last executing test programs: 1m54.141150113s ago: executing program 1 (id=2272): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xffffffff}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0xa4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[], 0x1210}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m34.535845073s ago: executing program 1 (id=2272): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xffffffff}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0xa4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[], 0x1210}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m17.62750747s ago: executing program 1 (id=2272): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xffffffff}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0xa4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[], 0x1210}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m12.181009438s ago: executing program 2 (id=2706): perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x8, 0x2, r0, 0x4, '\x00', r1}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x125}], 0x1}, 0x0) socket$kcm(0x2, 0x2, 0x73) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, r7, 0x2, 0x0, 0x4000}, 0x10) socket$kcm(0x2, 0x2, 0x73) 1m11.922136593s ago: executing program 2 (id=2707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r2, 0x0}, 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffff2f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x48) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1a, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x60000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @alu={0x7, 0x1, 0x5, 0x7, 0xa, 0x30, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x1, 0x7, 0x0, 0x8, 0x6}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0xa0f67ad53c78c298, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000240)={0x8, 0xed}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xd, 0x6, 0xe4e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r4, r5, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000), 0xfdef) 1m10.995470252s ago: executing program 2 (id=2714): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="d80000001a0081044e81018304000020811d08007b490d4f1e81f8d815000122ff05142603600ecd080005007a010401a80016002000044004000020035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7c6f4090000f11eb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e0654cfbbb7776c2ceacc3d8060ba316c406dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x1}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91c24fc60040f4c0147000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000348, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f00000005c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r9, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000d6aa0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x80) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r10) 57.892129143s ago: executing program 1 (id=2272): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xffffffff}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0xa4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[], 0x1210}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 50.118294963s ago: executing program 2 (id=2714): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="d80000001a0081044e81018304000020811d08007b490d4f1e81f8d815000122ff05142603600ecd080005007a010401a80016002000044004000020035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7c6f4090000f11eb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e0654cfbbb7776c2ceacc3d8060ba316c406dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x1}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91c24fc60040f4c0147000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000348, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f00000005c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r9, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000d6aa0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x80) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r10) 37.000974235s ago: executing program 1 (id=2272): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xffffffff}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0xa4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[], 0x1210}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 33.387871338s ago: executing program 2 (id=2714): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="d80000001a0081044e81018304000020811d08007b490d4f1e81f8d815000122ff05142603600ecd080005007a010401a80016002000044004000020035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7c6f4090000f11eb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e0654cfbbb7776c2ceacc3d8060ba316c406dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x1}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91c24fc60040f4c0147000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000348, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f00000005c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r9, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000d6aa0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x80) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r10) 12.838461464s ago: executing program 1 (id=2272): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a800160020", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xffffffff}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0xa4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[], 0x1210}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.928151971s ago: executing program 2 (id=2714): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="d80000001a0081044e81018304000020811d08007b490d4f1e81f8d815000122ff05142603600ecd080005007a010401a80016002000044004000020035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7c6f4090000f11eb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e0654cfbbb7776c2ceacc3d8060ba316c406dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x1}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91c24fc60040f4c0147000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, r3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000348, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f00000005c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r9, 0x8b37, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000d6aa0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x80) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) close(r10) 3.831133559s ago: executing program 0 (id=3291): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000f1711830000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 3.71375264s ago: executing program 0 (id=3293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x11, 0x0, 0x300) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x5, &(0x7f00000000c0), 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047459, 0x20004002) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async, rerun: 64) gettid() (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.519885023s ago: executing program 0 (id=3295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x355d01, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0xffffffffffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00'/168) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000200)=0x7fff) (async) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) (rerun: 64) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f0001"], 0xfdef) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="25f6572c4916"}) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0}, 0x90) (rerun: 32) 2.075671014s ago: executing program 0 (id=3307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000c38af8fff1000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003e00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.029379199s ago: executing program 4 (id=3308): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc60100005000b000900053582c137153e37000c0480fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000000c0), 0x20000000}, 0x20) (async) close(r2) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) perf_event_open$cgroup(&(0x7f0000003f80)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x6b, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xfba557a1616ca0d7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27c, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0a00fe00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ffa1000000bfa100000000000007010000b7c162da8793716a3afc8707e0f0c37300feffffb702000008000000b70300000000000085000000c7000040deb3257138ad4d53"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018109f2a5f2aaaf95b22832daf39dea2b86c56eed55597f3babc17def54cae459ade008c1e4a76fb8da424b2cb354a38fe27fe0e1b9568d731a6c22c28e1d3a715db564831409b2cda41f7613dadfba7c3e5ed609011744d1c4f186ffd7e9700000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bfa10000000000000701000000feffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x25) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) 1.915826256s ago: executing program 0 (id=3310): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 1.851084597s ago: executing program 0 (id=3311): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000005d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x2c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x49f0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0xd7f, 0x88, &(0x7f0000000540)=""/136, 0x40f00, 0x0, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000840)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000008c0)=[{0x5, 0x4, 0x2, 0xb}, {0x4, 0x2, 0xc, 0x6}, {0x3, 0x3, 0xc, 0x6}, {0x0, 0x5, 0xc, 0x9}, {0x4, 0x5, 0x5, 0xb}, {0x2, 0x1, 0x8, 0x6}, {0x5, 0x5, 0x0, 0xb}, {0x0, 0x1, 0x5, 0x2}, {0x4, 0x3, 0x0, 0x7}], 0x10, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) close(0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r7, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r9, 0x911}, 0xc) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.816174775s ago: executing program 4 (id=3312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000084000000bf09000000000000b50901000000008526000000f9ffffff180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.718551786s ago: executing program 4 (id=3314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660800000000000018000000000000000000b0ffffff00009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50affffff800000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 1.623210026s ago: executing program 4 (id=3315): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = getpid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x6, 0x0, 0x5c, 0x5, 0x0, 0x81, 0x828da, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0xeea, 0xffffffff80000000}, 0x42, 0x8, 0x3, 0x3, 0x8000000000000001, 0xfffffce3, 0xfff5, 0x0, 0xed5, 0x0, 0x5}, r3, 0xd, r1, 0x3) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90624fc600a080a0006000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@sco, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000380)=""/212, 0xd4}, {0x0}, {0x0}, {0x0}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x5}, 0x341) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000012006bcc9e3fe3d86e17aa310e0000007ea64b6f5db3f3650400410038001d007e31a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c53b5b64f6985300000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f005807}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1a, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x3, 0x2, 0x7, 0x0, 0x800}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x1ae, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0xe, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=[{0x1, 0x4, 0x8, 0xa}], 0x10, 0x5668}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x29, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071118400000000008510000002000000858000000500000095000000000000009500a505000000003c47f42be3658a97f3c028e8e0d20a31c7a824"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socketpair(0x2c, 0x4, 0x2400000, &(0x7f0000000140)) 1.135281951s ago: executing program 3 (id=3317): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000103d3000000620a00ff000000004f00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.058026656s ago: executing program 3 (id=3318): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000870a00ff000000007500000000000068950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.026521648s ago: executing program 4 (id=3319): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000040008"], 0x68}, 0x0) 967.580964ms ago: executing program 3 (id=3320): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 961.986614ms ago: executing program 4 (id=3321): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x4, 0x800}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x40}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x22) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r3, 0x6}, 0xc) r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xed, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fa8122667f2f00db5b686158bbcf68875a59969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000000)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x11180a, 0x400000000000000, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000), 0xfdef) write$cgroup_int(r10, &(0x7f0000000340)=0x80000001, 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) close(r1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x93, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r11 = getpid() syz_open_procfs$namespace(r11, &(0x7f0000000140)='ns/cgroup\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000018009b064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac", 0x2d}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab07000400"], 0xfe33) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x1ff) 138.176849ms ago: executing program 3 (id=3322): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x0, 0x8}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) (async) socket$kcm(0x29, 