last executing test programs: 3m17.597758317s ago: executing program 2 (id=406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3m17.438133156s ago: executing program 2 (id=409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 3m15.564868537s ago: executing program 2 (id=417): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) 3m14.107322088s ago: executing program 2 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) 3m13.95465826s ago: executing program 2 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) 3m13.021809644s ago: executing program 2 (id=434): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000021", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{}, 0x0, &(0x7f0000000400)='%pi6 \x00'}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001a40)="c81f3665b988", 0x6}], 0x1, 0x0, 0x18}, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m57.860963738s ago: executing program 32 (id=434): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000021", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{}, 0x0, &(0x7f0000000400)='%pi6 \x00'}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001a40)="c81f3665b988", 0x6}], 0x1, 0x0, 0x18}, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m36.471060522s ago: executing program 3 (id=959): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m35.808116815s ago: executing program 3 (id=964): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000c8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102032900fc08000e40"], 0xfdef) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x25, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c40)={r0, 0x20, &(0x7f0000001c00)={&(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000001b00)=""/210, 0xd2}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x16, 0x2a, &(0x7f0000001f00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="09000044000000e5ff176b9a30f0a70bc3f5c31f86a92ea6e00300000000000000a22fbfc24c65fe4ef8e71f872bf0d705192a5745d76f2c61ad0f00"/69, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000085100000f9ffffff7f20f4ff0c00000085200000040000000d88f0ff0f000000bf91000000000000b702000001000000850000008400"], &(0x7f0000000680)='GPL\x00', 0x5, 0xb8, &(0x7f0000000940)=""/184, 0x41000, 0x43, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e00), 0x10, 0xfffffff7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x13, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020772500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000080040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m29.123902009s ago: executing program 0 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x8, 0xf5, 0x0, 0x6, 0x0, 0x8, 0x80020, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x3, 0x1, 0x2, 0x7, 0x6, 0x7ff, 0x0, 0x81, 0x0, 0xb50f}, 0x0, 0xffffffffffffffff, r4, 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004540)={0x0, &(0x7f00000044c0)=""/124, 0x0, 0x7c, 0x0, 0x2, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004640)={0x18, 0x0, &(0x7f0000003340), &(0x7f00000033c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000004580)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000045c0)=[r5, r5, r5, r4], &(0x7f0000004600)=[{0x1, 0x4, 0x5, 0x3}, {0x4, 0x1, 0x6, 0x7}], 0x10, 0x7, @void, @value}, 0x94) perf_event_open$cgroup(&(0x7f0000000580)={0x3, 0x80, 0xf9, 0x8, 0xb6, 0x3, 0x0, 0x3, 0x40100, 0xf, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1aa1, 0x6}, 0x5000, 0x6, 0x7, 0x9, 0x80, 0x0, 0x20, 0x0, 0xf, 0x0, 0xf}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000028000000000000000000000007000000070a17d5f17db880cbfd9404010007070d7f0000010000001400000000000000000000000200000005000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="00000000ac1414bb0000000011000000000000000000000001000000f40000000000000014000000000000000000000300000000000000000000000011000000000000000000000001000000010000000000000058a2ba52cac29bc0e7098ef6ef8b928ca1f80aadfc96cb1175e387978d261178c30e770ff6db96f5fc963645a8f473cc7f910b39e98744e3cc830353e5466a833ac4"], 0xd8}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r3}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000086000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r8, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40022500) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x381200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m28.308644928s ago: executing program 0 (id=1010): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m15.604996823s ago: executing program 3 (id=964): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000c8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102032900fc08000e40"], 0xfdef) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x25, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c40)={r0, 0x20, &(0x7f0000001c00)={&(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000001b00)=""/210, 0xd2}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x16, 0x2a, &(0x7f0000001f00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="09000044000000e5ff176b9a30f0a70bc3f5c31f86a92ea6e00300000000000000a22fbfc24c65fe4ef8e71f872bf0d705192a5745d76f2c61ad0f00"/69, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000085100000f9ffffff7f20f4ff0c00000085200000040000000d88f0ff0f000000bf91000000000000b702000001000000850000008400"], &(0x7f0000000680)='GPL\x00', 0x5, 0xb8, &(0x7f0000000940)=""/184, 0x41000, 0x43, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e00), 0x10, 0xfffffff7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x13, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020772500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000080040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m12.987302384s ago: executing program 0 (id=1010): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 51.466582767s ago: executing program 3 (id=964): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000c8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102032900fc08000e40"], 0xfdef) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x25, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c40)={r0, 0x20, &(0x7f0000001c00)={&(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000001b00)=""/210, 0xd2}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x16, 0x2a, &(0x7f0000001f00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="09000044000000e5ff176b9a30f0a70bc3f5c31f86a92ea6e00300000000000000a22fbfc24c65fe4ef8e71f872bf0d705192a5745d76f2c61ad0f00"/69, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000085100000f9ffffff7f20f4ff0c00000085200000040000000d88f0ff0f000000bf91000000000000b702000001000000850000008400"], &(0x7f0000000680)='GPL\x00', 0x5, 0xb8, &(0x7f0000000940)=""/184, 0x41000, 0x43, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e00), 0x10, 0xfffffff7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x13, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020772500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000080040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 51.173047571s ago: executing program 0 (id=1010): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 32.494555256s ago: executing program 3 (id=964): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000c8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102032900fc08000e40"], 0xfdef) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x25, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c40)={r0, 0x20, &(0x7f0000001c00)={&(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000001b00)=""/210, 0xd2}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x16, 0x2a, &(0x7f0000001f00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="09000044000000e5ff176b9a30f0a70bc3f5c31f86a92ea6e00300000000000000a22fbfc24c65fe4ef8e71f872bf0d705192a5745d76f2c61ad0f00"/69, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000085100000f9ffffff7f20f4ff0c00000085200000040000000d88f0ff0f000000bf91000000000000b702000001000000850000008400"], &(0x7f0000000680)='GPL\x00', 0x5, 0xb8, &(0x7f0000000940)=""/184, 0x41000, 0x43, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e00), 0x10, 0xfffffff7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x13, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020772500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000080040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 31.491624179s ago: executing program 0 (id=1010): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 9.822149665s ago: executing program 3 (id=964): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000000c8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102032900fc08000e40"], 0xfdef) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x25, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c40)={r0, 0x20, &(0x7f0000001c00)={&(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000001b00)=""/210, 0xd2}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x16, 0x2a, &(0x7f0000001f00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="09000044000000e5ff176b9a30f0a70bc3f5c31f86a92ea6e00300000000000000a22fbfc24c65fe4ef8e71f872bf0d705192a5745d76f2c61ad0f00"/69, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000085100000f9ffffff7f20f4ff0c00000085200000040000000d88f0ff0f000000bf91000000000000b702000001000000850000008400"], &(0x7f0000000680)='GPL\x00', 0x5, 0xb8, &(0x7f0000000940)=""/184, 0x41000, 0x43, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e00), 0x10, 0xfffffff7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x13, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020772500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000080040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.722656768s ago: executing program 0 (id=1010): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.818352449s ago: executing program 1 (id=1479): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) unlink(&(0x7f0000000200)='./cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_da_update_reserve_space\x00', r1}, 0x19) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x800c6613, 0x20ffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_da_update_reserve_space\x00', r2}, 0x19) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061113c0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x15440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) 3.934621695s ago: executing program 1 (id=1480): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000fd0008000000", @ANYRES64=r1], 0x48}, 0x4000004) 3.594123614s ago: executing program 1 (id=1481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000b80)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="00000100000000405439fbea0cd6", 0x0, 0x34d5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.487198717s ago: executing program 4 (id=1483): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x7, 0x4, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x8, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 3.466851455s ago: executing program 1 (id=1484): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000d40)=ANY=[@ANYBLOB="18080000004000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000201000000000000950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.218994595s ago: executing program 1 (id=1485): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a3, &(0x7f0000000080)) 2.512755349s ago: executing program 1 (id=1487): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x2, r0}, 0x38) 2.466137217s ago: executing program 4 (id=1488): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x6202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x5012, 0xc8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r0, 0x0, 0x6}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000440)) r3 = gettid() r4 = getpid() ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001200)={'veth1_to_team\x00', 0x1}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000000000000000000005400a6f399593e3b44adace01498ae733bf16a7772128a4354cb76582e88f1b3e2fd842ff5408e057b5c87f281162aa2a6e4540971524cbe3b372bdb824eb82f90b784c483b9eb14a16ecb651a868391074568385ad8b83f8249aa2810b827009b7a19a660daf584c24a340f84856252681eeac3ee2a0109086b033ec707e59b838152934f59aaf055d66775731ab8a975bfd965088514815bd431f4bfd2922cb7eef212a669ee6a3735c9ff82f065a731ccd235157c23fffda0946580cdb8d9750900709f0b83924648299fe548771b9c41af66b2640ebe411283d3f8177dbd023c2e1f630b7af514d7eb9b4038fad82d0b4d42c1ae82fa0f93a2ce70a8c1133adf9c", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x24008000) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r1, 0x0, 0xffffffffffffff65, &(0x7f00000001c0)='\x00'}, 0x11) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7fff, 0xf}, 0x110104, 0x32, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x5d31, 0x118000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xfffffffffff7ffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x8c0}], 0x1, 0x0, 0x0, 0x600}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) recvmsg$kcm(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a40)=""/219, 0xdb}, {&(0x7f0000000b40)=""/49, 0xc}, {&(0x7f0000000b80)=""/209, 0xd1}, {&(0x7f0000000c80)=""/148, 0x94}, {&(0x7f0000000d40)=""/240, 0xf0}, {&(0x7f0000000e40)=""/175, 0xaf}, {&(0x7f0000001400)=""/125, 0x7d}, {&(0x7f0000000f80)=""/235, 0xeb}, {&(0x7f0000001080)=""/33, 0x21}], 0x9, &(0x7f0000001180)=""/60, 0x3c}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1e00f7ff0700000000ffffff0800000000100000", @ANYRES32=r8, @ANYBLOB="0600"/20, @ANYRES32=r9, @ANYRES32=r8, @ANYBLOB="0400000000000000040000000c00"/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r8, 0x5, 0x0, 0x400, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="320000000400000000000000", @ANYRES32=r8, @ANYBLOB="29200400000000000000eb8bd5e876b603cd8e7aa85d20c429801e9d76581f8e609094775f98a672e443c99dc8b0b99a4279a592e3d02b0f92247db444af630f9e46434608e060", @ANYRES64=r11], 0x20) 1.420674566s ago: executing program 5 (id=1491): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf1000000, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 1.230431624s ago: executing program 5 (id=1492): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000004008000000", @ANYRES64=r1], 0x48}, 0x4000004) 1.198698884s ago: executing program 4 (id=1493): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x6e, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x8000000, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.051586489s ago: executing program 4 (id=1494): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x7, 0x4, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x8, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000600)=""/126, 0x7e}], 0x7, &(0x7f0000000700)=""/3, 0x3}, 0x12020) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 751.209505ms ago: executing program 5 (id=1495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, 0x0, 0xfdef) 544.622677ms ago: executing program 5 (id=1496): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14065, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cdd}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1f}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2f) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 492.581679ms ago: executing program 4 (id=1497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 388.864208ms ago: executing program 4 (id=1498): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) unlink(&(0x7f0000000200)='./cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_da_update_reserve_space\x00', r1}, 0x19) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x800c6613, 0x20ffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000480)='ext4_da_update_reserve_space\x00', r2}, 0x19) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061113c0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x15440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) 248.55539ms ago: executing program 5 (id=1499): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}, 0x10) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000c03000000000000000000000d00000000000000000200000d0000000000000000000000000000000000000800000000005f"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)=r2, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2043, 0x0) socket$kcm(0xa, 0x3, 0x3a) socketpair(0x10, 0x5, 0xc9e9, 0x0) openat$cgroup_devices(r2, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf28, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 5 (id=1500): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073fe6084e00458bd8f19680f508195b6a862c"], 0xfe33) (fail_nth: 2) kernel console output (not intermixed with test programs): ing): Released all slaves [ 140.320568][ T969] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 60 sec [ 140.682757][ T7589] netlink: 60 bytes leftover after parsing attributes in process `syz.4.572'. [ 142.021557][ T6190] hsr_slave_0: left promiscuous mode [ 142.031938][ T6190] hsr_slave_1: left promiscuous mode [ 142.039510][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.046982][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.062486][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.070208][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.133915][ T6190] veth1_macvtap: left promiscuous mode [ 142.141712][ T6190] veth0_macvtap: left promiscuous mode [ 142.147323][ T6190] veth1_vlan: left promiscuous mode [ 142.178044][ T6190] veth0_vlan: left promiscuous mode [ 143.013063][ T7642] netlink: 60 bytes leftover after parsing attributes in process `syz.0.590'. [ 143.641032][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 143.678044][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 144.016253][ T7627] netlink: 'syz.4.585': attribute type 10 has an invalid length. [ 145.364917][ T7700] netlink: 60 bytes leftover after parsing attributes in process `syz.5.607'. [ 146.985986][ T7783] netlink: 'syz.0.633': attribute type 2 has an invalid length. [ 147.001278][ T7783] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.633'. [ 149.281014][ T7859] FAULT_INJECTION: forcing a failure. [ 149.281014][ T7859] name failslab, interval 1, probability 0, space 0, times 0 [ 149.337985][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.0.656 Not tainted 6.12.0-rc7-syzkaller-g9f8e716d46c6 #0 [ 149.348122][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 149.358206][ T7859] Call Trace: [ 149.361506][ T7859] [ 149.364459][ T7859] dump_stack_lvl+0x241/0x360 [ 149.369169][ T7859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.374398][ T7859] ? __pfx__printk+0x10/0x10 [ 149.379020][ T7859] ? __kmalloc_node_noprof+0xb7/0x440 [ 149.384423][ T7859] ? __pfx___might_resched+0x10/0x10 [ 149.389752][ T7859] should_fail_ex+0x3b0/0x4e0 [ 149.394459][ T7859] should_failslab+0xac/0x100 [ 149.399157][ T7859] __kmalloc_node_noprof+0xdf/0x440 [ 149.404374][ T7859] ? __kvmalloc_node_noprof+0x72/0x190 [ 149.409848][ T7859] __kvmalloc_node_noprof+0x72/0x190 [ 149.415147][ T7859] page_pool_create_percpu+0x2ca/0xa00 [ 149.420613][ T7859] bpf_test_run_xdp_live+0x2e6/0x21b0 [ 149.425985][ T7859] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 149.431878][ T7859] ? __pfx_lock_release+0x10/0x10 [ 149.436906][ T7859] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 149.442190][ T7859] ? __pfx___might_resched+0x10/0x10 [ 149.447474][ T7859] ? __pfx_autoremove_wake_function+0x10/0x10 [ 149.453572][ T7859] ? __mutex_unlock_slowpath+0x21d/0x750 [ 149.459233][ T7859] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 149.465051][ T7859] ? synchronize_rcu+0x11b/0x360 [ 149.469993][ T7859] ? __pfx_synchronize_rcu+0x10/0x10 [ 149.475291][ T7859] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 149.481529][ T7859] ? lock_acquire+0x264/0x550 [ 149.486208][ T7859] ? 