f7794b84090 R08: 0000000000000000 R09: 0000000000000000 [ 91.806538][ T5603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.814544][ T5603] R13: 0000000000000000 R14: 00007f7793f35f80 R15: 00007ffc4a4ca2d8 [ 91.822594][ T5603] [ 91.827694][ T5239] Bluetooth: hci1: command tx timeout [ 91.951250][ T5563] chnl_net:caif_netlink_parms(): no params data found [ 92.278855][ T5563] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.297827][ T5563] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.308033][ T5563] bridge_slave_0: entered allmulticast mode [ 92.315509][ T5563] bridge_slave_0: entered promiscuous mode [ 92.422983][ T5563] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.430567][ T5563] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.438208][ T5563] bridge_slave_1: entered allmulticast mode [ 92.445544][ T5563] bridge_slave_1: entered promiscuous mode [ 92.485723][ T5563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.507910][ T5563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.779576][ T5638] netlink: 'syz.3.117': attribute type 6 has an invalid length. [ 92.841034][ T5563] team0: Port device team_slave_0 added [ 92.876857][ T5563] team0: Port device team_slave_1 added [ 92.884466][ T5642] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.119'. [ 92.903159][ T5642] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 92.935509][ T5563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.964093][ T5563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.012368][ T5563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.061066][ T5563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.073943][ T5563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.402174][ T5563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.867930][ T5654] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.123'. [ 93.895843][ T5654] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 93.926828][ T5239] Bluetooth: hci1: command tx timeout [ 94.255588][ T5563] hsr_slave_0: entered promiscuous mode [ 94.293646][ T5563] hsr_slave_1: entered promiscuous mode [ 94.301046][ T5563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.315283][ T5563] Cannot create hsr debugfs directory [ 94.450396][ T5669] netlink: 'syz.2.129': attribute type 2 has an invalid length. [ 94.506353][ T5669] netlink: 156 bytes leftover after parsing attributes in process `syz.2.129'. [ 94.645601][ T5672] netlink: 'syz.0.130': attribute type 3 has an invalid length. [ 94.673498][ T5672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.130'. [ 94.727742][ T5676] syz.2.132: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 94.747778][ T5676] CPU: 0 UID: 0 PID: 5676 Comm: syz.2.132 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 94.757575][ T5676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 94.767767][ T5676] Call Trace: [ 94.771084][ T5676] [ 94.774047][ T5676] dump_stack_lvl+0x241/0x360 [ 94.778791][ T5676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.784051][ T5676] ? __pfx__printk+0x10/0x10 [ 94.788714][ T5676] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 94.795184][ T5676] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 94.801726][ T5676] warn_alloc+0x278/0x410 [ 94.806105][ T5676] ? stack_depot_save_flags+0x6e4/0x830 [ 94.811708][ T5676] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 94.817821][ T5676] ? __pfx_warn_alloc+0x10/0x10 [ 94.822723][ T5676] ? kasan_save_track+0x3f/0x80 [ 94.827624][ T5676] ? __kasan_kmalloc+0x98/0xb0 [ 94.832415][ T5676] ? xsk_setsockopt+0x598/0x950 [ 94.837298][ T5676] ? do_sock_setsockopt+0x3af/0x720 [ 94.842532][ T5676] ? __sys_setsockopt+0x1a8/0x250 [ 94.847590][ T5676] ? __x64_sys_setsockopt+0xb5/0xd0 [ 94.852839][ T5676] ? do_syscall_64+0xf3/0x230 [ 94.857553][ T5676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.863671][ T5676] __vmalloc_node_range_noprof+0x126/0x13f0 [ 94.869633][ T5676] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.876021][ T5676] ? __kasan_kmalloc+0x98/0xb0 [ 94.880820][ T5676] ? xskq_create+0x54/0x170 [ 94.885349][ T5676] vmalloc_user_noprof+0x74/0x80 [ 94.890330][ T5676] ? xskq_create+0xb6/0x170 [ 94.894865][ T5676] xskq_create+0xb6/0x170 [ 94.899232][ T5676] xsk_init_queue+0xa1/0x100 [ 94.903850][ T5676] xsk_setsockopt+0x598/0x950 [ 94.908560][ T5676] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.913968][ T5676] ? __pfx_aa_sk_perm+0x10/0x10 [ 94.918840][ T5676] ? __pfx_lock_acquire+0x10/0x10 [ 94.923909][ T5676] ? __fget_files+0x29/0x470 [ 94.928542][ T5676] ? aa_sock_opt_perm+0x79/0x120 [ 94.933521][ T5676] ? __pfx_xsk_setsockopt+0x10/0x10 [ 94.939188][ T5676] do_sock_setsockopt+0x3af/0x720 [ 94.944255][ T5676] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 94.949830][ T5676] ? __fget_files+0x29/0x470 [ 94.954447][ T5676] ? __fget_files+0x3f3/0x470 [ 94.959196][ T5676] ? __fget_files+0x29/0x470 [ 94.963852][ T5676] __sys_setsockopt+0x1a8/0x250 [ 94.968746][ T5676] __x64_sys_setsockopt+0xb5/0xd0 [ 94.973810][ T5676] do_syscall_64+0xf3/0x230 [ 94.978342][ T5676] ? clear_bhb_loop+0x35/0x90 [ 94.983059][ T5676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.988981][ T5676] RIP: 0033:0x7f3fec37def9 [ 94.993414][ T5676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.013062][ T5676] RSP: 002b:00007f3fed205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.021530][ T5676] RAX: ffffffffffffffda RBX: 00007f3fec535f80 RCX: 00007f3fec37def9 [ 95.029580][ T5676] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 95.037584][ T5676] RBP: 00007f3fec3f0b76 R08: 0000000000000004 R09: 0000000000000000 [ 95.045589][ T5676] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 95.053608][ T5676] R13: 0000000000000000 R14: 00007f3fec535f80 R15: 00007ffd87fa27b8 [ 95.061651][ T5676] [ 95.087725][ T5676] Mem-Info: [ 95.091117][ T5676] active_anon:4069 inactive_anon:0 isolated_anon:0 [ 95.091117][ T5676] active_file:1284 inactive_file:38192 isolated_file:0 [ 95.091117][ T5676] unevictable:768 dirty:261 writeback:0 [ 95.091117][ T5676] slab_reclaimable:8500 slab_unreclaimable:94866 [ 95.091117][ T5676] mapped:20900 shmem:1248 pagetables:767 [ 95.091117][ T5676] sec_pagetables:0 bounce:0 [ 95.091117][ T5676] kernel_misc_reclaimable:0 [ 95.091117][ T5676] free:1370838 free_pcp:516 free_cma:0 [ 95.143739][ T5678] netlink: 'syz.3.131': attribute type 6 has an invalid length. [ 95.158875][ T5676] Node 0 active_anon:17020kB inactive_anon:0kB active_file:5136kB inactive_file:152700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83528kB dirty:1052kB writeback:0kB shmem:3400kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10500kB pagetables:3032kB sec_pagetables:0kB all_unreclaimable? no [ 95.236362][ T5676] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 95.305218][ T5676] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.357599][ T5563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.457475][ T5676] lowmem_reserve[]: 0 2465 2466 0 0 [ 95.524672][ T5676] Node 0 DMA32 free:1535840kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19536kB inactive_anon:0kB active_file:5136kB inactive_file:151880kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2552496kB mlocked:0kB bounce:0kB free_pcp:2472kB local_pcp:836kB free_cma:0kB [ 95.631367][ T5676] lowmem_reserve[]: 0 0 0 0 0 [ 95.637584][ T5676] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 95.675563][ T5676] lowmem_reserve[]: 0 0 0 0 0 [ 95.726595][ T5676] Node 1 Normal free:3926832kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 95.769805][ T5563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.823531][ T5676] lowmem_reserve[]: 0 0 0 0 0 [ 95.852448][ T5676] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.901929][ T5676] Node 0 DMA32: 407*4kB (UME) 111*8kB (UME) 84*16kB (UME) 33*32kB (ME) 18*64kB (UME) 22*128kB (UME) 18*256kB (UME) 8*512kB (UM) 10*1024kB (UM) 5*2048kB (UM) 367*4096kB (M) = 1541300kB [ 95.941182][ T5676] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 95.975636][ T5676] Node 1 Normal: 186*4kB (UME) 49*8kB (UME) 41*16kB (UME) 190*32kB (UME) 101*64kB (UME) 29*128kB (UME) 11*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 3*2048kB (UE) 951*4096kB (UM) = 3926912kB [ 96.005454][ T5239] Bluetooth: hci1: command tx timeout [ 96.057183][ T5676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.072598][ T5563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.105838][ T5676] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.136799][ T5676] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.148639][ T5697] netlink: 'syz.3.138': attribute type 29 has an invalid length. [ 96.166618][ T5676] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.189837][ T5697] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 96.202053][ T5676] 40775 total pagecache pages [ 96.202103][ T5676] 0 pages in swap cache [ 96.202116][ T5676] Free swap = 124996kB [ 96.202128][ T5676] Total swap = 124996kB [ 96.202147][ T5676] 2097051 pages RAM [ 96.202158][ T5676] 0 pages HighMem/MovableOnly [ 96.202169][ T5676] 427077 pages reserved [ 96.202179][ T5676] 0 pages cma reserved [ 96.300992][ T5697] hsr_slave_0: left promiscuous mode [ 96.358413][ T5697] hsr_slave_1: left promiscuous mode [ 96.687870][ T5563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.795798][ T5707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 97.002139][ T5714] netlink: 'syz.2.144': attribute type 6 has an invalid length. [ 97.146196][ T5563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.192708][ T5563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.239410][ T5563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.307600][ T5563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.831973][ T5563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.963673][ T5563] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.057299][ T5239] Bluetooth: hci1: command tx timeout [ 98.164906][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.172670][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.245138][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.252402][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.465847][ T5748] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.155'. [ 98.490838][ T5748] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 98.602077][ T5752] netlink: 'syz.4.157': attribute type 27 has an invalid length. [ 98.668896][ T5752] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.157'. [ 98.739870][ T5757] netlink: 14 bytes leftover after parsing attributes in process `syz.3.158'. [ 98.802680][ T5792] FAULT_INJECTION: forcing a failure. [ 98.802680][ T5792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.978960][ T5792] CPU: 1 UID: 0 PID: 5792 Comm: syz.2.159 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 98.988756][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 98.998862][ T5792] Call Trace: [ 99.002181][ T5792] [ 99.005146][ T5792] dump_stack_lvl+0x241/0x360 [ 99.009888][ T5792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.015162][ T5792] ? __pfx__printk+0x10/0x10 [ 99.019815][ T5792] ? __pfx_lock_release+0x10/0x10 [ 99.024929][ T5792] should_fail_ex+0x3b0/0x4e0 [ 99.029681][ T5792] _copy_from_iter+0x1ed/0x1d60 [ 99.034590][ T5792] ? __virt_addr_valid+0x183/0x530 [ 99.039749][ T5792] ? skb_set_owner_w+0x238/0x3e0 [ 99.044749][ T5792] ? __pfx_lock_release+0x10/0x10 [ 99.049843][ T5792] ? __pfx__copy_from_iter+0x10/0x10 [ 99.055184][ T5792] ? __virt_addr_valid+0x183/0x530 [ 99.060340][ T5792] ? __virt_addr_valid+0x183/0x530 [ 99.065512][ T5792] ? __virt_addr_valid+0x45f/0x530 [ 99.070689][ T5792] ? __phys_addr_symbol+0x2f/0x70 [ 99.075763][ T5792] ? __check_object_size+0x48e/0x900 [ 99.081095][ T5792] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 99.086887][ T5792] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 99.092677][ T5792] ? skb_put+0x114/0x1f0 [ 99.096983][ T5792] tun_get_user+0xec3/0x47e0 [ 99.101639][ T5792] ? perf_trace_lock+0x136/0x490 [ 99.106619][ T5792] ? __lock_acquire+0x1384/0x2050 [ 99.111714][ T5792] ? __pfx_tun_get_user+0x10/0x10 [ 99.116912][ T5792] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 99.122535][ T5792] ? tun_get+0x1e/0x2f0 [ 99.126748][ T5792] ? __pfx_lock_release+0x10/0x10 [ 99.131856][ T5792] ? tun_get+0x1e/0x2f0 [ 99.136078][ T5792] ? tun_get+0x27d/0x2f0 [ 99.140388][ T5792] tun_chr_write_iter+0x10d/0x1f0 [ 99.144255][ T5814] netlink: 'syz.0.160': attribute type 2 has an invalid length. [ 99.145444][ T5792] vfs_write+0xa6d/0xc90 [ 99.145490][ T5792] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 99.162986][ T5792] ? __pfx_vfs_write+0x10/0x10 [ 99.167833][ T5792] ? __fdget_pos+0x19a/0x320 [ 99.172475][ T5792] ksys_write+0x1a0/0x2c0 [ 99.176862][ T5792] ? __pfx_ksys_write+0x10/0x10 [ 99.181772][ T5792] ? do_syscall_64+0x100/0x230 [ 99.186596][ T5792] ? do_syscall_64+0xb6/0x230 [ 99.191343][ T5792] do_syscall_64+0xf3/0x230 [ 99.195920][ T5792] ? clear_bhb_loop+0x35/0x90 [ 99.200659][ T5792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.206609][ T5792] RIP: 0033:0x7f3fec37def9 [ 99.211058][ T5792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.230719][ T5792] RSP: 002b:00007f3fed1e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 99.239196][ T5792] RAX: ffffffffffffffda RBX: 00007f3fec536058 RCX: 00007f3fec37def9 [ 99.247213][ T5792] RDX: 000000000000ffdd RSI: 0000000020000840 RDI: 0000000000000003 [ 99.255225][ T5792] RBP: 00007f3fed1e4090 R08: 0000000000000000 R09: 0000000000000000 [ 99.263243][ T5792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.271259][ T5792] R13: 0000000000000001 R14: 00007f3fec536058 R15: 00007ffd87fa27b8 [ 99.279304][ T5792] [ 99.396549][ T5814] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.160'. [ 100.261059][ T5859] FAULT_INJECTION: forcing a failure. [ 100.261059][ T5859] name failslab, interval 1, probability 0, space 0, times 1 [ 100.275894][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: syz.3.162 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 100.285779][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 100.295879][ T5859] Call Trace: [ 100.299208][ T5859] [ 100.302206][ T5859] dump_stack_lvl+0x241/0x360 [ 100.306974][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.312251][ T5859] ? __pfx__printk+0x10/0x10 [ 100.316935][ T5859] ? fs_reclaim_acquire+0x93/0x140 [ 100.322132][ T5859] ? __pfx___might_resched+0x10/0x10 [ 100.327540][ T5859] should_fail_ex+0x3b0/0x4e0 [ 100.332325][ T5859] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 100.338132][ T5859] should_failslab+0xac/0x100 [ 100.342892][ T5859] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 100.348698][ T5859] __kmalloc_noprof+0xd8/0x400 [ 100.353588][ T5859] tomoyo_realpath_from_path+0xcf/0x5e0 [ 100.359275][ T5859] tomoyo_path_number_perm+0x23a/0x880 [ 100.364849][ T5859] ? tomoyo_path_number_perm+0x208/0x880 [ 100.370577][ T5859] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.376782][ T5859] ? __fget_files+0x29/0x470 [ 100.381455][ T5859] ? __fget_files+0x3f3/0x470 [ 100.386241][ T5859] security_file_ioctl+0xc6/0x2a0 [ 100.391358][ T5859] __se_sys_ioctl+0x47/0x170 [ 100.396043][ T5859] do_syscall_64+0xf3/0x230 [ 100.400629][ T5859] ? clear_bhb_loop+0x35/0x90 [ 100.405387][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.411347][ T5859] RIP: 