0xf, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="93", 0x1}], 0x1}, 0x8c5) (async) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'team0\x00', 0x400}) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001403) ioctl$TUNSETOFFLOAD(r2, 0x40047452, 0x7fed43800fff) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x88, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0xb, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1000000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f00000000c0), 0xb9) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 32) r4 = socket$kcm(0xa, 0x5, 0x0) (rerun: 32) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0x851) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) 15.858028ms ago: executing program 3 (id=3323): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 0s ago: executing program 3 (id=3324): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0xa, 0x7, 0x6, 0x6, 0xfffffffffffffffc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, @generic={0x8, 0xa, 0x2, 0xfff, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x62, &(0x7f0000000280)=""/98, 0x40f00, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x9, 0x8001}, 0x10, 0x19a5d, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b25d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=';', 0x1}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba10a0016000200142603600e1208001e0003000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0xa, 0x7, 0x6, 0x6, 0xfffffffffffffffc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, @generic={0x8, 0xa, 0x2, 0xfff, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x62, &(0x7f0000000280)=""/98, 0x40f00, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x9, 0x8001}, 0x10, 0x19a5d, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b25d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) (async) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=';', 0x1}], 0x1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba10a0016000200142603600e1208001e0003000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) kernel console output (not intermixed with test programs): T9913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.589154][ T9913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.686014][ T9913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.695278][ T9913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.745306][ T9913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.176045][ T9913] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 199.198385][ T9913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.265020][ T8726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.306481][ T8726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.436643][ T8725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.444502][ T8725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.611271][T10435] FAULT_INJECTION: forcing a failure. [ 199.611271][T10435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.672375][T10435] CPU: 0 PID: 10435 Comm: syz.0.1954 Not tainted 6.10.0-syzkaller-04483-g0be9ae5486cd #0 [ 199.682246][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 199.692323][T10435] Call Trace: [ 199.695624][T10435] [ 199.698572][T10435] dump_stack_lvl+0x241/0x360 [ 199.703274][T10435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.708495][T10435] ? __pfx__printk+0x10/0x10 [ 199.713109][T10435] ? __pfx_lock_release+0x10/0x10 [ 199.718165][T10435] should_fail_ex+0x3b0/0x4e0 [ 199.722867][T10435] _copy_to_user+0x2f/0xb0 [ 199.727311][T10435] bpf_obj_get_info_by_fd+0x1444/0x40f0 [ 199.733318][T10435] ? __asan_memset+0x23/0x50 [ 199.737932][T10435] ? mark_lock+0x9a/0x350 [ 199.742284][T10435] ? __lock_acquire+0x1346/0x1fd0 [ 199.747340][T10435] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 199.753284][T10435] ? __pfx___might_resched+0x10/0x10 [ 199.758589][T10435] ? __might_fault+0xaa/0x120 [ 199.763285][T10435] ? __pfx_lock_release+0x10/0x10 [ 199.768358][T10435] ? __might_fault+0xc6/0x120 [ 199.773058][T10435] ? bpf_lsm_bpf+0x9/0x10 [ 199.777402][T10435] ? security_bpf+0x87/0xb0 [ 199.782342][T10435] __sys_bpf+0x685/0x810 [ 199.786583][T10435] ? __pfx___sys_bpf+0x10/0x10 [ 199.791350][T10435] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.797330][T10435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.803649][T10435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.809971][T10435] ? __irq_exit_rcu+0x100/0x1c0 [ 199.814819][T10435] __x64_sys_bpf+0x7c/0x90 [ 199.819279][T10435] do_syscall_64+0xf3/0x230 [ 199.823780][T10435] ? clear_bhb_loop+0x35/0x90 [ 199.828457][T10435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.834347][T10435] RIP: 0033:0x7f8a19b75b59 [ 199.838755][T10435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.858349][T10435] RSP: 002b:00007f8a1a8d5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.866756][T10435] RAX: ffffffffffffffda RBX: 00007f8a19d05f60 RCX: 00007f8a19b75b59 [ 199.874721][T10435] RDX: 0000000000000010 RSI: 0000000020000680 RDI: 000000000000000f [ 199.882690][T10435] RBP: 00007f8a1a8d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.890659][T10435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.898624][T10435] R13: 000000000000000b R14: 00007f8a19d05f60 R15: 00007ffd1b13e868 [ 199.906606][T10435] [ 200.976274][T10498] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 201.874328][T10518] netlink: 'syz.0.1975': attribute type 29 has an invalid length. [ 202.015152][T10519] netlink: 'syz.0.1975': attribute type 29 has an invalid length. [ 202.393378][T10541] netlink: 'syz.3.1981': attribute type 10 has an invalid length. [ 202.438491][T10541] bond0: (slave wlan1): Releasing backup interface [ 202.867487][T10564] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1989'. [ 203.166354][T10583] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1994'. [ 203.185928][T10583] openvswitch: netlink: Multiple metadata blocks provided [ 203.208692][T10588] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 203.248030][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 203.299936][T10594] vlan0: entered promiscuous mode [ 203.327830][T10594] vlan0: entered allmulticast mode [ 203.343350][T10594] veth0_vlan: entered allmulticast mode [ 203.617485][T10614] syz.0.2003[10614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.617625][T10614] syz.0.2003[10614] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.672387][T10621] wg2: entered allmulticast mode [ 203.740197][T10628] netlink: 'syz.1.2007': attribute type 40 has an invalid length. [ 203.802797][T10621] wg2: entered promiscuous mode [ 203.992287][T10637] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 204.063948][T10637] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.100520][T10637] bond0: (slave team0): Enslaving as an active interface with an up link [ 204.357166][T10665] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2021'. [ 204.449664][T10665] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2021'. [ 204.496493][T10669] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2023'. [ 204.565918][T10678] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2023'. [ 205.540565][T10723] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2039'. [ 205.577414][T10716] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2039'. [ 205.638616][T10725] netlink: 'syz.0.2042': attribute type 10 has an invalid length. [ 205.848123][T10731] netlink: 'syz.4.2045': attribute type 10 has an invalid length. [ 205.975422][T10731] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.016265][T10731] bond0: (slave team0): Enslaving as an active interface with an up link [ 206.448562][T10769] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2060'. [ 208.077116][T10839] __nla_validate_parse: 3 callbacks suppressed [ 208.077155][T10839] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2087'. [ 208.502984][T10867] netlink: 'syz.1.2099': attribute type 1 has an invalid length. [ 208.512174][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2099'. [ 208.662538][T10878] netlink: 'syz.3.2104': attribute type 21 has an invalid length. [ 208.681488][T10878] netlink: 'syz.3.2104': attribute type 4 has an invalid length. [ 208.689830][T10878] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2104'. [ 208.703208][T10878] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2104'. [ 208.715478][T10878] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2104'. [ 209.246147][T10902] netlink: 'syz.3.2115': attribute type 21 has an invalid length. [ 209.254302][T10902] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.620133][T10958] netlink: 'syz.2.2138': attribute type 8 has an invalid length. [ 210.665796][T10958] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2138'. [ 210.909084][T10977] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2146'. [ 210.994920][T10982] bridge0: port 3(ip6gretap0) entered blocking state [ 211.023910][T10982] bridge0: port 3(ip6gretap0) entered disabled state [ 211.048404][T10982] ip6gretap0: entered allmulticast mode [ 211.079757][T10982] ip6gretap0: entered promiscuous mode [ 211.112588][T10982] bridge0: port 3(ip6gretap0) entered blocking state [ 211.119467][T10982] bridge0: port 3(ip6gretap0) entered forwarding state [ 211.543769][T11007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.977812][T11025] netlink: 'syz.4.2166': attribute type 10 has an invalid length. [ 211.994525][T11025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2166'. [ 212.049809][T11025] bridge0: left promiscuous mode [ 212.055105][T11025] bridge0: left allmulticast mode [ 212.085384][T11025] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 212.421490][T11034] netlink: 'syz.2.2169': attribute type 10 has an invalid length. [ 212.467718][T11034] bridge0: port 3(ip6gretap0) entered disabled state [ 212.475710][T11034] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.485877][T11034] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.518057][T11043] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.2171'. [ 212.632277][T11034] bridge0: port 3(ip6gretap0) entered blocking state [ 212.639887][T11034] bridge0: port 3(ip6gretap0) entered forwarding state [ 212.648145][T11034] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.656059][T11034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.664892][T11034] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.673027][T11034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.748756][T11034] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 212.789212][T11033] netlink: 'syz.2.2169': attribute type 10 has an invalid length. [ 212.847475][T11033] bridge0: port 3(ip6gretap0) entered disabled state [ 212.855371][T11033] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.863484][T11033] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.967698][T11053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.240738][T11076] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2185'. [ 214.058805][T11108] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2195'. [ 215.569888][ T54] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 216.846435][T11241] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 217.525515][T11271] netlink: 'syz.4.2261': attribute type 10 has an invalid length. [ 217.702622][T11271] hsr_slave_0: left promiscuous mode [ 217.892836][T11271] hsr_slave_1: left promiscuous mode [ 218.557050][T11303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2275'. [ 218.604503][T11306] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2278'. [ 218.624079][T11309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.695516][T11309] cgroup: fork rejected by pids controller in /syz4 [ 219.121525][ T4493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.139679][ T4493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.140631][T11327] netlink: 'syz.0.2284': attribute type 1 has an invalid length. [ 219.156962][ T4493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.162806][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'. [ 219.184235][ T4493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.205238][ T4493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.213520][ T4493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.601643][ T8716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.804603][ T8716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.113827][ T4493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.125106][ T4493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.144163][ T4493] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.170241][ T4493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.186082][ T4493] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.199095][ T4493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.309078][ T54] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 221.297990][ T54] Bluetooth: hci1: command tx timeout [ 221.886868][ T8716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.149895][ T8716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.176794][T11380] netlink: 'syz.3.2301': attribute type 29 has an invalid length. [ 222.185399][T11385] netlink: 'syz.3.2301': attribute type 29 has an invalid length. [ 222.199638][T11388] netlink: 'syz.3.2301': attribute type 29 has an invalid length. [ 222.226533][T11387] netlink: 'syz.0.2303': attribute type 10 has an invalid length. [ 222.256992][ T54] Bluetooth: hci4: command tx timeout [ 222.286598][T11324] chnl_net:caif_netlink_parms(): no params data found [ 222.592241][T11408] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2307'. [ 222.762578][ T8716] bridge_slave_1: left allmulticast mode [ 222.768820][ T8716] bridge_slave_1: left promiscuous mode [ 222.774645][ T8716] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.788201][ T8716] bridge_slave_0: left allmulticast mode [ 222.794071][ T8716] bridge_slave_0: left promiscuous mode [ 222.800383][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.224034][ T8716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.235210][ T8716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.250554][ T8716] bond0 (unregistering): (slave team0): Releasing backup interface [ 223.262077][ T8716] bond0 (unregistering): Released all slaves [ 223.283301][T11324] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.295145][T11324] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.303320][T11324] bridge_slave_0: entered allmulticast mode [ 223.311635][T11324] bridge_slave_0: entered promiscuous mode [ 223.376919][ T54] Bluetooth: hci1: command tx timeout [ 223.424091][T11324] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.448602][T11324] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.485051][T11324] bridge_slave_1: entered allmulticast mode [ 223.503265][T11324] bridge_slave_1: entered promiscuous mode [ 223.536610][T11440] netlink: 'syz.0.2316': attribute type 10 has an invalid length. [ 223.660083][T11324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.708457][T11324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.788328][T11358] chnl_net:caif_netlink_parms(): no params data found [ 223.840373][T11452] netlink: 'syz.0.2321': attribute type 10 has an invalid length. [ 223.988670][T11324] team0: Port device team_slave_0 added [ 224.003011][ T8716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.021615][ T8716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.069524][ T8716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.098168][ T8716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.149712][ T8716] veth1_macvtap: left promiscuous mode [ 224.155294][ T8716] veth0_macvtap: left promiscuous mode [ 224.191735][ T8716] veth1_vlan: left promiscuous mode [ 224.337273][ T54] Bluetooth: hci4: command tx timeout [ 225.051838][ T8716] team0 (unregistering): Port device team_slave_1 removed [ 225.109122][ T8716] team0 (unregistering): Port device team_slave_0 removed [ 225.461277][ T54] Bluetooth: hci1: command tx timeout [ 225.604100][T11324] team0: Port device team_slave_1 added [ 225.785303][T11543] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2353'. [ 225.897147][T11358] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.914692][T11358] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.935020][T11358] bridge_slave_0: entered allmulticast mode [ 225.947850][T11358] bridge_slave_0: entered promiscuous mode [ 225.966436][T11358] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.973663][T11358] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.986021][T11358] bridge_slave_1: entered allmulticast mode [ 226.001803][T11358] bridge_slave_1: entered promiscuous mode [ 226.032058][T11324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.045593][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.076158][T11324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.100481][T11324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.108931][T11324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.167133][T11324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.230169][T11358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.266912][T11358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.348698][T11358] team0: Port device team_slave_0 added [ 226.415907][ T54] Bluetooth: hci4: command tx timeout [ 226.452031][T11358] team0: Port device team_slave_1 added [ 226.510000][T11324] hsr_slave_0: entered promiscuous mode [ 226.549906][T11324] hsr_slave_1: entered promiscuous mode [ 226.568641][T11324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.584792][T11324] Cannot create hsr debugfs directory [ 226.631876][T11569] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2359'. [ 226.788797][T11358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.796357][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.828119][T11358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.840534][T11574] netlink: 'syz.2.2360': attribute type 10 has an invalid length. [ 226.990474][T11358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.997742][T11358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.023866][T11358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.081477][T11583] netlink: 'syz.2.2362': attribute type 1 has an invalid length. [ 227.089500][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2362'. [ 227.177530][T11358] hsr_slave_0: entered promiscuous mode [ 227.185060][T11358] hsr_slave_1: entered promiscuous mode [ 227.202797][T11358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.211532][T11358] Cannot create hsr debugfs directory [ 227.254472][T11587] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2364'. [ 227.257392][T11589] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2365'. [ 227.536176][ T54] Bluetooth: hci1: command tx timeout [ 227.542357][T11324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.668820][T11601] netlink: 'syz.2.2369': attribute type 17 has an invalid length. [ 227.978346][T11324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.012907][T11608] netlink: 'syz.2.2369': attribute type 2 has an invalid length. [ 228.202773][T11324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.306376][T11631] netlink: 'syz.2.2374': attribute type 1 has an invalid length. [ 228.325916][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 228.457175][T11324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.506479][ T54] Bluetooth: hci4: command tx timeout [ 228.704281][T11650] netlink: 'syz.2.2379': attribute type 10 has an invalid length. [ 228.892553][T11658] netlink: 'syz.0.2381': attribute type 11 has an invalid length. [ 228.921465][T11658] netlink: 'syz.0.2381': attribute type 5 has an invalid length. [ 229.649074][T11324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.668466][T11324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.726611][T11324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.768984][T11324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.941663][T11358] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 230.017590][T11358] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 230.033305][T11358] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.068275][T11358] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.331260][T11324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.460078][T11324] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.523728][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.530970][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.563384][T11358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.643379][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.650627][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.849771][T11358] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.998683][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.005896][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.082093][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.089330][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.142471][T11324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.431484][T11358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.081942][T11324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.188170][T11324] veth0_vlan: entered promiscuous mode [ 232.230502][T11358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.278000][T11324] veth1_vlan: entered promiscuous mode [ 232.397443][T11324] veth0_macvtap: entered promiscuous mode [ 232.433398][T11324] veth1_macvtap: entered promiscuous mode [ 232.535371][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.579164][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.619869][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.648140][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.658636][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.669568][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.689124][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.710237][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.730783][T11324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.767718][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.798802][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.830041][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.869186][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.899465][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.925822][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.945866][T11324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.966917][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.985527][T11324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.127811][T11324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.149934][T11324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.159801][T11324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.168831][T11324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.198782][T11835] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 233.212185][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 233.401451][T11846] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2432'. [ 233.434496][T11846] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 236.244297][T11358] veth0_vlan: entered promiscuous mode [ 236.419018][T11358] veth1_vlan: entered promiscuous mode [ 236.489377][T11324] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 236.522898][T11324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.553265][T11899] netlink: 191384 bytes leftover after parsing attributes in process `syz.0.2436'. [ 236.569274][T11907] netlink: 'syz.2.2439': attribute type 33 has an invalid length. [ 236.582799][T11907] netlink: 'syz.2.2439': attribute type 13 has an invalid length. [ 236.603807][T11907] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2439'. [ 236.644166][T11903] netlink: 'syz.0.2436': attribute type 10 has an invalid length. [ 236.659220][T11903] veth0_vlan: left allmulticast mode [ 236.682830][T11903] veth0_vlan: entered allmulticast mode [ 236.708817][T11903] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 236.748942][T11358] veth0_macvtap: entered promiscuous mode [ 236.755144][ T8701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.791041][ T8701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.862564][T11358] veth1_macvtap: entered promiscuous mode [ 236.934691][ T8701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.958472][ T8701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.991991][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.014091][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.027131][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.038244][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.048458][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.061969][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.079897][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.095421][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.106849][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.117652][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.131286][T11358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.165272][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.188305][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.198593][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.214405][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.226391][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.237554][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.247690][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.258464][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.268669][T11358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.279774][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.294800][T11358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.344605][T11358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.370979][T11358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.402099][T11358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.425777][T11358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.685405][T11358] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 237.700424][T11358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.766839][T11953] netlink: 'syz.2.2457': attribute type 21 has an invalid length. [ 237.774802][T11953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2457'. [ 237.797408][T11953] netlink: 'syz.2.2457': attribute type 1 has an invalid length. [ 237.889062][T11956] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2457'. [ 237.896276][ T8716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.916199][ T8716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.048608][ T8702] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.155620][ T8701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.167553][ T8701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.184962][ T8702] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.260700][T11967] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 238.288429][T11968] netlink: 'syz.2.2462': attribute type 29 has an invalid length. [ 238.521370][ T8702] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.570283][T11972] netlink: 'syz.3.2465': attribute type 21 has an invalid length. [ 238.583002][T11972] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2465'. [ 238.592926][T11972] netlink: 'syz.3.2465': attribute type 4 has an invalid length. [ 238.601116][T11972] netlink: 'syz.3.2465': attribute type 3 has an invalid length. [ 238.610726][T11972] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2465'. [ 238.620505][T11975] netlink: 'syz.0.2466': attribute type 17 has an invalid length. [ 238.652466][T11975] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 238.672068][ T4493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 238.681003][T11980] netlink: 'syz.3.2465': attribute type 29 has an invalid length. [ 238.682589][ T4493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 238.690604][T11984] netlink: 'syz.2.2468': attribute type 10 has an invalid length. [ 238.697885][ T4493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 238.713060][ T4493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.722384][ T4493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 238.730731][ T4493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.743663][ T8702] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.772209][T11985] netlink: 'syz.3.2465': attribute type 29 has an invalid length. [ 239.775083][T11986] chnl_net:caif_netlink_parms(): no params data found [ 240.329864][ T8702] bridge_slave_1: left allmulticast mode [ 240.347115][ T8702] bridge_slave_1: left promiscuous mode [ 240.355523][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.396455][ T8702] bridge_slave_0: left allmulticast mode [ 240.402152][ T8702] bridge_slave_0: left promiscuous mode [ 240.411246][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.750562][T12053] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2484'. [ 240.820516][ T4493] Bluetooth: hci1: command tx timeout [ 241.064046][ T8702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.075232][ T8702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.092428][ T8702] bond0 (unregistering): Released all slaves [ 241.300753][T11986] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.318726][T11986] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.328547][T11986] bridge_slave_0: entered allmulticast mode [ 241.341634][T11986] bridge_slave_0: entered promiscuous mode [ 241.493789][T11986] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.517986][T11986] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.563898][T11986] bridge_slave_1: entered allmulticast mode [ 241.579689][T11986] bridge_slave_1: entered promiscuous mode [ 241.760710][T11986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.814357][T11986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.140080][T12120] FAULT_INJECTION: forcing a failure. [ 242.140080][T12120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.200113][T12120] CPU: 1 PID: 12120 Comm: syz.3.2499 Not tainted 6.10.0-syzkaller-04483-g0be9ae5486cd #0 [ 242.209968][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 242.220044][T12120] Call Trace: [ 242.223335][T12120] [ 242.226277][T12120] dump_stack_lvl+0x241/0x360 [ 242.230989][T12120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.236210][T12120] ? __pfx__printk+0x10/0x10 [ 242.240824][T12120] ? __pfx_lock_release+0x10/0x10 [ 242.245867][T12120] ? __fget_files+0x29/0x470 [ 242.250478][T12120] should_fail_ex+0x3b0/0x4e0 [ 242.255180][T12120] _copy_from_user+0x2f/0xe0 [ 242.259802][T12120] bpf_obj_get_info_by_fd+0x420/0x40f0 [ 242.265300][T12120] ? __lock_acquire+0x1346/0x1fd0 [ 242.270346][T12120] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 242.276299][T12120] ? __might_fault+0xc6/0x120 [ 242.280992][T12120] ? bpf_lsm_bpf+0x9/0x10 [ 242.285323][T12120] ? security_bpf+0x87/0xb0 [ 242.289822][T12120] __sys_bpf+0x685/0x810 [ 242.294059][T12120] ? __pfx___sys_bpf+0x10/0x10 [ 242.298837][T12120] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 242.304819][T12120] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.311154][T12120] ? do_syscall_64+0x100/0x230 [ 242.315916][T12120] __x64_sys_bpf+0x7c/0x90 [ 242.320334][T12120] do_syscall_64+0xf3/0x230 [ 242.324831][T12120] ? clear_bhb_loop+0x35/0x90 [ 242.329507][T12120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.335392][T12120] RIP: 0033:0x7ff8e5775b59 [ 242.339802][T12120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.359399][T12120] RSP: 002b:00007ff8e661f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.367804][T12120] RAX: ffffffffffffffda RBX: 00007ff8e5905f60 RCX: 00007ff8e5775b59 [ 242.375851][T12120] RDX: 0000000000000010 RSI: 0000000020000300 RDI: 000000000000000f [ 242.383810][T12120] RBP: 00007ff8e661f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 242.391769][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.399734][T12120] R13: 000000000000000b R14: 00007ff8e5905f60 R15: 00007ffdc04eff88 [ 242.407709][T12120] [ 242.531747][T12107] netlink: 'syz.2.2496': attribute type 10 has an invalid length. [ 242.620794][ T4493] Bluetooth: hci3: unexpected subevent 0x05 length: 14 > 12 [ 242.673299][ T8702] hsr_slave_0: left promiscuous mode [ 242.697766][ T8702] hsr_slave_1: left promiscuous mode [ 242.720796][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.742122][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.767600][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.775077][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.843438][ T8702] veth1_macvtap: left promiscuous mode [ 242.856463][ T8702] veth0_macvtap: left promiscuous mode [ 242.862263][ T8702] veth1_vlan: left promiscuous mode [ 242.885989][ T8702] veth0_vlan: left promiscuous mode [ 242.898021][ T4493] Bluetooth: hci1: command tx timeout [ 242.898977][ T5098] Bluetooth: hci2: command 0x0406 tx timeout [ 243.773849][ T8702] team0 (unregistering): Port device team_slave_1 removed [ 243.837491][ T8702] team0 (unregistering): Port device team_slave_0 removed [ 244.412084][T11986] team0: Port device team_slave_0 added [ 244.432084][T11986] team0: Port device team_slave_1 added [ 244.466149][T12143] netlink: 'syz.0.2508': attribute type 63 has an invalid length. [ 244.474001][T12143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2508'. [ 244.529088][T12143] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.663425][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 244.897886][T11986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.904880][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.976963][ T54] Bluetooth: hci1: command tx timeout [ 245.014382][T11986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.068863][T11986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.112047][T11986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.143119][T11986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.197459][T12196] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2525'. [ 245.414541][T11986] hsr_slave_0: entered promiscuous mode [ 245.450615][T11986] hsr_slave_1: entered promiscuous mode [ 245.475633][T11986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.496143][T11986] Cannot create hsr debugfs directory [ 245.529041][T12210] netlink: 'syz.2.2530': attribute type 10 has an invalid length. [ 245.572984][T12210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2530'. [ 245.612927][T12210] ipvlan1: entered promiscuous mode [ 245.644298][T12210] ipvlan1: entered allmulticast mode [ 245.682536][T12210] veth0_vlan: entered allmulticast mode [ 245.728270][T12210] bridge0: port 4(ipvlan1) entered blocking state [ 245.771047][T12210] bridge0: port 4(ipvlan1) entered disabled state [ 245.830804][T12210] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 245.897597][T12211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2529'. [ 246.266344][T12245] FAULT_INJECTION: forcing a failure. [ 246.266344][T12245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.281540][T12245] CPU: 0 PID: 12245 Comm: syz.0.2537 Not tainted 6.10.0-syzkaller-04483-g0be9ae5486cd #0 [ 246.291381][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 246.301543][T12245] Call Trace: [ 246.304840][T12245] [ 246.307789][T12245] dump_stack_lvl+0x241/0x360 [ 246.312497][T12245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.317717][T12245] ? __pfx__printk+0x10/0x10 [ 246.322335][T12245] ? snprintf+0xda/0x120 [ 246.326604][T12245] should_fail_ex+0x3b0/0x4e0 [ 246.331311][T12245] _copy_to_user+0x2f/0xb0 [ 246.335746][T12245] simple_read_from_buffer+0xca/0x150 [ 246.341142][T12245] proc_fail_nth_read+0x1e9/0x250 [ 246.346172][T12245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.351725][T12245] ? rw_verify_area+0x520/0x6b0 [ 246.356569][T12245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.362109][T12245] vfs_read+0x204/0xbc0 [ 246.366267][T12245] ? __pfx_lock_release+0x10/0x10 [ 246.371288][T12245] ? __pfx_vfs_read+0x10/0x10 [ 246.375957][T12245] ? bpf_lsm_bpf+0x9/0x10 [ 246.380291][T12245] ? __fget_files+0x29/0x470 [ 246.384872][T12245] ? __fget_files+0x3f6/0x470 [ 246.389551][T12245] ksys_read+0x1a0/0x2c0 [ 246.393796][T12245] ? __pfx_ksys_read+0x10/0x10 [ 246.398556][T12245] ? do_syscall_64+0x100/0x230 [ 246.403315][T12245] ? do_syscall_64+0xb6/0x230 [ 246.407989][T12245] do_syscall_64+0xf3/0x230 [ 246.412483][T12245] ? clear_bhb_loop+0x35/0x90 [ 246.417156][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.423041][T12245] RIP: 0033:0x7f8a19b7463c [ 246.427450][T12245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 246.447050][T12245] RSP: 002b:00007f8a1a8d5040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.455459][T12245] RAX: ffffffffffffffda RBX: 00007f8a19d05f60 RCX: 00007f8a19b7463c [ 246.463420][T12245] RDX: 000000000000000f RSI: 00007f8a1a8d50b0 RDI: 0000000000000005 [ 246.471380][T12245] RBP: 00007f8a1a8d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.479340][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.487300][T12245] R13: 000000000000000b R14: 00007f8a19d05f60 R15: 00007ffd1b13e868 [ 246.495294][T12245] [ 247.055994][ T54] Bluetooth: hci1: command tx timeout [ 247.104438][T12280] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 247.119511][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'. [ 248.142866][T12334] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2563'. [ 248.380346][T12343] netlink: 'syz.0.2568': attribute type 1 has an invalid length. [ 248.391132][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2568'. [ 248.886814][T11986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.966419][T11986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.013145][T11986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.079490][T11986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.472811][T11986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.561808][T11986] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.637212][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.644533][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.739970][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.747320][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.059399][T12384] netlink: 'syz.2.2585': attribute type 10 has an invalid length. [ 250.636459][T12392] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 250.668406][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2588'. [ 251.173290][T11986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.411481][T11986] veth0_vlan: entered promiscuous mode [ 251.466986][T11986] veth1_vlan: entered promiscuous mode [ 251.558860][T11986] veth0_macvtap: entered promiscuous mode [ 251.589030][T11986] veth1_macvtap: entered promiscuous mode [ 251.661940][T12444] netlink: 'syz.3.2604': attribute type 10 has an invalid length. [ 251.674269][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.704369][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.728371][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.749526][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.765095][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.776339][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.786624][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.797543][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.809540][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.820476][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.860269][T11986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.889392][T12454] netlink: 'syz.2.2608': attribute type 1 has an invalid length. [ 251.909093][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2608'. [ 251.939213][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.965814][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.985873][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.003496][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.023036][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.042246][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.052663][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.093328][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.113375][T11986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.128522][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.162423][T11986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.196284][T11986] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.207449][T11986] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.216687][T11986] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.225548][T11986] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.240129][T12471] netlink: 'syz.2.2611': attribute type 10 has an invalid length. [ 252.719061][T11986] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 252.729373][T11986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.774192][ T8702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.808641][ T8702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.891628][ T8702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.911045][ T8702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.006353][ T8714] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.510209][ T8714] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.715622][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.725631][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.736605][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.755542][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.764178][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.779901][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.185324][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.191743][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.331857][ T8714] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.474578][ T8714] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.916396][ T8714] bridge_slave_1: left allmulticast mode [ 256.934073][ T8714] bridge_slave_1: left promiscuous mode [ 256.948466][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.998673][ T8714] bridge_slave_0: left allmulticast mode [ 257.016541][ T8714] bridge_slave_0: left promiscuous mode [ 257.034352][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.511961][T12721] netlink: 