0xffffffffa0001f8c [ 149.490373][ T7859] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 149.496277][ T7859] ? _copy_from_user+0x99/0xc0 [ 149.501048][ T7859] ? bpf_test_init+0x15a/0x180 [ 149.505816][ T7859] ? xdp_convert_md_to_buff+0x5b/0x330 [ 149.511286][ T7859] bpf_prog_test_run_xdp+0x805/0x11e0 [ 149.516662][ T7859] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 149.522654][ T7859] ? __pfx_lock_release+0x10/0x10 [ 149.527693][ T7859] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 149.533505][ T7859] ? __fget_files+0x29/0x470 [ 149.538100][ T7859] ? fput+0x1a8/0x230 [ 149.542084][ T7859] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 149.547892][ T7859] bpf_prog_test_run+0x2e4/0x360 [ 149.552832][ T7859] __sys_bpf+0x48d/0x810 [ 149.557075][ T7859] ? __pfx___sys_bpf+0x10/0x10 [ 149.561836][ T7859] ? ktime_get+0x9b/0xb0 [ 149.566084][ T7859] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 149.572067][ T7859] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.578395][ T7859] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.584725][ T7859] ? __irq_exit_rcu+0x100/0x1c0 [ 149.589584][ T7859] __x64_sys_bpf+0x7c/0x90 [ 149.593995][ T7859] do_syscall_64+0xf3/0x230 [ 149.598504][ T7859] ? clear_bhb_loop+0x35/0x90 [ 149.603182][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.609078][ T7859] RIP: 0033:0x7f8ff8d7e719 [ 149.613497][ T7859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.633103][ T7859] RSP: 002b:00007f8ff9bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.641519][ T7859] RAX: ffffffffffffffda RBX: 00007f8ff8f35f80 RCX: 00007f8ff8d7e719 [ 149.649495][ T7859] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 149.657460][ T7859] RBP: 00007f8ff9bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 149.665430][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.673398][ T7859] R13: 0000000000000000 R14: 00007f8ff8f35f80 R15: 00007ffe6e957c88 [ 149.681379][ T7859] [ 149.856560][ T7859] page_pool_create_percpu() gave up with errno -12 [ 150.153162][ T7878] netlink: 'syz.0.661': attribute type 3 has an invalid length. [ 150.168043][ T7878] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.661'. [ 151.884871][ T7939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.676'. [ 153.175688][ T7980] sctp: [Deprecated]: syz.1.688 (pid 7980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.175688][ T7980] Use struct sctp_sack_info instead [ 153.209574][ T7987] netlink: 60 bytes leftover after parsing attributes in process `syz.5.691'. [ 153.654039][ T8001] syzkaller0: entered promiscuous mode [ 153.672348][ T8001] syzkaller0: entered allmulticast mode [ 157.258999][ T8065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.713'. [ 158.060594][ T8081] syzkaller0: entered promiscuous mode [ 158.068682][ T8081] syzkaller0: entered allmulticast mode [ 161.017027][ T8116] netlink: 'syz.5.730': attribute type 29 has an invalid length. [ 161.048099][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.730'. [ 161.404695][ T8128] netlink: 'syz.0.732': attribute type 10 has an invalid length. [ 161.904918][ T8150] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 162.048297][ T8155] netlink: 188 bytes leftover after parsing attributes in process `syz.3.741'. [ 162.080703][ T8156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.742'. [ 162.988797][ T8167] syzkaller0: entered promiscuous mode [ 163.028659][ T8167] syzkaller0: entered allmulticast mode [ 166.268369][ T8217] netlink: 'syz.4.758': attribute type 39 has an invalid length. [ 166.640944][ T8229] netlink: 'syz.3.762': attribute type 21 has an invalid length. [ 166.682685][ T8229] IPv6: NLM_F_CREATE should be specified when creating new route [ 166.713124][ T8229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.720425][ T8229] IPv6: NLM_F_CREATE should be set when creating new route [ 166.727739][ T8229] IPv6: NLM_F_CREATE should be set when creating new route [ 166.734996][ T8229] IPv6: NLM_F_CREATE should be set when creating new route [ 166.845521][ T8240] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 166.975804][ T8240] batman_adv: batadv0: Adding interface: team0 [ 167.079045][ T8240] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.185007][ T8240] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 167.244899][ T8229] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 167.256546][ T8229] netlink: 2 bytes leftover after parsing attributes in process `syz.3.762'. [ 167.276532][ T8229] team0: entered promiscuous mode [ 167.295637][ T8229] team_slave_0: entered promiscuous mode [ 167.322155][ T8229] team_slave_1: entered promiscuous mode [ 167.343915][ T8229] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 167.412226][ T8229] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.468542][ T8229] batman_adv: batadv0: Interface activated: team0 [ 167.518077][ T8229] batman_adv: batadv0: Interface deactivated: team0 [ 167.562540][ T8229] batman_adv: batadv0: Removing interface: team0 [ 167.598631][ T8229] bridge0: port 3(team0) entered blocking state [ 167.605080][ T8229] bridge0: port 3(team0) entered disabled state [ 167.639495][ T8229] team0: entered allmulticast mode [ 167.644683][ T8229] team_slave_0: entered allmulticast mode [ 167.677831][ T8229] team_slave_1: entered allmulticast mode [ 167.684731][ T8229] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 167.704615][ T8229] bridge0: port 3(team0) entered blocking state [ 167.711015][ T8229] bridge0: port 3(team0) entered forwarding state [ 167.720222][ T8238] netlink: 'syz.1.764': attribute type 10 has an invalid length. [ 167.869707][ T8259] syzkaller0: entered promiscuous mode [ 167.875231][ T8259] syzkaller0: entered allmulticast mode [ 167.981792][ T8270] netlink: 'syz.5.773': attribute type 3 has an invalid length. [ 168.001570][ T8270] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.773'. [ 169.128760][ T8276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.585332][ T8302] Driver unsupported XDP return value 0 on prog (id 556) dev N/A, expect packet loss! [ 171.164489][ T8324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.787'. [ 171.955205][ T8351] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.793'. [ 171.989050][ T8345] netlink: 'syz.0.790': attribute type 10 has an invalid length. [ 172.069222][ T8351] netlink: 'syz.5.793': attribute type 13 has an invalid length. [ 172.108453][ T8351] netlink: 61967 bytes leftover after parsing attributes in process `syz.5.793'. [ 172.285632][ T8357] syzkaller0: entered promiscuous mode [ 172.296393][ T8357] syzkaller0: entered allmulticast mode [ 172.628668][ T8376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.802'. [ 176.244295][ T8411] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.811'. [ 176.258953][ T8413] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.810'. [ 176.578737][ T8432] netlink: 60 bytes leftover after parsing attributes in process `syz.0.817'. [ 176.840442][ T8433] syzkaller0: entered promiscuous mode [ 176.846126][ T8433] syzkaller0: entered allmulticast mode [ 177.224595][ T8461] syzkaller0: entered promiscuous mode [ 177.290652][ T8461] syzkaller0: entered allmulticast mode [ 181.122229][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 181.122431][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 181.131011][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 181.138072][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 181.220926][ T8493] netlink: 'syz.0.834': attribute type 10 has an invalid length. [ 181.229357][ T8507] netlink: 'syz.5.836': attribute type 21 has an invalid length. [ 181.237263][ T8507] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.258389][ T8507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.265622][ T8507] IPv6: NLM_F_CREATE should be set when creating new route [ 181.272947][ T8507] IPv6: NLM_F_CREATE should be set when creating new route [ 181.280212][ T8507] IPv6: NLM_F_CREATE should be set when creating new route [ 181.342124][ T8509] netlink: 'syz.5.836': attribute type 10 has an invalid length. [ 181.397170][ T8509] batman_adv: batadv0: Adding interface: team0 [ 181.404397][ T8509] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.463791][ T8509] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 181.494690][ T8515] netlink: 'syz.5.836': attribute type 10 has an invalid length. [ 181.504097][ T8515] netlink: 2 bytes leftover after parsing attributes in process `syz.5.836'. [ 181.525673][ T8515] team0: entered promiscuous mode [ 181.539586][ T8515] team_slave_0: entered promiscuous mode [ 181.557919][ T8515] team_slave_1: entered promiscuous mode [ 181.565632][ T8515] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.578949][ T8515] batman_adv: batadv0: Interface activated: team0 [ 181.592401][ T8515] batman_adv: batadv0: Interface deactivated: team0 [ 181.605251][ T8515] batman_adv: batadv0: Removing interface: team0 [ 181.624048][ T8515] bridge0: port 3(team0) entered blocking state [ 181.632875][ T8515] bridge0: port 3(team0) entered disabled state [ 181.662265][ T8515] team0: entered allmulticast mode [ 181.667504][ T8515] team_slave_0: entered allmulticast mode [ 181.676401][ T8515] team_slave_1: entered allmulticast mode [ 181.702795][ T8515] bridge0: port 3(team0) entered blocking state [ 181.709210][ T8515] bridge0: port 3(team0) entered forwarding state [ 182.442797][ T8568] syzkaller0: entered promiscuous mode [ 182.463238][ T8568] syzkaller0: entered allmulticast mode [ 183.134780][ T8605] netlink: 'syz.4.868': attribute type 8 has an invalid length. [ 188.975883][ T8699] syzkaller0: entered promiscuous mode [ 188.997750][ T8699] syzkaller0: entered allmulticast mode [ 192.836346][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.1.903'. [ 193.592236][ T8748] syz.4.906[8748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.592336][ T8748] syz.4.906[8748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.657148][ T8748] syz.4.906[8748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.220492][ T8770] syz.0.922[8770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.283209][ T8770] syz.0.922[8770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.321461][ T8770] syz.0.922[8770] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.404765][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.428095][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.692677][ T8784] syzkaller0: entered promiscuous mode [ 194.713506][ T8784] syzkaller0: entered allmulticast mode [ 195.007028][ T8801] netlink: 'syz.1.926': attribute type 2 has an invalid length. [ 195.033139][ T8801] netlink: 'syz.1.926': attribute type 8 has an invalid length. [ 195.049040][ T8801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.926'. [ 195.166853][ T8801] syzkaller0: entered promiscuous mode [ 195.182966][ T8801] syzkaller0: entered allmulticast mode [ 196.991033][ T8817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.932'. [ 198.767083][ T8813] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 200.093961][ T8856] syzkaller0: entered promiscuous mode [ 200.100041][ T8856] syzkaller0: entered allmulticast mode [ 200.633046][ T8883] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.956'. [ 201.840058][ T8886] FAULT_INJECTION: forcing a failure. [ 201.840058][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 201.852785][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.0.958 Not tainted 6.12.0-rc7-syzkaller-g9f8e716d46c6 #0 [ 201.862870][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 201.872947][ T8886] Call Trace: [ 201.876245][ T8886] [ 201.879206][ T8886] dump_stack_lvl+0x241/0x360 [ 201.883942][ T8886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.889171][ T8886] ? __pfx__printk+0x10/0x10 [ 201.893797][ T8886] ? pskb_expand_head+0xc52/0x1380 [ 201.898939][ T8886] should_fail_ex+0x3b0/0x4e0 [ 201.903644][ T8886] ? skb_clone+0x20c/0x390 [ 201.908087][ T8886] should_failslab+0xac/0x100 [ 201.912788][ T8886] ? skb_clone+0x20c/0x390 [ 201.917230][ T8886] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 201.922638][ T8886] skb_clone+0x20c/0x390 [ 201.926906][ T8886] bpf_clone_redirect+0xab/0x3d0 [ 201.931860][ T8886] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 201.937332][ T8886] ? lockdep_stack_hash_count+0xd0/0x100 [ 201.942967][ T8886] ? timekeeping_get_ns+0x5c/0x420 [ 201.948081][ T8886] ? bpf_test_run+0x370/0xa90 [ 201.952754][ T8886] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 201.958475][ T8886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.964802][ T8886] ? ktime_get+0x3c/0xb0 [ 201.969058][ T8886] ? bpf_test_run+0x370/0xa90 [ 201.973736][ T8886] ? __pfx___cant_migrate+0x10/0x10 [ 201.978961][ T8886] ? bpf_test_run+0x370/0xa90 [ 201.983631][ T8886] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 201.989350][ T8886] ? bpf_test_timer_continue+0x11a/0x350 [ 201.994982][ T8886] bpf_test_run+0x4f0/0xa90 [ 201.999483][ T8886] ? do_syscall_64+0xf3/0x230 [ 202.004157][ T8886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.010230][ T8886] ? bpf_test_run+0x370/0xa90 [ 202.014917][ T8886] ? __pfx_bpf_test_run+0x10/0x10 [ 202.019943][ T8886] ? eth_type_trans+0x3d1/0x7a0 [ 202.024801][ T8886] ? __pfx_eth_type_trans+0x10/0x10 [ 202.029999][ T8886] ? convert___skb_to_skb+0x41/0x620 [ 202.035286][ T8886] bpf_prog_test_run_skb+0xc97/0x1820 [ 202.040669][ T8886] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 202.046477][ T8886] ? fput+0x1a8/0x230 [ 202.050458][ T8886] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 202.056265][ T8886] bpf_prog_test_run+0x2e4/0x360 [ 202.061208][ T8886] __sys_bpf+0x48d/0x810 [ 202.065452][ T8886] ? __pfx___sys_bpf+0x10/0x10 [ 202.070227][ T8886] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.076219][ T8886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.082554][ T8886] ? do_syscall_64+0x100/0x230 [ 202.087321][ T8886] __x64_sys_bpf+0x7c/0x90 [ 202.091737][ T8886] do_syscall_64+0xf3/0x230 [ 202.096237][ T8886] ? clear_bhb_loop+0x35/0x90 [ 202.100919][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.106807][ T8886] RIP: 0033:0x7f8ff8d7e719 [ 202.111221][ T8886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.130826][ T8886] RSP: 002b:00007f8ff9bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.139248][ T8886] RAX: ffffffffffffffda RBX: 00007f8ff8f35f80 RCX: 00007f8ff8d7e719 [ 202.147215][ T8886] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 202.155187][ T8886] RBP: 00007f8ff9bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 202.163152][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.171119][ T8886] R13: 0000000000000000 R14: 00007f8ff8f35f80 R15: 00007ffe6e957c88 [ 202.179098][ T8886] [ 202.198533][ T8890] netlink: 'syz.4.957': attribute type 10 has an invalid length. [ 202.226263][ T8890] veth1_macvtap: left promiscuous mode [ 202.652689][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.697896][ T8899] netlink: 'syz.4.963': attribute type 10 has an invalid length. [ 202.705823][ T8899] netlink: 55 bytes leftover after parsing attributes in process `syz.4.963'. [ 203.042551][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.229366][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.240788][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.248645][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.256611][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.264989][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 203.277232][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.409823][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.583615][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 203.620662][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 203.676445][ T35] team0: Port device netdevsim0 removed [ 203.724769][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.127316][ T35] team0: left allmulticast mode [ 204.169045][ T35] team_slave_0: left allmulticast mode [ 204.218066][ T35] team_slave_1: left allmulticast mode [ 204.224283][ T35] bridge0: port 3(team0) entered disabled state [ 204.296504][ T35] bridge_slave_1: left allmulticast mode [ 204.312971][ T35] bridge_slave_1: left promiscuous mode [ 204.347877][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.392151][ T35] bridge_slave_0: left allmulticast mode [ 204.407837][ T35] bridge_slave_0: left promiscuous mode [ 204.427922][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.358141][ T5847] Bluetooth: hci1: command tx timeout [ 205.802114][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.873470][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.903164][ T35] bond0 (unregistering): Released all slaves [ 205.933528][ T8953] netlink: 'syz.4.981': attribute type 10 has an invalid length. [ 205.982119][ T8957] netlink: 'syz.1.982': attribute type 10 has an invalid length. [ 206.692329][ T8987] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.991'. [ 206.757567][ T8976] netlink: 'syz.5.987': attribute type 10 has an invalid length. [ 206.914946][ T8976] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 206.982563][ T8976] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 207.016505][ T8976] team0: Port device netdevsim0 added [ 207.112466][ T8987] netlink: 'syz.4.991': attribute type 21 has an invalid length. [ 207.188801][ T8987] netlink: 'syz.4.991': attribute type 20 has an invalid length. [ 207.220127][ T8998] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 207.365141][ T8990] netlink: 176 bytes leftover after parsing attributes in process `syz.4.991'. [ 207.414312][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 207.438384][ T5847] Bluetooth: hci1: command tx timeout [ 207.550958][ T35] hsr_slave_0: left promiscuous mode [ 207.570842][ T35] hsr_slave_1: left promiscuous mode [ 