last executing test programs: 1m54.431081356s ago: executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff35, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc60070217010a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000540)=""/250, 0xfa, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0xfe, &(0x7f0000000300)=""/254, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0x1], 0x0, 0x10, 0xe79}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff004}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x43, &(0x7f0000000040), 0x3b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x206831, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) 1m53.925497336s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x757, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000080), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd={0x5}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @fwd={0x8}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x10, 0x2}, {0xe, 0x4}, {0xc, 0x1}, {0x5, 0x1}, {0xe, 0x2}, {0xe}, {0x4, 0x5}]}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x5, [{0x6, 0x4, 0x9}, {0x10, 0x3, 0x80000001}, {0xd, 0x2, 0x8}, {0x5, 0x5, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f00000006c0)=""/84, 0xf7, 0x54, 0x0, 0x3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x8, 0x0, &(0x7f0000000200)="67773e264c91d48b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x3, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @generic={0xba, 0x5, 0x8, 0x9, 0x2d99}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x3d, &(0x7f00000002c0)=""/61, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x1f}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r1, 0xffffffffffffffff, r2, r3, r4, r7], &(0x7f0000000480)=[{0x1, 0x6d6, 0xb, 0x8}, {0x5, 0x5, 0xc, 0x7}, {0x2, 0x3, 0x8, 0x2}, {0x5, 0x5, 0x8, 0x9}, {0x2, 0x4, 0xb, 0x5}, {0x2, 0x5, 0x400, 0x1}, {0x4, 0x4, 0xf, 0x3}, {0x0, 0x2, 0xd, 0x2}], 0x10, 0x5}, 0x90) 1m29.878051789s ago: executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff35, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc60070217010a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000540)=""/250, 0xfa, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0xfe, &(0x7f0000000300)=""/254, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0x1], 0x0, 0x10, 0xe79}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff004}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x43, &(0x7f0000000040), 0x3b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x206831, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) 1m29.389715027s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x757, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000080), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd={0x5}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @fwd={0x8}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x10, 0x2}, {0xe, 0x4}, {0xc, 0x1}, {0x5, 0x1}, {0xe, 0x2}, {0xe}, {0x4, 0x5}]}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x5, [{0x6, 0x4, 0x9}, {0x10, 0x3, 0x80000001}, {0xd, 0x2, 0x8}, {0x5, 0x5, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f00000006c0)=""/84, 0xf7, 0x54, 0x0, 0x3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x8, 0x0, &(0x7f0000000200)="67773e264c91d48b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x3, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @generic={0xba, 0x5, 0x8, 0x9, 0x2d99}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x3d, &(0x7f00000002c0)=""/61, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x1f}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r1, 0xffffffffffffffff, r2, r3, r4, r7], &(0x7f0000000480)=[{0x1, 0x6d6, 0xb, 0x8}, {0x5, 0x5, 0xc, 0x7}, {0x2, 0x3, 0x8, 0x2}, {0x5, 0x5, 0x8, 0x9}, {0x2, 0x4, 0xb, 0x5}, {0x2, 0x5, 0x400, 0x1}, {0x4, 0x4, 0xf, 0x3}, {0x0, 0x2, 0xd, 0x2}], 0x10, 0x5}, 0x90) 1m9.298239016s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x757, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000080), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd={0x5}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @fwd={0x8}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x10, 0x2}, {0xe, 0x4}, {0xc, 0x1}, {0x5, 0x1}, {0xe, 0x2}, {0xe}, {0x4, 0x5}]}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x5, [{0x6, 0x4, 0x9}, {0x10, 0x3, 0x80000001}, {0xd, 0x2, 0x8}, {0x5, 0x5, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f00000006c0)=""/84, 0xf7, 0x54, 0x0, 0x3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x8, 0x0, &(0x7f0000000200)="67773e264c91d48b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x3, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @generic={0xba, 0x5, 0x8, 0x9, 0x2d99}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x3d, &(0x7f00000002c0)=""/61, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x1f}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r1, 0xffffffffffffffff, r2, r3, r4, r7], &(0x7f0000000480)=[{0x1, 0x6d6, 0xb, 0x8}, {0x5, 0x5, 0xc, 0x7}, {0x2, 0x3, 0x8, 0x2}, {0x5, 0x5, 0x8, 0x9}, {0x2, 0x4, 0xb, 0x5}, {0x2, 0x5, 0x400, 0x1}, {0x4, 0x4, 0xf, 0x3}, {0x0, 0x2, 0xd, 0x2}], 0x10, 0x5}, 0x90) 1m8.782418342s ago: executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff35, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc60070217010a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000540)=""/250, 0xfa, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0xfe, &(0x7f0000000300)=""/254, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0x1], 0x0, 0x10, 0xe79}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff004}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x43, &(0x7f0000000040), 0x3b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x206831, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) 47.695423565s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x757, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000080), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd={0x5}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @fwd={0x8}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x10, 0x2}, {0xe, 0x4}, {0xc, 0x1}, {0x5, 0x1}, {0xe, 0x2}, {0xe}, {0x4, 0x5}]}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x5, [{0x6, 0x4, 0x9}, {0x10, 0x3, 0x80000001}, {0xd, 0x2, 0x8}, {0x5, 0x5, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f00000006c0)=""/84, 0xf7, 0x54, 0x0, 0x3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x8, 0x0, &(0x7f0000000200)="67773e264c91d48b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x3, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @generic={0xba, 0x5, 0x8, 0x9, 0x2d99}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x3d, &(0x7f00000002c0)=""/61, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x1f}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r1, 0xffffffffffffffff, r2, r3, r4, r7], &(0x7f0000000480)=[{0x1, 0x6d6, 0xb, 0x8}, {0x5, 0x5, 0xc, 0x7}, {0x2, 0x3, 0x8, 0x2}, {0x5, 0x5, 0x8, 0x9}, {0x2, 0x4, 0xb, 0x5}, {0x2, 0x5, 0x400, 0x1}, {0x4, 0x4, 0xf, 0x3}, {0x0, 0x2, 0xd, 0x2}], 0x10, 0x5}, 0x90) 44.537926047s ago: executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff35, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc60070217010a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000540)=""/250, 0xfa, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0xfe, &(0x7f0000000300)=""/254, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0x1], 0x0, 0x10, 0xe79}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff004}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x43, &(0x7f0000000040), 0x3b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x206831, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) 27.159982054s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x757, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000080), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd={0x5}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @fwd={0x8}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x10, 0x2}, {0xe, 0x4}, {0xc, 0x1}, {0x5, 0x1}, {0xe, 0x2}, {0xe}, {0x4, 0x5}]}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x5, [{0x6, 0x4, 0x9}, {0x10, 0x3, 0x80000001}, {0xd, 0x2, 0x8}, {0x5, 0x5, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f00000006c0)=""/84, 0xf7, 0x54, 0x0, 0x3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x8, 0x0, &(0x7f0000000200)="67773e264c91d48b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x3, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @generic={0xba, 0x5, 0x8, 0x9, 0x2d99}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x3d, &(0x7f00000002c0)=""/61, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x1f}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r1, 0xffffffffffffffff, r2, r3, r4, r7], &(0x7f0000000480)=[{0x1, 0x6d6, 0xb, 0x8}, {0x5, 0x5, 0xc, 0x7}, {0x2, 0x3, 0x8, 0x2}, {0x5, 0x5, 0x8, 0x9}, {0x2, 0x4, 0xb, 0x5}, {0x2, 0x5, 0x400, 0x1}, {0x4, 0x4, 0xf, 0x3}, {0x0, 0x2, 0xd, 0x2}], 0x10, 0x5}, 0x90) 26.239070606s ago: executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff35, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc60070217010a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000540)=""/250, 0xfa, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0xfe, &(0x7f0000000300)=""/254, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0x1], 0x0, 0x10, 0xe79}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff004}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x43, &(0x7f0000000040), 0x3b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x206831, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) 6.433316351s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x757, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f0000000080), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x3, [@fwd={0x5}, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x3}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @fwd={0x8}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x10, 0x2}, {0xe, 0x4}, {0xc, 0x1}, {0x5, 0x1}, {0xe, 0x2}, {0xe}, {0x4, 0x5}]}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x5, [{0x6, 0x4, 0x9}, {0x10, 0x3, 0x80000001}, {0xd, 0x2, 0x8}, {0x5, 0x5, 0x1}]}]}, {0x0, [0x30]}}, &(0x7f00000006c0)=""/84, 0xf7, 0x54, 0x0, 0x3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x8, 0x0, &(0x7f0000000200)="67773e264c91d48b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x3, 0x1, 0x3, 0x5, 0x6, 0xffffffffffffffff}, @generic={0xba, 0x5, 0x8, 0x9, 0x2d99}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x3d, &(0x7f00000002c0)=""/61, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x1f}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r1, 0xffffffffffffffff, r2, r3, r4, r7], &(0x7f0000000480)=[{0x1, 0x6d6, 0xb, 0x8}, {0x5, 0x5, 0xc, 0x7}, {0x2, 0x3, 0x8, 0x2}, {0x5, 0x5, 0x8, 0x9}, {0x2, 0x4, 0xb, 0x5}, {0x2, 0x5, 0x400, 0x1}, {0x4, 0x4, 0xf, 0x3}, {0x0, 0x2, 0xd, 0x2}], 0x10, 0x5}, 0x90) 5.770415994s ago: executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff35, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc60070217010a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000540)=""/250, 0xfa, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0xfe, &(0x7f0000000300)=""/254, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0x1], 0x0, 0x10, 0xe79}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffff004}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x43, &(0x7f0000000040), 0x3b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x206831, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) 4.2897063s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90b24fc600400057a0a080200126482c137153e37000c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.193858833s ago: executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.155845339s ago: executing program 1: socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 2.58623467s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000020000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x34) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'cpuacct'}]}, 0x9) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$TUNSETNOCSUM(r0, 0xc0189436, 0x1ffffffe) 2.452639333s ago: executing program 1: perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_evict_inode\x00', r6}, 0x10) unlink(&(0x7f0000000000)='./cgroup\x00') close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='memory.current\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000200)=r9) write$cgroup_devices(r8, 0x0, 0xffdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000001600000001000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x78) 2.416567168s ago: executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 2.31584554s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.225329969s ago: executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8) r1 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={0x0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r3}, &(0x7f0000000d80), &(0x7f0000000dc0)=r4}, 0x20) 1.984612434s ago: executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00)}], 0x4}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f00000002c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000540)="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", 0xfc}, {0x0}, {&(0x7f0000000040)="e91a467db7ffe22d18a7e6951a5df618cc4e335eaae6be2d1005a6835ae18e934214719ea98d3a3294a250fca1a36860a196d2c28383", 0x36}, {&(0x7f0000000680)}, {&(0x7f0000000780)="9d0dba9f1ea67eb1035ba1bf2cea692f893f7bc1a10d5b38bec3840d6d773844c77e123b6e556609f628b36c02bf03", 0x2f}, {&(0x7f0000000a40)="5b968aaae0ff5d2e1374c53d52a400466c6c810e7ee6547ad76d048c26711b8108208495eec71daf1a96eac4f83b19f63b0882b2a393c0a07d3febfa6d1dff9e3e07829bd75ad9c60656b076cce2b4b3e0b895dd573ef6f3445019f91051751295ccf23ce52af87738bb8a2f6fa3bf6081c41388c5d1810a7a015f55c99a4cdfdd", 0x81}, {&(0x7f0000000900)}], 0x7, &(0x7f0000001e80)=ANY=[], 0x20f8}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r2}, &(0x7f0000000d80), &(0x7f0000000dc0)}, 0x20) 1.930808696s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"/2177], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 1.894783571s ago: executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) socketpair$unix(0x1, 0x0, 0x0, 0x0) 1.802431909s ago: executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000300)) 1.744893117s ago: executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 1.604065727s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) sendmsg$inet(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)="b9", 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 