'syz.2.2675': attribute type 3 has an invalid length. [ 257.539682][T12721] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2675'. [ 257.856718][ T54] Bluetooth: hci1: command tx timeout [ 258.676065][ T8714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.695304][ T8714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.722948][ T8714] bond0 (unregistering): Released all slaves [ 258.780323][T12639] chnl_net:caif_netlink_parms(): no params data found [ 259.396074][T12639] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.419725][T12639] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.446704][T12639] bridge_slave_0: entered allmulticast mode [ 259.483338][T12639] bridge_slave_0: entered promiscuous mode [ 259.753565][T12639] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.776000][T12639] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.783300][T12639] bridge_slave_1: entered allmulticast mode [ 259.794673][T12639] bridge_slave_1: entered promiscuous mode [ 259.839018][ T8714] hsr_slave_0: left promiscuous mode [ 259.876425][ T8714] hsr_slave_1: left promiscuous mode [ 259.894303][T12837] netlink: 'syz.4.2701': attribute type 3 has an invalid length. [ 259.906226][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.917581][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.934838][T12837] netlink: 'syz.4.2701': attribute type 1 has an invalid length. [ 259.936191][ T54] Bluetooth: hci1: command tx timeout [ 259.956868][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.982988][T12837] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.2701'. [ 260.007672][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.118937][T12839] netlink: 'syz.0.2703': attribute type 3 has an invalid length. [ 260.133488][ T8714] veth1_macvtap: left promiscuous mode [ 260.139432][T12839] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2703'. [ 260.151587][ T8714] veth0_macvtap: left promiscuous mode [ 260.157478][ T8714] veth1_vlan: left promiscuous mode [ 260.163273][ T8714] veth0_vlan: left promiscuous mode [ 260.695021][ T8714] team0 (unregistering): Port device team_slave_1 removed [ 260.738039][ T8714] team0 (unregistering): Port device team_slave_0 removed [ 261.258321][T12639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.293791][T12639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.557285][T12639] team0: Port device team_slave_0 added [ 261.575612][T12639] team0: Port device team_slave_1 added [ 261.728111][T12639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.735085][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.773147][T12639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.836479][T12639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.843449][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.913231][T12639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.016035][ T54] Bluetooth: hci1: command tx timeout [ 262.229246][T12639] hsr_slave_0: entered promiscuous mode [ 262.290555][T12639] hsr_slave_1: entered promiscuous mode [ 262.308439][T12639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.354165][T12639] Cannot create hsr debugfs directory [ 262.408380][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.435904][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.450035][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.458266][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.470217][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 262.486473][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.570654][T12898] netlink: 'syz.3.2723': attribute type 4 has an invalid length. [ 262.583484][T12898] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2723'. [ 263.089928][ T8714] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.342545][ T8714] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.493458][ T8714] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.682952][ T8714] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.096006][ T54] Bluetooth: hci1: command tx timeout [ 264.336495][ T8714] ip6gretap0: left allmulticast mode [ 264.352158][ T8714] ip6gretap0: left promiscuous mode [ 264.372741][ T8714] bridge0: port 3(ip6gretap0) entered disabled state [ 264.415525][ T8714] bridge_slave_1: left allmulticast mode [ 264.431567][ T8714] bridge_slave_1: left promiscuous mode [ 264.446514][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.534953][ T8714] bridge_slave_0: left allmulticast mode [ 264.558853][ T8714] bridge_slave_0: left promiscuous mode [ 264.564638][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.578108][ T54] Bluetooth: hci0: command tx timeout [ 265.342936][ T8714] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 265.510551][ T8714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.522756][ T8714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.541361][ T8714] bond0 (unregistering): (slave team0): Releasing backup interface [ 265.565463][ T8714] bond0 (unregistering): Released all slaves [ 265.600536][T12893] chnl_net:caif_netlink_parms(): no params data found [ 266.106664][T12893] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.114381][T12893] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.121998][T12893] bridge_slave_0: entered allmulticast mode [ 266.130856][T12893] bridge_slave_0: entered promiscuous mode [ 266.144040][T12639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.172248][T12639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.234265][T12893] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.263520][T12893] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.290523][T12893] bridge_slave_1: entered allmulticast mode [ 266.293381][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.304146][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.308951][T12893] bridge_slave_1: entered promiscuous mode [ 266.311704][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.324992][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.334824][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.342221][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.349672][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.357013][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.365538][T12639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.372433][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.380228][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.388517][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.395842][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.403174][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.410545][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.424602][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.431983][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.439356][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.446965][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.455065][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.465870][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.473174][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.481024][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.488449][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.495897][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.503508][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.510835][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.518425][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.525764][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.533034][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.540371][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.547686][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.554962][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.562483][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.563604][T12639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.570319][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.586967][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.594273][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.601596][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.608944][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.616259][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.623551][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.630885][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.638208][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.645488][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.652837][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.660354][ T5098] Bluetooth: hci0: command tx timeout [ 266.665961][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.673241][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.681154][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.688533][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.695854][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.703159][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.710518][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.717866][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.725862][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.733184][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.740776][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.748128][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.755429][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.766013][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.773305][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.780763][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.788634][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.796026][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.803298][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.810630][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.818057][ T54] Bluetooth: hci2: unexpected subevent 0x1a length: 14 > 6 [ 266.923992][ T8714] hsr_slave_0: left promiscuous mode [ 266.988765][ T8714] hsr_slave_1: left promiscuous mode [ 267.007924][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.015389][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.032789][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.051833][ T8714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.100901][ T8714] veth1_macvtap: left promiscuous mode [ 267.118714][ T8714] veth0_macvtap: left promiscuous mode [ 267.132350][ T8714] veth1_vlan: left promiscuous mode [ 267.150540][ T8714] veth0_vlan: left promiscuous mode [ 268.244764][ T8714] team0 (unregistering): Port device team_slave_1 removed [ 268.337816][ T8714] team0 (unregistering): Port device team_slave_0 removed [ 268.738508][ T54] Bluetooth: hci0: command tx timeout [ 269.062084][T12893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.074419][T13080] netlink: 'syz.3.2780': attribute type 46 has an invalid length. [ 269.131572][T12893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.261839][T12893] team0: Port device team_slave_0 added [ 269.366681][T12893] team0: Port device team_slave_1 added [ 269.533197][T12893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.566109][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.669086][T12893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.729733][T12893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.755763][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.846106][T12893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.051068][T12893] hsr_slave_0: entered promiscuous mode [ 270.080304][T12893] hsr_slave_1: entered promiscuous mode [ 270.208375][T12639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.283226][T12639] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.437297][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.444458][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.551940][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.559148][ T5106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.833331][ T54] Bluetooth: hci0: command tx timeout [ 271.671114][T12639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.825582][T12893] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.882327][T12893] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.925918][T12893] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.996269][T12893] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.138401][T12639] veth0_vlan: entered promiscuous mode [ 272.214253][T12639] veth1_vlan: entered promiscuous mode [ 272.391188][T12639] veth0_macvtap: entered promiscuous mode [ 272.460425][T12639] veth1_macvtap: entered promiscuous mode [ 272.493160][T13219] netlink: 'syz.3.2819': attribute type 1 has an invalid length. [ 272.516698][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2819'. [ 272.600017][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.642878][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.677437][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.704869][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.738086][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.774678][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.795106][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.815498][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.853918][T12639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.917817][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.954290][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.974512][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.992670][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.033310][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.060601][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.082310][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.115747][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.151972][T12639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.213249][T12893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.268962][T12639] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.296349][T12639] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.313284][T12639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.325754][T12639] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.495354][T12893] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.554427][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.561620][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.589542][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.596756][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.642781][T12639] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 