207.580791][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.592217][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.605961][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.621211][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.655782][ T35] veth1_macvtap: left promiscuous mode [ 207.667362][ T35] veth0_macvtap: left promiscuous mode [ 207.686892][ T35] veth1_vlan: left promiscuous mode [ 207.694463][ T35] veth0_vlan: left promiscuous mode [ 208.459607][ T35] team_slave_1 (unregistering): left promiscuous mode [ 208.472654][ T35] team0 (unregistering): Port device team_slave_1 removed [ 208.531751][ T35] team_slave_0 (unregistering): left promiscuous mode [ 208.545256][ T35] team0 (unregistering): Port device team_slave_0 removed [ 209.090732][ T9016] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.996'. [ 209.533679][ T5847] Bluetooth: hci1: command tx timeout [ 209.554314][ T9034] bridge0: port 4(bond0) entered blocking state [ 209.566823][ T9034] bridge0: port 4(bond0) entered disabled state [ 209.596530][ T9034] bond0: entered allmulticast mode [ 209.602662][ T9034] bond_slave_0: entered allmulticast mode [ 209.627814][ T9034] bond_slave_1: entered allmulticast mode [ 209.671065][ T9034] bond0: entered promiscuous mode [ 209.676311][ T9034] bond_slave_0: entered promiscuous mode [ 209.703118][ T9034] bond_slave_1: entered promiscuous mode [ 209.754502][ T9034] bridge0: port 4(bond0) entered blocking state [ 209.761229][ T9034] bridge0: port 4(bond0) entered forwarding state [ 209.889334][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.896522][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.914971][ T8924] bridge_slave_0: entered allmulticast mode [ 209.926342][ T8924] bridge_slave_0: entered promiscuous mode [ 209.963401][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.984558][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.994784][ T8924] bridge_slave_1: entered allmulticast mode [ 210.015991][ T8924] bridge_slave_1: entered promiscuous mode [ 210.168665][ T9062] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 210.183788][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.226305][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.313031][ T8924] team0: Port device team_slave_0 added [ 210.349132][ T8924] team0: Port device team_slave_1 added [ 210.448892][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.461382][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.507791][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.531107][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.545550][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.555178][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.563152][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.573747][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 210.589222][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.797324][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.834493][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.867189][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.935589][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.958189][ T9083] net veth1_virt_wifi ªªªªªª: renamed from virt_wifi0 [ 211.014817][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.149690][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.420064][ T8924] hsr_slave_0: entered promiscuous mode [ 211.441626][ T8924] hsr_slave_1: entered promiscuous mode [ 211.453231][ T8924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.476341][ T8924] Cannot create hsr debugfs directory [ 211.559262][ T35] team0: Port device netdevsim0 removed [ 211.572469][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.598156][ T5847] Bluetooth: hci1: command tx timeout [ 211.631430][ T9107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1023'. [ 211.640499][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1023'. [ 211.802026][ T9113] netlink: 'syz.4.1024': attribute type 10 has an invalid length. [ 211.838787][ T9113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1024'. [ 211.848730][ T9113] bridge0: port 3(batadv0) entered blocking state [ 211.855752][ T9113] bridge0: port 3(batadv0) entered disabled state [ 211.864190][ T9113] batadv0: entered allmulticast mode [ 211.872774][ T9113] batadv0: entered promiscuous mode [ 211.880151][ T9113] bridge0: port 3(batadv0) entered blocking state [ 211.886706][ T9113] bridge0: port 3(batadv0) entered forwarding state [ 212.187282][ T9120] netlink: 'syz.1.1027': attribute type 10 has an invalid length. [ 212.295278][ T6190] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 212.304834][ T6190] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 212.404762][ T35] bridge_slave_1: left allmulticast mode [ 212.410719][ T35] bridge_slave_1: left promiscuous mode [ 212.416435][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.436091][ T35] bridge_slave_0: left allmulticast mode [ 212.465764][ T35] bridge_slave_0: left promiscuous mode [ 212.492353][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.637956][ T5847] Bluetooth: hci0: command tx timeout [ 213.160629][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.178288][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.189700][ T35] bond0 (unregistering): Released all slaves [ 213.592012][ T9069] chnl_net:caif_netlink_parms(): no params data found [ 214.396192][ T9208] FAULT_INJECTION: forcing a failure. [ 214.396192][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 214.409228][ T9208] CPU: 1 UID: 0 PID: 9208 Comm: syz.5.1053 Not tainted 6.12.0-rc7-syzkaller-g9f8e716d46c6 #0 [ 214.419403][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 214.429476][ T9208] Call Trace: [ 214.432774][ T9208] [ 214.435731][ T9208] dump_stack_lvl+0x241/0x360 [ 214.440440][ T9208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.445662][ T9208] ? __pfx__printk+0x10/0x10 [ 214.450293][ T9208] should_fail_ex+0x3b0/0x4e0 [ 214.454997][ T9208] ? skb_clone+0x20c/0x390 [ 214.459437][ T9208] should_failslab+0xac/0x100 [ 214.464136][ T9208] ? skb_clone+0x20c/0x390 [ 214.468577][ T9208] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 214.473983][ T9208] skb_clone+0x20c/0x390 [ 214.478246][ T9208] ? dev_queue_xmit_nit+0x220/0xc10 [ 214.483453][ T9208] dev_queue_xmit_nit+0x419/0xc10 [ 214.488480][ T9208] ? dev_queue_xmit_nit+0x2b/0xc10 [ 214.493599][ T9208] dev_hard_start_xmit+0x15f/0x7e0 [ 214.498717][ T9208] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 214.504097][ T9208] __dev_queue_xmit+0x1b11/0x3ed0 [ 214.509134][ T9208] ? __dev_queue_xmit+0x2da/0x3ed0 [ 214.514250][ T9208] ? __pfx___dev_queue_xmit+0x10/0x10 [ 214.519627][ T9208] ? rcu_is_watching+0x15/0xb0 [ 214.524387][ T9208] ? skb_release_data+0x2b5/0x8a0 [ 214.529423][ T9208] ? pskb_expand_head+0xc52/0x1380 [ 214.534565][ T9208] ? __bpf_redirect+0x51c/0xe40 [ 214.539429][ T9208] __bpf_tx_skb+0x18e/0x260 [ 214.543930][ T9208] bpf_clone_redirect+0x26f/0x3d0 [ 214.548961][ T9208] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 214.554416][ T9208] ? lockdep_stack_hash_count+0xd0/0x100 [ 214.560054][ T9208] ? timekeeping_get_ns+0x5c/0x420 [ 214.565165][ T9208] ? bpf_test_run+0x370/0xa90 [ 214.569842][ T9208] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 214.575565][ T9208] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.581895][ T9208] ? ktime_get+0x3c/0xb0 [ 214.586143][ T9208] ? bpf_test_run+0x370/0xa90 [ 214.590824][ T9208] ? __pfx___cant_migrate+0x10/0x10 [ 214.596021][ T9208] ? bpf_test_run+0x370/0xa90 [ 214.600698][ T9208] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 214.606426][ T9208] ? bpf_test_timer_continue+0x11a/0x350 [ 214.612062][ T9208] bpf_test_run+0x4f0/0xa90 [ 214.616564][ T9208] ? do_syscall_64+0xf3/0x230 [ 214.621242][ T9208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.627311][ T9208] ? bpf_test_run+0x370/0xa90 [ 214.632003][ T9208] ? __pfx_bpf_test_run+0x10/0x10 [ 214.637035][ T9208] ? eth_type_trans+0x3d1/0x7a0 [ 214.641898][ T9208] ? __pfx_eth_type_trans+0x10/0x10 [ 214.647095][ T9208] ? convert___skb_to_skb+0x41/0x620 [ 214.652382][ T9208] bpf_prog_test_run_skb+0xc97/0x1820 [ 214.657767][ T9208] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 214.663570][ T9208] ? fput+0x1a8/0x230 [ 214.667547][ T9208] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 214.673348][ T9208] bpf_prog_test_run+0x2e4/0x360 [ 214.678289][ T9208] __sys_bpf+0x48d/0x810 [ 214.682531][ T9208] ? __pfx___sys_bpf+0x10/0x10 [ 214.687302][ T9208] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 214.693282][ T9208] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.699608][ T9208] ? do_syscall_64+0x100/0x230 [ 214.704372][ T9208] __x64_sys_bpf+0x7c/0x90 [ 214.708786][ T9208] do_syscall_64+0xf3/0x230 [ 214.713286][ T9208] ? clear_bhb_loop+0x35/0x90 [ 214.717963][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.723849][ T9208] RIP: 0033:0x7ff01937e719 [ 214.728259][ T9208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.747860][ T9208] RSP: 002b:00007ff01a15d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.756269][ T9208] RAX: ffffffffffffffda RBX: 00007ff019535f80 RCX: 00007ff01937e719 [ 214.764237][ T9208] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 214.772202][ T9208] RBP: 00007ff01a15d090 R08: 0000000000000000 R09: 0000000000000000 [ 214.780166][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.788130][ T9208] R13: 0000000000000000 R14: 00007ff019535f80 R15: 00007ffcb759b548 [ 214.796105][ T9208] [ 214.818035][ T5847] Bluetooth: hci0: command tx timeout [ 214.950378][ T9069] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.957483][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.978495][ T9069] bridge_slave_0: entered allmulticast mode [ 215.017975][ T9069] bridge_slave_0: entered promiscuous mode [ 215.068873][ T9069] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.076003][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.097258][ T9069] bridge_slave_1: entered allmulticast mode [ 215.119368][ T9069] bridge_slave_1: entered promiscuous mode [ 215.177088][ T9216] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1057'. [ 215.257949][ T35] hsr_slave_0: left promiscuous mode [ 215.275898][ T35] hsr_slave_1: left promiscuous mode [ 215.289207][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.302241][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.327155][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.349721][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.410186][ T35] veth1_macvtap: left promiscuous mode [ 215.422653][ T35] veth0_macvtap: left promiscuous mode [ 215.428543][ T35] veth1_vlan: left promiscuous mode [ 215.434541][ T35] veth0_vlan: left promiscuous mode [ 216.264547][ T35] team0 (unregistering): Port device team_slave_1 removed [ 216.311606][ T35] team0 (unregistering): Port device team_slave_0 removed [ 216.878027][ T5847] Bluetooth: hci0: command tx timeout [ 217.177809][ T9218] netlink: 'syz.4.1057': attribute type 21 has an invalid length. [ 217.196900][ T9219] netlink: 'syz.4.1057': attribute type 29 has an invalid length. [ 217.246566][ T9069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.290270][ T9069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.381771][ T9069] team0: Port device team_slave_0 added [ 217.453901][ T9235] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1060'. [ 217.468911][ T9069] team0: Port device team_slave_1 added [ 217.516985][ T9235] netlink: 'syz.1.1060': attribute type 21 has an invalid length. [ 217.527098][ T9235] netlink: 'syz.1.1060': attribute type 20 has an invalid length. [ 217.578870][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.586045][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.620183][ T9069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.645282][ T9235] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1060'. [ 217.672142][ T9069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.684124][ T9069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.710279][ T9069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.743210][ T8924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.757966][ T9244] netlink: 'syz.4.1063': attribute type 10 has an invalid length. [ 217.820106][ T8924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.842993][ T8924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.881309][ T8924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.046702][ T9069] hsr_slave_0: entered promiscuous mode [ 218.070361][ T9069] hsr_slave_1: entered promiscuous mode [ 218.156414][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.229287][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.307090][ T9256] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1067'. [ 218.333371][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.340531][ T6186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.383282][ T9261] netlink: 'syz.5.1069': attribute type 10 has an invalid length. [ 218.393410][ T9261] veth1_macvtap: left promiscuous mode [ 218.493869][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.501059][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.516681][ T9257] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1067'. [ 218.639383][ T9266] netlink: 'syz.1.1071': attribute type 16 has an invalid length. [ 218.648263][ T8924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.659194][ T8924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.667944][ T9266] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1071'. [ 218.749596][ T9266] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 218.790614][ T9266] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.969249][ T5847] Bluetooth: hci0: command tx timeout [ 219.001943][ T9279] netlink: 'syz.4.1075': attribute type 10 has an invalid length. [ 219.148997][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.186979][ T9281] netlink: 'syz.5.1076': attribute type 10 has an invalid length. [ 219.385111][ T8924] veth0_vlan: entered promiscuous mode [ 219.473490][ T8924] veth1_vlan: entered promiscuous mode [ 219.551487][ T9069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.617480][ T9069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.708541][ T9069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.744916][ T9069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.876235][ T8924] veth0_macvtap: entered promiscuous mode [ 219.917520][ T8924] veth1_macvtap: entered promiscuous mode [ 220.033361][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.067780][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.088992][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.113236][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.137942][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.165058][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.191485][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.263523][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.304582][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.360546][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.393328][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.405297][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.416989][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.431274][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.554305][ T8924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.581789][ T8924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.598959][ T8924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.608206][ T8924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.676928][ T9069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.716221][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.769406][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.776534][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.832093][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.839248][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.034004][ T9069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.108101][ T6186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.115927][ T6186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.359642][ T6190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.418536][ T6190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.481536][ T9359] netlink: 'syz.4.1096': attribute type 10 has an invalid length. [ 221.805010][ T9069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.935262][ T9069] veth0_vlan: entered promiscuous mode [ 221.973905][ T9069] veth1_vlan: entered promiscuous mode [ 222.015441][ T9069] veth0_macvtap: entered promiscuous mode [ 222.103779][ T9069] veth1_macvtap: entered promiscuous mode [ 222.177913][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.205549][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.247048][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.276456][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.290694][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.320728][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.332793][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.344498][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.356965][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.366457][ T9390] validate_nla: 1 callbacks suppressed [ 222.366473][ T9390] netlink: 'syz.5.1101': attribute type 21 has an invalid length. [ 222.412104][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.440742][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.457278][ T9400] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.1105'. [ 222.460191][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.492455][ T9400] netlink: 'syz.4.1105': attribute type 2 has an invalid length. [ 222.494800][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.547512][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.569494][ T9400] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1105'. [ 222.570940][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.589810][ T9069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.600646][ T9069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.601615][ T9400] netlink: 6332 bytes leftover after parsing attributes in process `syz.4.1105'. [ 222.629507][ T9069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.668492][ T9069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.687697][ T9069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.706454][ T9069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.722076][ T9069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.822365][ T2962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.951840][ T2962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.081339][ T2962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.149421][ T6196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.157683][ T6196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.304006][ T2962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.526594][ T9436] netlink: 'syz.4.1110': attribute type 10 has an invalid length. [ 223.584224][ T6186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.627994][ T6186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.818160][ T9441] netlink: 763 bytes leftover after parsing attributes in process `syz.5.1112'. [ 223.841192][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.859281][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.876407][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.913262][ T2962] bridge_slave_1: left allmulticast mode [ 223.959985][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.972768][ T2962] bridge_slave_1: left promiscuous mode [ 223.981330][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 223.998772][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.004037][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.015102][ T2962] bridge_slave_0: left allmulticast mode [ 224.091543][ T2962] bridge_slave_0: left promiscuous mode [ 224.109777][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.299463][ T9464] netlink: 'syz.4.1116': attribute type 9 has an invalid length. [ 224.307273][ T9464] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1116'. [ 224.373508][ T9463] netlink: 'syz.4.1116': attribute type 9 has an invalid length. [ 224.409477][ T9463] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1116'. [ 225.056716][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.072164][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.083686][ T2962] bond0 (unregistering): Released all slaves [ 225.118167][ T9441] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1112'. [ 225.134442][ T9466] netlink: 'syz.1.1115': attribute type 29 has an invalid length. [ 225.907717][ T2962] hsr_slave_0: left promiscuous mode [ 225.943758][ T2962] hsr_slave_1: left promiscuous mode [ 225.953557][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.979310][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.008452][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.029620][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.085347][ T2962] veth1_macvtap: left promiscuous mode [ 226.116295][ T2962] veth0_macvtap: left promiscuous mode [ 226.132533][ T2962] veth1_vlan: left promiscuous mode [ 226.144537][ T2962] veth0_vlan: left promiscuous mode [ 226.158115][ T5847] Bluetooth: hci1: command tx timeout [ 226.172448][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.181780][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.191361][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.205680][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.215227][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 226.223525][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.243987][ T5842] Bluetooth: hci1: command tx timeout [ 228.318082][ T5842] Bluetooth: hci0: command tx timeout [ 229.010121][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 230.928356][ T5842] Bluetooth: hci1: command tx timeout [ 230.933818][ T5842] Bluetooth: hci0: command tx timeout [ 231.268304][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 232.957789][ T5847] Bluetooth: hci0: command tx timeout [ 232.963260][ T5847] Bluetooth: hci1: command tx timeout [ 233.779665][ T9517] netlink: 'syz.5.1122': attribute type 29 has an invalid length. [ 233.819312][ T9443] chnl_net:caif_netlink_parms(): no params data found [ 234.261889][ T9578] netlink: 'syz.1.1132': attribute type 4 has an invalid length. [ 234.343082][ T9578] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1132'. [ 234.565814][ T9578] netlink: 'syz.1.1132': attribute type 3 has an invalid length. [ 234.605999][ T9578] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1132'. [ 234.634654][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.661906][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.708257][ T9443] bridge_slave_0: entered allmulticast mode [ 234.744020][ T9443] bridge_slave_0: entered promiscuous mode [ 234.829003][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.863133][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.879939][ T9443] bridge_slave_1: entered allmulticast mode [ 234.904046][ T9443] bridge_slave_1: entered promiscuous mode [ 235.037810][ T5847] Bluetooth: hci0: command tx timeout [ 235.193324][ T9443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.220305][ T9443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.350258][ T9540] chnl_net:caif_netlink_parms(): no params data found [ 235.491565][ T2962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.530898][ T9443] team0: Port device team_slave_0 added [ 235.559724][ T2962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.580722][ T9623] bridge0: port 3(batadv0) entered disabled state [ 235.588594][ T9623] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.599062][ T9623] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.658207][ T9443] team0: Port device team_slave_1 added [ 235.781780][ T2962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.835464][ T9612] netlink: 'syz.1.1137': attribute type 5 has an invalid length. [ 235.850556][ T9612] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1137'. [ 235.891727][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.898926][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.925580][ T9443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.941241][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.948511][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.979855][ T9443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.122395][ T2962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.183543][ T9637] bridge0: port 4(bond0) entered blocking state [ 236.192331][ T9637] bridge0: port 4(bond0) entered disabled state [ 236.213099][ T9637] bond0: entered allmulticast mode [ 236.239248][ T9637] bond_slave_0: entered allmulticast mode [ 236.246678][ T9637] bond_slave_1: entered allmulticast mode [ 236.269677][ T9637] bond0: entered promiscuous mode [ 236.274878][ T9637] bond_slave_0: entered promiscuous mode [ 236.291459][ T9637] bond_slave_1: entered promiscuous mode [ 236.459681][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.466873][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.494664][ T9540] bridge_slave_0: entered allmulticast mode [ 236.527057][ T9540] bridge_slave_0: entered promiscuous mode [ 236.556919][ T9641] bond0: left allmulticast mode [ 236.568435][ T9641] bond_slave_0: left allmulticast mode [ 236.576618][ T9641] bond_slave_1: left allmulticast mode [ 236.582766][ T9641] bond0: left promiscuous mode [ 236.603971][ T9641] bond_slave_0: left promiscuous mode [ 236.614185][ T9641] bond_slave_1: left promiscuous mode [ 236.623493][ T9641] bridge0: port 4(bond0) entered disabled state [ 236.656713][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.679047][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.686456][ T9540] bridge_slave_1: entered allmulticast mode [ 236.716880][ T9540] bridge_slave_1: entered promiscuous mode [ 236.748939][ T9443] hsr_slave_0: entered promiscuous mode [ 236.772912][ T9443] hsr_slave_1: entered promiscuous mode [ 236.786993][ T9443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.797321][ T9443] Cannot create hsr debugfs directory [ 236.895140][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.938211][ T9669] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 236.953181][ T9669] syzkaller0: entered promiscuous mode [ 236.966809][ T9669] syzkaller0: entered allmulticast mode [ 237.026819][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.216262][ T9540] team0: Port device team_slave_0 added [ 237.227486][ T9540] team0: Port device team_slave_1 added [ 237.267452][ T9681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.275199][ T9681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.284924][ T9681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.293403][ T9681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.316778][ T9681] batadv0 (unregistering): left allmulticast mode [ 237.327809][ T9681] batadv0 (unregistering): left promiscuous mode [ 237.334454][ T9681] bridge0: port 3(batadv0) entered disabled state [ 237.374454][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.383441][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.409900][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.430077][ T2962] bridge_slave_1: left allmulticast mode [ 237.435894][ T2962] bridge_slave_1: left promiscuous mode [ 237.445542][ T2962] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.461868][ T2962] bridge_slave_0: left allmulticast mode [ 237.468246][ T2962] bridge_slave_0: left promiscuous mode [ 237.473982][ T2962] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.765409][ T2962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.777202][ T2962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.788746][ T2962] bond0 (unregistering): Released all slaves [ 237.799080][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.806054][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.836423][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.973173][ T9540] hsr_slave_0: entered promiscuous mode [ 237.980723][ T9540] hsr_slave_1: entered promiscuous mode [ 237.986772][ T9540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.994780][ T9540] Cannot create hsr debugfs directory [ 238.429619][ T2962] hsr_slave_0: left promiscuous mode [ 238.444057][ T2962] hsr_slave_1: left promiscuous mode [ 238.453931][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.484406][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.501725][ T2962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.518808][ T2962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.589434][ T2962] veth1_macvtap: left promiscuous mode [ 238.595034][ T2962] veth0_macvtap: left promiscuous mode [ 238.600728][ T2962] veth1_vlan: left promiscuous mode [ 238.606072][ T2962] veth0_vlan: left promiscuous mode [ 239.714437][ T2962] team0 (unregistering): Port device team_slave_1 removed [ 239.771863][ T2962] team0 (unregistering): Port device team_slave_0 removed [ 240.314687][ T9707] netlink: 'syz.5.1163': attribute type 10 has an invalid length. [ 240.660064][ T9713] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 240.662103][ T9716] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 241.093345][ T9443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.150689][ T9443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.318952][ T9443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.411631][ T9443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.770314][ T9744] bond0: left allmulticast mode [ 241.775741][ T9744] bond_slave_0: left allmulticast mode [ 241.794078][ T9744] bond_slave_1: left allmulticast mode [ 241.804402][ T9744] bond0: left promiscuous mode [ 241.818122][ T9744] bond_slave_0: left promiscuous mode [ 241.826302][ T9744] bond_slave_1: left promiscuous mode [ 241.857441][ T9744] bridge0: port 4(bond0) entered disabled state [ 242.017226][ T9443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.125082][ T9443] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.170566][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.177765][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.231623][ T9751] netlink: 'syz.4.1174': attribute type 39 has an invalid length. [ 242.267312][ T9540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.296173][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.303362][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.334788][ T9540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.484665][ T9540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 242.505269][ T9540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.635592][ T9443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.872894][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.934907][ T9540] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.020008][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.027156][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.103556][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.110762][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.239658][ T9540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.329512][ T9540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.460829][ T9443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.521159][ T9443] veth0_vlan: entered promiscuous mode [ 243.532933][ T9443] veth1_vlan: entered promiscuous mode [ 243.554084][ T9443] veth0_macvtap: entered promiscuous mode [ 243.567702][ T9443] veth1_macvtap: entered promiscuous mode [ 243.627098][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.643456][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.653396][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.664188][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.666016][ T9809] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.1188'. [ 243.675882][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.694324][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.704953][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.715035][ T9443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.725798][ T9443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.737060][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.774242][ T9443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.783351][ T9443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.792408][ T9443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.801545][ T9443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.034806][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.457198][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.507693][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.782354][ T9540] veth0_vlan: entered promiscuous mode [ 244.847166][ T9540] veth1_vlan: entered promiscuous mode [ 244.861326][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.884287][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.142087][ T9540] veth0_macvtap: entered promiscuous mode [ 245.164127][ T9540] veth1_macvtap: entered promiscuous mode [ 245.258808][ T9845] netlink: 'syz.4.1197': attribute type 10 has an invalid length. [ 245.266751][ T9845] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 245.302568][ T9845] team0: Port device wlan1 added [ 245.323932][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.339525][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.353848][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.369277][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.379695][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.390910][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.404231][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.423928][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.435239][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.446364][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.488269][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.504832][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.518923][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.532465][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.551422][ T9540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.563148][ T9540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.573349][ T9540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.586214][ T9540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.770932][ T8080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.793142][ T8080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.870503][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.909392][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.361194][ T9879] netlink: 'syz.5.1209': attribute type 29 has an invalid length. [ 246.383574][ T9879] netlink: 'syz.5.1209': attribute type 29 has an invalid length. [ 246.399325][ T9879] netlink: 'syz.5.1209': attribute type 3 has an invalid length. [ 246.418234][ T9879] netlink: 'syz.5.1209': attribute type 30 has an invalid length. [ 246.426108][ T9879] netlink: 'syz.5.1209': attribute type 61 has an invalid length. [ 246.548362][ T9884] netlink: 'syz.1.1211': attribute type 10 has an invalid length. [ 246.808331][ T9896] netlink: 'syz.1.1214': attribute type 28 has an invalid length. [ 246.816207][ T9896] netlink: 'syz.1.1214': attribute type 3 has an invalid length. [ 246.897687][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1214'. [ 247.039482][ T6190] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.333905][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.342807][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.352411][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.385795][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.397758][ T5156] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.413717][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.425168][ T6190] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.583751][ T9913] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1219'. [ 247.622173][ T6190] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.687766][ T5156] Bluetooth: hci5: command 0x0406 tx timeout [ 247.774805][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.792866][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.801614][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.817905][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.833694][ T5156] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 247.855384][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.889940][ T6190] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.967195][ T9921] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 247.981932][ T9921] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1221'. [ 248.462207][ T9944] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1228'. [ 248.547212][ T6190] bridge_slave_1: left allmulticast mode [ 248.559780][ T6190] bridge_slave_1: left promiscuous mode [ 248.565905][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.580258][ T6190] bridge_slave_0: left allmulticast mode [ 248.586083][ T6190] bridge_slave_0: left promiscuous mode [ 248.593158][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.299236][ T6190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.324044][ T6190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.352482][ T6190] bond0 (unregistering): Released all slaves [ 249.388185][ T9904] chnl_net:caif_netlink_parms(): no params data found [ 249.524846][ T5156] Bluetooth: hci0: command tx timeout [ 249.735669][ T9914] chnl_net:caif_netlink_parms(): no params data found [ 249.822233][ T9904] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.835096][ T9904] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.845743][ T9904] bridge_slave_0: entered allmulticast mode [ 249.860192][ T9904] bridge_slave_0: entered promiscuous mode [ 249.881981][ T9979] netlink: 'syz.5.1239': attribute type 10 has an invalid length. [ 249.922986][ T5156] Bluetooth: hci1: command tx timeout [ 249.984606][ T9904] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.027931][ T9904] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.054841][ T9904] bridge_slave_1: entered allmulticast mode [ 250.070391][ T9904] bridge_slave_1: entered promiscuous mode [ 250.260302][ T6190] hsr_slave_0: left promiscuous mode [ 250.285441][ T6190] hsr_slave_1: left promiscuous mode [ 250.305258][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.312946][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.332643][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.340510][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.384555][ T6190] veth1_macvtap: left promiscuous mode [ 250.404662][ T6190] veth0_macvtap: left promiscuous mode [ 250.410731][ T6190] veth1_vlan: left promiscuous mode [ 250.416214][ T6190] veth0_vlan: left promiscuous mode [ 251.017920][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 251.062788][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 251.510474][T10003] validate_nla: 1 callbacks suppressed [ 251.510493][T10003] netlink: 'syz.4.1244': attribute type 6 has an invalid length. [ 251.535328][T10003] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1244'. [ 251.550958][T10029] netlink: 'syz.5.1252': attribute type 10 has an invalid length. [ 251.580366][ T9904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.597776][ T5156] Bluetooth: hci0: command tx timeout [ 251.622388][ T9904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.739875][ T9914] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.747114][ T9914] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.771996][ T9914] bridge_slave_0: entered allmulticast mode [ 251.779323][ T9914] bridge_slave_0: entered promiscuous mode [ 251.790818][ T9904] team0: Port device team_slave_0 added [ 251.799114][ T9914] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.820268][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.853072][ T9914] bridge_slave_1: entered allmulticast mode [ 251.871259][ T9914] bridge_slave_1: entered promiscuous mode [ 251.940330][ T9904] team0: Port device team_slave_1 added [ 251.997923][ T5156] Bluetooth: hci1: command tx timeout [ 252.023676][T10052] netlink: 'syz.1.1257': attribute type 3 has an invalid length. [ 252.032606][T10052] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1257'. [ 252.135694][ T9914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.176139][ T9904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.200777][ T9904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.266393][ T9904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.336797][ T9914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.366047][ T9904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.381017][ T9904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.427003][ T9904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.616719][ T9914] team0: Port device team_slave_0 added [ 252.625242][ T9914] team0: Port device team_slave_1 added [ 252.740108][ T9904] hsr_slave_0: entered promiscuous mode [ 252.746615][ T9904] hsr_slave_1: entered promiscuous mode [ 252.924289][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.936902][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.964297][T10085] syz.5.1268 (10085) used greatest stack depth: 17888 bytes left [ 252.972300][ T9914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.990096][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.997086][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.024620][ T9914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.249189][ T9914] hsr_slave_0: entered promiscuous mode [ 253.274667][ T9914] hsr_slave_1: entered promiscuous mode [ 253.288822][ T9914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.296437][ T9914] Cannot create hsr debugfs directory [ 253.350198][ T6190] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.672040][ T6190] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.688486][ T5156] Bluetooth: hci0: command tx timeout [ 253.871325][ T6190] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.078627][ T5156] Bluetooth: hci1: command tx timeout [ 254.098636][ T6190] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.230217][T10130] bridge0: port 3(veth0_to_bond) entered blocking state [ 254.238699][T10130] bridge0: port 3(veth0_to_bond) entered disabled state [ 254.253473][T10130] veth0_to_bond: entered allmulticast mode [ 254.276976][T10130] veth0_to_bond: entered promiscuous mode [ 254.322327][T10128] veth0_to_bond: left allmulticast mode [ 254.339805][T10128] veth0_to_bond: left promiscuous mode [ 254.346822][T10128] bridge0: port 3(veth0_to_bond) entered disabled state [ 254.555456][T10134] netlink: 'syz.5.1279': attribute type 10 has an invalid length. [ 254.920180][ T6190] bridge_slave_1: left allmulticast mode [ 254.926169][ T6190] bridge_slave_1: left promiscuous mode [ 254.969233][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.075055][T10160] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1284'. [ 255.089657][ T6190] bridge_slave_0: left allmulticast mode [ 255.105750][ T6190] bridge_slave_0: left promiscuous mode [ 255.116979][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.761801][ T5156] Bluetooth: hci0: command tx timeout [ 255.790523][ T6190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.801677][ T6190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.814747][ T6190] bond0 (unregistering): Released all slaves [ 255.842378][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.848764][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.055611][T10167] netlink: 'syz.1.1285': attribute type 10 has an invalid length. [ 256.176610][ T5156] Bluetooth: hci1: command tx timeout [ 256.297347][T10167] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 256.550881][T10185] netlink: 'syz.1.1290': attribute type 7 has an invalid length. [ 256.559292][T10185] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1290'. [ 256.576958][T10191] netlink: 'syz.4.1292': attribute type 10 has an invalid length. [ 256.639030][ T6190] hsr_slave_0: left promiscuous mode [ 256.673326][ T6190] hsr_slave_1: left promiscuous mode [ 256.800430][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.808465][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.833933][ T6190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.847731][ T6190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.902094][ T6190] veth1_macvtap: left promiscuous mode [ 256.907771][ T6190] veth0_macvtap: left promiscuous mode [ 256.913395][ T6190] veth1_vlan: left promiscuous mode [ 256.919263][ T6190] veth0_vlan: left promiscuous mode [ 257.309520][ T6190] team0 (unregistering): Port device team_slave_1 removed [ 257.348974][ T6190] team0 (unregistering): Port device team_slave_0 removed [ 257.899640][T10223] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 257.907451][T10223] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1302'. [ 258.053591][T10230] netlink: 'syz.4.1305': attribute type 10 has an invalid length. [ 258.113599][ T9914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.140027][ T9914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.199644][ T9904] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 258.266348][ T9914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.291443][ T9914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.305405][ T9904] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 258.341907][T10237] netlink: 'syz.5.1308': attribute type 29 has an invalid length. [ 258.353908][ T9904] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 258.371182][T10242] netlink: 'syz.5.1308': attribute type 29 has an invalid length. [ 258.417687][ T9904] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 258.464761][T10237] netlink: 'syz.5.1308': attribute type 29 has an invalid length. [ 258.854585][ T9904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.961491][ T9904] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.018765][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.025906][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.090962][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.098205][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.107060][T10264] FAULT_INJECTION: forcing a failure. [ 259.107060][T10264] name failslab, interval 1, probability 0, space 0, times 0 [ 259.119772][T10264] CPU: 0 UID: 0 PID: 10264 Comm: syz.4.1314 Not tainted 6.12.0-rc7-syzkaller-g9f8e716d46c6 #0 [ 259.130034][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 259.140126][T10264] Call Trace: [ 259.143414][T10264] [ 259.146351][T10264] dump_stack_lvl+0x241/0x360 [ 259.151050][T10264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.156257][T10264] ? __pfx__printk+0x10/0x10 [ 259.160861][T10264] should_fail_ex+0x3b0/0x4e0 [ 259.165541][T10264] ? skb_clone+0x20c/0x390 [ 259.169959][T10264] should_failslab+0xac/0x100 [ 259.174646][T10264] ? skb_clone+0x20c/0x390 [ 259.179072][T10264] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 259.184455][T10264] skb_clone+0x20c/0x390 [ 259.188699][T10264] ? dev_queue_xmit_nit+0x220/0xc10 [ 259.193916][T10264] dev_queue_xmit_nit+0x419/0xc10 [ 259.198953][T10264] ? dev_queue_xmit_nit+0x2b/0xc10 [ 259.204079][T10264] dev_hard_start_xmit+0x15f/0x7e0 [ 259.209198][T10264] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 259.214580][T10264] __dev_queue_xmit+0x1b11/0x3ed0 [ 259.219618][T10264] ? __dev_queue_xmit+0x2da/0x3ed0 [ 259.224733][T10264] ? __pfx___dev_queue_xmit+0x10/0x10 [ 259.230109][T10264] ? rcu_is_watching+0x15/0xb0 [ 259.234875][T10264] ? skb_release_data+0x2b5/0x8a0 [ 259.239906][T10264] ? pskb_expand_head+0xc52/0x1380 [ 259.245027][T10264] ? __bpf_redirect+0x51c/0xe40 [ 259.249882][T10264] __bpf_tx_skb+0x18e/0x260 [ 259.254380][T10264] bpf_clone_redirect+0x26f/0x3d0 [ 259.259415][T10264] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 259.264870][T10264] ? lockdep_stack_hash_count+0xd0/0x100 [ 259.270505][T10264] ? timekeeping_get_ns+0x5c/0x420 [ 259.275617][T10264] ? bpf_test_run+0x370/0xa90 [ 259.280295][T10264] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 259.286015][T10264] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.292342][T10264] ? ktime_get+0x3c/0xb0 [ 259.296587][T10264] ? bpf_test_run+0x370/0xa90 [ 259.301259][T10264] ? __pfx___cant_migrate+0x10/0x10 [ 259.306454][T10264] ? bpf_test_run+0x370/0xa90 [ 259.311125][T10264] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 259.316848][T10264] ? bpf_test_timer_continue+0x11a/0x350 [ 259.322488][T10264] bpf_test_run+0x4f0/0xa90 [ 259.326986][T10264] ? do_syscall_64+0xf3/0x230 [ 259.331680][T10264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.337781][T10264] ? bpf_test_run+0x370/0xa90 [ 259.342482][T10264] ? __pfx_bpf_test_run+0x10/0x10 [ 259.347516][T10264] ? eth_type_trans+0x3d1/0x7a0 [ 259.352381][T10264] ? __pfx_eth_type_trans+0x10/0x10 [ 259.357585][T10264] ? convert___skb_to_skb+0x41/0x620 [ 259.362878][T10264] bpf_prog_test_run_skb+0xc97/0x1820 [ 259.368264][T10264] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 259.374071][T10264] ? fput+0x1a8/0x230 [ 259.378058][T10264] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 259.383866][T10264] bpf_prog_test_run+0x2e4/0x360 [ 259.388807][T10264] __sys_bpf+0x48d/0x810 [ 259.393051][T10264] ? __pfx___sys_bpf+0x10/0x10 [ 259.397836][T10264] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.403829][T10264] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.410162][T10264] ? do_syscall_64+0x100/0x230 [ 259.414930][T10264] __x64_sys_bpf+0x7c/0x90 [ 259.419346][T10264] do_syscall_64+0xf3/0x230 [ 259.423851][T10264] ? clear_bhb_loop+0x35/0x90 [ 259.428532][T10264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.434423][T10264] RIP: 0033:0x7fd6c577e719 [ 259.438835][T10264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.458457][T10264] RSP: 002b:00007fd6c64ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.466893][T10264] RAX: ffffffffffffffda RBX: 00007fd6c5935f80 RCX: 00007fd6c577e719 [ 259.474872][T10264] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 259.482848][T10264] RBP: 00007fd6c64ab090 R08: 0000000000000000 R09: 0000000000000000 [ 259.490818][T10264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.498787][T10264] R13: 0000000000000000 R14: 00007fd6c5935f80 R15: 00007ffee9bcb478 [ 259.506765][T10264] [ 259.555099][ T9914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.595023][ T9914] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.707000][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.714208][ T8080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.748938][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.756089][ T8080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.832965][ T9904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.883028][T10283] netlink: 'syz.5.1321': attribute type 10 has an invalid length. [ 259.910309][ T9914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.921005][ T9914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.011949][T10282] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1320'. [ 260.142233][T10296] netlink: 'syz.1.1323': attribute type 3 has an invalid length. [ 260.207836][T10296] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1323'. [ 260.290191][T10301] bridge0: port 4(bond0) entered blocking state [ 260.307986][T10301] bridge0: port 4(bond0) entered disabled state [ 260.338648][T10301] bond0: entered allmulticast mode [ 260.368614][T10301] bond_slave_0: entered allmulticast mode [ 260.374449][T10301] bond_slave_1: entered allmulticast mode [ 260.430250][T10301] bond0: entered promiscuous mode [ 260.439048][T10296] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1323'. [ 260.447781][T10301] bond_slave_0: entered promiscuous mode [ 260.454281][T10301] bond_slave_1: entered promiscuous mode [ 260.498944][T10301] bridge0: port 4(bond0) entered blocking state [ 260.505473][T10301] bridge0: port 4(bond0) entered forwarding state [ 260.543643][T10304] bond0: left allmulticast mode [ 260.569503][T10304] bond_slave_0: left allmulticast mode [ 260.575078][T10304] bond_slave_1: left allmulticast mode [ 260.628294][T10304] bond0: left promiscuous mode [ 260.633163][T10304] bond_slave_0: left promiscuous mode [ 260.661554][T10304] bond_slave_1: left promiscuous mode [ 260.667515][T10304] bridge0: port 4(bond0) entered disabled state [ 260.759618][T10309] bridge0: port 3(bond0) entered blocking state [ 260.786725][T10309] bridge0: port 3(bond0) entered disabled state [ 260.809619][T10309] bond0: entered allmulticast mode [ 260.815118][T10309] bond_slave_0: entered allmulticast mode [ 260.842643][T10309] bond_slave_1: entered allmulticast mode [ 260.868330][T10309] bond0: entered promiscuous mode [ 260.883969][T10309] bond_slave_0: entered promiscuous mode [ 260.907922][T10309] bond_slave_1: entered promiscuous mode [ 260.926330][ T9904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.945487][T10310] bond0: left allmulticast mode [ 260.951399][T10310] bond_slave_0: left allmulticast mode [ 260.998535][T10310] bond_slave_1: left allmulticast mode [ 261.004115][T10310] bond0: left promiscuous mode [ 261.050531][T10310] bond_slave_0: left promiscuous mode [ 261.076881][T10310] bond_slave_1: left promiscuous mode [ 261.130453][T10310] bridge0: port 3(bond0) entered disabled state [ 261.382770][ T9904] veth0_vlan: entered promiscuous mode [ 261.397246][ T9904] veth1_vlan: entered promiscuous mode [ 261.435275][ T9904] veth0_macvtap: entered promiscuous mode [ 261.447434][ T9904] veth1_macvtap: entered promiscuous mode [ 261.565734][ T9914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.701363][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.712019][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.722032][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.732884][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.745070][ T9904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.756383][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.767242][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.777230][ T9904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.788014][ T9904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.799720][ T9904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.815636][ T9904] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.824579][ T9904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.833431][ T9904] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.845538][ T9904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.880069][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.916188][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.430114][ T9914] veth0_vlan: entered promiscuous mode [ 263.445474][ T9914] veth1_vlan: entered promiscuous mode [ 263.482727][ T9914] veth0_macvtap: entered promiscuous mode [ 263.494278][ T9914] veth1_macvtap: entered promiscuous mode [ 263.515880][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.526856][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.536861][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.547472][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.557526][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.568096][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.580718][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.591957][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.602792][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.612836][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.623494][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.633502][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.644148][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.656370][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.668567][ T9914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.677864][ T9914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.686624][ T9914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.696173][ T9914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.747086][T10338] FAULT_INJECTION: forcing a failure. [ 263.747086][T10338] name failslab, interval 1, probability 0, space 0, times 0 [ 263.759913][T10338] CPU: 1 UID: 0 PID: 10338 Comm: syz.5.1331 Not tainted 6.12.0-rc7-syzkaller-g9f8e716d46c6 #0 [ 263.770214][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 