0033:0x7f7793d7def9 [ 100.415831][ T5859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.435529][ T5859] RSP: 002b:00007f7794b84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.444015][ T5859] RAX: ffffffffffffffda RBX: 00007f7793f35f80 RCX: 00007f7793d7def9 [ 100.452233][ T5859] RDX: 00000000200000c0 RSI: 000000004008240b RDI: 0000000000000003 [ 100.460293][ T5859] RBP: 00007f7794b84090 R08: 0000000000000000 R09: 0000000000000000 [ 100.468309][ T5859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.476316][ T5859] R13: 0000000000000000 R14: 00007f7793f35f80 R15: 00007ffc4a4ca2d8 [ 100.484379][ T5859] [ 100.498984][ T5859] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.590602][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 103.720759][ T5563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.818534][ T5902] netlink: 'syz.3.173': attribute type 10 has an invalid length. [ 103.864339][ T5906] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 103.883909][ T5906] hsr_slave_0: left promiscuous mode [ 103.895480][ T5906] hsr_slave_1: left promiscuous mode [ 104.016924][ T5911] netlink: 12186 bytes leftover after parsing attributes in process `syz.3.177'. [ 104.052931][ T5563] veth0_vlan: entered promiscuous mode [ 104.091364][ T5911] netlink: 'syz.3.177': attribute type 21 has an invalid length. [ 104.123177][ T5911] netlink: 176 bytes leftover after parsing attributes in process `syz.3.177'. [ 104.155802][ T5914] netlink: 144 bytes leftover after parsing attributes in process `syz.4.178'. [ 104.169798][ T5916] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.177'. [ 104.194751][ T5563] veth1_vlan: entered promiscuous mode [ 104.209939][ T5917] netlink: 'syz.2.179': attribute type 2 has an invalid length. [ 104.229667][ T5917] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.179'. [ 104.263316][ T5563] veth0_macvtap: entered promiscuous mode [ 104.305270][ T5563] veth1_macvtap: entered promiscuous mode [ 104.865377][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.896448][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.933637][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.966462][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.985329][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.997092][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.007217][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.017898][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.029664][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.040218][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.053204][ T5563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.071391][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.091616][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.105493][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.120621][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.130707][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.144114][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.154260][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.165867][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.182963][ T5563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.193545][ T5563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.217979][ T5563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.274293][ T5563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.306628][ T5563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.315581][ T5563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.336563][ T5563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.789384][ T5954] tap0: tun_chr_ioctl cmd 2147767517 [ 105.811099][ T5816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.843023][ T5816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.937737][ T5954] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.191'. [ 105.973521][ T5816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.016776][ T5816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.356883][ T5968] IPv6: Can't replace route, no match found [ 106.804544][ T5975] netlink: 'syz.2.200': attribute type 19 has an invalid length. [ 106.834218][ T5975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.200'. [ 106.960130][ T2477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.118961][ T2477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.257433][ T5984] syz.0.202 uses obsolete (PF_INET,SOCK_PACKET) [ 107.289426][ T2477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.612079][ T2477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.632630][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.671629][ T5996] netlink: 6 bytes leftover after parsing attributes in process `syz.3.207'. [ 107.706981][ T5996] netlink: zone id is out of range [ 107.716829][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.727053][ T4624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.771651][ T4624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.785952][ T4624] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.798349][ T4624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.995323][ T6008] netlink: 'syz.0.210': attribute type 1 has an invalid length. [ 108.011245][ T6005] netlink: 'syz.3.209': attribute type 3 has an invalid length. [ 108.023759][ T6008] netlink: 35347 bytes leftover after parsing attributes in process `syz.0.210'. [ 108.449183][ T2477] bridge_slave_1: left allmulticast mode [ 108.455186][ T2477] bridge_slave_1: left promiscuous mode [ 108.509582][ T2477] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.562722][ T6020] netlink: 'syz.4.214': attribute type 3 has an invalid length. [ 108.577501][ T2477] bridge_slave_0: left allmulticast mode [ 108.603613][ T2477] bridge_slave_0: left promiscuous mode [ 108.626690][ T2477] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.635790][ T6024] __nla_validate_parse: 1 callbacks suppressed [ 108.635809][ T6024] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.214'. [ 108.943943][ T6030] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 108.994901][ T6030] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.217'. [ 109.506345][ T2477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.520407][ T2477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.531658][ T2477] bond0 (unregistering): Released all slaves [ 109.619656][ T6039] netlink: 144288 bytes leftover after parsing attributes in process `syz.2.220'. [ 109.717743][ T6039] netlink: 'syz.2.220': attribute type 2 has an invalid length. [ 109.757435][ T6039] tipc: Started in network mode [ 109.791754][ T6039] tipc: Node identity a, cluster identity 4711 [ 109.824315][ T6039] tipc: Node number set to 10 [ 109.835506][ T6044] netlink: 'syz.0.222': attribute type 2 has an invalid length. [ 109.867956][ T6044] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.222'. [ 109.977383][ T4624] Bluetooth: hci1: command tx timeout [ 110.964969][ T2477] hsr_slave_0: left promiscuous mode [ 110.978831][ T2477] hsr_slave_1: left promiscuous mode [ 111.022237][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.032677][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.044402][ T2477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.053113][ T2477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.112189][ T2477] veth1_macvtap: left promiscuous mode [ 111.127477][ T2477] veth0_macvtap: left promiscuous mode [ 111.141610][ T2477] veth1_vlan: left promiscuous mode [ 111.147573][ T2477] veth0_vlan: left promiscuous mode [ 111.714903][ T2477] team0 (unregistering): Port device team_slave_1 removed [ 111.761530][ T2477] team0 (unregistering): Port device team_slave_0 removed [ 112.058982][ T4624] Bluetooth: hci1: command tx timeout [ 112.184546][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 112.442810][ T6095] netlink: 'syz.3.234': attribute type 10 has an invalid length. [ 112.457331][ T6095] team0: Device bond0 is up. Set it down before adding it as a team port [ 112.887146][ T6107] netlink: 'syz.2.237': attribute type 25 has an invalid length. [ 112.910415][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.924367][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.932114][ T5994] bridge_slave_0: entered allmulticast mode [ 112.939731][ T5994] bridge_slave_0: entered promiscuous mode [ 112.948644][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.955788][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.963300][ T5994] bridge_slave_1: entered allmulticast mode [ 112.970588][ T5994] bridge_slave_1: entered promiscuous mode [ 113.277115][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.289493][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.384338][ T5994] team0: Port device team_slave_0 added [ 113.394387][ T5994] team0: Port device team_slave_1 added [ 113.669379][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.726577][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.816801][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.847032][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.854168][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.889210][ T6142] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.243'. [ 113.911541][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.136647][ T4624] Bluetooth: hci1: command tx timeout [ 114.242356][ T5994] hsr_slave_0: entered promiscuous mode [ 114.297237][ T5994] hsr_slave_1: entered promiscuous mode [ 114.334704][ T5994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.336122][ T6158] netlink: 'syz.3.247': attribute type 3 has an invalid length. [ 114.355430][ T5994] Cannot create hsr debugfs directory [ 114.362624][ T6158] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.247'. [ 114.544739][ T6172] FAULT_INJECTION: forcing a failure. [ 114.544739][ T6172] name failslab, interval 1, probability 0, space 0, times 0 [ 114.623823][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.0.251 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 114.633705][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.643880][ T6172] Call Trace: [ 114.647275][ T6172] [ 114.650322][ T6172] dump_stack_lvl+0x241/0x360 [ 114.655152][ T6172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.660490][ T6172] ? __pfx__printk+0x10/0x10 [ 114.665298][ T6172] should_fail_ex+0x3b0/0x4e0 [ 114.670139][ T6172] should_failslab+0xac/0x100 [ 114.674941][ T6172] ? sctp_add_bind_addr+0x89/0x3a0 [ 114.680197][ T6172] __kmalloc_cache_noprof+0x6c/0x2c0 [ 114.685656][ T6172] sctp_add_bind_addr+0x89/0x3a0 [ 114.690759][ T6172] sctp_copy_local_addr_list+0x311/0x500 [ 114.696539][ T6172] ? sctp_copy_local_addr_list+0xab/0x500 [ 114.702404][ T6172] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 114.708743][ T6172] ? sctp_v4_is_any+0x35/0x60 [ 114.713609][ T6172] sctp_bind_addr_copy+0xad/0x3b0 [ 114.718778][ T6172] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 114.725268][ T6172] sctp_connect_new_asoc+0x2f3/0x6c0 [ 114.730706][ T6172] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 114.736639][ T6172] ? sctp_sendmsg+0xbb9/0x3520 [ 114.741593][ T6172] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 114.747522][ T6172] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 114.753221][ T6172] sctp_sendmsg+0x219a/0x3520 [ 114.758175][ T6172] ? aa_sk_perm+0x96d/0xab0 [ 114.762798][ T6172] ? __pfx_sctp_sendmsg+0x10/0x10 [ 114.767990][ T6172] ? __pfx_aa_sk_perm+0x10/0x10 [ 114.773008][ T6172] ? inet_sendmsg+0x330/0x390 [ 114.777858][ T6172] __sock_sendmsg+0x1a6/0x270 [ 114.782689][ T6172] ____sys_sendmsg+0x52a/0x7e0 [ 114.787693][ T6172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.793218][ T6172] __sys_sendmsg+0x2aa/0x390 [ 114.797981][ T6172] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.803211][ T6172] ? vfs_write+0x7bf/0xc90 [ 114.808052][ T6172] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.814542][ T6172] ? do_syscall_64+0x100/0x230 [ 114.819461][ T6172] ? do_syscall_64+0xb6/0x230 [ 114.824267][ T6172] do_syscall_64+0xf3/0x230 [ 114.828864][ T6172] ? clear_bhb_loop+0x35/0x90 [ 114.833634][ T6172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.839604][ T6172] RIP: 0033:0x7fd631f7def9 [ 114.844096][ T6172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.863764][ T6172] RSP: 002b:00007fd6319ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.872264][ T6172] RAX: ffffffffffffffda RBX: 00007fd632135f80 RCX: 00007fd631f7def9 [ 114.880305][ T6172] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 114.888339][ T6172] RBP: 00007fd6319ff090 R08: 0000000000000000 R09: 0000000000000000 [ 114.896427][ T6172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.904513][ T6172] R13: 0000000000000000 R14: 00007fd632135f80 R15: 00007fff83bbb8a8 [ 114.912644][ T6172] [ 115.022453][ T6186] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.254'. [ 115.049782][ T6186] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 115.247446][ T6195] netlink: 'syz.4.258': attribute type 2 has an invalid length. [ 115.258792][ T6195] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.258'. [ 116.226771][ T4624] Bluetooth: hci1: command tx timeout [ 116.483521][ T6221] FAULT_INJECTION: forcing a failure. [ 116.483521][ T6221] name failslab, interval 1, probability 0, space 0, times 0 [ 116.530090][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.2.262 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 116.539886][ T6221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.549978][ T6221] Call Trace: [ 116.553281][ T6221] [ 116.556238][ T6221] dump_stack_lvl+0x241/0x360 [ 116.560960][ T6221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.566194][ T6221] ? __pfx__printk+0x10/0x10 [ 116.570822][ T6221] ? fs_reclaim_acquire+0x93/0x140 [ 116.575990][ T6221] ? __pfx___might_resched+0x10/0x10 [ 116.581312][ T6221] ? dynamic_dname+0x141/0x1b0 [ 116.586114][ T6221] should_fail_ex+0x3b0/0x4e0 [ 116.590835][ T6221] ? tomoyo_encode+0x26f/0x540 [ 116.595634][ T6221] should_failslab+0xac/0x100 [ 116.600343][ T6221] ? tomoyo_encode+0x26f/0x540 [ 116.605138][ T6221] __kmalloc_noprof+0xd8/0x400 [ 116.609954][ T6221] tomoyo_encode+0x26f/0x540 [ 116.614586][ T6221] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 116.620174][ T6221] tomoyo_realpath_from_path+0x59e/0x5e0 [ 116.625964][ T6221] tomoyo_path_number_perm+0x23a/0x880 [ 116.631484][ T6221] ? tomoyo_path_number_perm+0x208/0x880 [ 116.637247][ T6221] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.643316][ T6221] ? __fget_files+0x29/0x470 [ 116.647940][ T6221] ? __fget_files+0x3f3/0x470 [ 116.652660][ T6221] security_file_ioctl+0xc6/0x2a0 [ 116.657730][ T6221] __se_sys_ioctl+0x47/0x170 [ 116.662366][ T6221] do_syscall_64+0xf3/0x230 [ 116.666921][ T6221] ? clear_bhb_loop+0x35/0x90 [ 116.671635][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.677564][ T6221] RIP: 0033:0x7f3fec37def9 [ 116.682008][ T6221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.701649][ T6221] RSP: 002b:00007f3fed205038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.710194][ T6221] RAX: ffffffffffffffda RBX: 00007f3fec535f80 RCX: 00007f3fec37def9 [ 116.718195][ T6221] RDX: 00000000200000c0 RSI: 000000004008240b RDI: 0000000000000003 [ 116.726195][ T6221] RBP: 00007f3fed205090 R08: 0000000000000000 R09: 0000000000000000 [ 116.734193][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.742196][ T6221] R13: 0000000000000000 R14: 00007f3fec535f80 R15: 00007ffd87fa27b8 [ 116.750220][ T6221] [ 116.834684][ T6221] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.616127][ T6226] netlink: 'syz.2.263': attribute type 21 has an invalid length. [ 120.629869][ T6226] netlink: 100 bytes leftover after parsing attributes in process `syz.2.263'. [ 121.144005][ T6252] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.273'. [ 121.158060][ T6252] netlink: zone id is out of range [ 121.163267][ T6252] netlink: zone id is out of range [ 121.236552][ T6252] netlink: zone id is out of range [ 121.278982][ T6252] netlink: zone id is out of range [ 121.340623][ T6252] netlink: zone id is out of range [ 121.390361][ T6252] netlink: zone id is out of range [ 121.395692][ T6252] netlink: zone id is out of range [ 121.413450][ T6252] netlink: zone id is out of range [ 121.439542][ T6252] netlink: zone id is out of range [ 121.455728][ T6252] netlink: zone id is out of range [ 121.521297][ T5994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.597768][ T5994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.642839][ T5994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.666078][ T6262] netlink: 144 bytes leftover after parsing attributes in process `syz.4.276'. [ 121.707773][ T5994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.046194][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.100627][ T6281] netlink: 'syz.4.282': attribute type 6 has an invalid length. [ 122.206169][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.243193][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.250396][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.380940][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.388141][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.548679][ T5994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.559181][ T5994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.698791][ T6302] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 123.442938][ T6304] netlink: 'syz.3.289': attribute type 6 has an invalid length. [ 123.695154][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.017298][ T6344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.294'. [ 124.029853][ T6348] netlink: 'syz.0.295': attribute type 2 has an invalid length. [ 124.029891][ T6348] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.295'. [ 124.064663][ T5994] veth0_vlan: entered promiscuous mode [ 124.088305][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 124.173622][ T5994] veth1_vlan: entered promiscuous mode [ 124.310618][ T5994] veth0_macvtap: entered promiscuous mode [ 124.325145][ T5994] veth1_macvtap: entered promiscuous mode [ 124.360494][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.371867][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.383050][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.394044][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.404412][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.415868][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.426507][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.437166][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.447587][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.459333][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.472115][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.485056][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.495758][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.505945][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.517376][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.528010][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.539203][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.549397][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.560195][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.570266][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.581014][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.592867][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.675369][ T5994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.684241][ T5994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.693145][ T5994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.702249][ T5994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.018867][ T6371] netlink: 'syz.4.300': attribute type 10 has an invalid length. [ 125.196933][ T6371] bond0: (slave bond_slave_0): Releasing backup interface [ 133.107238][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.113651][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.141382][ T5848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.173879][ T5848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.417717][ T2535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.425717][ T2535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.449471][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.461010][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.470757][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.487382][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.495251][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.505194][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.570995][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.580480][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.591965][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.604804][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.616037][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.623789][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.649695][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.659109][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.670408][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.693422][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.710571][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 139.723834][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.756087][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.771766][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.781652][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.792293][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.800218][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.812879][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.032506][ T1301] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.167684][ T1301] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.319559][ T1301] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.417603][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.427821][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.435918][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.452313][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.460739][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.469497][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.516096][ T1301] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.028448][ T6404] chnl_net:caif_netlink_parms(): no params data found [ 141.090624][ T6396] chnl_net:caif_netlink_parms(): no params data found [ 141.103875][ T1301] bridge_slave_1: left allmulticast mode [ 141.111828][ T1301] bridge_slave_1: left promiscuous mode [ 141.119230][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.139973][ T1301] bridge_slave_0: left allmulticast mode [ 141.145647][ T1301] bridge_slave_0: left promiscuous mode [ 141.153508][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.468768][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.480488][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.493897][ T1301] bond0 (unregistering): Released all slaves [ 141.656881][ T4624] Bluetooth: hci3: command tx timeout [ 141.662995][ T5236] Bluetooth: hci1: command tx timeout [ 141.721912][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 141.767671][ T6400] chnl_net:caif_netlink_parms(): no params data found [ 141.818121][ T4624] Bluetooth: hci4: command tx timeout [ 141.841344][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.848617][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.855904][ T6396] bridge_slave_0: entered allmulticast mode [ 141.863767][ T6396] bridge_slave_0: entered promiscuous mode [ 141.899385][ T4624] Bluetooth: hci0: command tx timeout [ 141.989459][ T6396] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.006573][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.013885][ T6396] bridge_slave_1: entered allmulticast mode [ 142.035034][ T6396] bridge_slave_1: entered promiscuous mode [ 142.116937][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.124158][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.133488][ T6404] bridge_slave_0: entered allmulticast mode [ 142.141315][ T6404] bridge_slave_0: entered promiscuous mode [ 142.211216][ T1301] hsr_slave_0: left promiscuous mode [ 142.224481][ T1301] hsr_slave_1: left promiscuous mode [ 142.237653][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.245136][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.264726][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.274403][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.309684][ T1301] veth1_macvtap: left promiscuous mode [ 142.315275][ T1301] veth0_macvtap: left promiscuous mode [ 142.321438][ T1301] veth1_vlan: left promiscuous mode [ 142.327007][ T1301] veth0_vlan: left promiscuous mode [ 142.552573][ T4624] Bluetooth: hci2: command tx timeout [ 142.844410][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 142.893298][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 143.303156][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.310443][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.321091][ T6404] bridge_slave_1: entered allmulticast mode [ 143.328612][ T6404] bridge_slave_1: entered promiscuous mode [ 143.364716][ T6420] chnl_net:caif_netlink_parms(): no params data found [ 143.386075][ T6396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.608795][ T6396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.653283][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.675689][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.697034][ T6398] bridge_slave_0: entered allmulticast mode [ 143.704240][ T6398] bridge_slave_0: entered promiscuous mode [ 143.728300][ T6404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.745059][ T4624] Bluetooth: hci3: command tx timeout [ 143.749605][ T6404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.750658][ T5236] Bluetooth: hci1: command tx timeout [ 143.787970][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.795478][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.816784][ T6400] bridge_slave_0: entered allmulticast mode [ 143.829945][ T6400] bridge_slave_0: entered promiscuous mode [ 143.849311][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.865821][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.886293][ T6400] bridge_slave_1: entered allmulticast mode [ 143.894977][ T6400] bridge_slave_1: entered promiscuous mode [ 143.909359][ T5236] Bluetooth: hci4: command tx timeout [ 143.963263][ T6396] team0: Port device team_slave_0 added [ 143.978236][ T4624] Bluetooth: hci0: command tx timeout [ 143.983837][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.005269][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.019721][ T6398] bridge_slave_1: entered allmulticast mode [ 144.038356][ T6398] bridge_slave_1: entered promiscuous mode [ 144.147769][ T6396] team0: Port device team_slave_1 added [ 144.211444][ T6404] team0: Port device team_slave_0 added [ 144.229453][ T6404] team0: Port device team_slave_1 added [ 144.275976][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.304019][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.403098][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.440152][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.479654][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.496800][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.534780][ T6404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.573367][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.587651][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.614385][ T6396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.626848][ T4624] Bluetooth: hci2: command tx timeout [ 144.669166][ T6404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.676185][ T6404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.721418][ T6404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.742781][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.754539][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.762406][ T6420] bridge_slave_0: entered allmulticast mode [ 144.771039][ T6420] bridge_slave_0: entered promiscuous mode [ 144.779759][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.787647][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.795714][ T6420] bridge_slave_1: entered allmulticast mode [ 144.802705][ T6420] bridge_slave_1: entered promiscuous mode [ 144.810454][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.820220][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.848251][ T6396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.878109][ T6398] team0: Port device team_slave_0 added [ 144.887419][ T6398] team0: Port device team_slave_1 added [ 144.902192][ T6400] team0: Port device team_slave_0 added [ 144.936330][ T6420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.953496][ T6420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.976161][ T6400] team0: Port device team_slave_1 added [ 145.045289][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.052707][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.079882][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.113637][ T6396] hsr_slave_0: entered promiscuous mode [ 145.120840][ T6396] hsr_slave_1: entered promiscuous mode [ 145.128021][ T6396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.135637][ T6396] Cannot create hsr debugfs directory [ 145.161926][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.169209][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.197513][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.230880][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.238676][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.266807][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.320068][ T6420] team0: Port device team_slave_0 added [ 145.370001][ T1301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.393253][ T6404] hsr_slave_0: entered promiscuous mode [ 145.413494][ T6404] hsr_slave_1: entered promiscuous mode [ 145.435448][ T6404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.455214][ T6404] Cannot create hsr debugfs directory [ 145.463924][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.486923][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.529367][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.564427][ T6420] team0: Port device team_slave_1 added [ 145.638720][ T1301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.739536][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.746620][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.773201][ T6420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.804913][ T6398] hsr_slave_0: entered promiscuous mode [ 145.816932][ T4624] Bluetooth: hci1: command tx timeout [ 145.822396][ T4624] Bluetooth: hci3: command tx timeout [ 145.829645][ T6398] hsr_slave_1: entered promiscuous mode [ 145.840586][ T6398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.848547][ T6398] Cannot create hsr debugfs directory [ 145.911082][ T1301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.945745][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.955868][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.985003][ T6420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.994211][ T4624] Bluetooth: hci4: command tx timeout [ 146.056533][ T4624] Bluetooth: hci0: command tx timeout [ 146.077708][ T6400] hsr_slave_0: entered promiscuous mode [ 146.084743][ T6400] hsr_slave_1: entered promiscuous mode [ 146.092438][ T6400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.100151][ T6400] Cannot create hsr debugfs directory [ 146.121441][ T1301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.209967][ T6420] hsr_slave_0: entered promiscuous mode [ 146.217972][ T6420] hsr_slave_1: entered promiscuous mode [ 146.224155][ T6420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.232699][ T6420] Cannot create hsr debugfs directory [ 146.651347][ T6398] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.707668][ T4624] Bluetooth: hci2: command tx timeout [ 146.751247][ T6398] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.863102][ T6398] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.957832][ T6398] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.071136][ T1301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.145820][ T1301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.207796][ T1301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.238856][ T6398] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 147.252156][ T6398] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 147.262386][ T6398] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 147.273157][ T6398] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 147.330779][ T1301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.590032][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.662023][ T1301] bridge_slave_1: left allmulticast mode [ 147.675667][ T1301] bridge_slave_1: left promiscuous mode [ 147.694986][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.717473][ T1301] bridge_slave_0: left allmulticast mode [ 147.723275][ T1301] bridge_slave_0: left promiscuous mode [ 147.729635][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.744052][ T1301] bridge_slave_1: left allmulticast mode [ 147.750905][ T1301] bridge_slave_1: left promiscuous mode [ 147.756772][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.767694][ T1301] bridge_slave_0: left allmulticast mode [ 147.773386][ T1301] bridge_slave_0: left promiscuous mode [ 147.780035][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.793817][ T1301] bridge_slave_1: left allmulticast mode [ 147.799683][ T1301] bridge_slave_1: left promiscuous mode [ 147.805460][ T1301] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.814985][ T1301] bridge_slave_0: left allmulticast mode [ 147.822491][ T1301] bridge_slave_0: left promiscuous mode [ 147.829762][ T1301] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.896577][ T4624] Bluetooth: hci3: command tx timeout [ 147.896750][ T5236] Bluetooth: hci1: command tx timeout [ 148.067727][ T5236] Bluetooth: hci4: command tx timeout [ 148.147075][ T5236] Bluetooth: hci0: command tx timeout [ 148.684841][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.702805][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.713756][ T1301] bond0 (unregistering): Released all slaves [ 148.777917][ T5236] Bluetooth: hci2: command tx timeout [ 148.830474][ T1301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.842571][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.853987][ T1301] bond0 (unregistering): Released all slaves [ 148.974333][ T1301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.985649][ T1301] bond0 (unregistering): Released all slaves [ 149.035684][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.065328][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.072637][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.102625][ T2535] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.109843][ T2535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.155970][ T1301] tipc: Left network mode [ 149.719903][ T6404] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.753553][ T6396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.773590][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.797983][ T6396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.826263][ T6396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.860268][ T6404] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.906236][ T6396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.956809][ T6404] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.069741][ T6404] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.135579][ T6398] veth0_vlan: entered promiscuous mode [ 150.156300][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.166180][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.175057][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.182891][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.194687][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.202557][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.210893][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.219327][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.231358][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.242512][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.251156][ T1301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.258951][ T1301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.300106][ T1301] veth1_macvtap: left promiscuous mode [ 150.305687][ T1301] veth0_macvtap: left promiscuous mode [ 150.311820][ T1301] veth1_vlan: left promiscuous mode [ 150.317398][ T1301] veth0_vlan: left promiscuous mode [ 150.324745][ T1301] veth1_macvtap: left promiscuous mode [ 150.330443][ T1301] veth0_macvtap: left promiscuous mode [ 150.336019][ T1301] veth1_vlan: left promiscuous mode [ 150.341493][ T1301] veth0_vlan: left promiscuous mode [ 150.348007][ T1301] veth1_macvtap: left promiscuous mode [ 150.353608][ T1301] veth0_macvtap: left promiscuous mode [ 150.933103][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 150.974347][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 151.726222][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 151.765811][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 152.402484][ T1301] team0 (unregistering): Port device team_slave_1 removed [ 152.443779][ T1301] team0 (unregistering): Port device team_slave_0 removed [ 152.868968][ T6398] veth1_vlan: entered promiscuous mode [ 153.060403][ T6396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.137171][ T6398] veth0_macvtap: entered promiscuous mode [ 153.211025][ T6396] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.231323][ T6398] veth1_macvtap: entered promiscuous mode [ 153.313943][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.321167][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.345882][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.353106][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.428201][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.451879][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.466523][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.477731][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.497895][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.593306][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.608283][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.618352][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.628964][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.640248][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.653362][ T6398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.665173][ T6398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.674102][ T6398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.683406][ T6398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.070539][ T5839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.080516][ T5839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.131947][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.153961][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.271154][ T6396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.348393][ T6404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.381605][ T6404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.431761][ T6404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.460485][ T6404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.669848][ T6400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.710454][ T6400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.807123][ T6400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.819493][ T6400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.841999][ T6396] veth0_vlan: entered promiscuous mode [ 154.904542][ T6396] veth1_vlan: entered promiscuous mode [ 154.950258][ T6420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.003093][ T6420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.093826][ T6420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.132777][ T6420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 155.309131][ T6396] veth0_macvtap: entered promiscuous mode [ 155.336101][ T6404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.380183][ T6396] veth1_macvtap: entered promiscuous mode [ 155.446029][ T6404] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.475391][ T6601] FAULT_INJECTION: forcing a failure. [ 155.475391][ T6601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.497368][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.2.311 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 155.507251][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 155.517432][ T6601] Call Trace: [ 155.520755][ T6601] [ 155.523724][ T6601] dump_stack_lvl+0x241/0x360 [ 155.528455][ T6601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.533792][ T6601] ? __pfx__printk+0x10/0x10 [ 155.538433][ T6601] ? __pfx_lock_release+0x10/0x10 [ 155.539742][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.543491][ T6601] should_fail_ex+0x3b0/0x4e0 [ 155.543537][ T6601] _copy_from_user+0x2f/0xe0 [ 155.543569][ T6601] generic_map_update_batch+0x5ba/0x900 [ 155.543618][ T6601] ? __pfx_generic_map_update_batch+0x10/0x10 [ 155.543658][ T6601] ? __pfx_generic_map_update_batch+0x10/0x10 [ 155.543695][ T6601] bpf_map_do_batch+0x3da/0x690 [ 155.543728][ T6601] __sys_bpf+0x377/0x810 [ 155.543755][ T6601] ? __pfx___sys_bpf+0x10/0x10 [ 155.543792][ T6601] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.543828][ T6601] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.543862][ T6601] ? do_syscall_64+0x100/0x230 [ 155.543897][ T6601] __x64_sys_bpf+0x7c/0x90 [ 155.543921][ T6601] do_syscall_64+0xf3/0x230 [ 155.543950][ T6601] ? clear_bhb_loop+0x35/0x90 [ 155.543982][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.579136][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.582481][ T6601] RIP: 0033:0x7f41fa77def9 [ 155.586839][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.591469][ T6601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.600309][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.603829][ T6601] RSP: 002b:00007f41fb54f038 EFLAGS: 00000246 [ 155.608711][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.612991][ T6601] ORIG_RAX: 0000000000000141 [ 155.691327][ T6601] RAX: ffffffffffffffda RBX: 00007f41fa935f80 RCX: 00007f41fa77def9 [ 155.699320][ T6601] RDX: 0000000000000038 RSI: 0000000020000300 RDI: 000000000000001a [ 155.707299][ T6601] RBP: 00007f41fb54f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.715282][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.723260][ T6601] R13: 0000000000000000 R14: 00007f41fa935f80 R15: 00007fff76b38ea8 [ 155.731253][ T6601] [ 155.806058][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.834876][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.848850][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.875931][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.887399][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.898505][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.910106][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.926121][ T6396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.951662][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.958844][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.008638][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.015864][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.061152][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.099742][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.136456][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.178026][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.206726][ T6396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.246828][ T6396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.269271][ T6396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.400945][ T6396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.426649][ T6396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.435472][ T6396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.463245][ T6396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.554267][ T6608] syz.2.312 (6608) used greatest stack depth: 17344 bytes left [ 156.563105][ T6400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.602759][ T6400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.718292][ T6420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.797695][ T5848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.805586][ T5848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.817726][ T6625] netlink: 'syz.2.313': attribute type 21 has an invalid length. [ 156.825516][ T6625] netlink: 176 bytes leftover after parsing attributes in process `syz.2.313'. [ 156.913454][ T6420] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.952981][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.960174][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.008178][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.015340][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.140349][ T5816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.153904][ T5816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.204684][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.267769][ T6420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.314833][ T6404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.477561][ T6400] veth0_vlan: entered promiscuous mode [ 157.541270][ T6400] veth1_vlan: entered promiscuous mode [ 157.606812][ T6651] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.315'. [ 157.663641][ T6400] veth0_macvtap: entered promiscuous mode [ 157.690735][ T6400] veth1_macvtap: entered promiscuous mode [ 157.728315][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.801226][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.845185][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.866281][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.890469][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.918847][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.927648][ T6663] netlink: 'syz.2.317': attribute type 2 has an invalid length. [ 157.939108][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.945110][ T6663] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.317'. [ 157.959864][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.978868][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.013473][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.030596][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.057841][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.083355][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.106984][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.165746][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.185924][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.207199][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.249552][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.271492][ T6400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.292112][ T6400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.315244][ T6400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.341170][ T6400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.615996][ T6404] veth0_vlan: entered promiscuous mode [ 158.658253][ T6420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.697506][ T2535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.705481][ T2535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.720220][ T6404] veth1_vlan: entered promiscuous mode [ 158.852488][ T5839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.913150][ T5839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.935946][ T6691] netlink: 164 bytes leftover after parsing attributes in process `syz.2.322'. [ 158.983553][ T6404] veth0_macvtap: entered promiscuous mode [ 159.057850][ T6404] veth1_macvtap: entered promiscuous mode [ 159.174183][ T6695] syzkaller0: entered promiscuous mode [ 159.206755][ T6695] syzkaller0: entered allmulticast mode [ 159.253853][ T6420] veth0_vlan: entered promiscuous mode [ 159.299144][ T6695] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 159.299304][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.338543][ T6695] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 159.346254][ T6695] netlink: 152 bytes leftover after parsing attributes in process `syz.0.321'. [ 159.376500][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.407616][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.429331][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.452287][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.517285][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.549092][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.591031][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.614674][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.638316][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.665510][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.849592][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.896210][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.931347][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.943539][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.966124][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.996649][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.015253][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.050649][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.076685][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.094630][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.118519][ T6404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.293624][ T6735] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.329'. [ 160.324575][ T6735] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.329'. [ 162.637179][ T6738] netlink: 'syz.3.330': attribute type 10 has an invalid length. [ 162.658140][ T6738] team0: Port device geneve1 added [ 162.663788][ T6735] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.329'. [ 162.688309][ T6420] veth1_vlan: entered promiscuous mode [ 162.739526][ T6404] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.793023][ T6767] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.331'. [ 162.796570][ T6404] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.802736][ T6767] net_ratelimit: 120 callbacks suppressed [ 162.802754][ T6767] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 162.832938][ T6404] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.858840][ T6404] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.963427][ T6420] veth0_macvtap: entered promiscuous mode [ 163.006073][ T6420] veth1_macvtap: entered promiscuous mode [ 163.119802][ T6776] netlink: 'syz.2.334': attribute type 29 has an invalid length. [ 163.142852][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.154982][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.165392][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.178689][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.203017][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.214086][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.226488][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.237687][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.247676][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.259182][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.269435][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.281280][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.294820][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.306291][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.337568][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.356491][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.367474][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.383496][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.397872][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.409703][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.424507][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.438064][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.448761][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.459181][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.469741][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.484270][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.493405][ T6776] netlink: 'syz.2.334': attribute type 29 has an invalid length. [ 163.544563][ T6779] netlink: 'syz.2.334': attribute type 29 has an invalid length. [ 163.554143][ T6780] netlink: 'syz.2.334': attribute type 29 has an invalid length. [ 163.681726][ T6420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.700209][ T6420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.721597][ T6420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.754917][ T6420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.929539][ T2477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.945275][ T6786] netlink: 'syz.3.336': attribute type 2 has an invalid length. [ 163.957431][ T2477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.965170][ T6786] netlink: 'syz.3.336': attribute type 8 has an invalid length. [ 163.975533][ T6786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.336'. [ 164.164472][ T5839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.205306][ T5839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.253645][ T6798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.339'. [ 164.318805][ T6794] netlink: 'syz.2.338': attribute type 6 has an invalid length. [ 164.467606][ T2477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.469436][ T5839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.475735][ T2477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.505630][ T5839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.557281][ T6802] netlink: 'syz.4.307': attribute type 10 has an invalid length. [ 164.720145][ T6802] team0: Port device geneve1 added [ 164.936285][ T6815] netlink: 144268 bytes leftover after parsing attributes in process `syz.4.345'. [ 165.087163][ T6815] netlink: 'syz.4.345': attribute type 2 has an invalid length. [ 165.103185][ T6815] tipc: Started in network mode [ 165.116579][ T6815] tipc: Node identity a, cluster identity 4711 [ 165.133381][ T6815] tipc: Node number set to 10 [ 165.160829][ T6817] netlink: 208040 bytes leftover after parsing attributes in process `syz.2.346'. [ 165.390530][ T6820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.347'. [ 165.500491][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.660238][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.794917][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.997224][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.062062][ T6830] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.350'. [ 166.080093][ T6830] team0: Device ipvlan1 failed to register rx_handler [ 166.242822][ T4624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.261945][ T4624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.270352][ T6836] FAULT_INJECTION: forcing a failure. [ 166.270352][ T6836] name failslab, interval 1, probability 0, space 0, times 0 [ 166.270788][ T4624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.301963][ T4624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.310015][ T4624] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 166.329620][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.2.351 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 166.339406][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 166.349506][ T6836] Call Trace: [ 166.352824][ T6836] [ 166.355770][ T6836] dump_stack_lvl+0x241/0x360 [ 166.360473][ T6836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.365695][ T6836] ? __pfx__printk+0x10/0x10 [ 166.370309][ T6836] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 166.375874][ T6836] ? __pfx___might_resched+0x10/0x10 [ 166.381189][ T6836] should_fail_ex+0x3b0/0x4e0 [ 166.385893][ T6836] ? alloc_empty_file+0x9e/0x1d0 [ 166.390857][ T6836] should_failslab+0xac/0x100 [ 166.395553][ T6836] ? alloc_empty_file+0x9e/0x1d0 [ 166.400509][ T6836] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 166.405908][ T6836] alloc_empty_file+0x9e/0x1d0 [ 166.410699][ T6836] alloc_file_pseudo+0x1da/0x290 [ 166.415657][ T6836] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 166.421140][ T6836] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.426365][ T6836] anon_inode_getfile+0xc8/0x180 [ 166.431372][ T6836] __se_sys_perf_event_open+0x25df/0x38d0 [ 166.437149][ T6836] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 166.443258][ T6836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.449611][ T6836] ? do_syscall_64+0x100/0x230 [ 166.454397][ T6836] ? __x64_sys_perf_event_open+0x20/0xc0 [ 166.460064][ T6836] do_syscall_64+0xf3/0x230 [ 166.464583][ T6836] ? clear_bhb_loop+0x35/0x90 [ 166.469295][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.475230][ T6836] RIP: 0033:0x7f41fa77def9 [ 166.479793][ T6836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.499432][ T6836] RSP: 002b:00007f41fb54f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 166.507879][ T6836] RAX: ffffffffffffffda RBX: 00007f41fa935f80 RCX: 00007f41fa77def9 [ 166.515870][ T6836] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 166.523875][ T6836] RBP: 00007f41fb54f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.531866][ T6836] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 166.540751][ T6836] R13: 0000000000000000 R14: 00007f41fa935f80 R15: 00007fff76b38ea8 [ 166.548762][ T6836] [ 166.602089][ T4624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.708284][ T12] bridge_slave_1: left allmulticast mode [ 166.714272][ T12] bridge_slave_1: left promiscuous mode [ 166.744188][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.917394][ T12] bridge_slave_0: left allmulticast mode [ 166.923109][ T12] bridge_slave_0: left promiscuous mode [ 166.930359][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.819087][ T6869] netlink: 183836 bytes leftover after parsing attributes in process `syz.3.360'. [ 168.429471][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.441995][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.463932][ T12] bond0 (unregistering): Released all slaves [ 168.776996][ T4624] Bluetooth: hci2: command tx timeout [ 169.220075][ T6884] FAULT_INJECTION: forcing a failure. [ 169.220075][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 169.233047][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.0.365 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 169.242917][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 169.253029][ T6884] Call Trace: [ 169.256367][ T6884] [ 169.259352][ T6884] dump_stack_lvl+0x241/0x360 [ 169.264107][ T6884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.269385][ T6884] ? __pfx__printk+0x10/0x10 [ 169.274068][ T6884] should_fail_ex+0x3b0/0x4e0 [ 169.278824][ T6884] ? skb_clone+0x20c/0x390 [ 169.283316][ T6884] should_failslab+0xac/0x100 [ 169.288066][ T6884] ? skb_clone+0x20c/0x390 [ 169.292562][ T6884] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 169.298058][ T6884] skb_clone+0x20c/0x390 [ 169.302361][ T6884] ? dev_queue_xmit_nit+0x220/0xc10 [ 169.307662][ T6884] dev_queue_xmit_nit+0x419/0xc10 [ 169.312760][ T6884] ? dev_queue_xmit_nit+0x2b/0xc10 [ 169.317919][ T6884] ? validate_xmit_skb+0x9f9/0x1120 [ 169.323160][ T6884] dev_hard_start_xmit+0x15f/0x7e0 [ 169.328316][ T6884] ? __pfx_validate_xmit_skb+0x10/0x10 [ 169.333818][ T6884] __dev_queue_xmit+0x1b58/0x3e80 [ 169.338879][ T6884] ? kasan_save_track+0x51/0x80 [ 169.343804][ T6884] ? do_syscall_64+0xf3/0x230 [ 169.348539][ T6884] ? __dev_queue_xmit+0x2da/0x3e80 [ 169.353701][ T6884] ? __pfx___dev_queue_xmit+0x10/0x10 [ 169.359133][ T6884] ? __copy_skb_header+0x437/0x5b0 [ 169.364277][ T6884] ? __asan_memcpy+0x40/0x70 [ 169.368907][ T6884] ? __copy_skb_header+0x437/0x5b0 [ 169.374054][ T6884] ? __skb_clone+0x454/0x6c0 [ 169.378689][ T6884] ? skb_clone+0x240/0x390 [ 169.383140][ T6884] __netlink_deliver_tap+0x54d/0x7c0 [ 169.388470][ T6884] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.393706][ T6884] netlink_deliver_tap+0x19d/0x1b0 [ 169.398846][ T6884] netlink_unicast+0x7c4/0x990 [ 169.403645][ T6884] ? __pfx_netlink_unicast+0x10/0x10 [ 169.408950][ T6884] ? __virt_addr_valid+0x183/0x530 [ 169.414087][ T6884] ? __check_object_size+0x48e/0x900 [ 169.419400][ T6884] netlink_sendmsg+0x8e4/0xcb0 [ 169.424208][ T6884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.429523][ T6884] ? aa_sock_msg_perm+0x91/0x160 [ 169.434497][ T6884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.439906][ T6884] __sock_sendmsg+0x221/0x270 [ 169.444616][ T6884] ____sys_sendmsg+0x52a/0x7e0 [ 169.449421][ T6884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.454762][ T6884] __sys_sendmsg+0x2aa/0x390 [ 169.459382][ T6884] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.464516][ T6884] ? vfs_write+0x7bf/0xc90 [ 169.469055][ T6884] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.475416][ T6884] ? do_syscall_64+0x100/0x230 [ 169.480220][ T6884] ? do_syscall_64+0xb6/0x230 [ 169.484934][ T6884] do_syscall_64+0xf3/0x230 [ 169.489473][ T6884] ? clear_bhb_loop+0x35/0x90 [ 169.494182][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.500116][ T6884] RIP: 0033:0x7fe33e17def9 [ 169.504581][ T6884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.524225][ T6884] RSP: 002b:00007fe33ef63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.532673][ T6884] RAX: ffffffffffffffda RBX: 00007fe33e335f80 RCX: 00007fe33e17def9 [ 169.540874][ T6884] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 169.548910][ T6884] RBP: 00007fe33ef63090 R08: 0000000000000000 R09: 0000000000000000 [ 169.556910][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.564906][ T6884] R13: 0000000000000000 R14: 00007fe33e335f80 R15: 00007ffc48ab6e58 [ 169.572947][ T6884] [ 169.986242][ T6893] validate_nla: 2 callbacks suppressed [ 169.986262][ T6893] netlink: 'syz.0.369': attribute type 10 has an invalid length. [ 170.018566][ T6893] team0: Device bond0 is up. Set it down before adding it as a team port [ 170.405982][ T6873] coredump: 35(syz.3.360): interrupted: fatal signal pending [ 170.475173][ T6873] coredump: 35(syz.3.360): written to core: VMAs: 37, size 99704832; core: 30106734 bytes, pos 67563520 [ 170.796034][ T12] hsr_slave_0: left promiscuous mode [ 170.823001][ T12] hsr_slave_1: left promiscuous mode [ 170.834061][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.843853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.858940][ T4624] Bluetooth: hci2: command tx timeout [ 170.862292][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.872182][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.897996][ T12] veth1_macvtap: left promiscuous mode [ 170.905218][ T12] veth0_macvtap: left promiscuous mode [ 170.912089][ T12] veth1_vlan: left promiscuous mode [ 170.927230][ T12] veth0_vlan: left promiscuous mode [ 171.550664][ T12] team0 (unregistering): Port device team_slave_1 removed [ 171.594592][ T12] team0 (unregistering): Port device team_slave_0 removed [ 172.038817][ T6933] netlink: 'syz.0.378': attribute type 29 has an invalid length. [ 172.251845][ T6945] sctp: [Deprecated]: syz.4.381 (pid 6945) Use of int in max_burst socket option deprecated. [ 172.251845][ T6945] Use struct sctp_assoc_value instead [ 172.533743][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 172.811162][ T6949] syzkaller0: entered promiscuous mode [ 172.846646][ T6949] syzkaller0: entered allmulticast mode [ 172.936714][ T4624] Bluetooth: hci2: command tx timeout [ 175.001604][ T6982] netlink: 'syz.0.386': attribute type 6 has an invalid length. [ 175.024532][ T4624] Bluetooth: hci2: command tx timeout [ 175.197453][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.277773][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.309652][ T6835] bridge_slave_0: entered allmulticast mode [ 175.317567][ T6835] bridge_slave_0: entered promiscuous mode [ 175.363377][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.396291][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.428979][ T6835] bridge_slave_1: entered allmulticast mode [ 175.436312][ T6835] bridge_slave_1: entered promiscuous mode [ 175.682962][ T4624] Bluetooth: hci0: Malformed LE Event: 0x0b [ 175.783131][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.850285][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.108928][ T7021] FAULT_INJECTION: forcing a failure. [ 176.108928][ T7021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.154332][ T7021] CPU: 0 UID: 0 PID: 7021 Comm: syz.0.398 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 176.164134][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 176.174234][ T7021] Call Trace: [ 176.177559][ T7021] [ 176.180525][ T7021] dump_stack_lvl+0x241/0x360 [ 176.185271][ T7021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.190526][ T7021] ? __pfx__printk+0x10/0x10 [ 176.195181][ T7021] ? snprintf+0xda/0x120 [ 176.199491][ T7021] should_fail_ex+0x3b0/0x4e0 [ 176.204233][ T7021] _copy_to_user+0x2f/0xb0 [ 176.208708][ T7021] simple_read_from_buffer+0xca/0x150 [ 176.214143][ T7021] proc_fail_nth_read+0x1e9/0x250 [ 176.219233][ T7021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.224847][ T7021] ? rw_verify_area+0x55e/0x6f0 [ 176.229758][ T7021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.235376][ T7021] vfs_read+0x201/0xbc0 [ 176.239593][ T7021] ? __pfx_lock_release+0x10/0x10 [ 176.244682][ T7021] ? __pfx_vfs_read+0x10/0x10 [ 176.249421][ T7021] ? __fget_files+0x3f3/0x470 [ 176.254150][ T7021] ? __fdget_pos+0x24e/0x320 [ 176.258790][ T7021] ksys_read+0x1a0/0x2c0 [ 176.263104][ T7021] ? __pfx_ksys_read+0x10/0x10 [ 176.267929][ T7021] ? do_syscall_64+0x100/0x230 [ 176.272751][ T7021] ? do_syscall_64+0xb6/0x230 [ 176.277488][ T7021] do_syscall_64+0xf3/0x230 [ 176.282043][ T7021] ? clear_bhb_loop+0x35/0x90 [ 176.286775][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.292726][ T7021] RIP: 0033:0x7fe33e17c93c [ 176.297186][ T7021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 176.316931][ T7021] RSP: 002b:00007fe33ef63030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.325398][ T7021] RAX: ffffffffffffffda RBX: 00007fe33e335f80 RCX: 00007fe33e17c93c [ 176.333422][ T7021] RDX: 000000000000000f RSI: 00007fe33ef630a0 RDI: 0000000000000005 [ 176.341435][ T7021] RBP: 00007fe33ef63090 R08: 0000000000000000 R09: 0000000000000000 [ 176.349511][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.357498][ T7021] R13: 0000000000000000 R14: 00007fe33e335f80 R15: 00007ffc48ab6e58 [ 176.365494][ T7021] [ 176.611466][ T6835] team0: Port device team_slave_0 added [ 176.719656][ T6835] team0: Port device team_slave_1 added [ 176.873613][ T7037] netlink: 'syz.2.399': attribute type 6 has an invalid length. [ 176.908437][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.916099][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.987402][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.046100][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.067911][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.103427][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.218609][ T7051] netlink: 'syz.0.405': attribute type 64 has an invalid length. [ 177.449415][ T6835] hsr_slave_0: entered promiscuous mode [ 177.508237][ T6835] hsr_slave_1: entered promiscuous mode [ 177.515348][ T6835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.534235][ T6835] Cannot create hsr debugfs directory [ 178.156749][ T7074] FAULT_INJECTION: forcing a failure. [ 178.156749][ T7074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.259864][ T7074] CPU: 1 UID: 0 PID: 7074 Comm: syz.4.413 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 178.269656][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 178.279759][ T7074] Call Trace: [ 178.283072][ T7074] [ 178.286042][ T7074] dump_stack_lvl+0x241/0x360 [ 178.290779][ T7074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.296030][ T7074] ? __pfx__printk+0x10/0x10 [ 178.300656][ T7074] ? __pfx_lock_release+0x10/0x10 [ 178.305730][ T7074] should_fail_ex+0x3b0/0x4e0 [ 178.310465][ T7074] _copy_from_user+0x2f/0xe0 [ 178.315103][ T7074] generic_map_update_batch+0x567/0x900 [ 178.321155][ T7074] ? __pfx_generic_map_update_batch+0x10/0x10 [ 178.327284][ T7074] ? __pfx_generic_map_update_batch+0x10/0x10 [ 178.333419][ T7074] bpf_map_do_batch+0x3da/0x690 [ 178.338330][ T7074] __sys_bpf+0x377/0x810 [ 178.342633][ T7074] ? __pfx___sys_bpf+0x10/0x10 [ 178.347458][ T7074] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 178.353492][ T7074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.359864][ T7074] ? do_syscall_64+0x100/0x230 [ 178.364680][ T7074] __x64_sys_bpf+0x7c/0x90 [ 178.369131][ T7074] do_syscall_64+0xf3/0x230 [ 178.373670][ T7074] ? clear_bhb_loop+0x35/0x90 [ 178.378383][ T7074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.384318][ T7074] RIP: 0033:0x7f6df257def9 [ 178.388768][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.408425][ T7074] RSP: 002b:00007f6df341d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.416874][ T7074] RAX: ffffffffffffffda RBX: 00007f6df2735f80 RCX: 00007f6df257def9 [ 178.424869][ T7074] RDX: 0000000000000038 RSI: 0000000020000300 RDI: 000000000000001a [ 178.432867][ T7074] RBP: 00007f6df341d090 R08: 0000000000000000 R09: 0000000000000000 [ 178.440865][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.448865][ T7074] R13: 0000000000000000 R14: 00007f6df2735f80 R15: 00007ffd45178ab8 [ 178.456890][ T7074] [ 178.498366][ T7077] netlink: 'syz.3.414': attribute type 6 has an invalid length. [ 180.464606][ T7128] netlink: 164 bytes leftover after parsing attributes in process `syz.2.428'. [ 180.785857][ T6835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.838484][ T6835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.851103][ T6835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.852085][ T7139] netlink: 'syz.0.433': attribute type 2 has an invalid length. [ 180.877192][ T6835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.904671][ T7139] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.433'. [ 181.302302][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.331013][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.390170][ T6835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.400853][ T6835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.420536][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.427831][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.534844][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.542197][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.576950][ T7151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.435'. [ 182.203174][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.381430][ T7189] netlink: 'syz.4.442': attribute type 39 has an invalid length. [ 182.434144][ T6835] veth0_vlan: entered promiscuous mode [ 182.480301][ T6835] veth1_vlan: entered promiscuous mode [ 182.606103][ T6835] veth0_macvtap: entered promiscuous mode [ 182.650418][ T6835] veth1_macvtap: entered promiscuous mode [ 182.722178][ T7204] netlink: 144256 bytes leftover after parsing attributes in process `syz.0.448'. [ 182.733936][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.744958][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.794556][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.815583][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.836123][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.860554][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.885054][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.908076][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.918231][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.928859][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.939013][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.949566][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.961218][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.975188][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.986018][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.997394][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.009028][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.021153][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.032502][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.042561][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.053348][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.063361][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.074156][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.084195][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.095856][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.109605][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.124965][ T7204] netlink: 'syz.0.448': attribute type 2 has an invalid length. [ 183.133068][ T7204] tipc: Started in network mode [ 183.146327][ T7204] tipc: Node identity a, cluster identity 4711 [ 183.163312][ T7204] tipc: Node number set to 10 [ 183.255957][ T6835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.269485][ T6835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.301859][ T6835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.329260][ T6835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.702173][ T5816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.761712][ T5816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.929721][ T5848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.961467][ T5848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.184554][ T7243] netlink: 'syz.4.459': attribute type 2 has an invalid length. [ 184.218848][ T7243] netlink: 156 bytes leftover after parsing attributes in process `syz.4.459'. [ 184.356727][ T7248] netlink: 'syz.2.461': attribute type 2 has an invalid length. [ 184.364521][ T7248] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.461'. [ 185.474708][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.528338][ T7280] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 185.536167][ T7280] team0: Device bond0 is up. Set it down before adding it as a team port [ 185.809714][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.931054][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.022227][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.247140][ T7306] netlink: 'syz.0.470': attribute type 10 has an invalid length. [ 186.287117][ T7306] netlink: 55 bytes leftover after parsing attributes in process `syz.0.470'. [ 186.965125][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 186.990902][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.007064][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.035197][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.047503][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 187.055045][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.292267][ T7319] netlink: 'syz.4.475': attribute type 10 has an invalid length. [ 187.300927][ T7319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.475'. [ 187.310616][ T7319] team0: entered promiscuous mode [ 187.315926][ T7319] team_slave_0: entered promiscuous mode [ 187.323733][ T7319] team_slave_1: entered promiscuous mode [ 187.331166][ T7319] geneve1: entered promiscuous mode [ 187.338291][ T7319] team0: entered allmulticast mode [ 187.343568][ T7319] team_slave_0: entered allmulticast mode [ 187.349694][ T7319] team_slave_1: entered allmulticast mode [ 187.355583][ T7319] geneve1: entered allmulticast mode [ 187.361760][ T7319] bridge0: port 3(team0) entered blocking state [ 187.368749][ T7319] bridge0: port 3(team0) entered disabled state [ 187.378931][ T7319] bridge0: port 3(team0) entered blocking state [ 187.385313][ T7319] bridge0: port 3(team0) entered forwarding state [ 187.452135][ T12] bridge_slave_1: left allmulticast mode [ 187.459575][ T12] bridge_slave_1: left promiscuous mode [ 187.465351][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.536161][ T12] bridge_slave_0: left allmulticast mode [ 187.542908][ T12] bridge_slave_0: left promiscuous mode [ 