1.525036698s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 78.618011ms ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 53.126648ms ago: executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0xe72, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3fad77b7b3f7b986", 0x0, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @dev}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000b00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2b6e65745f7072696f202b6d656d6f7279202d6e65745f7072696f202b72646d6120336dd55c53d63d12d41fb242a3842100c261f7bf81c8ddfc4f72ce8ff536d9765f67284e51bf7882c6524e"], 0x22) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) kernel console output (not intermixed with test programs): _prepare+0x43d/0x780 [ 177.072738][ T8408] ? __dev_queue_xmit+0x2d2/0x3d30 [ 177.077853][ T8408] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.084183][ T8408] ? __local_bh_enable_ip+0x168/0x200 [ 177.089552][ T8408] ? lockdep_hardirqs_on+0x99/0x150 [ 177.094770][ T8408] ? __local_bh_enable_ip+0x168/0x200 [ 177.100147][ T8408] ? dev_hard_start_xmit+0x773/0x7e0 [ 177.105441][ T8408] ? __dev_queue_xmit+0x2d2/0x3d30 [ 177.110552][ T8408] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 177.116272][ T8408] ? __dev_queue_xmit+0x2d2/0x3d30 [ 177.121382][ T8408] ? __dev_queue_xmit+0x16c9/0x3d30 [ 177.126585][ T8408] ? perf_trace_lock+0x136/0x490 [ 177.131526][ T8408] ? __pfx_perf_trace_lock+0x10/0x10 [ 177.136802][ T8408] ? ref_tracker_free+0x643/0x7e0 [ 177.141823][ T8408] netlink_rcv_skb+0x1e3/0x430 [ 177.146584][ T8408] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.152044][ T8408] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.157340][ T8408] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.162537][ T8408] netlink_unicast+0x7ea/0x980 [ 177.167302][ T8408] ? __pfx_netlink_unicast+0x10/0x10 [ 177.172578][ T8408] ? __virt_addr_valid+0x183/0x520 [ 177.177689][ T8408] ? __check_object_size+0x49c/0x900 [ 177.182975][ T8408] ? bpf_lsm_netlink_send+0x9/0x10 [ 177.188095][ T8408] netlink_sendmsg+0x8db/0xcb0 [ 177.192875][ T8408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.198161][ T8408] ? __import_iovec+0x536/0x820 [ 177.203017][ T8408] ? aa_sock_msg_perm+0x91/0x160 [ 177.207981][ T8408] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 177.213272][ T8408] ? security_socket_sendmsg+0x87/0xb0 [ 177.218730][ T8408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.224010][ T8408] __sock_sendmsg+0x221/0x270 [ 177.228688][ T8408] ____sys_sendmsg+0x525/0x7d0 [ 177.233463][ T8408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.238754][ T8408] __sys_sendmsg+0x2b0/0x3a0 [ 177.243340][ T8408] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.248441][ T8408] ? vfs_write+0x7c4/0xc90 [ 177.252890][ T8408] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.259217][ T8408] ? do_syscall_64+0x100/0x230 [ 177.263980][ T8408] ? do_syscall_64+0xb6/0x230 [ 177.268650][ T8408] do_syscall_64+0xf3/0x230 [ 177.273146][ T8408] ? clear_bhb_loop+0x35/0x90 [ 177.277823][ T8408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.283994][ T8408] RIP: 0033:0x7fac4e67cf29 [ 177.288410][ T8408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 177.308016][ T8408] RSP: 002b:00007fac4f4730c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.316432][ T8408] RAX: ffffffffffffffda RBX: 00007fac4e7b3f80 RCX: 00007fac4e67cf29 [ 177.324396][ T8408] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 177.332376][ T8408] RBP: 00007fac4f473120 R08: 0000000000000000 R09: 0000000000000000 [ 177.340352][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.348356][ T8408] R13: 000000000000000b R14: 00007fac4e7b3f80 R15: 00007ffe4a7f9f58 [ 177.356348][ T8408] [ 177.566871][ T8422] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.698151][ T35] hsr_slave_0: left promiscuous mode [ 177.711207][ T35] hsr_slave_1: left promiscuous mode [ 177.725613][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.749764][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.770901][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.781711][ T8435] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 177.790163][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.843075][ T35] veth1_macvtap: left promiscuous mode [ 177.858314][ T35] veth0_macvtap: left promiscuous mode [ 177.864037][ T35] veth1_vlan: left promiscuous mode [ 177.879898][ T35] veth0_vlan: left promiscuous mode [ 178.072662][ T8446] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 178.101846][ T8446] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.134435][ T8446] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 178.537591][ T35] team0 (unregistering): Port device team_slave_1 removed [ 178.583538][ T35] team0 (unregistering): Port device team_slave_0 removed [ 179.018610][ T8435] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 179.035819][ T8442] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 179.063956][ T8442] veth0_macvtap: left promiscuous mode [ 179.553888][ T8473] tun0: tun_chr_ioctl cmd 1074025677 [ 179.570338][ T8473] tun0: linktype set to 776 [ 179.581739][ T8472] tun0: tun_chr_ioctl cmd 1074025673 [ 179.826316][ T8155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.860555][ T8486] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 179.868726][ T8155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.927675][ T8155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.959502][ T8155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.001638][ T8492] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.062878][ T35] veth0_to_bond: left allmulticast mode [ 180.072534][ T35] veth0_to_bond: left promiscuous mode [ 180.094519][ T66] tipc: Subscription rejected, illegal request [ 180.111242][ T35] bridge0: port 3(veth0_to_bond) entered disabled state [ 180.134020][ T35] bridge_slave_1: left allmulticast mode [ 180.158995][ T35] bridge_slave_1: left promiscuous mode [ 180.164786][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.184631][ T35] bridge_slave_0: left allmulticast mode [ 180.200331][ T35] bridge_slave_0: left promiscuous mode [ 180.226296][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.613160][ T8521] Dead loop on virtual device ip6_vti0, fix it urgently! [ 181.166221][ T4487] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.194768][ T4487] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.202380][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.202900][ T4487] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.220515][ T4487] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.227976][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.229125][ T4487] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 181.237983][ T4487] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.259564][ T35] bond0 (unregistering): Released all slaves [ 181.353454][ T5107] Bluetooth: hci2: command 0x0406 tx timeout [ 181.364662][ T8536] validate_nla: 2 callbacks suppressed [ 181.364676][ T8536] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 181.394589][ T8536] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 181.447312][ T8536] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 181.744974][ T8548] FAULT_INJECTION: forcing a failure. [ 181.744974][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 181.767639][ T8548] CPU: 1 PID: 8548 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00242-g36534d3c5453 #0 [ 181.778104][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 181.788176][ T8548] Call Trace: [ 181.791475][ T8548] [ 181.794418][ T8548] dump_stack_lvl+0x241/0x360 [ 181.799117][ T8548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.804330][ T8548] ? __pfx__printk+0x10/0x10 [ 181.808936][ T8548] ? __pfx___might_resched+0x10/0x10 [ 181.814240][ T8548] ? __asan_memset+0x23/0x50 [ 181.818853][ T8548] should_fail_ex+0x3b0/0x4e0 [ 181.823559][ T8548] ? security_inode_alloc+0x28/0x120 [ 181.828874][ T8548] should_failslab+0x9/0x20 [ 181.833402][ T8548] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 181.838804][ T8548] security_inode_alloc+0x28/0x120 [ 181.843941][ T8548] inode_init_always+0x947/0xc70 [ 181.848904][ T8548] ? __pfx_proc_alloc_inode+0x10/0x10 [ 181.854289][ T8548] new_inode_pseudo+0x9e/0x1e0 [ 181.859085][ T8548] new_inode+0x22/0x1d0 [ 181.863272][ T8548] proc_pid_make_inode+0x1f/0x130 [ 181.868317][ T8548] proc_pident_instantiate+0x76/0x2b0 [ 181.873720][ T8548] proc_pident_lookup+0x1c7/0x2a0 [ 181.878772][ T8548] __lookup_slow+0x28c/0x3f0 [ 181.883379][ T8548] ? __pfx___lookup_slow+0x10/0x10 [ 181.888524][ T8548] lookup_slow+0x53/0x70 [ 181.892781][ T8548] link_path_walk+0x9ea/0xea0 [ 181.897497][ T8548] ? __pfx_link_path_walk+0x10/0x10 [ 181.902723][ T8548] ? init_file+0x15c/0x200 [ 181.907160][ T8548] path_openat+0x24a/0x3280 [ 181.911705][ T8548] ? mark_lock+0x9a/0x350 [ 181.916062][ T8548] ? __pfx_path_openat+0x10/0x10 [ 181.921033][ T8548] do_filp_open+0x235/0x490 [ 181.925558][ T8548] ? __pfx_do_filp_open+0x10/0x10 [ 181.930607][ T8548] ? __pfx_kfree_link+0x10/0x10 [ 181.935482][ T8548] ? _raw_spin_unlock+0x28/0x50 [ 181.940344][ T8548] ? alloc_fd+0x59d/0x640 [ 181.944705][ T8548] do_sys_openat2+0x13e/0x1d0 [ 181.949403][ T8548] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.954616][ T8548] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 181.960607][ T8548] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.966949][ T8548] __x64_sys_openat+0x247/0x2a0 [ 181.971817][ T8548] ? __pfx___x64_sys_openat+0x10/0x10 [ 181.977208][ T8548] ? rcu_is_watching+0x15/0xb0 [ 181.981986][ T8548] ? trace_sys_enter+0x1f/0xd0 [ 181.986771][ T8548] do_syscall_64+0xf3/0x230 [ 181.991290][ T8548] ? clear_bhb_loop+0x35/0x90 [ 181.995980][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.001882][ T8548] RIP: 0033:0x7f81c3e7bb20 [ 182.006308][ T8548] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 09 82 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 5c 82 02 00 8b 44 [ 182.025929][ T8548] RSP: 002b:00007f81c4cbefa0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 182.034362][ T8548] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f81c3e7bb20 [ 182.042346][ T8548] RDX: 0000000000000002 RSI: 00007f81c4cbf030 RDI: 00000000ffffff9c [ 182.050326][ T8548] RBP: 00007f81c4cbf030 R08: 0000000000000000 R09: 0000000000000000 [ 182.058313][ T8548] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 182.066293][ T8548] R13: 000000000000000b R14: 00007f81c3fb3f80 R15: 00007ffd3ed4fa88 [ 182.074295][ T8548] [ 182.206948][ T35] hsr_slave_0: left promiscuous mode [ 182.216223][ T35] hsr_slave_1: left promiscuous mode [ 182.246943][ T35] veth1_macvtap: left promiscuous mode [ 182.255710][ T35] veth0_macvtap: left promiscuous mode [ 182.265223][ T35] veth1_vlan: left promiscuous mode [ 182.273425][ T35] veth0_vlan: left promiscuous mode [ 182.846681][ T35] team0 (unregistering): Port device team_slave_1 removed [ 182.892548][ T35] team0 (unregistering): Port device team_slave_0 removed [ 183.341271][ T5122] Bluetooth: hci1: command tx timeout [ 183.395163][ T8180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.408840][ T8180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.515088][ T8180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.537585][ T8180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.676645][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.677194][ T8574] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 183.699261][ T8574] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.800010][ T8583] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.844016][ T8155] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.934717][ T8533] chnl_net:caif_netlink_parms(): no params data found [ 183.990579][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.997801][ T5192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.081973][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.089194][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.230781][ T8593] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.384139][ T8533] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.404834][ T8533] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.420337][ T8533] bridge_slave_0: entered allmulticast mode [ 184.437321][ T8533] bridge_slave_0: entered promiscuous mode [ 184.463233][ T8533] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.485184][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.496646][ T8533] bridge_slave_1: entered allmulticast mode [ 184.511640][ T8533] bridge_slave_1: entered promiscuous mode [ 184.623824][ T8180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.674311][ T8533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.700823][ T8533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.715793][ T8621] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 184.722508][ T8621] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 184.890203][ T8533] team0: Port device team_slave_0 added [ 184.916939][ T8533] team0: Port device team_slave_1 added [ 185.043224][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.074237][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.117673][ T8533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.131510][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.138881][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.167851][ T8533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.205103][ T8180] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.289483][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.296659][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.367751][ T8533] hsr_slave_0: entered promiscuous mode [ 185.378785][ T8533] hsr_slave_1: entered promiscuous mode [ 185.407182][ T8533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.418625][ T5122] Bluetooth: hci1: command tx timeout [ 185.429294][ T8533] Cannot create hsr debugfs directory [ 185.444557][ T8155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.481030][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.488258][ T5192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.807880][ T8658] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 185.835843][ T8658] syzkaller0: entered promiscuous mode [ 185.842501][ T8658] syzkaller0: entered allmulticast mode [ 186.010501][ T8654] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 186.047202][ T8654] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 186.067860][ T8654] netlink: 128512 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.700727][ T8708] netlink: 7295 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.722323][ T8708] netlink: 7295 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.753762][ T8708] netlink: 7295 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.509735][ T5122] Bluetooth: hci1: command tx timeout [ 188.010624][ T8533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.200390][ T8533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.245410][ T8180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.284365][ T8155] veth0_vlan: entered promiscuous mode [ 188.348833][ T8533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.403380][ T8155] veth1_vlan: entered promiscuous mode [ 188.532839][ T8533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.640630][ T8180] veth0_vlan: entered promiscuous mode [ 188.675050][ T8180] veth1_vlan: entered promiscuous mode [ 188.722403][ T8155] veth0_macvtap: entered promiscuous mode [ 188.740472][ T8155] veth1_macvtap: entered promiscuous mode [ 188.880334][ T8533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.915060][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.928373][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.944639][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.969219][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.979688][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.990501][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.003908][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.046198][ T8533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.066975][ T8533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.094007][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.106857][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.122343][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.136493][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.146801][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.157407][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.170249][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.177803][ T8533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.225956][ T8180] veth0_macvtap: entered promiscuous mode [ 189.251798][ T8155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.275099][ T8155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.285563][ T8155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.295318][ T8155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.324010][ T8180] veth1_macvtap: entered promiscuous mode [ 189.553419][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.577601][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.589669][ T5122] Bluetooth: hci1: command tx timeout [ 189.595297][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.615045][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.625316][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.639011][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.665888][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.689594][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.740603][ T8180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.803241][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.823990][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.839412][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.856340][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.867962][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.886066][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.918440][ T8180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.938728][ T8180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.959758][ T8180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.971890][ T8180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.988101][ T8180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.023431][ T8180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.036245][ T8180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.100320][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.121777][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.236713][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.248906][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.494032][ T8533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.607340][ T8533] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.899567][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.906777][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.908562][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.922213][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.962527][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.969767][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.040180][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.059922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.321136][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.495091][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.700610][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.782110][ T8533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.963219][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.177653][ T8533] veth0_vlan: entered promiscuous mode [ 192.226627][ T8533] veth1_vlan: entered promiscuous mode [ 192.359438][ T35] bridge_slave_1: left allmulticast mode [ 192.369112][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.382523][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.385665][ T8853] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.408188][ T35] bridge_slave_1: left promiscuous mode [ 192.408308][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.414000][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.440065][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.448078][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 192.455583][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.467121][ T35] bridge_slave_0: left allmulticast mode [ 192.489693][ T35] bridge_slave_0: left promiscuous mode [ 192.505102][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.582798][ T5107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.592588][ T5107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.601499][ T5107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.611364][ T5107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.625641][ T5107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 192.636161][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.016449][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.035183][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.046721][ T35] bond0 (unregistering): Released all slaves [ 193.078506][ T8861] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.272030][ T8533] veth0_macvtap: entered promiscuous mode [ 193.343389][ T8533] veth1_macvtap: entered promiscuous mode [ 193.545826][ T35] hsr_slave_0: left promiscuous mode [ 193.566252][ T35] hsr_slave_1: left promiscuous mode [ 193.592028][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.607590][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.636555][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.652090][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.731333][ T35] veth1_macvtap: left promiscuous mode [ 193.737070][ T35] veth0_macvtap: left promiscuous mode [ 193.747284][ T35] veth1_vlan: left promiscuous mode [ 193.757486][ T35] veth0_vlan: left promiscuous mode [ 194.540321][ T5122] Bluetooth: hci0: command tx timeout [ 194.628992][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.635351][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.685017][ T35] team0 (unregistering): Port device team_slave_1 removed [ 194.703709][ T5122] Bluetooth: hci4: command tx timeout [ 194.736190][ T35] team0 (unregistering): Port device team_slave_0 removed [ 195.279515][ T8892] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 195.410464][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.435048][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.446357][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.460284][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.470305][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.480908][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.491052][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.502296][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.516255][ T8533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.536301][ T8903] veth1_macvtap: left promiscuous mode [ 195.553160][ T8903] macsec0: entered allmulticast mode [ 195.609855][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.632325][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.655113][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.691568][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.755175][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.768659][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.778640][ T8533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.798341][ T8533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.836896][ T8533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.897936][ T8533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.911738][ T8533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.922232][ T8533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.931878][ T8533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.141841][ T8934] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 196.287679][ T8856] chnl_net:caif_netlink_parms(): no params data found [ 196.437569][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 196.619420][ T5122] Bluetooth: hci0: command tx timeout [ 196.626929][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.638758][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.645982][ T8856] bridge_slave_0: entered allmulticast mode [ 196.654970][ T8856] bridge_slave_0: entered promiscuous mode [ 196.693316][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.713305][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.732720][ T8856] bridge_slave_1: entered allmulticast mode [ 196.762781][ T8856] bridge_slave_1: entered promiscuous mode [ 196.778123][ T5122] Bluetooth: hci4: command tx timeout [ 196.862655][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.888742][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.992502][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.022797][ T8980] netlink: 15999 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.040943][ T29] audit: type=1800 audit(1718993760.750:16): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 197.067655][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.083113][ T29] audit: type=1804 audit(1718993760.760:17): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2292465074/syzkaller.h9HDyQ/166/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 197.097937][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.129485][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.136714][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.153349][ T8849] bridge_slave_0: entered allmulticast mode [ 197.162923][ T8849] bridge_slave_0: entered promiscuous mode [ 197.172921][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.181542][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.189256][ T8849] bridge_slave_1: entered allmulticast mode [ 197.196523][ T8849] bridge_slave_1: entered promiscuous mode [ 197.234243][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.388658][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.396556][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.466644][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.511283][ T8856] team0: Port device team_slave_0 added [ 197.517626][ T8988] »»»»»»: renamed from bond0 (while UP) [ 197.569960][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.611228][ T8856] team0: Port device team_slave_1 added [ 197.657564][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.683347][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.775786][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.792800][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.829514][ T8856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.877611][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.903265][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.914508][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.957669][ T8856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.010396][ T8849] team0: Port device team_slave_0 added [ 198.028863][ T9008] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.133715][ T8849] team0: Port device team_slave_1 added [ 198.227314][ T8856] hsr_slave_0: entered promiscuous mode [ 198.242845][ T8856] hsr_slave_1: entered promiscuous mode [ 198.323267][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.348924][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.425521][ T8849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.481157][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.490593][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.583261][ T8849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.699593][ T5122] Bluetooth: hci0: command tx timeout [ 198.840610][ T9027] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 198.860223][ T9027] batman_adv: batadv0: Interface deactivated: team0 [ 198.868715][ T5122] Bluetooth: hci4: command tx timeout [ 198.935420][ T35] bridge_slave_1: left allmulticast mode [ 198.943675][ T35] bridge_slave_1: left promiscuous mode [ 198.964014][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.995308][ T35] bridge_slave_0: left allmulticast mode [ 199.002117][ T35] bridge_slave_0: left promiscuous mode [ 199.014331][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.627956][ T9050] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 200.291546][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.305513][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.317806][ T35] bond0 (unregistering): Released all slaves [ 200.349304][ T8849] hsr_slave_0: entered promiscuous mode [ 200.363974][ T8849] hsr_slave_1: entered promiscuous mode [ 200.385746][ T8849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.399007][ T8849] Cannot create hsr debugfs directory [ 200.427781][ T9050] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 200.453956][ T9053] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 200.778599][ T5122] Bluetooth: hci0: command tx timeout [ 200.856858][ T9080] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 200.865494][ T9079] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 200.879010][ T9080] netlink: 14207 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.893875][ T9079] netlink: 14207 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.925791][ T35] hsr_slave_0: left promiscuous mode [ 200.940714][ T5122] Bluetooth: hci4: command tx timeout [ 200.951503][ T35] hsr_slave_1: left promiscuous mode [ 200.965990][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.974594][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.991214][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.012572][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.065446][ T35] veth1_macvtap: left promiscuous mode [ 201.075701][ T35] veth0_macvtap: left promiscuous mode [ 201.083984][ T35] veth1_vlan: left promiscuous mode [ 201.089600][ T35] veth0_vlan: left promiscuous mode [ 201.657538][ T35] team0 (unregistering): Port device team_slave_1 removed [ 201.696809][ T35] team0 (unregistering): Port device team_slave_0 removed [ 202.082863][ T9088] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 202.106155][ T9088] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.124392][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.449157][ T9115] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 202.482240][ T9115] netlink: 'syz-executor.3': attribute type 20 has an invalid length. [ 202.514617][ T9120] syz-executor.3[9120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.514968][ T9120] syz-executor.3[9120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.076660][ T9131] team0: Port device team_slave_0 removed [ 203.099771][ T9131] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 204.475515][ T8856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.539472][ T8856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.571619][ T8856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.600608][ T8856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.727327][ T8849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.769434][ T8849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.813945][ T8849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.923399][ T8849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.387878][ T8856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.477445][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.523663][ T9271] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.536127][ T9271] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.567669][ T8856] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.603857][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.675384][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.682595][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.716974][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.724205][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.741034][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.748264][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.769400][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.776616][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.791701][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.909414][ T8856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.085875][ T8856] veth0_vlan: entered promiscuous mode [ 207.131766][ T8856] veth1_vlan: entered promiscuous mode [ 207.239775][ T8856] veth0_macvtap: entered promiscuous mode [ 207.292595][ T8856] veth1_macvtap: entered promiscuous mode [ 207.354500][ T8856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.382557][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.385792][ T8856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.421577][ T8856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.437138][ T8856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.450081][ T8856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.461190][ T8856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.471552][ T8856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.485575][ T8856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.501570][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.577234][ T8856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.598993][ T8856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.616472][ T8856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.627324][ T8856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.638824][ T8856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.655862][ T8856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.681276][ T8856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.694842][ T8856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.723284][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.762930][ T9358] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 207.775391][ T9362] netlink: 90032 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.817584][ T9362] openvswitch: netlink: IP tunnel dst address not specified [ 207.859603][ T8856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.907603][ T8856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.920864][ T9362] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 207.936498][ T8856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.943744][ T9362] netlink: 13951 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.968207][ T8856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.209037][ T9359] syzkaller0: entered promiscuous mode [ 208.237796][ T9359] syzkaller0: entered allmulticast mode [ 208.260496][ T8849] veth0_vlan: entered promiscuous mode [ 210.474515][ T8849] veth1_vlan: entered promiscuous mode [ 210.568444][ T9169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.590962][ T9169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.654716][ T9456] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.665071][ T9456] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 210.727243][ T8849] veth0_macvtap: entered promiscuous mode [ 210.747383][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.775979][ T8849] veth1_macvtap: entered promiscuous mode [ 210.795177][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.832814][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.855172][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.879408][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.901608][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.926312][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.948695][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.966892][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.978849][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.990431][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.001407][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.014850][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.041618][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.065676][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.087942][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.148126][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.176660][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.190155][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.200912][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.215217][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.235825][ T8849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.257561][ T8849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.295463][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.341441][ T8849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.352490][ T8849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.363317][ T8849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.373131][ T8849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.557585][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.583261][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.636314][ T9491] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.676945][ T9169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.686040][ T9169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.880197][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.943107][ T9501] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 212.107515][ T9503] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.123828][ T9503] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 212.492276][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.725807][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.901611][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.912033][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.919471][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.930280][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.945177][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.955042][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.963003][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.554940][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.563393][ T12] bridge_slave_1: left allmulticast mode [ 213.569717][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.579699][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.591425][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.604098][ T12] bridge_slave_1: left promiscuous mode [ 213.610500][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.618242][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.636479][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.662470][ T12] bridge_slave_0: left allmulticast mode [ 213.695644][ T12] bridge_slave_0: left promiscuous mode [ 213.716229][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.520077][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.532233][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.544293][ T12] bond0 (unregistering): Released all slaves [ 214.562272][ T9548] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.572105][ T9548] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 214.920389][ T9580] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 214.985070][ T9575] netlink: 'syz-executor.1': attribute type 46 has an invalid length. [ 215.018617][ T5107] Bluetooth: hci0: command tx timeout [ 215.024855][ T9575] netlink: 212868 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.049971][ T9580] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 215.091103][ T9574] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 215.215915][ T9529] chnl_net:caif_netlink_parms(): no params data found [ 215.336428][ T12] hsr_slave_0: left promiscuous mode [ 215.352857][ T12] hsr_slave_1: left promiscuous mode [ 215.367428][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.395663][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.439359][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.455763][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.495604][ T12] veth1_macvtap: left promiscuous mode [ 215.513958][ T12] veth0_macvtap: left promiscuous mode [ 215.523185][ T12] veth1_vlan: left promiscuous mode [ 215.534156][ T12] veth0_vlan: left promiscuous mode [ 215.658204][ T5107] Bluetooth: hci4: command tx timeout [ 216.020814][ T12] team0 (unregistering): Port device team_slave_1 removed [ 216.056817][ T12] team0 (unregistering): Port device team_slave_0 removed [ 216.461458][ T9608] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.690376][ T9622] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.729064][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.736477][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.744296][ T9529] bridge_slave_0: entered allmulticast mode [ 216.752265][ T9529] bridge_slave_0: entered promiscuous mode [ 216.762589][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.770149][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.788246][ T9529] bridge_slave_1: entered allmulticast mode [ 216.795523][ T9529] bridge_slave_1: entered promiscuous mode [ 216.923504][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.989314][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.000212][ T9637] netlink: 15743 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.098590][ T5107] Bluetooth: hci0: command tx timeout [ 217.154353][ T9549] chnl_net:caif_netlink_parms(): no params data found [ 217.281540][ T9529] team0: Port device team_slave_0 added [ 217.407613][ T9529] team0: Port device team_slave_1 added [ 217.761820][ T5107] Bluetooth: hci4: command tx timeout [ 217.958793][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.979330][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.014719][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.026553][ T9549] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.036947][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.044937][ T9549] bridge_slave_0: entered allmulticast mode [ 218.069924][ T9549] bridge_slave_0: entered promiscuous mode [ 218.101168][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.120931][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.186481][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.210905][ T9549] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.220478][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.234856][ T9549] bridge_slave_1: entered allmulticast mode [ 218.246805][ T9549] bridge_slave_1: entered promiscuous mode [ 218.351085][ T66] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.649419][ T66] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.855927][ T9549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.903632][ T9549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.975859][ T66] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.041065][ T9529] hsr_slave_0: entered promiscuous mode [ 219.048743][ T9529] hsr_slave_1: entered promiscuous mode [ 219.179660][ T5107] Bluetooth: hci0: command tx timeout [ 219.195828][ T66] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.346155][ T9549] team0: Port device team_slave_0 added [ 219.480891][ T9549] team0: Port device team_slave_1 added [ 219.677280][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.689072][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.758146][ T9549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.785290][ T9549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.808096][ T9549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.834161][ T5107] Bluetooth: hci4: command tx timeout [ 219.897091][ T9549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.141189][ T9549] hsr_slave_0: entered promiscuous mode [ 220.153475][ T9549] hsr_slave_1: entered promiscuous mode [ 220.180579][ T9549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.206552][ T9549] Cannot create hsr debugfs directory [ 220.370261][ T66] bridge_slave_1: left allmulticast mode [ 220.375960][ T66] bridge_slave_1: left promiscuous mode [ 220.388426][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.422358][ T66] bridge_slave_0: left allmulticast mode [ 220.438126][ T66] bridge_slave_0: left promiscuous mode [ 220.443966][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.268819][ T5107] Bluetooth: hci0: command tx timeout [ 221.749766][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.757851][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.767347][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.776962][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.785814][ T5122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.793399][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.793799][ T5122] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.810407][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.831145][ T66] bond0 (unregistering): Released all slaves [ 221.884058][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.898143][ T5122] Bluetooth: hci4: command tx timeout [ 222.318737][ T9768] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.333055][ T9768] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 222.613348][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.814587][ T9782] IPv6: Can't replace route, no match found [ 222.875500][ T66] hsr_slave_0: left promiscuous mode [ 222.914222][ T66] hsr_slave_1: left promiscuous mode [ 222.933132][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.968352][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.986919][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.996849][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.056746][ T66] veth1_macvtap: left promiscuous mode [ 223.074591][ T66] veth0_macvtap: left promiscuous mode [ 223.087735][ T66] veth1_vlan: left promiscuous mode [ 223.093875][ T66] veth0_vlan: left promiscuous mode [ 223.590959][ T9820] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 223.603738][ T9820] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.844796][ T66] team0 (unregistering): Port device team_slave_1 removed [ 223.902475][ T5122] Bluetooth: hci3: command tx timeout [ 223.912086][ T66] team0 (unregistering): Port device team_slave_0 removed [ 224.373303][ T9822] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.538464][ T29] audit: type=1804 audit(1718993788.250:18): pid=9835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1232346245/syzkaller.y4Rwft/72/memory.events" dev="sda1" ino=1943 res=1 errno=0 [ 224.593806][ T29] audit: type=1800 audit(1718993788.250:19): pid=9835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1943 res=0 errno=0 [ 224.689763][ T29] audit: type=1804 audit(1718993788.400:20): pid=9835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1232346245/syzkaller.y4Rwft/72/memory.events" dev="sda1" ino=1943 res=1 errno=0 [ 224.740705][ T9760] chnl_net:caif_netlink_parms(): no params data found [ 224.795052][ T29] audit: type=1800 audit(1718993788.400:21): pid=9835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1943 res=0 errno=0 [ 224.941127][ T9529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.961202][ T9529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.086393][ T9529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.224219][ T9529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.275218][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.293919][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.309203][ T9760] bridge_slave_0: entered allmulticast mode [ 225.317673][ T9760] bridge_slave_0: entered promiscuous mode [ 225.335901][ T9760] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.357734][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.366460][ T9760] bridge_slave_1: entered allmulticast mode [ 225.376034][ T9760] bridge_slave_1: entered promiscuous mode [ 225.536615][ T9760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.552672][ T9760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.711772][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.744379][ T9760] team0: Port device team_slave_0 added [ 225.824882][ T9760] team0: Port device team_slave_1 added [ 225.858963][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.913520][ T9549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.973741][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.985263][ T5122] Bluetooth: hci3: command tx timeout [ 226.000141][ T9549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.013927][ T9549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.055946][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.067071][ T9872] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.067813][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.105166][ T9760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.117679][ T9870] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 226.144840][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.161353][ T9870] bond0: (slave team0): Enslaving as an active interface with an up link [ 226.185134][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.201234][ T9549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.240246][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.247233][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.321122][ T9760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.426243][ T9529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.487058][ T9529] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.665040][ T9760] hsr_slave_0: entered promiscuous mode [ 226.680154][ T9760] hsr_slave_1: entered promiscuous mode [ 226.694983][ T9760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.703399][ T9760] Cannot create hsr debugfs directory [ 226.730756][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.737916][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.751582][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.758786][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.833659][ T9891] pim6reg1: entered promiscuous mode [ 226.845824][ T9891] pim6reg1: entered allmulticast mode [ 227.076353][ T9901] syzkaller0: entered allmulticast mode [ 227.116221][ T66] veth0_to_bond: left allmulticast mode [ 227.140697][ T66] veth0_to_bond: left promiscuous mode [ 227.146559][ T66] bridge0: port 3(veth0_to_bond) entered disabled state [ 227.172175][ T66] bridge_slave_1: left allmulticast mode [ 227.177864][ T66] bridge_slave_1: left promiscuous mode [ 227.185467][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.207469][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.597043][ T9922] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 227.636587][ T9922] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 227.655796][ T9922] netlink: 126008 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.752854][ T66] team0: Port device bridge0 removed [ 228.037673][ T66] »»»»»» (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.059442][ T5122] Bluetooth: hci3: command tx timeout [ 228.072403][ T66] »»»»»» (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.093849][ T66] »»»»»» (unregistering): Released all slaves [ 228.563156][ T9529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.684765][ T9549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.762626][ T9549] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.793148][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.800601][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.880028][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.887222][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.090764][ T9529] veth0_vlan: entered promiscuous mode [ 229.186603][ T9529] veth1_vlan: entered promiscuous mode [ 229.281531][ T9760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.345466][ T9760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.396814][ T9760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.436499][ T9760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.636514][ T9998] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 229.659047][ T9998] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 229.670944][ T9998] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.780502][ T9529] veth0_macvtap: entered promiscuous mode [ 229.837778][ T9529] veth1_macvtap: entered promiscuous mode [ 229.896166][ T9549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.105645][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.137916][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.159815][ T5122] Bluetooth: hci3: command tx timeout [ 230.190752][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.211522][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.228468][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.239604][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.252327][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.275417][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.322288][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.511104][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.549716][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.572516][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.598566][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.618133][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.640447][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.660445][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.682695][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.712080][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.731061][T10035] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 230.741165][T10035] netlink: 16166 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.767922][ T9529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.780939][ T9529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.812103][ T9529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.829202][ T9529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.882412][ T9760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.951596][ T66] hsr_slave_0: left promiscuous mode [ 230.966999][ T66] hsr_slave_1: left promiscuous mode [ 230.986752][ T66] batman_adv: batadv0: Removing interface: team0 [ 230.995199][T10054] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.013639][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.038558][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.060781][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.076647][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.105449][ T66] veth1_vlan: left promiscuous mode [ 231.111191][ T66] veth0_vlan: left promiscuous mode [ 231.934003][ T66] team0 (unregistering): Port device team_slave_1 removed [ 231.971865][ T66] team0 (unregistering): Port device team_slave_0 removed [ 232.431077][ T9760] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.466641][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.473876][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.569946][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.577233][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.683695][ T9179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.720798][ T9549] veth0_vlan: entered promiscuous mode [ 232.743865][ T9179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.843416][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.870880][ T9549] veth1_vlan: entered promiscuous mode [ 232.879367][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.058362][ T9549] veth0_macvtap: entered promiscuous mode [ 233.095859][ T9549] veth1_macvtap: entered promiscuous mode [ 233.133211][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.143898][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.154891][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.167357][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.178314][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.191959][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.202746][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.213447][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.225392][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.244884][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.255637][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.266104][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.279046][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.298307][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.315556][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.325747][ T9549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.336941][ T9549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.356642][ T9549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.423738][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.512549][ T9549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.532174][ T9549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.535594][T10108] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.545608][ T9549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.566957][ T9549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.711715][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.900258][ T9760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.968755][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.101127][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.130401][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.147256][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.158822][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.169624][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.182832][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 234.190866][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.252062][ T9760] veth0_vlan: entered promiscuous mode [ 234.268588][ T9760] veth1_vlan: entered promiscuous mode [ 234.390730][ T9171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.419578][ T9171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.622819][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.661583][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.701504][T10128] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 234.728125][T10128] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 234.794433][ T9760] veth0_macvtap: entered promiscuous mode [ 234.832853][ T35] bridge_slave_1: left allmulticast mode [ 234.842686][ T35] bridge_slave_1: left promiscuous mode [ 234.849092][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.881605][ T35] bridge_slave_0: left allmulticast mode [ 234.887309][ T35] bridge_slave_0: left promiscuous mode [ 234.898980][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.682611][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.695687][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.707091][ T35] bond0 (unregistering): Released all slaves [ 235.819334][ T9760] veth1_macvtap: entered promiscuous mode [ 236.187489][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.208670][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.219246][ T5107] Bluetooth: hci0: command tx timeout [ 236.231790][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.249090][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.266774][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.281902][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.296146][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.316630][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.327477][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.344913][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.358927][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.674446][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.698974][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.728606][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.756380][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.769817][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.781800][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.803682][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.818341][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.831328][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.842189][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.854377][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.883054][T10196] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 236.893339][T10196] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.935190][T10118] chnl_net:caif_netlink_parms(): no params data found [ 237.041123][ T9760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.056876][ T9760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.081668][ T9760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.096802][ T9760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.149067][ T35] hsr_slave_0: left promiscuous mode [ 237.160261][ T35] hsr_slave_1: left promiscuous mode [ 237.180290][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.189074][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.220858][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.234498][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.272018][ T35] veth1_macvtap: left promiscuous mode [ 237.277605][ T35] veth0_macvtap: left promiscuous mode [ 237.288350][ T35] veth1_vlan: left promiscuous mode [ 237.293732][ T35] veth0_vlan: left promiscuous mode [ 237.323362][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.335448][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.348576][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.357011][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.366896][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 237.376586][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.789272][ T35] team0 (unregistering): Port device team_slave_1 removed [ 237.832708][ T35] team0 (unregistering): Port device team_slave_0 removed [ 238.232181][T10209] : renamed from hsr_slave_0 (while UP) [ 238.298665][ T5122] Bluetooth: hci0: command tx timeout [ 238.453243][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.462023][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.472023][T10118] bridge_slave_0: entered allmulticast mode [ 238.497636][T10118] bridge_slave_0: entered promiscuous mode [ 238.577951][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.608214][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.635988][T10118] bridge_slave_1: entered allmulticast mode [ 238.646002][T10118] bridge_slave_1: entered promiscuous mode [ 238.820190][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.952401][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.078689][T10118] team0: Port device team_slave_0 added [ 239.135847][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.153641][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.154832][T10118] team0: Port device team_slave_1 added [ 239.278451][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.285551][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.316349][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.382338][ T9169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.390431][ T9169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.420561][ T5122] Bluetooth: hci4: command tx timeout [ 239.446650][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.456554][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.488078][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.882786][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.009611][T10118] hsr_slave_0: entered promiscuous mode [ 240.019121][T10118] hsr_slave_1: entered promiscuous mode [ 240.037167][T10213] chnl_net:caif_netlink_parms(): no params data found [ 240.124350][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.246648][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.323577][T10283] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.386085][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.388066][ T5122] Bluetooth: hci0: command tx timeout [ 240.560427][T10288] syzkaller0: entered promiscuous mode [ 240.699652][ C0] bridge0: received packet on veth0_to_bond with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 241.252619][T10321] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.263647][T10321] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.500582][ T5122] Bluetooth: hci4: command tx timeout [ 242.382034][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.389408][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.396603][T10213] bridge_slave_0: entered allmulticast mode [ 242.404180][T10213] bridge_slave_0: entered promiscuous mode [ 242.458095][ T5122] Bluetooth: hci0: command tx timeout [ 242.504059][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.530041][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.543229][T10213] bridge_slave_1: entered allmulticast mode [ 242.557782][T10213] bridge_slave_1: entered promiscuous mode [ 242.767919][T10213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.851336][T10345] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 242.853044][T10347] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 242.898839][T10347] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 242.899115][T10213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.917261][T10347] netlink: 128512 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.936908][ T35] bridge_slave_1: left allmulticast mode [ 242.945171][ T35] bridge_slave_1: left promiscuous mode [ 242.958405][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.984615][ T35] bridge_slave_0: left allmulticast mode [ 242.998090][ T35] bridge_slave_0: left promiscuous mode [ 243.018400][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.591737][ T5122] Bluetooth: hci4: command tx timeout [ 243.673479][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.690813][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.702714][ T35] bond0 (unregistering): Released all slaves [ 243.775371][T10380] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 243.851682][T10213] team0: Port device team_slave_0 added [ 243.865723][T10380] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 244.097429][T10213] team0: Port device team_slave_1 added [ 244.115243][T10383] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 244.129041][T10380] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 244.314116][T10213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.355008][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.384567][T10213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.732021][T10213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.751933][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.789340][T10213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.556516][ T35] hsr_slave_0: left promiscuous mode [ 245.567272][ T35] hsr_slave_1: left promiscuous mode [ 245.583289][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.598495][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.658417][ T5122] Bluetooth: hci4: command tx timeout [ 245.775406][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.785759][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.842896][ T35] veth1_macvtap: left promiscuous mode [ 245.856787][ T35] veth0_macvtap: left promiscuous mode [ 245.862813][ T35] veth1_vlan: left promiscuous mode [ 245.876739][ T35] veth0_vlan: left promiscuous mode [ 247.413753][ T35] team0 (unregistering): Port device team_slave_1 removed [ 247.454253][ T35] team0 (unregistering): Port device team_slave_0 removed [ 247.859183][T10213] hsr_slave_0: entered promiscuous mode [ 247.865780][T10213] hsr_slave_1: entered promiscuous mode [ 247.878755][T10213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.886352][T10213] Cannot create hsr debugfs directory [ 248.035196][T10420] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 248.066796][T10420] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.090412][T10420] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 248.122215][T10422] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 248.130952][T10422] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.154853][T10422] team0: Port device virt_wifi0 added [ 248.344972][T10118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.435925][T10118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.466397][T10118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.550631][T10118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.236755][T10118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.316704][T10118] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.408979][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.416170][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.434794][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.441987][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.523151][T10213] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.554290][T10213] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.614892][T10213] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.658869][T10213] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.001662][T10213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.091055][T10213] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.128175][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.135367][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.155067][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.162298][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.275516][T10118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.515392][T10118] veth0_vlan: entered promiscuous mode [ 250.574969][T10118] veth1_vlan: entered promiscuous mode [ 250.672074][T10118] veth0_macvtap: entered promiscuous mode [ 250.709945][T10118] veth1_macvtap: entered promiscuous mode [ 250.797022][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.836448][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.877671][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.883973][T10529] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.904880][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.909861][T10529] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.926636][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.949944][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.962235][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.977354][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.993051][T10118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.121094][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.149321][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.168974][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.218045][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.234700][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.255427][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.266093][T10118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.276687][T10118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.291797][T10118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.321869][T10118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.358285][T10118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.367054][T10118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.391533][T10118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.531981][T10213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.899971][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.937089][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.035691][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.078210][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.536040][T10213] veth0_vlan: entered promiscuous mode [ 252.594472][T10213] veth1_vlan: entered promiscuous mode [ 252.716633][T10213] veth0_macvtap: entered promiscuous mode [ 252.751628][T10213] veth1_macvtap: entered promiscuous mode [ 252.826469][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.856877][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.878567][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.898195][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.919386][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.939932][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.960485][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.981310][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.997360][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.019980][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.064272][T10213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.107403][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.138969][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.158298][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.182364][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.200627][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.226542][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.246728][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.268092][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.290294][T10213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.325726][T10213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.352741][T10213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.421264][T10213] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.458080][T10213] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.467445][T10213] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.522317][T10213] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.661634][T10621] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.771926][ T9162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.789618][ T9162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.990119][ T9162] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.099153][T10630] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 254.118598][T10630] : left promiscuous mode [ 254.124287][T10630] hsr_slave_1: left promiscuous mode [ 254.273480][ T9171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.291004][ T9171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.863078][ T9162] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.979121][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.003587][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.012214][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.026322][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.038641][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.058686][T10669] netlink: 211388 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.075947][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.109307][ T9162] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.325228][ T9162] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.366098][T10680] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 255.437729][T10680] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 255.654579][T10685] sit0: left promiscuous mode [ 255.775540][T10685] sit0: entered promiscuous mode [ 256.013410][T10693] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 256.076264][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.082666][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.099467][T10693] team0: Port device  added [ 256.191406][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.202158][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.211037][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.220624][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.232786][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.245991][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.443115][ T9162] bridge_slave_1: left allmulticast mode [ 256.488092][ T9162] bridge_slave_1: left promiscuous mode [ 256.493912][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.559154][ T9162] bridge_slave_0: left allmulticast mode [ 256.564863][ T9162] bridge_slave_0: left promiscuous mode [ 256.599503][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.193134][ T5122] Bluetooth: hci0: command tx timeout [ 257.862817][ T9162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.875696][ T9162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.890110][ T9162] bond0 (unregistering): Released all slaves [ 257.947322][T10710] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 257.956336][T10710] bond0: entered promiscuous mode [ 257.961739][T10710] bond_slave_0: entered promiscuous mode [ 257.967596][T10710] bond_slave_1: entered promiscuous mode [ 257.975122][T10710] team0: entered promiscuous mode [ 257.985596][T10710] team_slave_1: entered promiscuous mode [ 257.992305][T10710] : entered promiscuous mode [ 257.997330][T10710] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 258.005102][T10710] bond0: entered allmulticast mode [ 258.010871][T10710] bond_slave_0: entered allmulticast mode [ 258.016918][T10710] bond_slave_1: entered allmulticast mode [ 258.022758][T10710] team0: entered allmulticast mode [ 258.029877][T10710] team_slave_1: entered allmulticast mode [ 258.035670][T10710] : entered allmulticast mode [ 258.041116][T10710] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 258.050030][T10710] batman_adv: batadv0: Adding interface: bond0 [ 258.056198][T10710] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.083944][T10710] batman_adv: batadv0: Interface activated: bond0 [ 258.290169][T10746] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.300695][ T5122] Bluetooth: hci4: command tx timeout [ 258.326473][T10746] netlink: 500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.449865][T10664] chnl_net:caif_netlink_parms(): no params data found [ 258.661112][T10756] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 258.677760][T10756] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 258.716428][T10756] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.804660][ T9162] hsr_slave_0: left promiscuous mode [ 258.817237][ T9162] hsr_slave_1: left promiscuous mode [ 258.830333][T10771] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 258.853161][T10775] syz-executor.0[10775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.853389][T10775] syz-executor.0[10775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.882126][T10774] syz-executor.0[10774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.895284][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.900359][T10774] syz-executor.0[10774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.915673][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.937422][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.945120][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.967740][ T9162] veth1_macvtap: left promiscuous mode [ 258.973533][ T9162] veth0_macvtap: left promiscuous mode [ 258.981126][ T9162] veth1_vlan: left promiscuous mode [ 258.986615][ T9162] veth0_vlan: left promiscuous mode [ 259.259372][ T5122] Bluetooth: hci0: command tx timeout [ 259.620180][ T9162] team0 (unregistering): Port device team_slave_1 removed [ 259.664122][ T9162] team0 (unregistering): Port device team_slave_0 removed [ 260.083079][T10771] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 260.268337][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.275797][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.283684][T10664] bridge_slave_0: entered allmulticast mode [ 260.301297][T10664] bridge_slave_0: entered promiscuous mode [ 260.323775][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.335248][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.343522][T10664] bridge_slave_1: entered allmulticast mode [ 260.361094][T10664] bridge_slave_1: entered promiscuous mode [ 260.388381][ T5122] Bluetooth: hci4: command tx timeout [ 260.561647][T10664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.575184][T10664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.667851][T10817] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.761126][T10664] team0: Port device team_slave_0 added [ 260.790838][T10664] team0: Port device team_slave_1 added [ 260.929551][T10664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.936557][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.986943][T10664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.000716][T10664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.007744][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.051856][T10831] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 261.058409][T10831] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 261.079117][T10664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.100974][T10701] chnl_net:caif_netlink_parms(): no params data found [ 261.338843][ T5122] Bluetooth: hci0: command tx timeout [ 261.482427][T10664] hsr_slave_0: entered promiscuous mode [ 261.505683][T10664] hsr_slave_1: entered promiscuous mode [ 261.517566][T10843] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 261.548411][T10843] team0: Device veth1_macvtap failed to register rx_handler [ 261.802401][ T9162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.860998][T10859] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 261.950778][T10862] FAULT_INJECTION: forcing a failure. [ 261.950778][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 261.964308][T10862] CPU: 0 PID: 10862 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00242-g36534d3c5453 #0 [ 261.974856][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 261.984944][T10862] Call Trace: [ 261.988241][T10862] [ 261.991173][T10862] dump_stack_lvl+0x241/0x360 [ 261.995852][T10862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.001057][T10862] ? __pfx__printk+0x10/0x10 [ 262.005660][T10862] ? __pfx___might_resched+0x10/0x10 [ 262.010951][T10862] should_fail_ex+0x3b0/0x4e0 [ 262.015639][T10862] ? __d_alloc+0x31/0x700 [ 262.019967][T10862] should_failslab+0x9/0x20 [ 262.024487][T10862] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 262.030227][T10862] __d_alloc+0x31/0x700 [ 262.034390][T10862] d_alloc_pseudo+0x1f/0xb0 [ 262.038891][T10862] alloc_file_pseudo+0x123/0x290 [ 262.043834][T10862] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 262.049298][T10862] ? alloc_fd+0x59d/0x640 [ 262.053637][T10862] sock_alloc_file+0xb8/0x290 [ 262.058325][T10862] __sys_socket+0x1dd/0x3c0 [ 262.062851][T10862] ? __pfx___sys_socket+0x10/0x10 [ 262.067911][T10862] __x64_sys_socket+0x7a/0x90 [ 262.072607][T10862] do_syscall_64+0xf3/0x230 [ 262.077122][T10862] ? clear_bhb_loop+0x35/0x90 [ 262.081802][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.087711][T10862] RIP: 0033:0x7f2da367cf29 [ 262.092122][T10862] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 262.111722][T10862] RSP: 002b:00007f2da440a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 262.120139][T10862] RAX: ffffffffffffffda RBX: 00007f2da37b3f80 RCX: 00007f2da367cf29 [ 262.128132][T10862] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 262.136111][T10862] RBP: 00007f2da440a120 R08: 0000000000000000 R09: 0000000000000000 [ 262.144075][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.152038][T10862] R13: 000000000000000b R14: 00007f2da37b3f80 R15: 00007ffcaccca0e8 [ 262.160030][T10862] [ 262.217430][T10864] netlink: 4093 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.243875][ T9162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.287590][T10701] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.311812][T10701] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.326504][T10701] bridge_slave_0: entered allmulticast mode [ 262.334228][T10701] bridge_slave_0: entered promiscuous mode [ 262.405958][ T9162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.443378][T10701] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.451043][T10701] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.460473][ T5122] Bluetooth: hci4: command tx timeout [ 262.460705][T10701] bridge_slave_1: entered allmulticast mode [ 262.508706][T10701] bridge_slave_1: entered promiscuous mode [ 262.604333][ T9162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.725476][T10701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.826138][T10701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.994539][T10701] team0: Port device team_slave_0 added [ 263.094498][T10701] team0: Port device team_slave_1 added [ 263.418911][ T5122] Bluetooth: hci0: command tx timeout [ 263.580369][T10701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.587362][T10701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.648039][T10701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.671131][T10701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.689841][T10701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.743647][T10701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.757084][ T9162] bridge_slave_1: left allmulticast mode [ 263.763496][ T9162] bridge_slave_1: left promiscuous mode [ 263.770262][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.786005][ T9162] bridge_slave_0: left allmulticast mode [ 263.792244][ T9162] bridge_slave_0: left promiscuous mode [ 263.807601][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.259675][ T9162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.273920][ T9162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.285591][ T9162] bond0 (unregistering): Released all slaves [ 264.541090][ T5122] Bluetooth: hci4: command tx timeout [ 264.649470][T10701] hsr_slave_0: entered promiscuous mode [ 264.665318][T10701] hsr_slave_1: entered promiscuous mode [ 264.674372][T10701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.689411][T10701] Cannot create hsr debugfs directory [ 264.741534][T10939] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 264.777424][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.801673][T10939] ipvlan1: entered promiscuous mode [ 264.807363][T10939] ipvlan1: entered allmulticast mode [ 264.828648][T10939] veth0_vlan: entered allmulticast mode [ 264.912561][T10939] bridge0: port 3(ipvlan1) entered blocking state [ 264.934667][T10939] bridge0: port 3(ipvlan1) entered disabled state [ 265.027789][T10939] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 265.089121][T10949] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 265.118928][T10949] hsr_slave_0: left promiscuous mode [ 265.152461][T10949] hsr_slave_1: left promiscuous mode [ 265.380628][T10939] syz-executor.3 (10939) used greatest stack depth: 17376 bytes left [ 265.471941][T10960] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 265.487622][T10960] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 265.564377][T10960] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 265.653571][ T9162] hsr_slave_0: left promiscuous mode [ 265.701788][ T9162] hsr_slave_1: left promiscuous mode [ 265.719532][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.761999][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.785757][ T9162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.803099][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.809514][T10977] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 265.842839][ T9162] veth1_macvtap: left promiscuous mode [ 265.848630][ T9162] veth0_macvtap: left promiscuous mode [ 265.854481][ T9162] veth1_vlan: left promiscuous mode [ 265.862406][ T9162] veth0_vlan: left promiscuous mode [ 266.323014][ T9162] team0 (unregistering): Port device team_slave_1 removed [ 266.365550][ T9162] team0 (unregistering): Port device team_slave_0 removed [ 266.771291][T10977] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 266.885245][T10985] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.955375][T10664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.012018][T10664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.185185][T10664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.222170][T10664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.893683][T11016] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 267.941686][T11016] team0: Device veth1_macvtap failed to register rx_handler [ 267.983245][T11019] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 268.003498][T11019] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.710361][T10664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.766947][T10664] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.780588][T11046] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 268.807578][T11046] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.835787][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.843006][ T5113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.859067][T11046] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 268.926514][T11046] team0: Device veth1_macvtap failed to register rx_handler [ 268.997691][T11055] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.039207][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.046388][ T5192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.257565][T10701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.312707][T10701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.345613][T10701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.582561][T10701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.267682][T10701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.406971][T10701] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.513499][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.520772][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.561812][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.569069][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.053607][T10664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.175460][T10701] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.233970][T10701] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.344517][T10664] veth0_vlan: entered promiscuous mode [ 271.440880][T10664] veth1_vlan: entered promiscuous mode [ 271.634480][T10664] veth0_macvtap: entered promiscuous mode [ 271.749178][T10664] veth1_macvtap: entered promiscuous mode [ 271.895371][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.948680][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.958706][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.969283][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.009743][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.023233][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.036949][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.047586][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.070848][T10664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.169435][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.206557][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.216792][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.254655][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.265907][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.284439][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.294448][T10664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.315241][T10664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.329923][T10664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.366905][T10664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.399235][T10664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.414135][T10664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.423347][T10664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.444801][T10701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.771533][T11173] validate_nla: 2 callbacks suppressed [ 272.771553][T11173] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 272.793446][T11173] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 272.804287][T11173] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.004452][ T9171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.065080][ T9171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.136261][T11192] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 273.187555][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.216009][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.342845][T11199] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.352783][T11199] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.424532][T10701] veth0_vlan: entered promiscuous mode [ 273.472752][T10701] veth1_vlan: entered promiscuous mode [ 273.600307][T10701] veth0_macvtap: entered promiscuous mode [ 273.642113][T10701] veth1_macvtap: entered promiscuous mode [ 273.665747][T11200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.668251][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.707265][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.731345][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.755320][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.777094][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.794604][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.805216][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.816436][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.829769][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.840845][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.891341][T10701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.937497][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.962599][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.974738][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.002296][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.015572][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.030384][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.040884][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.062671][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.086325][T10701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.101553][T10701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.124175][T10701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.165833][T10701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.185623][T10701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.198497][T10701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.207581][T10701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.231192][T11230] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 274.249029][T11230] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 274.268214][T11230] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.463840][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.484354][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.644957][ T9171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.710514][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.732540][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.143699][T11266] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 275.160877][T11266] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.599553][T11276] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 275.616656][T11276] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.639685][T11276] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 275.678629][T11276] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 275.879397][T11282] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.933969][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.955538][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.964600][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.982396][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.999327][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 276.007675][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.049682][ T9171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.239133][ T5107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.254965][ T5107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.263996][ T5107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.273862][ T5107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.289334][ T5107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.304872][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.758661][T11298] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 276.766952][T11298] netlink: 210876 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.399034][T11310] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.062911][ T5122] Bluetooth: hci0: command tx timeout [ 278.254478][ T9171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.274860][T11310] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 278.286231][T11310] tipc: Started in network mode [ 278.294567][T11310] tipc: Node identity c1823505, cluster identity 4711 [ 278.311069][T11310] tipc: Node number set to 3246535941 [ 278.383666][ T5122] Bluetooth: hci4: command tx timeout [ 278.434854][ T9171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.580493][T11320] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 278.780783][T11323] syzkaller0: entered promiscuous mode [ 278.794191][T11323] syzkaller0: entered allmulticast mode [ 278.997160][T11338] syz-executor.0 (11338) used greatest stack depth: 16800 bytes left [ 279.025172][ T9171] bridge_slave_1: left allmulticast mode [ 279.035693][ T9171] bridge_slave_1: left promiscuous mode [ 279.041763][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.060254][ T9171] bridge_slave_0: left allmulticast mode [ 279.065944][ T9171] bridge_slave_0: left promiscuous mode [ 279.075509][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.507457][ T9171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.522797][ T9171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.534443][ T9171] bond0 (unregistering): Released all slaves [ 280.138436][ T5122] Bluetooth: hci0: command tx timeout [ 280.461362][ T5122] Bluetooth: hci4: command tx timeout [ 281.072300][T11367] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 281.084936][T11367] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 281.093354][T11367] CPU: 1 PID: 11367 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00242-g36534d3c5453 #0 [ 281.103858][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 281.113921][T11367] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 281.119400][T11367] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 46 9c d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 a0 5e 3d 00 4c 8b 7d 00 48 83 c5 [ 281.139020][T11367] RSP: 0018:ffffc90009177678 EFLAGS: 00010246 [ 281.145103][T11367] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000040000 [ 281.153086][T11367] RDX: ffffc9000960b000 RSI: 00000000000008fe RDI: 00000000000008ff [ 281.161070][T11367] RBP: 0000000000000000 R08: ffffffff89625806 R09: ffffffff896257c3 [ 281.169052][T11367] R10: 0000000000000004 R11: ffff88806ac48000 R12: ffff88806038e000 [ 281.177040][T11367] R13: ffff88801cfd8070 R14: dffffc0000000000 R15: 0000000000000000 [ 281.185023][T11367] FS: 00007f81c4cbf6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 281.193966][T11367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.200564][T11367] CR2: 00007fc3c510d270 CR3: 00000000495f0000 CR4: 00000000003506f0 [ 281.208548][T11367] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.216528][T11367] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 281.224507][T11367] Call Trace: [ 281.227792][T11367] [ 281.230732][T11367] ? __die_body+0x88/0xe0 [ 281.235084][T11367] ? die_addr+0x108/0x140 [ 281.239439][T11367] ? exc_general_protection+0x3dd/0x5d0 [ 281.245014][T11367] ? asm_exc_general_protection+0x26/0x30 [ 281.250749][T11367] ? xdp_do_redirect_frame+0x243/0x660 [ 281.256483][T11367] ? xdp_do_redirect_frame+0x286/0x660 [ 281.261960][T11367] ? dev_map_enqueue+0x31/0x3e0 [ 281.266828][T11367] ? dev_map_enqueue+0x2a/0x3e0 [ 281.271691][T11367] xdp_do_redirect_frame+0x2a6/0x660 [ 281.276993][T11367] bpf_test_run_xdp_live+0xe60/0x1e60 [ 281.282395][T11367] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 281.287954][T11367] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 281.293811][T11367] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 281.299722][T11367] ? __might_fault+0xaa/0x120 [ 281.304413][T11367] ? __might_fault+0xc6/0x120 [ 281.309105][T11367] ? _copy_from_user+0xa6/0xe0 [ 281.313886][T11367] ? bpf_test_init+0x15a/0x180 [ 281.318657][T11367] ? xdp_convert_md_to_buff+0x5b/0x330 [ 281.324126][T11367] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 281.329514][T11367] ? __pfx_lock_release+0x10/0x10 [ 281.334556][T11367] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.340376][T11367] ? __fget_files+0x29/0x470 [ 281.344991][T11367] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.350811][T11367] bpf_prog_test_run+0x33a/0x3b0 [ 281.355761][T11367] __sys_bpf+0x48d/0x810 [ 281.360013][T11367] ? __pfx___sys_bpf+0x10/0x10 [ 281.364783][T11367] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 281.370868][T11367] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.376858][T11367] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.383208][T11367] ? do_syscall_64+0x100/0x230 [ 281.388003][T11367] __x64_sys_bpf+0x7c/0x90 [ 281.392435][T11367] do_syscall_64+0xf3/0x230 [ 281.396951][T11367] ? clear_bhb_loop+0x35/0x90 [ 281.401641][T11367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.407549][T11367] RIP: 0033:0x7f81c3e7cf29 [ 281.411974][T11367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 281.431635][T11367] RSP: 002b:00007f81c4cbf0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.440069][T11367] RAX: ffffffffffffffda RBX: 00007f81c3fb3f80 RCX: 00007f81c3e7cf29 [ 281.448050][T11367] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 281.456040][T11367] RBP: 00007f81c3eec074 R08: 0000000000000000 R09: 0000000000000000 [ 281.464030][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2024/06/21 18:17:25 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 281.472009][T11367] R13: 000000000000004d R14: 00007f81c3fb3f80 R15: 00007ffd3ed4fa88 [ 281.480000][T11367] [ 281.483036][T11367] Modules linked in: [ 281.487007][T11367] ---[ end trace 0000000000000000 ]--- [ 281.498147][T11367] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 281.508024][T11367] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 46 9c d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 a0 5e 3d 00 4c 8b 7d 00 48 83 c5 [ 281.532554][T11367] RSP: 0018:ffffc90009177678 EFLAGS: 00010246 [ 281.543194][T11367] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000040000 [ 281.554224][T11367] RDX: ffffc9000960b000 RSI: 00000000000008fe RDI: 00000000000008ff [ 281.564892][T11367] RBP: 0000000000000000 R08: ffffffff89625806 R09: ffffffff896257c3 [ 281.578204][T11367] R10: 0000000000000004 R11: ffff88806ac48000 R12: ffff88806038e000 [ 281.587983][T11367] R13: ffff88801cfd8070 R14: dffffc0000000000 R15: 0000000000000000 [ 281.599207][T11367] FS: 00007f81c4cbf6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 281.617975][T11367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.637516][T11367] CR2: 00007fc3c510d270 CR3: 00000000495f0000 CR4: 00000000003506f0 [ 281.649207][T11367] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.661576][T11367] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 281.673887][T11367] Kernel panic - not syncing: Fatal exception in interrupt [ 281.681315][T11367] Kernel Offset: disabled [ 281.685639][T11367] Rebooting in 86400 seconds..