263.780327][T10338] Call Trace: [ 263.783654][T10338] [ 263.786635][T10338] dump_stack_lvl+0x241/0x360 [ 263.791386][T10338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.796644][T10338] ? __pfx__printk+0x10/0x10 [ 263.801311][T10338] ? pskb_expand_head+0xc52/0x1380 [ 263.806506][T10338] should_fail_ex+0x3b0/0x4e0 [ 263.811255][T10338] ? skb_clone+0x20c/0x390 [ 263.815726][T10338] should_failslab+0xac/0x100 [ 263.820459][T10338] ? skb_clone+0x20c/0x390 [ 263.824925][T10338] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 263.830363][T10338] skb_clone+0x20c/0x390 [ 263.834671][T10338] bpf_clone_redirect+0xab/0x3d0 [ 263.839694][T10338] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 263.845204][T10338] ? lockdep_stack_hash_count+0xd0/0x100 [ 263.850925][T10338] ? timekeeping_get_ns+0x5c/0x420 [ 263.856104][T10338] ? bpf_test_run+0x370/0xa90 [ 263.860839][T10338] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 263.866624][T10338] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.873007][T10338] ? ktime_get+0x3c/0xb0 [ 263.877336][T10338] ? bpf_test_run+0x370/0xa90 [ 263.882066][T10338] ? __pfx___cant_migrate+0x10/0x10 [ 263.887320][T10338] ? bpf_test_run+0x370/0xa90 [ 263.892057][T10338] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 263.897853][T10338] ? bpf_test_timer_continue+0x11a/0x350 [ 263.903564][T10338] bpf_test_run+0x4f0/0xa90 [ 263.908113][T10338] ? do_syscall_64+0xf3/0x230 [ 263.912840][T10338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.918991][T10338] ? bpf_test_run+0x370/0xa90 [ 263.923764][T10338] ? __pfx_bpf_test_run+0x10/0x10 [ 263.928876][T10338] ? eth_type_trans+0x3d1/0x7a0 [ 263.933827][T10338] ? __pfx_eth_type_trans+0x10/0x10 [ 263.939096][T10338] ? convert___skb_to_skb+0x41/0x620 [ 263.944450][T10338] bpf_prog_test_run_skb+0xc97/0x1820 [ 263.949953][T10338] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 263.955830][T10338] ? fput+0x1a8/0x230 [ 263.959868][T10338] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 263.965745][T10338] bpf_prog_test_run+0x2e4/0x360 [ 263.970753][T10338] __sys_bpf+0x48d/0x810 [ 263.975061][T10338] ? __pfx___sys_bpf+0x10/0x10 [ 263.979929][T10338] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.985985][T10338] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 263.992378][T10338] ? do_syscall_64+0x100/0x230 [ 263.997212][T10338] __x64_sys_bpf+0x7c/0x90 [ 264.001691][T10338] do_syscall_64+0xf3/0x230 [ 264.006248][T10338] ? clear_bhb_loop+0x35/0x90 [ 264.010990][T10338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.016937][T10338] RIP: 0033:0x7ff01937e719 [ 264.021404][T10338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.041063][T10338] RSP: 002b:00007ff01a15d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.049541][T10338] RAX: ffffffffffffffda RBX: 00007ff019535f80 RCX: 00007ff01937e719 [ 264.057557][T10338] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 264.065567][T10338] RBP: 00007ff01a15d090 R08: 0000000000000000 R09: 0000000000000000 [ 264.073579][T10338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.081598][T10338] R13: 0000000000000000 R14: 00007ff019535f80 R15: 00007ffcb759b548 [ 264.089674][T10338] [ 264.465907][ T6196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.506255][ T6196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.810856][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.818868][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.001489][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.042734][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.390101][T10353] bridge0: port 3(bond0) entered blocking state [ 265.425230][T10353] bridge0: port 3(bond0) entered disabled state [ 265.500643][T10353] bond0: entered allmulticast mode [ 265.505860][T10353] bond_slave_0: entered allmulticast mode [ 265.563823][T10353] bond_slave_1: entered allmulticast mode [ 265.615950][T10353] bond0: entered promiscuous mode [ 265.666984][T10353] bond_slave_0: entered promiscuous mode [ 265.697406][T10353] bond_slave_1: entered promiscuous mode [ 265.738115][T10357] bond0: left allmulticast mode [ 265.743073][T10357] bond_slave_0: left allmulticast mode [ 265.780187][T10357] bond_slave_1: left allmulticast mode [ 265.797795][T10357] bond0: left promiscuous mode [ 265.817774][T10357] bond_slave_0: left promiscuous mode [ 266.107425][T10357] bond_slave_1: left promiscuous mode [ 266.131325][T10357] bridge0: port 3(bond0) entered disabled state [ 266.765566][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.163716][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.233303][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.249353][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.271584][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.281369][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.295295][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.325995][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.376963][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.484127][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.851731][ T12] bridge_slave_1: left allmulticast mode [ 267.867535][ T12] bridge_slave_1: left promiscuous mode [ 267.896716][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.957239][ T12] bridge_slave_0: left allmulticast mode [ 267.986625][ T12] bridge_slave_0: left promiscuous mode [ 268.008740][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.009006][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.025831][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.038260][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.052038][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.060550][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 268.069866][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.134936][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.164184][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.176370][ T12] bond0 (unregistering): Released all slaves [ 269.217880][T10422] netlink: 'syz.4.1346': attribute type 10 has an invalid length. [ 269.360743][ T5156] Bluetooth: hci0: command tx timeout [ 269.403804][T10377] chnl_net:caif_netlink_parms(): no params data found [ 269.635683][T10441] pim6reg1: entered promiscuous mode [ 269.644563][T10441] pim6reg1: entered allmulticast mode [ 270.098958][T10377] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.127341][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.172148][ T5156] Bluetooth: hci1: command tx timeout [ 270.178561][T10377] bridge_slave_0: entered allmulticast mode [ 270.206009][T10377] bridge_slave_0: entered promiscuous mode [ 270.288255][ T12] hsr_slave_0: left promiscuous mode [ 270.343462][ T12] hsr_slave_1: left promiscuous mode [ 270.373225][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.384601][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.418129][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.436136][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.532383][ T12] veth1_macvtap: left promiscuous mode [ 270.538536][ T12] veth0_macvtap: left promiscuous mode [ 270.545157][ T12] veth1_vlan: left promiscuous mode [ 270.562155][ T12] veth0_vlan: left promiscuous mode [ 271.442403][ T5156] Bluetooth: hci0: command tx timeout [ 271.486043][ T12] team0 (unregistering): Port device team_slave_1 removed [ 271.526661][ T12] team0 (unregistering): Port device team_slave_0 removed [ 271.905528][T10377] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.916080][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.923922][T10377] bridge_slave_1: entered allmulticast mode [ 271.942211][T10377] bridge_slave_1: entered promiscuous mode [ 271.982737][T10485] netlink: 'syz.1.1360': attribute type 10 has an invalid length. [ 271.990840][T10487] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.998946][T10487] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1361'. [ 272.124698][T10377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.151977][T10377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.238316][ T5156] Bluetooth: hci1: command tx timeout [ 272.313250][T10377] team0: Port device team_slave_0 added [ 272.323677][T10494] bridge0: port 3(bond0) entered blocking state [ 272.332920][T10494] bridge0: port 3(bond0) entered disabled state [ 272.343054][T10494] bond0: entered allmulticast mode [ 272.374218][T10494] bond_slave_0: entered allmulticast mode [ 272.398259][T10494] bond_slave_1: entered allmulticast mode [ 272.429224][T10494] bond0: entered promiscuous mode [ 272.434453][T10494] bond_slave_0: entered promiscuous mode [ 272.445476][T10494] bond_slave_1: entered promiscuous mode [ 272.458819][T10377] team0: Port device team_slave_1 added [ 272.526689][T10504] netlink: 'syz.5.1368': attribute type 21 has an invalid length. [ 272.540224][T10504] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.1368'. [ 272.668165][T10401] chnl_net:caif_netlink_parms(): no params data found [ 272.697382][T10377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.720242][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.752835][T10377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.846064][T10377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.878786][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.920619][T10377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.532055][ T5156] Bluetooth: hci0: command tx timeout [ 274.323480][ T5156] Bluetooth: hci1: command tx timeout [ 275.598057][ T5156] Bluetooth: hci0: command tx timeout [ 276.229548][T10546] netlink: 731 bytes leftover after parsing attributes in process `syz.5.1374'. [ 276.313779][T10377] hsr_slave_0: entered promiscuous mode [ 276.325465][T10377] hsr_slave_1: entered promiscuous mode [ 276.408164][ T5156] Bluetooth: hci1: command tx timeout [ 276.656315][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.199929][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.279943][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.297132][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.314406][T10401] bridge_slave_0: entered allmulticast mode [ 277.328233][T10401] bridge_slave_0: entered promiscuous mode [ 277.660666][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.702329][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.718855][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.736383][T10401] bridge_slave_1: entered allmulticast mode [ 277.746410][T10401] bridge_slave_1: entered promiscuous mode [ 277.836329][T10596] netlink: 'syz.1.1388': attribute type 4 has an invalid length. [ 277.849187][T10596] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1388'. [ 277.916884][T10597] netlink: 'syz.1.1388': attribute type 4 has an invalid length. [ 277.937740][T10597] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1388'. [ 278.080855][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.234561][T10401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.287297][T10401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.397399][T10401] team0: Port device team_slave_0 added [ 278.413622][T10401] team0: Port device team_slave_1 added [ 278.963025][T10401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.998150][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.066381][T10401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.250468][T10401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.257471][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.335038][T10401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.646440][ T12] bridge_slave_1: left allmulticast mode [ 279.673789][ T12] bridge_slave_1: left promiscuous mode [ 279.695856][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.744473][ T12] bridge_slave_0: left allmulticast mode [ 279.754695][ T12] bridge_slave_0: left promiscuous mode [ 279.781705][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.968190][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.987445][T10655] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1403'. [ 281.007204][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.033344][ T12] bond0 (unregistering): Released all slaves [ 281.172632][T10401] hsr_slave_0: entered promiscuous mode [ 281.203895][T10401] hsr_slave_1: entered promiscuous mode [ 281.223388][T10401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.239996][T10401] Cannot create hsr debugfs directory [ 281.564772][T10659] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 281.825428][ T12] hsr_slave_0: left promiscuous mode [ 281.851110][ T12] hsr_slave_1: left promiscuous mode [ 281.857340][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.874569][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.898763][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.917893][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.948808][ T12] veth1_macvtap: left promiscuous mode [ 281.959317][ T12] veth0_macvtap: left promiscuous mode [ 281.969669][ T12] veth1_vlan: left promiscuous mode [ 281.979687][ T12] veth0_vlan: left promiscuous mode [ 282.454501][T10680] FAULT_INJECTION: forcing a failure. [ 282.454501][T10680] name failslab, interval 1, probability 0, space 0, times 0 [ 282.467257][T10680] CPU: 1 UID: 0 PID: 10680 Comm: syz.1.1412 Not tainted 6.12.0-rc7-syzkaller-g9f8e716d46c6 #0 [ 282.477524][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 282.487604][T10680] Call Trace: [ 282.490898][T10680] [ 282.493844][T10680] dump_stack_lvl+0x241/0x360 [ 282.498556][T10680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.503781][T10680] ? __pfx__printk+0x10/0x10 [ 282.508409][T10680] should_fail_ex+0x3b0/0x4e0 [ 282.513113][T10680] ? dst_alloc+0x12b/0x190 [ 282.517553][T10680] should_failslab+0xac/0x100 [ 282.522255][T10680] ? dst_alloc+0x12b/0x190 [ 282.526692][T10680] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 282.532098][T10680] dst_alloc+0x12b/0x190 [ 282.536368][T10680] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 282.542477][T10680] ip_route_output_key_hash+0x193/0x2b0 [ 282.548048][T10680] ? ip_route_output_key_hash+0xdf/0x2b0 [ 282.553694][T10680] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 282.559772][T10680] vti6_tnl_xmit+0xce9/0x1bd0 [ 282.564450][T10680] ? __pfx_lock_release+0x10/0x10 [ 282.569481][T10680] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 282.574595][T10680] ? dev_queue_xmit_nit+0x2b/0xc10 [ 282.579707][T10680] dev_hard_start_xmit+0x27a/0x7e0 [ 282.584836][T10680] __dev_queue_xmit+0x1b11/0x3ed0 [ 282.589884][T10680] ? __dev_queue_xmit+0x2da/0x3ed0 [ 282.595004][T10680] ? __pfx___dev_queue_xmit+0x10/0x10 [ 282.600379][T10680] ? rcu_is_watching+0x15/0xb0 [ 282.605136][T10680] ? skb_release_data+0x2b5/0x8a0 [ 282.610162][T10680] ? pskb_expand_head+0xc52/0x1380 [ 282.615278][T10680] ? __bpf_redirect+0x51c/0xe40 [ 282.620126][T10680] __bpf_tx_skb+0x18e/0x260 [ 282.624627][T10680] bpf_clone_redirect+0x26f/0x3d0 [ 282.629655][T10680] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 282.635108][T10680] ? perf_trace_preemptirq_template+0x2d2/0x3f0 [ 282.641349][T10680] ? __local_bh_enable_ip+0x106/0x200 [ 282.646720][T10680] ? bpf_test_run+0x370/0xa90 [ 282.651392][T10680] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 282.657109][T10680] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.663442][T10680] ? bpf_test_run+0x370/0xa90 [ 282.668115][T10680] ? __pfx___cant_migrate+0x10/0x10 [ 282.673312][T10680] ? bpf_test_run+0x370/0xa90 [ 282.677986][T10680] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 282.683702][T10680] ? bpf_test_timer_continue+0x11a/0x350 [ 282.689330][T10680] bpf_test_run+0x4f0/0xa90 [ 282.693825][T10680] ? do_syscall_64+0xf3/0x230 [ 282.698492][T10680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.704569][T10680] ? bpf_test_run+0x370/0xa90 [ 282.709248][T10680] ? __pfx_bpf_test_run+0x10/0x10 [ 282.714267][T10680] ? eth_type_trans+0x3d1/0x7a0 [ 282.719122][T10680] ? __pfx_eth_type_trans+0x10/0x10 [ 282.724321][T10680] ? convert___skb_to_skb+0x41/0x620 [ 282.729601][T10680] bpf_prog_test_run_skb+0xc97/0x1820 [ 282.734979][T10680] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 282.740779][T10680] ? fput+0x1a8/0x230 [ 282.744755][T10680] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 282.750553][T10680] bpf_prog_test_run+0x2e4/0x360 [ 282.755488][T10680] __sys_bpf+0x48d/0x810 [ 282.759725][T10680] ? __pfx___sys_bpf+0x10/0x10 [ 282.764478][T10680] ? perf_trace_run_bpf_submit+0x10b/0x180 [ 282.770282][T10680] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.776259][T10680] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.782582][T10680] ? do_syscall_64+0x100/0x230 [ 282.787339][T10680] __x64_sys_bpf+0x7c/0x90 [ 282.791748][T10680] do_syscall_64+0xf3/0x230 [ 282.796250][T10680] ? clear_bhb_loop+0x35/0x90 [ 282.800923][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.806821][T10680] RIP: 0033:0x7f374297e719 [ 282.811225][T10680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.830830][T10680] RSP: 002b:00007f37436f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.839241][T10680] RAX: ffffffffffffffda RBX: 00007f3742b35f80 RCX: 00007f374297e719 [ 282.847205][T10680] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 282.855173][T10680] RBP: 00007f37436f0090 R08: 0000000000000000 R09: 0000000000000000 [ 282.863141][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.871109][T10680] R13: 0000000000000000 R14: 00007f3742b35f80 R15: 00007ffc7725a008 [ 282.879083][T10680] [ 283.351394][ T12] team0 (unregistering): Port device team_slave_1 removed [ 283.427109][ T12] team0 (unregistering): Port device team_slave_0 removed [ 284.220586][T10377] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.311798][T10377] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.376001][T10694] netlink: 'syz.4.1419': attribute type 10 has an invalid length. [ 284.394837][T10377] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 284.466138][T10377] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.040614][T10721] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 285.260515][T10377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.481595][T10377] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.571336][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.578532][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.722180][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.729508][ T6204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.810812][T10737] netlink: 'syz.4.1430': attribute type 10 has an invalid length. [ 285.994062][T10741] netlink: 'syz.4.1432': attribute type 1 has an invalid length. [ 286.039724][T10401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.068524][T10741] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1432'. [ 