187.558080][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.822260][ T7360] syz.2.482 (7360) used greatest stack depth: 15872 bytes left [ 187.828400][ T7363] Dead loop on virtual device ip6_vti0, fix it urgently! [ 189.096652][ T5236] Bluetooth: hci2: command tx timeout [ 189.432649][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.593119][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.793117][ T12] bond0 (unregistering): Released all slaves [ 189.833326][ T7365] netlink: 'syz.0.480': attribute type 6 has an invalid length. [ 190.070926][ T7396] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.492'. [ 190.128515][ T7396] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 190.601041][ T7408] netlink: 'syz.4.494': attribute type 7 has an invalid length. [ 190.747044][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 191.176686][ T5236] Bluetooth: hci2: command tx timeout [ 193.261017][ T5236] Bluetooth: hci2: command tx timeout [ 193.444480][ T7435] netlink: 'syz.2.500': attribute type 6 has an invalid length. [ 193.469254][ T7440] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 193.543932][ T7440] hsr_slave_0: left promiscuous mode [ 193.553260][ T7440] hsr_slave_1: left promiscuous mode [ 193.632484][ T12] hsr_slave_0: left promiscuous mode [ 193.642348][ T12] hsr_slave_1: left promiscuous mode [ 193.685149][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.698426][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.726754][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.746662][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.831019][ T12] veth1_macvtap: left promiscuous mode [ 193.849884][ T12] veth0_macvtap: left promiscuous mode [ 193.862476][ T12] veth1_vlan: left promiscuous mode [ 193.877271][ T12] veth0_vlan: left promiscuous mode [ 194.542510][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.555427][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.065384][ T12] team0 (unregistering): Port device team_slave_1 removed [ 195.130200][ T12] team0 (unregistering): Port device team_slave_0 removed [ 195.337708][ T5236] Bluetooth: hci2: command tx timeout [ 195.898663][ T7456] netlink: 'syz.4.508': attribute type 15 has an invalid length. [ 195.907662][ T7456] netlink: 176 bytes leftover after parsing attributes in process `syz.4.508'. [ 196.190057][ T7469] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.511'. [ 196.202088][ T7469] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 196.227238][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.234401][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.246598][ T7339] bridge_slave_0: entered allmulticast mode [ 196.267119][ T7339] bridge_slave_0: entered promiscuous mode [ 196.275650][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.286475][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.304154][ T7339] bridge_slave_1: entered allmulticast mode [ 196.317468][ T7339] bridge_slave_1: entered promiscuous mode [ 196.971884][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.093213][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.109123][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.258050][ T7339] team0: Port device team_slave_0 added [ 197.302728][ T7339] team0: Port device team_slave_1 added [ 197.840522][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.876797][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.928580][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.972164][ T12] bridge_slave_1: left allmulticast mode [ 197.993593][ T12] bridge_slave_1: left promiscuous mode [ 198.020669][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.072954][ T12] bridge_slave_0: left allmulticast mode [ 198.083661][ T12] bridge_slave_0: left promiscuous mode [ 198.102151][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.766894][ T7519] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.525'. [ 198.795624][ T7519] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 198.881192][ T7523] netlink: 'syz.0.527': attribute type 2 has an invalid length. [ 198.889810][ T7523] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.527'. [ 199.129620][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.148470][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.168484][ T12] bond0 (unregistering): Released all slaves [ 199.183282][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.190532][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.222003][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.435844][ T7527] netlink: 'syz.3.528': attribute type 39 has an invalid length. [ 199.711526][ T7339] hsr_slave_0: entered promiscuous mode [ 199.748763][ T7339] hsr_slave_1: entered promiscuous mode [ 199.836708][ T7339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.865700][ T7339] Cannot create hsr debugfs directory [ 200.231351][ T12] hsr_slave_1: left promiscuous mode [ 200.250529][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.273512][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.299557][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.317014][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.443133][ T12] veth1_macvtap: left promiscuous mode [ 200.459146][ T12] veth0_macvtap: left promiscuous mode [ 200.485957][ T12] veth1_vlan: left promiscuous mode [ 200.511624][ T12] veth0_vlan: left promiscuous mode [ 200.864425][ T7568] netlink: 'syz.3.540': attribute type 2 has an invalid length. [ 200.883480][ T7568] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.540'. [ 201.301247][ T12] team0 (unregistering): Port device team_slave_1 removed [ 201.346033][ T12] team0 (unregistering): Port device team_slave_0 removed [ 201.861388][ T5236] Bluetooth: hci1: ISO packet for unknown connection handle 9 [ 202.281364][ T7582] netlink: 6 bytes leftover after parsing attributes in process `syz.0.545'. [ 202.325993][ T7582] netlink: zone id is out of range [ 202.514990][ T7585] Dead loop on virtual device ip6_vti0, fix it urgently! [ 202.548053][ T7595] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 202.555089][ T7595] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 202.597327][ T7595] netlink: 'syz.2.548': attribute type 21 has an invalid length. [ 203.206231][ T7617] netlink: 'syz.2.553': attribute type 2 has an invalid length. [ 203.273774][ T7617] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.553'. [ 203.395869][ T7623] netlink: 10 bytes leftover after parsing attributes in process `syz.4.555'. [ 203.739199][ T7339] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.802905][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 203.882698][ T7339] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.947359][ T7339] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.017788][ T7339] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.289838][ T7660] FAULT_INJECTION: forcing a failure. [ 204.289838][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 204.313035][ T7660] CPU: 0 UID: 0 PID: 7660 Comm: syz.2.564 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 204.322862][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 204.332990][ T7660] Call Trace: [ 204.336325][ T7660] [ 204.339307][ T7660] dump_stack_lvl+0x241/0x360 [ 204.344071][ T7660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.349363][ T7660] ? __pfx__printk+0x10/0x10 [ 204.354027][ T7660] ? fs_reclaim_acquire+0x93/0x140 [ 204.359207][ T7660] ? __pfx___might_resched+0x10/0x10 [ 204.364548][ T7660] ? dynamic_dname+0x141/0x1b0 [ 204.369372][ T7660] should_fail_ex+0x3b0/0x4e0 [ 204.374092][ T7660] ? tomoyo_encode+0x26f/0x540 [ 204.378888][ T7660] should_failslab+0xac/0x100 [ 204.383594][ T7660] ? tomoyo_encode+0x26f/0x540 [ 204.388386][ T7660] __kmalloc_noprof+0xd8/0x400 [ 204.393188][ T7660] tomoyo_encode+0x26f/0x540 [ 204.397806][ T7660] ? __pfx_sockfs_dname+0x10/0x10 [ 204.402857][ T7660] tomoyo_realpath_from_path+0x59e/0x5e0 [ 204.408543][ T7660] tomoyo_path_number_perm+0x23a/0x880 [ 204.414052][ T7660] ? tomoyo_path_number_perm+0x208/0x880 [ 204.419718][ T7660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.425807][ T7660] ? __fget_files+0x29/0x470 [ 204.430426][ T7660] ? __fget_files+0x3f3/0x470 [ 204.435138][ T7660] security_file_ioctl+0xc6/0x2a0 [ 204.440214][ T7660] __se_sys_ioctl+0x47/0x170 [ 204.444839][ T7660] do_syscall_64+0xf3/0x230 [ 204.449369][ T7660] ? clear_bhb_loop+0x35/0x90 [ 204.454073][ T7660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.459992][ T7660] RIP: 0033:0x7f41fa77def9 [ 204.464456][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.484089][ T7660] RSP: 002b:00007f41fb54f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.492535][ T7660] RAX: ffffffffffffffda RBX: 00007f41fa935f80 RCX: 00007f41fa77def9 [ 204.500538][ T7660] RDX: 00000000200001c0 RSI: 0000000000008917 RDI: 0000000000000004 [ 204.508549][ T7660] RBP: 00007f41fb54f090 R08: 0000000000000000 R09: 0000000000000000 [ 204.516554][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.524553][ T7660] R13: 0000000000000000 R14: 00007f41fa935f80 R15: 00007fff76b38ea8 [ 204.532573][ T7660] [ 204.617522][ T7660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.835962][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.916133][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.978031][ T2477] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.985204][ T2477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.063042][ T2477] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.070270][ T2477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.203568][ T7339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.261137][ T7339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.532649][ T7686] netlink: 'syz.4.569': attribute type 2 has an invalid length. [ 205.618181][ T7686] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.569'. [ 205.965851][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.988469][ T7708] FAULT_INJECTION: forcing a failure. [ 205.988469][ T7708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.988558][ T7708] [ 205.988565][ T7708] ====================================================== [ 205.988573][ T7708] WARNING: possible circular locking dependency detected [ 205.988583][ T7708] 6.11.0-syzkaller-g88264981f208 #0 Not tainted [ 205.988594][ T7708] ------------------------------------------------------ [ 205.988602][ T7708] syz.0.575/7708 is trying to acquire lock: [ 205.988612][ T7708] ffffffff8e813558 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x20/0xa0 [ 205.988671][ T7708] [ 205.988671][ T7708] but task is already holding lock: [ 205.988678][ T7708] ffff8880b872c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x109/0xca0 [ 205.988735][ T7708] [ 205.988735][ T7708] which lock already depends on the new lock. [ 205.988735][ T7708] [ 205.988742][ T7708] [ 205.988742][ T7708] the existing dependency chain (in reverse order) is: [ 205.988750][ T7708] [ 205.988750][ T7708] -> #3 (hrtimer_bases.lock){-.-.}-{2:2}: [ 205.988778][ T7708] lock_acquire+0x1ed/0x550 [ 205.988809][ T7708] _raw_spin_lock_irqsave+0xd5/0x120 [ 205.988829][ T7708] hrtimer_start_range_ns+0x109/0xca0 [ 205.988859][ T7708] start_dl_timer+0x36a/0x4d0 [ 205.988880][ T7708] enqueue_dl_entity+0x10ed/0x1d60 [ 205.988901][ T7708] dl_server_start+0xc9/0x240 [ 205.988921][ T7708] enqueue_task_fair+0xb5c/0xea0 [ 205.988949][ T7708] enqueue_task+0x1a5/0x300 [ 205.988975][ T7708] wake_up_new_task+0x566/0xc30 [ 205.988995][ T7708] kernel_clone+0x4ee/0x8f0 [ 205.989023][ T7708] user_mode_thread+0x132/0x1a0 [ 205.989052][ T7708] rest_init+0x23/0x300 [ 205.989091][ T7708] start_kernel+0x47f/0x500 [ 205.989120][ T7708] x86_64_start_reservations+0x2a/0x30 [ 205.989141][ T7708] x86_64_start_kernel+0x9f/0xa0 [ 205.989160][ T7708] common_startup_64+0x13e/0x147 [ 205.989183][ T7708] [ 205.989183][ T7708] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 205.989213][ T7708] lock_acquire+0x1ed/0x550 [ 205.989242][ T7708] _raw_spin_lock_nested+0x31/0x40 [ 205.989265][ T7708] raw_spin_rq_lock_nested+0x2a/0x140 [ 205.989290][ T7708] task_rq_lock+0xc6/0x360 [ 205.989312][ T7708] cgroup_move_task+0x92/0x2d0 [ 205.989333][ T7708] css_set_move_task+0x72e/0x950 [ 205.989352][ T7708] cgroup_post_fork+0x256/0x880 [ 205.989369][ T7708] copy_process+0x39e9/0x3d50 [ 205.989391][ T7708] kernel_clone+0x226/0x8f0 [ 205.989442][ T7708] user_mode_thread+0x132/0x1a0 [ 205.989470][ T7708] rest_init+0x23/0x300 [ 205.989497][ T7708] start_kernel+0x47f/0x500 [ 205.989523][ T7708] x86_64_start_reservations+0x2a/0x30 [ 205.989543][ T7708] x86_64_start_kernel+0x9f/0xa0 [ 205.989560][ T7708] common_startup_64+0x13e/0x147 [ 205.989580][ T7708] [ 205.989580][ T7708] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 205.989609][ T7708] lock_acquire+0x1ed/0x550 [ 205.989636][ T7708] _raw_spin_lock_irqsave+0xd5/0x120 [ 205.989656][ T7708] try_to_wake_up+0xb0/0x1480 [ 205.989687][ T7708] up+0x72/0x90 [ 205.989711][ T7708] __console_unlock+0x123/0x1f0 [ 205.989734][ T7708] console_unlock+0x18f/0x3b0 [ 205.989754][ T7708] vprintk_emit+0x730/0xa10 [ 205.989775][ T7708] dev_vprintk_emit+0x2ae/0x330 [ 205.989797][ T7708] dev_printk_emit+0xdd/0x120 [ 205.989816][ T7708] _dev_warn+0x122/0x170 [ 205.989836][ T7708] firmware_fallback_sysfs+0x4cf/0x9e0 [ 205.989864][ T7708] _request_firmware+0xcf5/0x12b0 [ 205.989889][ T7708] request_firmware_work_func+0x12a/0x280 [ 205.989917][ T7708] process_scheduled_works+0xa63/0x1850 [ 205.989944][ T7708] worker_thread+0x870/0xd30 [ 205.989972][ T7708] kthread+0x2f0/0x390 [ 205.989989][ T7708] ret_from_fork+0x4b/0x80 [ 205.990016][ T7708] ret_from_fork_asm+0x1a/0x30 [ 205.990045][ T7708] [ 205.990045][ T7708] -> #0 ((console_sem).lock){-...}-{2:2}: [ 205.990072][ T7708] validate_chain+0x18ef/0x5920 [ 205.990101][ T7708] __lock_acquire+0x1384/0x2050 [ 205.990130][ T7708] lock_acquire+0x1ed/0x550 [ 205.990157][ T7708] _raw_spin_lock_irqsave+0xd5/0x120 [ 205.990178][ T7708] down_trylock+0x20/0xa0 [ 205.990203][ T7708] __down_trylock_console_sem+0x109/0x250 [ 205.990227][ T7708] vprintk_emit+0x3d7/0xa10 [ 205.990247][ T7708] _printk+0xd5/0x120 [ 205.990269][ T7708] should_fail_ex+0x391/0x4e0 [ 205.990297][ T7708] strncpy_from_user+0x36/0x2e0 [ 205.990322][ T7708] strncpy_from_user_nofault+0x71/0x140 [ 205.990342][ T7708] bpf_probe_read_user_str+0x2a/0x70 [ 205.990368][ T7708] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 205.990384][ T7708] bpf_trace_run2+0x2ec/0x540 [ 205.990404][ T7708] __traceiter_hrtimer_start+0x76/0xd0 [ 205.990434][ T7708] enqueue_hrtimer+0x35a/0x3c0 [ 205.990454][ T7708] hrtimer_start_range_ns+0xac8/0xca0 [ 205.990486][ T7708] cpu_clock_event_add+0x180/0x1a0 [ 205.990509][ T7708] event_sched_in+0x832/0xe90 [ 205.990536][ T7708] visit_groups_merge+0x1521/0x2fd0 [ 205.990563][ T7708] __pmu_ctx_sched_in+0x1aa/0x230 [ 205.990591][ T7708] ctx_sched_in+0x4c2/0x600 [ 205.990617][ T7708] ctx_resched+0x560/0x900 [ 205.990643][ T7708] __perf_install_in_context+0x647/0x850 [ 205.990664][ T7708] remote_function+0xef/0x170 [ 205.990690][ T7708] generic_exec_single+0x336/0x9b0 [ 205.990722][ T7708] smp_call_function_single+0x3fa/0x1990 [ 205.990753][ T7708] perf_install_in_context+0x71a/0xb20 [ 205.990777][ T7708] __se_sys_perf_event_open+0x31c5/0x38d0 [ 205.990802][ T7708] do_syscall_64+0xf3/0x230 [ 205.990827][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.990850][ T7708] [ 205.990850][ T7708] other info that might help us debug this: [ 205.990850][ T7708] [ 205.990858][ T7708] Chain exists of: [ 205.990858][ T7708] (console_sem).lock --> &rq->__lock --> hrtimer_bases.lock [ 205.990858][ T7708] [ 205.990893][ T7708] Possible unsafe locking scenario: [ 205.990893][ T7708] [ 205.990900][ T7708] CPU0 CPU1 [ 205.990906][ T7708] ---- ---- [ 205.990913][ T7708] lock(hrtimer_bases.lock); [ 205.990927][ T7708] lock(&rq->__lock); [ 205.990942][ T7708] lock(hrtimer_bases.lock); [ 205.990958][ T7708] lock((console_sem).lock); [ 205.990972][ T7708] [ 205.990972][ T7708] *** DEADLOCK *** [ 205.990972][ T7708] [ 205.990978][ T7708] 6 locks held by syz.0.575/7708: [ 205.990990][ T7708] #0: ffff88802960b9d8 (&sig->exec_update_lock){++++}-{3:3}, at: __se_sys_perf_event_open+0xe64/0x38d0 [ 205.991046][ T7708] #1: ffff88802fa6bca8 (&ctx->mutex){+.