286.103198][T10401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.150643][T10401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.215553][T10401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.372531][T10377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.552113][T10401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.583217][T10377] veth0_vlan: entered promiscuous mode [ 286.623276][T10377] veth1_vlan: entered promiscuous mode [ 286.680606][T10401] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.760612][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.767795][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.859059][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.866191][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.915045][T10377] veth0_macvtap: entered promiscuous mode [ 286.948799][T10377] veth1_macvtap: entered promiscuous mode [ 287.032175][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.050549][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.063792][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.084961][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.103889][T10377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.122445][T10401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.200467][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.219911][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.238638][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.265563][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.292685][T10377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.343984][T10377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.396615][T10377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.412040][T10377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.421401][T10377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.524389][T10401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.667139][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.687554][T10401] veth0_vlan: entered promiscuous mode [ 287.711981][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.788834][T10401] veth1_vlan: entered promiscuous mode [ 287.798513][ T6196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.806368][ T6196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.893386][T10401] veth0_macvtap: entered promiscuous mode [ 287.935547][T10401] veth1_macvtap: entered promiscuous mode [ 287.997366][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.034982][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.053776][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.064656][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.074663][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.098120][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.124527][T10401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.145712][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.156849][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.167100][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.185157][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.195494][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.207498][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.232599][T10401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.298213][T10401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.307119][T10401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.320134][T10401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.330168][T10401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.700649][ T6204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.855130][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.920686][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.013156][ T6204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.043842][ T6196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.062112][ T6196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.106382][ T6204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.296863][ T6204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.564351][ T6204] bridge_slave_1: left allmulticast mode [ 289.591651][ T6204] bridge_slave_1: left promiscuous mode [ 289.597494][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.850144][ T6204] bridge_slave_0: left allmulticast mode [ 289.856107][ T6204] bridge_slave_0: left promiscuous mode [ 289.890506][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.672846][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.692644][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.701993][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.715410][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.725442][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 290.737888][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.426850][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.436338][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.447091][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.456637][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.474541][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.489555][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.972370][ T6204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.994588][ T6204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.034906][ T6204] bond0 (unregistering): Released all slaves [ 292.798619][ T5156] Bluetooth: hci0: command tx timeout [ 292.998656][ T6204] hsr_slave_0: left promiscuous mode [ 293.063756][T10949] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1473'. [ 293.073534][ T6204] hsr_slave_1: left promiscuous mode [ 293.087990][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.104828][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.135310][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.170179][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.237148][ T6204] veth1_macvtap: left promiscuous mode [ 293.254469][ T6204] veth0_macvtap: left promiscuous mode [ 293.265913][ T6204] veth1_vlan: left promiscuous mode [ 293.277118][ T6204] veth0_vlan: left promiscuous mode [ 293.517870][ T5156] Bluetooth: hci1: command tx timeout [ 294.123772][ T6204] team0 (unregistering): Port device team_slave_1 removed [ 294.197279][ T6204] team0 (unregistering): Port device team_slave_0 removed [ 294.714599][T10905] chnl_net:caif_netlink_parms(): no params data found [ 294.877841][ T5156] Bluetooth: hci0: command tx timeout [ 294.906136][T10877] chnl_net:caif_netlink_parms(): no params data found [ 294.969537][T10981] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1483'. [ 295.597763][ T5156] Bluetooth: hci1: command tx timeout [ 295.837495][T10905] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.865413][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.876025][T10905] bridge_slave_0: entered allmulticast mode [ 295.884238][T10905] bridge_slave_0: entered promiscuous mode [ 295.892665][T10905] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.919429][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.926698][T10905] bridge_slave_1: entered allmulticast mode [ 295.948442][T10905] bridge_slave_1: entered promiscuous mode [ 296.239873][T10905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.273141][T10877] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.288091][T10877] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.321549][T10877] bridge_slave_0: entered allmulticast mode [ 296.344675][T10877] bridge_slave_0: entered promiscuous mode [ 296.361049][T10905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.425252][T10877] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.444321][T10877] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.460696][T10877] bridge_slave_1: entered allmulticast mode [ 296.468405][T10877] bridge_slave_1: entered promiscuous mode [ 296.512599][T10905] team0: Port device team_slave_0 added [ 296.608005][T10905] team0: Port device team_slave_1 added [ 296.628609][T10877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.709379][ T6204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.756479][T10877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.957772][ T5156] Bluetooth: hci0: command tx timeout [ 297.022733][ T6204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.073586][T10905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.102709][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.153148][T10905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.235994][T10877] team0: Port device team_slave_0 added [ 297.271075][T10877] team0: Port device team_slave_1 added [ 297.310638][ T6204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.345940][T10905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.359565][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.394804][T10905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.448280][T11046] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1494'. [ 297.474301][ T6204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.496831][T11045] netlink: 'syz.4.1494': attribute type 33 has an invalid length. [ 297.517699][T11045] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1494'. [ 297.609627][T10877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.635629][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.678375][ T5156] Bluetooth: hci1: command tx timeout [ 297.692815][T10877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.706934][T10877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.715168][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.774728][T10877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.095462][T10905] hsr_slave_0: entered promiscuous mode [ 298.148410][T10905] hsr_slave_1: entered promiscuous mode [ 298.285558][T10877] hsr_slave_0: entered promiscuous mode [ 298.318456][T10877] hsr_slave_1: entered promiscuous mode [ 298.379268][T11071] FAULT_INJECTION: forcing a failure. [ 298.379268][T11071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.380521][T11071] [ 298.380530][T11071] ====================================================== [ 298.380536][T11071] WARNING: possible circular locking dependency detected [ 298.380543][T11071] 6.12.0-rc7-syzkaller-g9f8e716d46c6 #0 Not tainted [ 298.380553][T11071] ------------------------------------------------------ [ 298.380559][T11071] syz.5.1500/11071 is trying to acquire lock: [ 298.380568][T11071] ffffffff8e813320 (console_owner){-...}-{0:0}, at: console_flush_all+0x1a3/0xeb0 [ 298.380617][T11071] [ 298.380617][T11071] but task is already holding lock: [ 298.380623][T11071] ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 298.380665][T11071] [ 298.380665][T11071] which lock already depends on the new lock. [ 298.380665][T11071] [ 298.380671][T11071] [ 298.380671][T11071] the existing dependency chain (in reverse order) is: [ 298.380677][T11071] [ 298.380677][T11071] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 298.380700][T11071] lock_acquire+0x1ed/0x550 [ 298.380722][T11071] _raw_spin_lock_nested+0x31/0x40 [ 298.380741][T11071] raw_spin_rq_lock_nested+0x2a/0x140 [ 298.380759][T11071] task_rq_lock+0xc6/0x360 [ 298.380778][T11071] cgroup_move_task+0x9b/0x5a0 [ 298.380796][T11071] css_set_move_task+0x72e/0x950 [ 298.380813][T11071] cgroup_post_fork+0x256/0x880 [ 298.380830][T11071] copy_process+0x39e9/0x3d50 [ 298.380851][T11071] kernel_clone+0x226/0x8f0 [ 298.380871][T11071] user_mode_thread+0x132/0x1a0 [ 298.380892][T11071] rest_init+0x23/0x300 [ 298.380912][T11071] start_kernel+0x47f/0x500 [ 298.380928][T11071] x86_64_start_reservations+0x2a/0x30 [ 298.380947][T11071] x86_64_start_kernel+0x9f/0xa0 [ 298.380964][T11071] common_startup_64+0x13e/0x147 [ 298.380982][T11071] [ 298.380982][T11071] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 298.381005][T11071] lock_acquire+0x1ed/0x550 [ 298.381025][T11071] _raw_spin_lock_irqsave+0xd5/0x120 [ 298.381041][T11071] try_to_wake_up+0xbe/0x14b0 [ 298.381055][T11071] __wake_up_common_lock+0x130/0x1e0 [ 298.381077][T11071] tty_port_default_wakeup+0xa6/0xf0 [ 298.381108][T11071] serial8250_tx_chars+0x6e2/0x930 [ 298.381129][T11071] serial8250_handle_irq+0x630/0xb80 [ 298.381149][T11071] serial8250_default_handle_irq+0xd1/0x1f0 [ 298.381172][T11071] serial8250_interrupt+0xa9/0x1f0 [ 298.381190][T11071] __handle_irq_event_percpu+0x29a/0xa80 [ 298.381210][T11071] handle_irq_event+0x89/0x1f0 [ 298.381228][T11071] handle_edge_irq+0x25f/0xc20 [ 298.381246][T11071] __common_interrupt+0x136/0x230 [ 298.381266][T11071] common_interrupt+0xb4/0xd0 [ 298.381286][T11071] asm_common_interrupt+0x26/0x40 [ 298.381305][T11071] _raw_spin_unlock_irq+0x29/0x50 [ 298.381320][T11071] do_sigaction+0x1f3/0x530 [ 298.381335][T11071] __x64_sys_rt_sigaction+0x1b9/0x290 [ 298.381350][T11071] do_syscall_64+0xf3/0x230 [ 298.381369][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.381386][T11071] [ 298.381386][T11071] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 298.381410][T11071] lock_acquire+0x1ed/0x550 [ 298.381431][T11071] _raw_spin_lock_irqsave+0xd5/0x120 [ 298.381447][T11071] __wake_up_common_lock+0x25/0x1e0 [ 298.381468][T11071] tty_port_default_wakeup+0xa6/0xf0 [ 298.381490][T11071] serial8250_tx_chars+0x6e2/0x930 [ 298.381510][T11071] serial8250_handle_irq+0x630/0xb80 [ 298.381530][T11071] serial8250_default_handle_irq+0xd1/0x1f0 [ 298.381552][T11071] serial8250_interrupt+0xa9/0x1f0 [ 298.381570][T11071] __handle_irq_event_percpu+0x29a/0xa80 [ 298.381589][T11071] handle_irq_event+0x89/0x1f0 [ 298.381607][T11071] handle_edge_irq+0x25f/0xc20 [ 298.381624][T11071] __common_interrupt+0x136/0x230 [ 298.381643][T11071] common_interrupt+0xb4/0xd0 [ 298.381664][T11071] asm_common_interrupt+0x26/0x40 [ 298.381681][T11071] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 298.381698][T11071] uart_write+0x3e4/0xa40 [ 298.381717][T11071] n_tty_write+0xd62/0x1230 [ 298.381732][T11071] file_tty_write+0x546/0x9b0 [ 298.381751][T11071] vfs_write+0xaeb/0xd30 [ 298.381765][T11071] ksys_write+0x183/0x2b0 [ 298.381779][T11071] do_syscall_64+0xf3/0x230 [ 298.381797][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.381814][T11071] [ 298.381814][T11071] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 298.381836][T11071] lock_acquire+0x1ed/0x550 [ 298.381856][T11071] _raw_spin_lock_irqsave+0xd5/0x120 [ 298.381869][T11071] serial8250_console_write+0x1a7/0x1ed0 [ 298.381890][T11071] console_flush_all+0x86b/0xeb0 [ 298.381908][T11071] console_unlock+0x14f/0x3b0 [ 298.381923][T11071] vprintk_emit+0x730/0xa10 [ 298.381938][T11071] _printk+0xd5/0x120 [ 298.381950][T11071] register_console+0xbf5/0xfd0 [ 298.381965][T11071] univ8250_console_init+0x52/0x90 [ 298.381981][T11071] console_init+0x1b8/0x6f0 [ 298.381994][T11071] start_kernel+0x2d8/0x500 [ 298.382007][T11071] x86_64_start_reservations+0x2a/0x30 [ 298.382026][T11071] x86_64_start_kernel+0x9f/0xa0 [ 298.382042][T11071] common_startup_64+0x13e/0x147 [ 298.382059][T11071] [ 298.382059][T11071] -> #0 (console_owner){-...}-{0:0}: [ 298.382080][T11071] validate_chain+0x18ef/0x5920 [ 298.382095][T11071] __lock_acquire+0x1384/0x2050 [ 298.382120][T11071] lock_acquire+0x1ed/0x550 [ 298.382139][T11071] console_flush_all+0x7f8/0xeb0 [ 298.382155][T11071] console_unlock+0x14f/0x3b0 [ 298.382170][T11071] vprintk_emit+0x730/0xa10 [ 298.382184][T11071] _printk+0xd5/0x120 [ 298.382200][T11071] should_fail_ex+0x391/0x4e0 [ 298.382216][T11071] strncpy_from_user+0x36/0x260 [ 298.382231][T11071] strncpy_from_user_nofault+0x71/0x140 [ 298.382248][T11071] bpf_probe_read_compat_str+0xe9/0x180 [ 298.382271][T11071] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 298.382284][T11071] bpf_trace_run4+0x334/0x590 [ 298.382300][T11071] __traceiter_sched_switch+0x98/0xd0 [ 298.382317][T11071] __schedule+0x22bb/0x4c30 [ 298.382333][T11071] preempt_schedule_common+0x84/0xd0 [ 298.382350][T11071] preempt_schedule+0xe1/0xf0 [ 298.382366][T11071] preempt_schedule_thunk+0x1a/0x30 [ 298.382382][T11071] free_unref_page+0x751/0x1140 [ 298.382404][T11071] __slab_free+0x31b/0x3d0 [ 298.382419][T11071] qlist_free_all+0x9a/0x140 [ 298.382434][T11071] kasan_quarantine_reduce+0x14f/0x170 [ 298.382449][T11071] __kasan_kmalloc_large+0x1a/0xa0 [ 298.382467][T11071] ___kmalloc_large_node+0x133/0x1d0 [ 298.382486][T11071] __kmalloc_large_node_noprof+0x1a/0x80 [ 298.382505][T11071] __kmalloc_node_noprof+0x2d2/0x440 [ 298.382524][T11071] __kvmalloc_node_noprof+0x72/0x190 [ 298.382546][T11071] netlink_alloc_large_skb+0x53/0x100 [ 298.382562][T11071] netlink_sendmsg+0x638/0xcb0 [ 298.382580][T11071] __sock_sendmsg+0x221/0x270 [ 298.382594][T11071] sock_write_iter+0x2d7/0x3f0 [ 298.382615][T11071] vfs_write+0xaeb/0xd30 [ 298.382628][T11071] ksys_write+0x183/0x2b0 [ 298.382642][T11071] do_syscall_64+0xf3/0x230 [ 298.382660][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.382678][T11071] [ 298.382678][T11071] other info that might help us debug this: [ 298.382678][T11071] [ 298.382684][T11071] Chain exists of: [ 298.382684][T11071] console_owner --> &p->pi_lock --> &rq->__lock [ 298.382684][T11071] [ 298.382711][T11071] Possible unsafe locking scenario: [ 298.382711][T11071] [ 298.382716][T11071] CPU0 CPU1 [ 298.382721][T11071] ---- ---- [ 298.382726][T11071] lock(&rq->__lock); [ 298.382737][T11071] lock(&p->pi_lock); [ 298.382750][T11071] lock(&rq->__lock); [ 298.382763][T11071] lock(console_owner); [ 298.382774][T11071] [ 298.382774][T11071] *** DEADLOCK *** [ 298.382774][T11071] [ 298.382779][T11071] 5 locks held by syz.5.1500/11071: [ 298.382789][T11071] #0: ffffffff8ea50248 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x24/0x50 [ 298.382830][T11071] #1: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 298.382873][T11071] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 298.382914][T11071] #3: ffffffff8e813380 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 298.382972][T11071] #4: ffffffff8e812f90 (console_srcu){....}-{0:0}, at: console_flush_all+0x1a3/0xeb0 [ 298.383015][T11071] [ 298.383015][T11071] stack backtrace: [ 298.383022][T11071] CPU: 0 UID: 0 PID: 11071 Comm: syz.5.1500 Not tainted 6.12.0-rc7-syzkaller-g9f8e716d46c6 #0 [ 298.383042][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 298.383052][T11071] Call Trace: [ 298.383059][T11071] [ 298.383066][T11071] dump_stack_lvl+0x241/0x360 [ 298.383088][T11071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.383113][T11071] ? __pfx__printk+0x10/0x10 [ 298.383136][T11071] print_circular_bug+0x13a/0x1b0 [ 298.383156][T11071] check_noncircular+0x36a/0x4a0 [ 298.383176][T11071] ? __pfx_check_noncircular+0x10/0x10 [ 298.383193][T11071] ? lockdep_lock+0x123/0x2b0 [ 298.383215][T11071] ? add_lock_to_list+0x1e8/0x2f0 [ 298.383236][T11071] validate_chain+0x18ef/0x5920 [ 298.383263][T11071] ? __pfx_validate_chain+0x10/0x10 [ 298.383283][T11071] ? sprintf+0xda/0x120 [ 298.383305][T11071] ? vsnprintf+0x1cc3/0x1da0 [ 298.383333][T11071] ? info_print_prefix+0x204/0x310 [ 298.383359][T11071] ? mark_lock+0x9a/0x360 [ 298.383376][T11071] __lock_acquire+0x1384/0x2050 [ 298.383405][T11071] lock_acquire+0x1ed/0x550 [ 298.383427][T11071] ? console_flush_all+0x1a3/0xeb0 [ 298.383451][T11071] ? __pfx_lock_acquire+0x10/0x10 [ 298.383473][T11071] ? __pfx_lock_release+0x10/0x10 [ 298.383495][T11071] ? do_raw_spin_lock+0x14f/0x370 [ 298.383518][T11071] ? do_raw_spin_unlock+0x13c/0x8b0 [ 298.383539][T11071] ? console_flush_all+0x511/0xeb0 [ 298.383559][T11071] ? console_flush_all+0x1a3/0xeb0 [ 298.383580][T11071] console_flush_all+0x7f8/0xeb0 [ 298.383600][T11071] ? console_flush_all+0x1a3/0xeb0 [ 298.383623][T11071] ? console_flush_all+0x1a3/0xeb0 [ 298.383645][T11071] ? __pfx_console_flush_all+0x10/0x10 [ 298.383667][T11071] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.383685][T11071] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.383707][T11071] ? this_cpu_in_panic+0x4f/0x80 [ 298.383724][T11071] ? is_printk_legacy_deferred+0x43/0x50 [ 298.383747][T11071] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 298.383768][T11071] console_unlock+0x14f/0x3b0 [ 298.383788][T11071] ? __pfx_console_unlock+0x10/0x10 [ 298.383808][T11071] ? this_cpu_in_panic+0x4f/0x80 [ 298.383825][T11071] ? is_printk_legacy_deferred+0x43/0x50 [ 298.383848][T11071] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 298.383869][T11071] vprintk_emit+0x730/0xa10 [ 298.383889][T11071] ? __pfx_vprintk_emit+0x10/0x10 [ 298.383908][T11071] ? validate_chain+0x11e/0x5920 [ 298.383932][T11071] _printk+0xd5/0x120 [ 298.383952][T11071] ? __pfx__printk+0x10/0x10 [ 298.383976][T11071] should_fail_ex+0x391/0x4e0 [ 298.383995][T11071] strncpy_from_user+0x36/0x260 [ 298.384013][T11071] strncpy_from_user_nofault+0x71/0x140 [ 298.384033][T11071] bpf_probe_read_compat_str+0xe9/0x180 [ 298.384057][T11071] ? bpf_trace_run4+0x244/0x590 [ 298.384074][T11071] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 298.384089][T11071] bpf_trace_run4+0x334/0x590 [ 298.384113][T11071] ? psi_group_change+0xb4e/0x1190 [ 298.384131][T11071] ? __pfx_bpf_trace_run4+0x10/0x10 [ 298.384148][T11071] ? __pfx_probe_sched_switch+0x10/0x10 [ 298.384167][T11071] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 298.384185][T11071] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 298.384203][T11071] __traceiter_sched_switch+0x98/0xd0 [ 298.384223][T11071] __schedule+0x22bb/0x4c30 [ 298.384242][T11071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.384266][T11071] ? mark_lock+0x9a/0x360 [ 298.384283][T11071] ? __lock_acquire+0x1384/0x2050 [ 298.384308][T11071] ? __pfx___schedule+0x10/0x10 [ 298.384335][T11071] ? preempt_schedule+0xe1/0xf0 [ 298.384352][T11071] preempt_schedule_common+0x84/0xd0 [ 298.384371][T11071] preempt_schedule+0xe1/0xf0 [ 298.384388][T11071] ? __pfx_preempt_schedule+0x10/0x10 [ 298.384409][T11071] preempt_schedule_thunk+0x1a/0x30 [ 298.384429][T11071] free_unref_page+0x751/0x1140 [ 298.384456][T11071] __slab_free+0x31b/0x3d0 [ 298.384475][T11071] ? __phys_addr+0xba/0x170 [ 298.384492][T11071] qlist_free_all+0x9a/0x140 [ 298.384510][T11071] kasan_quarantine_reduce+0x14f/0x170 [ 298.384529][T11071] __kasan_kmalloc_large+0x1a/0xa0 [ 298.384547][T11071] ___kmalloc_large_node+0x133/0x1d0 [ 298.384570][T11071] __kmalloc_large_node_noprof+0x1a/0x80 [ 298.384594][T11071] __kmalloc_node_noprof+0x2d2/0x440 [ 298.384614][T11071] ? __kvmalloc_node_noprof+0x72/0x190 [ 298.384641][T11071] __kvmalloc_node_noprof+0x72/0x190 [ 298.384666][T11071] netlink_alloc_large_skb+0x53/0x100 [ 298.384684][T11071] netlink_sendmsg+0x638/0xcb0 [ 298.384708][T11071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.384728][T11071] ? __pfx_aa_file_perm+0x10/0x10 [ 298.384749][T11071] ? aa_sock_msg_perm+0x91/0x160 [ 298.384770][T11071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.384789][T11071] __sock_sendmsg+0x221/0x270 [ 298.384807][T11071] sock_write_iter+0x2d7/0x3f0 [ 298.384830][T11071] ? __pfx_sock_write_iter+0x10/0x10 [ 298.384858][T11071] ? bpf_lsm_file_permission+0x9/0x10 [ 298.384874][T11071] ? security_file_permission+0x74/0x280 [ 298.384901][T11071] vfs_write+0xaeb/0xd30 [ 298.384921][T11071] ? __pfx_sock_write_iter+0x10/0x10 [ 298.384945][T11071] ? __pfx_vfs_write+0x10/0x10 [ 298.384970][T11071] ? fdget_pos+0x19a/0x320 [ 298.384991][T11071] ksys_write+0x183/0x2b0 [ 298.385010][T11071] ? __pfx_ksys_write+0x10/0x10 [ 298.385029][T11071] ? do_syscall_64+0x100/0x230 [ 298.385051][T11071] ? do_syscall_64+0xb6/0x230 [ 298.385073][T11071] do_syscall_64+0xf3/0x230 [ 298.385094][T11071] ? clear_bhb_loop+0x35/0x90 [ 298.385123][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.385144][T11071] RIP: 0033:0x7ff01937e719 [ 298.385160][T11071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.385176][T11071] RSP: 002b:00007ff01a15d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.385196][T11071] RAX: ffffffffffffffda RBX: 00007ff019535f80 RCX: 00007ff01937e719 [ 298.385211][T11071] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 298.385223][T11071] RBP: 00007ff01a15d090 R08: 0000000000000000 R09: 0000000000000000 [ 298.385236][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.385249][T11071] R13: 0000000000000000 R14: 00007ff019535f80 R15: 00007ffcb759b548 [ 298.385269][T11071] [ 299.814118][T11071] CPU: 0 UID: 0 PID: 11071 Comm: syz.5.1500 Not tainted 6.12.0-rc7-syzkaller-g9f8e716d46c6 #0 [ 299.824337][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 299.834373][T11071] Call Trace: [ 299.837636][T11071] [ 299.840549][T11071] dump_stack_lvl+0x241/0x360 [ 299.845218][T11071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.850398][T11071] ? __pfx__printk+0x10/0x10 [ 299.854975][T11071] should_fail_ex+0x3b0/0x4e0 [ 299.859634][T11071] strncpy_from_user+0x36/0x260 [ 299.864466][T11071] strncpy_from_user_nofault+0x71/0x140 [ 299.869994][T11071] bpf_probe_read_compat_str+0xe9/0x180 [ 299.875525][T11071] ? bpf_trace_run4+0x244/0x590 [ 299.880354][T11071] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 299.885792][T11071] bpf_trace_run4+0x334/0x590 [ 299.890449][T11071] ? psi_group_change+0xb4e/0x1190 [ 299.895541][T11071] ? __pfx_bpf_trace_run4+0x10/0x10 [ 299.900718][T11071] ? __pfx_probe_sched_switch+0x10/0x10 [ 299.906244][T11071] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 299.912898][T11071] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 299.918945][T11071] __traceiter_sched_switch+0x98/0xd0 [ 299.924324][T11071] __schedule+0x22bb/0x4c30 [ 299.928809][T11071] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.935117][T11071] ? mark_lock+0x9a/0x360 [ 299.939426][T11071] ? __lock_acquire+0x1384/0x2050 [ 299.944433][T11071] ? __pfx___schedule+0x10/0x10 [ 299.949267][T11071] ? preempt_schedule+0xe1/0xf0 [ 299.954096][T11071] preempt_schedule_common+0x84/0xd0 [ 299.959365][T11071] preempt_schedule+0xe1/0xf0 [ 299.964020][T11071] ? __pfx_preempt_schedule+0x10/0x10 [ 299.969371][T11071] preempt_schedule_thunk+0x1a/0x30 [ 299.974550][T11071] free_unref_page+0x751/0x1140 [ 299.979384][T11071] __slab_free+0x31b/0x3d0 [ 299.983779][T11071] ? __phys_addr+0xba/0x170 [ 299.988260][T11071] qlist_free_all+0x9a/0x140 [ 299.992826][T11071] kasan_quarantine_reduce+0x14f/0x170 [ 299.998263][T11071] __kasan_kmalloc_large+0x1a/0xa0 [ 300.003355][T11071] ___kmalloc_large_node+0x133/0x1d0 [ 300.008623][T11071] __kmalloc_large_node_noprof+0x1a/0x80 [ 300.014237][T11071] __kmalloc_node_noprof+0x2d2/0x440 [ 300.019502][T11071] ? __kvmalloc_node_noprof+0x72/0x190 [ 300.024950][T11071] __kvmalloc_node_noprof+0x72/0x190 [ 300.030216][T11071] netlink_alloc_large_skb+0x53/0x100 [ 300.035566][T11071] netlink_sendmsg+0x638/0xcb0 [ 300.040311][T11071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.045575][T11071] ? __pfx_aa_file_perm+0x10/0x10 [ 300.050579][T11071] ? aa_sock_msg_perm+0x91/0x160 [ 300.055496][T11071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.060758][T11071] __sock_sendmsg+0x221/0x270 [ 300.065415][T11071] sock_write_iter+0x2d7/0x3f0 [ 300.070165][T11071] ? __pfx_sock_write_iter+0x10/0x10 [ 300.075436][T11071] ? bpf_lsm_file_permission+0x9/0x10 [ 300.080785][T11071] ? security_file_permission+0x74/0x280 [ 300.086397][T11071] vfs_write+0xaeb/0xd30 [ 300.090622][T11071] ? __pfx_sock_write_iter+0x10/0x10 [ 300.095890][T11071] ? __pfx_vfs_write+0x10/0x10 [ 300.100651][T11071] ? fdget_pos+0x19a/0x320 [ 300.105048][T11071] ksys_write+0x183/0x2b0 [ 300.109357][T11071] ? __pfx_ksys_write+0x10/0x10 [ 300.114185][T11071] ? do_syscall_64+0x100/0x230 [ 300.118931][T11071] ? do_syscall_64+0xb6/0x230 [ 300.123593][T11071] do_syscall_64+0xf3/0x230 [ 300.128094][T11071] ? clear_bhb_loop+0x35/0x90 [ 300.132754][T11071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.138624][T11071] RIP: 0033:0x7ff01937e719 [ 300.143022][T11071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.162607][T11071] RSP: 002b:00007ff01a15d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.171003][T11071] RAX: ffffffffffffffda RBX: 00007ff019535f80 RCX: 00007ff01937e719 [ 300.178959][T11071] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 300.186915][T11071] RBP: 00007ff01a15d090 R08: 0000000000000000 R09: 0000000000000000 [ 300.194871][T11071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.202821][T11071] R13: 0000000000000000 R14: 00007ff019535f80 R15: 00007ffcb759b548 [ 300.210777][T11071] [ 300.225442][T10877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.233098][T10877] Cannot create hsr debugfs directory [ 300.248535][ T5156] Bluetooth: hci0: command tx timeout [ 300.254011][ T5156] Bluetooth: hci1: command tx timeout [ 300.476765][ T6204] bridge_slave_1: left allmulticast mode [ 300.501299][ T6204] bridge_slave_1: left promiscuous mode [ 300.507107][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.516802][ T6204] bridge_slave_0: left allmulticast mode [ 300.524342][ T6204] bridge_slave_0: left promiscuous mode [ 300.531122][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.680415][ T6204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.715944][ T6204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.749931][ T6204] bond0 (unregistering): Released all slaves [ 301.055781][ T6204] hsr_slave_0: left promiscuous mode [ 301.064993][ T6204] hsr_slave_1: left promiscuous mode [ 301.072371][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.082424][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.090450][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.099747][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.109656][ T6204] veth1_macvtap: left promiscuous mode [ 301.115264][ T6204] veth0_macvtap: left promiscuous mode [ 301.121721][ T6204] veth1_vlan: left promiscuous mode [ 301.127083][ T6204] veth0_vlan: left promiscuous mode [ 301.256711][ T6204] team0 (unregistering): Port device team_slave_1 removed [ 301.286624][ T6204] team0 (unregistering): Port device team_slave_0 removed [ 301.524152][T10877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.550405][T10877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.579519][T10877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.589186][T10877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.658203][T10877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.690254][T10877] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.711984][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.719117][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.729732][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.736845][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.785687][T10905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.802630][T10905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.812188][T10905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.824161][T10905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.915833][T10905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.940061][T10905] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.956604][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.963765][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.978010][T10877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.992051][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.999205][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.077283][T10877] veth0_vlan: entered promiscuous mode [ 302.090678][T10877] veth1_vlan: entered promiscuous mode [ 302.132933][T10877] veth0_macvtap: entered promiscuous mode [ 302.148915][T10877] veth1_macvtap: entered promiscuous mode [ 302.178885][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.193220][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.203107][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.217859][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.228661][T10877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.246398][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.258363][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.268752][T10877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.286404][T10877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.299072][T10877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.317402][T10877] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.331114][T10877] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.340673][T10877] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.350373][T10877] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.363326][T10905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.404697][T10877] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 302.431358][T10905] veth0_vlan: entered promiscuous mode [ 302.452156][T10905] veth1_vlan: entered promiscuous mode [ 302.460099][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.462044][T10877] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 302.475886][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.514637][T10905] veth0_macvtap: entered promiscuous mode [ 302.526557][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.527421][T10905] veth1_macvtap: entered promiscuous mode [ 302.543196][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.562840][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.579193][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.597107][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.608736][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.620098][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.630853][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.655381][T10905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.675896][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.690576][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.701674][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.713912][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.725119][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.737475][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.756492][T10905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.775596][T10905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.785360][T10905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.796791][T10905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.807229][T10905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.846379][T10905] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 302.872142][ T8080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.873467][T10905] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 302.881648][ T8080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.910385][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.918401][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.189178][ T6225] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.761573][ T6225] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.822940][ T6225] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.882306][ T6225] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.991194][ T6225] bridge_slave_1: left allmulticast mode [ 305.996876][ T6225] bridge_slave_1: left promiscuous mode [ 306.004771][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.015257][ T6225] bridge_slave_0: left allmulticast mode [ 306.022683][ T6225] bridge_slave_0: left promiscuous mode [ 306.030348][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.156714][ T6225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.169533][ T6225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.183740][ T6225] bond0 (unregistering): Released all slaves [ 306.439753][ T6225] hsr_slave_0: left promiscuous mode [ 306.448044][ T6225] hsr_slave_1: left promiscuous mode [ 306.467755][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.475211][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.486327][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.500298][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.510980][ T6225] veth1_macvtap: left promiscuous mode [ 306.516522][ T6225] veth0_macvtap: left promiscuous mode [ 306.522551][ T6225] veth1_vlan: left promiscuous mode [ 306.527854][ T6225] veth0_vlan: left promiscuous mode [ 306.648907][ T6225] team0 (unregistering): Port device team_slave_1 removed [ 306.662016][ T6225] team0 (unregistering): Port device team_slave_0 removed [ 307.040025][ T6225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.112001][ T6225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.197042][ T6225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.242884][ T6225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.360994][ T6225] bridge_slave_1: left allmulticast mode [ 307.366696][ T6225] bridge_slave_1: left promiscuous mode [ 307.382167][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.392624][ T6225] bridge_slave_0: left allmulticast mode [ 307.400095][ T6225] bridge_slave_0: left promiscuous mode [ 307.406476][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.527301][ T6225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.537524][ T6225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.549023][ T6225] bond0 (unregistering): Released all slaves [ 307.771056][ T6225] hsr_slave_0: left promiscuous mode [ 307.788710][ T6225] hsr_slave_1: left promiscuous mode [ 307.798701][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.806146][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.836390][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.845575][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.855395][ T6225] veth1_macvtap: left promiscuous mode [ 307.861850][ T6225] veth0_macvtap: left promiscuous mode [ 307.867428][ T6225] veth1_vlan: left promiscuous mode [ 307.873413][ T6225] veth0_vlan: left promiscuous mode [ 308.028477][ T6225] team0 (unregistering): Port device team_slave_1 removed [ 308.068723][ T6225] team0 (unregistering): Port device team_slave_0 removed