+.}-{3:3}, at: __se_sys_perf_event_open+0x13f9/0x38d0 [ 205.991107][ T7708] #2: ffff8880b87376c8 (&cpuctx_lock){-.-.}-{2:2}, at: __perf_install_in_context+0xdc/0x850 [ 205.991158][ T7708] #3: ffff88802fa6bc18 (&ctx->lock){-.-.}-{2:2}, at: __perf_install_in_context+0x110/0x850 [ 205.991209][ T7708] #4: ffff8880b872c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x109/0xca0 [ 205.991269][ T7708] #5: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 205.991318][ T7708] [ 205.991318][ T7708] stack backtrace: [ 205.991327][ T7708] CPU: 1 UID: 0 PID: 7708 Comm: syz.0.575 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 205.991351][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 205.991365][ T7708] Call Trace: [ 205.991372][ T7708] [ 205.991381][ T7708] dump_stack_lvl+0x241/0x360 [ 205.991411][ T7708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.991438][ T7708] ? __pfx__printk+0x10/0x10 [ 205.991469][ T7708] print_circular_bug+0x13a/0x1b0 [ 205.991495][ T7708] check_noncircular+0x36a/0x4a0 [ 205.991521][ T7708] ? __pfx_check_noncircular+0x10/0x10 [ 205.991546][ T7708] ? lockdep_lock+0x123/0x2b0 [ 205.991582][ T7708] validate_chain+0x18ef/0x5920 [ 205.991618][ T7708] ? __pfx_validate_chain+0x10/0x10 [ 205.991641][ T7708] ? __pfx_prb_first_seq+0x10/0x10 [ 205.991670][ T7708] ? this_cpu_in_panic+0x4f/0x80 [ 205.991691][ T7708] ? _prb_read_valid+0xa39/0xac0 [ 205.991722][ T7708] ? mark_lock+0x9a/0x360 [ 205.991743][ T7708] __lock_acquire+0x1384/0x2050 [ 205.991784][ T7708] lock_acquire+0x1ed/0x550 [ 205.991815][ T7708] ? down_trylock+0x20/0xa0 [ 205.991844][ T7708] ? __pfx_desc_update_last_finalized+0x10/0x10 [ 205.991870][ T7708] ? __pfx_lock_acquire+0x10/0x10 [ 205.991899][ T7708] ? rcu_is_watching+0x15/0xb0 [ 205.991926][ T7708] ? vprintk_store+0xd3e/0x1160 [ 205.991955][ T7708] _raw_spin_lock_irqsave+0xd5/0x120 [ 205.991989][ T7708] ? down_trylock+0x20/0xa0 [ 205.992015][ T7708] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 205.992037][ T7708] ? __pfx_validate_chain+0x10/0x10 [ 205.992059][ T7708] ? validate_chain+0x11e/0x5920 [ 205.992089][ T7708] down_trylock+0x20/0xa0 [ 205.992117][ T7708] __down_trylock_console_sem+0x109/0x250 [ 205.992144][ T7708] ? _printk+0xd5/0x120 [ 205.992167][ T7708] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 205.992196][ T7708] ? this_cpu_in_panic+0x4f/0x80 [ 205.992216][ T7708] ? is_printk_legacy_deferred+0x43/0x50 [ 205.992263][ T7708] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 205.992291][ T7708] vprintk_emit+0x3d7/0xa10 [ 205.992320][ T7708] ? __pfx_vprintk_emit+0x10/0x10 [ 205.992345][ T7708] ? __lock_acquire+0x1384/0x2050 [ 205.992384][ T7708] _printk+0xd5/0x120 [ 205.992411][ T7708] ? __pfx__printk+0x10/0x10 [ 205.992442][ T7708] should_fail_ex+0x391/0x4e0 [ 205.992475][ T7708] strncpy_from_user+0x36/0x2e0 [ 205.992506][ T7708] strncpy_from_user_nofault+0x71/0x140 [ 205.992530][ T7708] bpf_probe_read_user_str+0x2a/0x70 [ 205.992558][ T7708] ? bpf_trace_run2+0x1fc/0x540 [ 205.992580][ T7708] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 205.992598][ T7708] bpf_trace_run2+0x2ec/0x540 [ 205.992620][ T7708] ? debug_object_activate+0x3e4/0x510 [ 205.992651][ T7708] ? __pfx_bpf_trace_run2+0x10/0x10 [ 205.992673][ T7708] ? __pfx_debug_object_activate+0x10/0x10 [ 205.992702][ T7708] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 205.992730][ T7708] ? __pfx___bpf_trace_hrtimer_start+0x10/0x10 [ 205.992756][ T7708] __traceiter_hrtimer_start+0x76/0xd0 [ 205.992791][ T7708] enqueue_hrtimer+0x35a/0x3c0 [ 205.992816][ T7708] hrtimer_start_range_ns+0xac8/0xca0 [ 205.992854][ T7708] cpu_clock_event_add+0x180/0x1a0 [ 205.992884][ T7708] event_sched_in+0x832/0xe90 [ 205.992920][ T7708] ? __pfx_event_sched_in+0x10/0x10 [ 205.992979][ T7708] visit_groups_merge+0x1521/0x2fd0 [ 205.993010][ T7708] ? mark_lock+0x9a/0x360 [ 205.993037][ T7708] ? __pfx_visit_groups_merge+0x10/0x10 [ 205.993072][ T7708] __pmu_ctx_sched_in+0x1aa/0x230 [ 205.993108][ T7708] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 205.993139][ T7708] ctx_sched_in+0x4c2/0x600 [ 205.993170][ T7708] ctx_resched+0x560/0x900 [ 205.993202][ T7708] __perf_install_in_context+0x647/0x850 [ 205.993230][ T7708] ? __pfx___perf_install_in_context+0x10/0x10 [ 205.993253][ T7708] remote_function+0xef/0x170 [ 205.993282][ T7708] ? __pfx_remote_function+0x10/0x10 [ 205.993310][ T7708] generic_exec_single+0x336/0x9b0 [ 205.993341][ T7708] ? __pfx_remote_function+0x10/0x10 [ 205.993368][ T7708] ? __pfx_generic_exec_single+0x10/0x10 [ 205.993402][ T7708] ? smp_call_function_single+0xb4/0x1990 [ 205.993437][ T7708] smp_call_function_single+0x3fa/0x1990 [ 205.993470][ T7708] ? __asan_memset+0x23/0x50 [ 205.993498][ T7708] ? __pfx_remote_function+0x10/0x10 [ 205.993528][ T7708] ? __asan_memset+0x23/0x50 [ 205.993557][ T7708] ? lockdep_init_map_type+0xa1/0x910 [ 205.993589][ T7708] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 205.993621][ T7708] ? __pfx_smp_call_function_single+0x10/0x10 [ 205.993654][ T7708] ? __pfx_remote_function+0x10/0x10 [ 205.993683][ T7708] ? __raw_spin_lock_init+0x45/0x100 [ 205.993715][ T7708] perf_install_in_context+0x71a/0xb20 [ 205.993747][ T7708] ? __pfx_perf_install_in_context+0x10/0x10 [ 205.993774][ T7708] ? __pfx___perf_install_in_context+0x10/0x10 [ 205.993804][ T7708] ? anon_inode_getfile+0xff/0x180 [ 205.993835][ T7708] __se_sys_perf_event_open+0x31c5/0x38d0 [ 205.993873][ T7708] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 205.993908][ T7708] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.993941][ T7708] ? do_syscall_64+0x100/0x230 [ 205.993969][ T7708] ? __x64_sys_perf_event_open+0x20/0xc0 [ 205.993997][ T7708] do_syscall_64+0xf3/0x230 [ 205.994023][ T7708] ? clear_bhb_loop+0x35/0x90 [ 205.994051][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.994082][ T7708] RIP: 0033:0x7fe33e17def9 [ 205.994100][ T7708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.994119][ T7708] RSP: 002b:00007fe33ef63038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 205.994141][ T7708] RAX: ffffffffffffffda RBX: 00007fe33e335f80 RCX: 00007fe33e17def9 [ 205.994157][ T7708] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 205.994172][ T7708] RBP: 00007fe33ef63090 R08: 0000000000000000 R09: 0000000000000000 [ 205.994186][ T7708] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 205.994199][ T7708] R13: 0000000000000000 R14: 00007fe33e335f80 R15: 00007ffc48ab6e58 [ 205.994223][ T7708] [ 207.270674][ T7708] CPU: 1 UID: 0 PID: 7708 Comm: syz.0.575 Not tainted 6.11.0-syzkaller-g88264981f208 #0 [ 207.280662][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 207.290720][ T7708] Call Trace: [ 207.294002][ T7708] [ 207.296939][ T7708] dump_stack_lvl+0x241/0x360 [ 207.301653][ T7708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.306862][ T7708] ? __pfx__printk+0x10/0x10 [ 207.311557][ T7708] should_fail_ex+0x3b0/0x4e0 [ 207.316333][ T7708] strncpy_from_user+0x36/0x2e0 [ 207.321325][ T7708] strncpy_from_user_nofault+0x71/0x140 [ 207.327052][ T7708] bpf_probe_read_user_str+0x2a/0x70 [ 207.332362][ T7708] ? bpf_trace_run2+0x1fc/0x540 [ 207.337219][ T7708] bpf_prog_99b56f93a3ca5fea+0x4b/0x4d [ 207.342678][ T7708] bpf_trace_run2+0x2ec/0x540 [ 207.347363][ T7708] ? debug_object_activate+0x3e4/0x510 [ 207.352836][ T7708] ? __pfx_bpf_trace_run2+0x10/0x10 [ 207.358039][ T7708] ? __pfx_debug_object_activate+0x10/0x10 [ 207.363853][ T7708] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 207.370110][ T7708] ? __pfx___bpf_trace_hrtimer_start+0x10/0x10 [ 207.376277][ T7708] __traceiter_hrtimer_start+0x76/0xd0 [ 207.381751][ T7708] enqueue_hrtimer+0x35a/0x3c0 [ 207.386530][ T7708] hrtimer_start_range_ns+0xac8/0xca0 [ 207.392616][ T7708] cpu_clock_event_add+0x180/0x1a0 [ 207.397737][ T7708] event_sched_in+0x832/0xe90 [ 207.402431][ T7708] ? __pfx_event_sched_in+0x10/0x10 [ 207.407663][ T7708] visit_groups_merge+0x1521/0x2fd0 [ 207.412887][ T7708] ? mark_lock+0x9a/0x360 [ 207.417228][ T7708] ? __pfx_visit_groups_merge+0x10/0x10 [ 207.422787][ T7708] __pmu_ctx_sched_in+0x1aa/0x230 [ 207.427823][ T7708] ? __pfx___pmu_ctx_sched_in+0x10/0x10 [ 207.433403][ T7708] ctx_sched_in+0x4c2/0x600 [ 207.437919][ T7708] ctx_resched+0x560/0x900 [ 207.442353][ T7708] __perf_install_in_context+0x647/0x850 [ 207.448013][ T7708] ? __pfx___perf_install_in_context+0x10/0x10 [ 207.454194][ T7708] remote_function+0xef/0x170 [ 207.458898][ T7708] ? __pfx_remote_function+0x10/0x10 [ 207.464208][ T7708] generic_exec_single+0x336/0x9b0 [ 207.469342][ T7708] ? __pfx_remote_function+0x10/0x10 [ 207.474644][ T7708] ? __pfx_generic_exec_single+0x10/0x10 [ 207.480300][ T7708] ? smp_call_function_single+0xb4/0x1990 [ 207.486037][ T7708] smp_call_function_single+0x3fa/0x1990 [ 207.491687][ T7708] ? __asan_memset+0x23/0x50 [ 207.496309][ T7708] ? __pfx_remote_function+0x10/0x10 [ 207.501611][ T7708] ? __asan_memset+0x23/0x50 [ 207.506210][ T7708] ? lockdep_init_map_type+0xa1/0x910 [ 207.511600][ T7708] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 207.517456][ T7708] ? __pfx_smp_call_function_single+0x10/0x10 [ 207.523552][ T7708] ? __pfx_remote_function+0x10/0x10 [ 207.528856][ T7708] ? __raw_spin_lock_init+0x45/0x100 [ 207.534172][ T7708] perf_install_in_context+0x71a/0xb20 [ 207.539653][ T7708] ? __pfx_perf_install_in_context+0x10/0x10 [ 207.545649][ T7708] ? __pfx___perf_install_in_context+0x10/0x10 [ 207.551817][ T7708] ? anon_inode_getfile+0xff/0x180 [ 207.556942][ T7708] __se_sys_perf_event_open+0x31c5/0x38d0 [ 207.562681][ T7708] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 207.568766][ T7708] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.575110][ T7708] ? do_syscall_64+0x100/0x230 [ 207.579885][ T7708] ? __x64_sys_perf_event_open+0x20/0xc0 [ 207.585534][ T7708] do_syscall_64+0xf3/0x230 [ 207.590047][ T7708] ? clear_bhb_loop+0x35/0x90 [ 207.594746][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.600645][ T7708] RIP: 0033:0x7fe33e17def9 [ 207.605082][ T7708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.624707][ T7708] RSP: 002b:00007fe33ef63038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 207.633140][ T7708] RAX: ffffffffffffffda RBX: 00007fe33e335f80 RCX: 00007fe33e17def9 [ 207.641121][ T7708] RDX: bfffffffffffffff RSI: 0000000000000000 RDI: 0000000020000180 [ 207.649102][ T7708] RBP: 00007fe33ef63090 R08: 0000000000000000 R09: 0000000000000000 [ 207.657078][ T7708] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 207.665055][ T7708] R13: 0000000000000000 R14: 00007fe33e335f80 R15: 00007ffc48ab6e58 [ 207.673049][ T7708] [ 207.725474][ T7339] veth0_vlan: entered promiscuous mode [ 207.737253][ T7339] veth1_vlan: entered promiscuous mode [ 207.757361][ T7339] veth0_macvtap: entered promiscuous mode [ 207.766032][ T7339] veth1_macvtap: entered promiscuous mode [ 207.781643][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.792249][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.802121][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.812694][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.822572][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.833060][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.842935][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.853408][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.865072][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.876012][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.887349][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.897886][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.908388][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.918254][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.928727][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.938588][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.949083][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.958944][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.969506][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.979817][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.990676][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.001554][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.027443][ T7339] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.038943][ T7339] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.050680][ T7339] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.059463][ T7339] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.104640][ T7339] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 208.153467][ T2477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.163611][ T7339] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 208.175114][ T2477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.202357][ T5839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.210961][ T5839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.254841][ T5848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.573055][ T5848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.793965][ T5848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.961375][ T5848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.090626][ T5848] bridge_slave_1: left allmulticast mode [ 210.102263][ T5848] bridge_slave_1: left promiscuous mode [ 210.108162][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.121002][ T5848] bridge_slave_0: left allmulticast mode [ 210.128605][ T5848] bridge_slave_0: left promiscuous mode [ 210.134336][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.299729][ T5848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.331134][ T5848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.358655][ T5848] bond0 (unregistering): Released all slaves [ 210.574089][ T5848] hsr_slave_0: left promiscuous mode [ 210.582331][ T5848] hsr_slave_1: left promiscuous mode [ 210.589953][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.607570][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.622712][ T5848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.630615][ T5848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.646170][ T5848] veth1_macvtap: left promiscuous mode [ 210.656491][ T5848] veth0_macvtap: left promiscuous mode [ 210.662124][ T5848] veth1_vlan: left promiscuous mode [ 210.676471][ T5848] veth0_vlan: left promiscuous mode [ 210.956916][ T5848] team0 (unregistering): Port device team_slave_1 removed [ 210.987380][ T5848] team0 (unregistering): Port device team_slave_0 removed