273.678502][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.715870][ T8714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.724433][T13264] netlink: 'syz.3.2831': attribute type 10 has an invalid length. [ 273.742738][ T8714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.770421][T13264] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 273.949264][T13269] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2832'. [ 273.999103][ T8720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.045293][ T8720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.891025][ T8717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.012646][T12893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.165416][ T8717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.270419][T12893] veth0_vlan: entered promiscuous mode [ 275.313016][T12893] veth1_vlan: entered promiscuous mode [ 275.439469][T12893] veth0_macvtap: entered promiscuous mode [ 275.496250][T12893] veth1_macvtap: entered promiscuous mode [ 275.679197][ T8717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.761452][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.800523][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.836220][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.872479][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.896063][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.943355][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.967247][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.979110][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.993220][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.996059][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.019428][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.035525][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 276.043309][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.053353][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.060767][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.071682][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.143985][T12893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.155098][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.165868][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.175850][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.275125][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.317905][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.371477][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.419979][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.477022][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.528880][T12893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.573617][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.639334][T12893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.684914][T12893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.714464][T12893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.731614][T12893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.745495][T12893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.277993][ T8717] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.294118][T13338] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2845'. [ 277.350437][T13332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2845'. [ 277.474442][T13353] netlink: 'syz.4.2852': attribute type 3 has an invalid length. [ 277.503206][T13353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2852'. [ 277.620821][T13361] netlink: 'syz.3.2855': attribute type 8 has an invalid length. [ 277.658129][T13361] netlink: 'syz.3.2855': attribute type 7 has an invalid length. [ 277.683769][T13361] netlink: 185032 bytes leftover after parsing attributes in process `syz.3.2855'. [ 277.884311][T12893] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 277.915626][T12893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.965984][T13361] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2855'. [ 278.019213][T13367] netlink: 'syz.3.2855': attribute type 19 has an invalid length. [ 278.043336][ T8717] bridge_slave_1: left allmulticast mode [ 278.081383][ T8717] bridge_slave_1: left promiscuous mode [ 278.095485][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.130573][ T8717] bridge_slave_0: left allmulticast mode [ 278.150303][ T8717] bridge_slave_0: left promiscuous mode [ 278.170615][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.186501][ T54] Bluetooth: hci1: command tx timeout [ 278.756606][ T8717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.772112][ T8717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.783159][ T8717] bond0 (unregistering): Released all slaves [ 278.818002][ T8720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.876076][ T8720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.068065][ T8710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.180911][T13414] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2867'. [ 280.194610][ T8710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.209137][T13333] chnl_net:caif_netlink_parms(): no params data found [ 280.255942][ T54] Bluetooth: hci1: command tx timeout [ 280.293956][T13414] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2867'. [ 280.516180][ T8717] hsr_slave_0: left promiscuous mode [ 280.589068][ T8717] hsr_slave_1: left promiscuous mode [ 280.598957][T13426] netlink: 'syz.4.2871': attribute type 9 has an invalid length. [ 280.632962][T13426] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2871'. [ 280.666503][ T8717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.685182][ T8717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.701371][ T8717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.710169][ T8717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.785653][ T8717] veth1_macvtap: left promiscuous mode [ 280.803643][ T8717] veth0_macvtap: left promiscuous mode [ 280.814464][ T8717] veth1_vlan: left promiscuous mode [ 280.820692][ T8717] veth0_vlan: left promiscuous mode [ 281.703652][ T8717] team0 (unregistering): Port device team_slave_1 removed [ 281.744762][ T8717] team0 (unregistering): Port device team_slave_0 removed [ 282.135660][T13451] netlink: 'syz.4.2877': attribute type 10 has an invalid length. [ 282.196429][T13451] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 282.336292][ T54] Bluetooth: hci1: command tx timeout [ 282.350581][T13333] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.397762][T13333] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.421774][T13333] bridge_slave_0: entered allmulticast mode [ 282.429577][T13333] bridge_slave_0: entered promiscuous mode [ 282.440482][T13469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2881'. [ 282.462415][T13473] netlink: 'syz.0.2882': attribute type 1 has an invalid length. [ 282.477427][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 282.488038][T13333] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.506222][T13333] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.543644][T13333] bridge_slave_1: entered allmulticast mode [ 282.551350][T13333] bridge_slave_1: entered promiscuous mode [ 282.693463][T13333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.728523][T13333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.842614][T13333] team0: Port device team_slave_0 added [ 282.856809][T13480] netlink: 'syz.4.2885': attribute type 10 has an invalid length. [ 282.927615][T13333] team0: Port device team_slave_1 added [ 283.081054][T13333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.091825][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.126119][T13333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.143618][T13333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.184972][T13333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.248200][T13333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.311038][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.320843][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.329698][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.347391][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.364627][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.373713][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.468704][ T8717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.504832][T13501] netlink: 'syz.0.2889': attribute type 10 has an invalid length. [ 283.523447][T13509] netlink: 'syz.4.2891': attribute type 10 has an invalid length. [ 283.619140][ T8717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.415885][ T54] Bluetooth: hci1: command tx timeout [ 284.735220][ T8717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.776015][T13529] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 284.783768][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2900'. [ 284.898367][T13333] hsr_slave_0: entered promiscuous mode [ 284.915261][T13333] hsr_slave_1: entered promiscuous mode [ 284.929198][T13333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.947653][T13333] Cannot create hsr debugfs directory [ 285.014786][ T8717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.465987][ T54] Bluetooth: hci0: command tx timeout [ 285.820532][ T8717] bridge_slave_1: left allmulticast mode [ 285.834730][ T8717] bridge_slave_1: left promiscuous mode [ 285.841789][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.874090][ T8717] bridge_slave_0: left allmulticast mode [ 285.884338][ T8717] bridge_slave_0: left promiscuous mode [ 285.896663][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.423695][ T8717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.456425][ T8717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.492523][ T8717] bond0 (unregistering): Released all slaves [ 287.023215][T13502] chnl_net:caif_netlink_parms(): no params data found [ 287.285565][ T8717] hsr_slave_0: left promiscuous mode [ 287.314345][ T8717] hsr_slave_1: left promiscuous mode [ 287.325098][ T8717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.340108][ T8717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.356775][ T8717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.364224][ T8717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.412157][ T8717] veth1_macvtap: left promiscuous mode [ 287.426378][ T8717] veth0_macvtap: left promiscuous mode [ 287.432063][ T8717] veth1_vlan: left promiscuous mode [ 287.448651][ T8717] veth0_vlan: left promiscuous mode [ 287.535929][ T54] Bluetooth: hci0: command tx timeout [ 287.953598][ T8717] team0 (unregistering): Port device team_slave_1 removed [ 287.991909][ T8717] team0 (unregistering): Port device team_slave_0 removed [ 288.741581][T13502] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.760561][T13502] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.773387][T13502] bridge_slave_0: entered allmulticast mode [ 288.784776][T13502] bridge_slave_0: entered promiscuous mode [ 288.794166][T13502] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.804169][T13502] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.812129][T13502] bridge_slave_1: entered allmulticast mode [ 288.822721][T13502] bridge_slave_1: entered promiscuous mode [ 288.922336][T13502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.937145][T13686] tc_dump_action: action bad kind [ 288.962570][T13685] netlink: 'syz.3.2946': attribute type 10 has an invalid length. [ 289.009236][T13675] netlink: 'syz.0.2943': attribute type 29 has an invalid length. [ 289.031763][T13502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.103322][T13333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.140409][T13333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.177041][T13502] team0: Port device team_slave_0 added [ 289.199532][T13502] team0: Port device team_slave_1 added [ 289.293610][T13333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.334212][T13333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.370883][T13502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.381814][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.415967][T13502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.443387][T13502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.476118][T13502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.508995][T13502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.624051][ T54] Bluetooth: hci0: command tx timeout [ 289.790302][T13502] hsr_slave_0: entered promiscuous mode [ 289.813442][T13502] hsr_slave_1: entered promiscuous mode [ 289.843477][T13723] netlink: 'syz.4.2960': attribute type 10 has an invalid length. [ 290.234793][T13333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.393350][T13333] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.443140][T13748] netlink: 'syz.3.2969': attribute type 10 has an invalid length. [ 290.569847][T13650] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.577088][T13650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.613590][T13650] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.620838][T13650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.190291][T13502] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 291.232438][T13502] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.281403][T13502] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.336516][T13502] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 291.638476][T13333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.695957][ T54] Bluetooth: hci0: command tx timeout [ 291.733816][T13502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.832908][T13502] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.918280][T13650] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.925448][T13650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.942511][T13333] veth0_vlan: entered promiscuous mode [ 292.011488][T13650] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.018719][T13650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.102350][T13333] veth1_vlan: entered promiscuous mode [ 292.225376][T13502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.408236][T13333] veth0_macvtap: entered promiscuous mode [ 292.457814][T13333] veth1_macvtap: entered promiscuous mode [ 292.547633][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.564930][T13817] netlink: 'syz.0.2985': attribute type 3 has an invalid length. [ 292.580131][T13817] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2985'. [ 292.588015][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.635797][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.675117][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.726253][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.745931][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.784194][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.795443][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.825078][T13333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.017664][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.055233][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.087574][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.115869][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.144949][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.170240][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.198010][T13333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.225972][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.255130][T13333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.278002][T13849] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2992'. [ 293.332034][T13333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.357818][T13333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.366874][T13333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.375584][T13333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.438376][T13849] netlink: 'syz.3.2992': attribute type 29 has an invalid length. [ 293.459681][T13851] netlink: 'syz.3.2992': attribute type 29 has an invalid length. [ 293.620856][T13502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.774848][T13333] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 293.805779][T13333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.847116][T13866] netlink: 'syz.3.2996': attribute type 1 has an invalid length. [ 293.873636][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 293.940458][ T5406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.978527][ T5406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.095232][ T5410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.104779][T13502] veth0_vlan: entered promiscuous mode [ 294.134047][ T5410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.179037][T13502] veth1_vlan: entered promiscuous mode [ 294.323074][T13502] veth0_macvtap: entered promiscuous mode [ 294.366474][T13890] netlink: 'syz.4.3002': attribute type 10 has an invalid length. [ 294.375308][T13502] veth1_macvtap: entered promiscuous mode [ 294.465304][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.491308][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.519364][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.553444][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.588419][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.620498][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.648269][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.679928][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.722180][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.745738][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.768129][T13502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.799201][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.835812][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.875786][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.900007][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.927894][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.946082][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.965798][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.995800][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.017110][T13502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.038367][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.061367][T13502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.244449][T13502] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.271479][T13502] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.305896][T13502] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.314653][T13502] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.675160][ T5406] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.855673][ T5406] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.928699][T13502] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 295.944466][T13502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.019758][ T5406] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.052616][ T8717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.077854][ T8717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.146789][ T5406] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.202714][ T8717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.230563][ T8717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.389612][ T5406] bridge_slave_1: left allmulticast mode [ 296.395300][ T5406] bridge_slave_1: left promiscuous mode [ 296.451804][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.927179][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.945094][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.954398][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.965131][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.973928][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.983248][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.289032][ T5406] bridge_slave_0: left allmulticast mode [ 297.315741][ T5406] bridge_slave_0: left promiscuous mode [ 297.323615][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.543775][T13980] netlink: 'syz.4.3022': attribute type 6 has an invalid length. [ 297.552434][T13980] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3022'. [ 297.880115][ T5406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.891691][ T5406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.906821][ T5406] bond0 (unregistering): Released all slaves [ 298.028410][T13989] netlink: 'syz.4.3026': attribute type 2 has an invalid length. [ 298.046107][T13989] netlink: 'syz.4.3026': attribute type 11 has an invalid length. [ 298.069438][T13989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3026'. [ 299.056846][ T54] Bluetooth: hci1: command tx timeout [ 299.552704][T13967] chnl_net:caif_netlink_parms(): no params data found [ 299.897653][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.922634][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 299.944025][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 299.990761][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.013841][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 300.031660][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.784038][T13967] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.809454][T13967] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.836073][T13967] bridge_slave_0: entered allmulticast mode [ 300.857535][T13967] bridge_slave_0: entered promiscuous mode [ 300.905403][T13967] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.925873][T13967] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.933134][T13967] bridge_slave_1: entered allmulticast mode [ 300.957595][T13967] bridge_slave_1: entered promiscuous mode [ 301.136220][ T5098] Bluetooth: hci1: command tx timeout [ 301.828882][ T5406] hsr_slave_0: left promiscuous mode [ 301.867085][ T5406] hsr_slave_1: left promiscuous mode [ 301.880545][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.902548][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.912642][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.920338][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.968780][ T5406] veth1_macvtap: left promiscuous mode [ 301.974361][ T5406] veth0_macvtap: left promiscuous mode [ 301.991785][ T5406] veth1_vlan: left promiscuous mode [ 301.999718][ T5406] veth0_vlan: left promiscuous mode [ 302.026915][T14121] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3052'. [ 302.096074][ T5098] Bluetooth: hci0: command tx timeout [ 302.644167][ T5406] team0 (unregistering): Port device team_slave_1 removed [ 302.692877][ T5406] team0 (unregistering): Port device team_slave_0 removed [ 303.226298][ T5098] Bluetooth: hci1: command tx timeout [ 303.280769][T14078] netlink: 'syz.4.3042': attribute type 29 has an invalid length. [ 303.409927][T13967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.479774][T13967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.670962][T13967] team0: Port device team_slave_0 added [ 303.680359][T13967] team0: Port device team_slave_1 added [ 303.915569][T13967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.955805][T13967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.032605][T13967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.076818][T13967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.102463][T13967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.133552][T14194] netlink: 'syz.0.3076': attribute type 3 has an invalid length. [ 304.147972][T13967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.156385][T14194] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3076'. [ 304.194863][ T5098] Bluetooth: hci0: command tx timeout [ 304.232826][T14050] chnl_net:caif_netlink_parms(): no params data found [ 304.435129][ T5406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.624974][T13967] hsr_slave_0: entered promiscuous mode [ 304.649282][T13967] hsr_slave_1: entered promiscuous mode [ 304.675663][T13967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.683479][T13967] Cannot create hsr debugfs directory [ 304.811063][ T5406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.910797][T14235] netlink: 'syz.0.3087': attribute type 3 has an invalid length. [ 304.947028][T14235] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3087'. [ 304.967479][T14234] netlink: 'syz.0.3087': attribute type 3 has an invalid length. [ 304.975655][T14234] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3087'. [ 305.098148][ T5406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.304180][ T5098] Bluetooth: hci1: command tx timeout [ 305.359631][ T5406] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.442221][T14050] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.466182][T14050] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.493754][T14050] bridge_slave_0: entered allmulticast mode [ 305.511575][T14050] bridge_slave_0: entered promiscuous mode [ 305.529086][T14265] netlink: 'syz.0.3093': attribute type 29 has an invalid length. [ 305.539323][T14050] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.547872][T14050] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.555160][T14050] bridge_slave_1: entered allmulticast mode [ 305.563334][T14050] bridge_slave_1: entered promiscuous mode [ 305.570709][T14270] netlink: 'syz.0.3093': attribute type 29 has an invalid length. [ 305.666444][T14275] netlink: 'syz.0.3093': attribute type 29 has an invalid length. [ 305.686503][T14265] netlink: 'syz.0.3093': attribute type 29 has an invalid length. [ 305.739454][T14050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.749300][T14270] netlink: 'syz.0.3093': attribute type 29 has an invalid length. [ 305.820635][T14050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.863645][T14265] netlink: 'syz.0.3093': attribute type 29 has an invalid length. [ 305.935495][T14285] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3099'. [ 305.959012][T14286] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3099'. [ 306.039185][T14050] team0: Port device team_slave_0 added [ 306.097507][T14050] team0: Port device team_slave_1 added [ 306.258755][ T5098] Bluetooth: hci0: command tx timeout [ 306.428381][T14050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.435496][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.549142][T14050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.574268][ T5406] bridge_slave_1: left allmulticast mode [ 306.598773][ T5406] bridge_slave_1: left promiscuous mode [ 306.626693][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.679595][ T5406] bridge_slave_0: left allmulticast mode [ 306.698881][ T5406] bridge_slave_0: left promiscuous mode [ 306.704672][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.356191][ T5406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.387677][ T5406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.409393][ T5406] bond0 (unregistering): Released all slaves [ 307.516793][T14050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.523874][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.554040][T14050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.609556][T14320] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3114'. [ 307.621834][T14321] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.640931][T14321] bridge0: left promiscuous mode [ 307.675281][T14330] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.682541][T14330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.692950][T14330] bridge0: entered promiscuous mode [ 307.900928][T13650] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.908161][T13650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.297646][T14050] hsr_slave_0: entered promiscuous mode [ 308.310386][T14050] hsr_slave_1: entered promiscuous mode [ 308.322369][T14050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.336561][ T5098] Bluetooth: hci0: command tx timeout [ 308.340844][T14050] Cannot create hsr debugfs directory [ 308.381297][ T5406] hsr_slave_0: left promiscuous mode [ 308.422685][ T5406] hsr_slave_1: left promiscuous mode [ 308.430489][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.441717][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.458524][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.476255][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.550222][ T5406] veth1_macvtap: left promiscuous mode [ 308.561181][ T5406] veth0_macvtap: left promiscuous mode [ 308.567575][ T5406] veth1_vlan: left promiscuous mode [ 308.572992][ T5406] veth0_vlan: left promiscuous mode [ 309.069533][ T5406] team0 (unregistering): Port device team_slave_1 removed [ 309.107004][ T5406] team0 (unregistering): Port device team_slave_0 removed [ 309.501933][T14394] validate_nla: 3 callbacks suppressed [ 309.501970][T14394] netlink: 'syz.3.3143': attribute type 10 has an invalid length. [ 309.783787][T13967] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 309.967070][T13967] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.057111][T13967] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.082798][T13967] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.513011][T13967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.605075][T13967] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.651956][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.659183][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.692426][T14436] netlink: 'syz.4.3159': attribute type 10 has an invalid length. [ 310.778664][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.785878][ T9855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.924421][T14050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.979615][T14050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.013393][T14050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.072685][T14050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.419597][T14050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.510673][T14050] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.589230][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.596415][ T5106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.650024][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.657232][ T5106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.927144][T13967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.987626][T14050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.020738][T14050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.313153][T13967] veth0_vlan: entered promiscuous mode [ 312.371213][T13967] veth1_vlan: entered promiscuous mode [ 312.620659][T14502] syzkaller0: entered promiscuous mode [ 312.696409][T14502] syzkaller0: entered allmulticast mode [ 312.740620][T13967] veth0_macvtap: entered promiscuous mode [ 313.869547][T13967] veth1_macvtap: entered promiscuous mode [ 314.048554][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.082547][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.093573][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.110336][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.123393][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.134486][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.145448][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.156666][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.186223][T13967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.248304][T14050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.288448][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.323849][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.333934][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.364771][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.383962][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.416519][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.435123][T13967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.468249][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.482821][T13967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.590557][T13967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.618865][T13967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.636247][T13967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.653448][T13967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.413300][T14050] veth0_vlan: entered promiscuous mode [ 316.504596][T13967] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 316.514764][T13967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.568066][ T5406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.588908][ T5406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.609010][T14050] veth1_vlan: entered promiscuous mode [ 317.161623][T14636] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3207'. [ 317.620320][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.629367][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.596298][T14619] netlink: 'syz.0.3202': attribute type 1 has an invalid length. [ 318.596403][T14642] netlink: 'syz.4.3209': attribute type 10 has an invalid length. [ 318.604527][T14619] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3202'. [ 318.642107][ T5406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.658279][ T5406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.731860][T14050] veth0_macvtap: entered promiscuous mode [ 318.744184][T14050] veth1_macvtap: entered promiscuous mode [ 318.798329][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.820927][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.856435][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.871997][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.882534][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.898839][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.950034][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.968619][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.006447][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.030266][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.047575][T14050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.084203][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.127165][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.155373][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.172264][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.205494][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.223118][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.233272][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.243815][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.255653][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.266275][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.289299][T14050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.357260][ T5098] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 319.394554][T14050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.421220][T14050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.440807][T14050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.459878][T14050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.681837][ T8720] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.723262][T14679] netlink: 'syz.3.3226': attribute type 10 has an invalid length. [ 319.755313][T14680] netlink: 'syz.0.3225': attribute type 29 has an invalid length. [ 319.822919][ T8720] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.852910][T14050] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 319.866871][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.884486][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.895144][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.922528][ T8720] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.980488][ T8717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.991410][ T8717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.027790][ T8720] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.181997][ T8720] bridge_slave_1: left allmulticast mode [ 320.188797][ T8720] bridge_slave_1: left promiscuous mode [ 320.194539][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.209545][ T8720] bridge_slave_0: left allmulticast mode [ 320.215192][ T8720] bridge_slave_0: left promiscuous mode [ 320.221434][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.780860][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.790077][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.798770][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.815652][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.828707][ T8720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.841959][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 320.857556][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.885592][ T8720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.904245][ T8720] bond0 (unregistering): Released all slaves [ 321.238427][ T8720] hsr_slave_0: left promiscuous mode [ 321.310440][ T8720] hsr_slave_1: left promiscuous mode [ 321.324774][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.345952][ T8720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.359558][ T8720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.394426][ T8720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.517059][ T8720] veth1_macvtap: left promiscuous mode [ 321.522679][ T8720] veth0_macvtap: left promiscuous mode [ 321.568334][ T8720] veth1_vlan: left promiscuous mode [ 321.573747][ T8720] veth0_vlan: left promiscuous mode [ 321.930513][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.941757][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.951466][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.959901][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.979552][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.987610][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.558738][ T8717] tipc: Subscription rejected, illegal request [ 322.692246][ T8720] team0 (unregistering): Port device team_slave_1 removed [ 322.754705][ T8720] team0 (unregistering): Port device team_slave_0 removed [ 322.896030][ T54] Bluetooth: hci0: command tx timeout [ 323.341005][T14730] netlink: 'syz.3.3238': attribute type 11 has an invalid length. [ 323.386461][T14744] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 323.434029][T14766] netlink: 'syz.4.3250': attribute type 10 has an invalid length. [ 323.491303][T14766] team0: Device ipvlan1 failed to register rx_handler [ 323.614697][T14764] syzkaller0: entered promiscuous mode [ 323.620993][T14764] syzkaller0: entered allmulticast mode [ 323.630221][T14695] chnl_net:caif_netlink_parms(): no params data found [ 324.016449][ T54] Bluetooth: hci1: command tx timeout [ 324.976082][ T54] Bluetooth: hci0: command tx timeout [ 325.006371][T14780] netlink: 'syz.0.3255': attribute type 10 has an invalid length. [ 325.025197][T14780] mac80211_hwsim hwsim16 wlan1: left allmulticast mode [ 326.004948][T14695] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.044782][T14695] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.066854][T14695] bridge_slave_0: entered allmulticast mode [ 326.074640][T14695] bridge_slave_0: entered promiscuous mode [ 326.104290][ T54] Bluetooth: hci1: command tx timeout [ 326.258902][T14695] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.282803][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.315230][T14695] bridge_slave_1: entered allmulticast mode [ 326.331623][T14695] bridge_slave_1: entered promiscuous mode [ 326.517906][T14695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.527984][T14818] netlink: 'syz.3.3268': attribute type 10 has an invalid length. [ 326.559528][T14695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.933360][T14695] team0: Port device team_slave_0 added [ 327.056352][ T54] Bluetooth: hci0: command tx timeout [ 327.059216][ T8720] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.124621][T14695] team0: Port device team_slave_1 added [ 327.252087][ T8720] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.262233][T14852] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3279'. [ 327.277166][T14852] openvswitch: netlink: Multiple metadata blocks provided [ 327.309984][T14695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.325383][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.393018][T14695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.423947][T14737] chnl_net:caif_netlink_parms(): no params data found [ 327.547922][ T8720] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.571143][T14695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.578258][T14695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.612270][T14695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.670732][ T8720] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.129533][T14737] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.154958][T14737] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.178732][T14737] bridge_slave_0: entered allmulticast mode [ 328.186858][ T54] Bluetooth: hci1: command tx timeout [ 328.203376][T14737] bridge_slave_0: entered promiscuous mode [ 328.214931][T14695] hsr_slave_0: entered promiscuous mode [ 328.241143][T14695] hsr_slave_1: entered promiscuous mode [ 328.343045][T14737] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.378460][T14737] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.407413][T14737] bridge_slave_1: entered allmulticast mode [ 328.430014][T14737] bridge_slave_1: entered promiscuous mode [ 328.591657][T14737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.708772][T14737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.942641][T14737] team0: Port device team_slave_0 added [ 329.002778][T14737] team0: Port device team_slave_1 added [ 329.136170][ T54] Bluetooth: hci0: command tx timeout [ 329.144378][ T8720] veth0_to_bond: left allmulticast mode [ 329.166122][ T8720] veth0_to_bond: left promiscuous mode [ 329.180591][T14917] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 329.181396][ T8720] bridge0: port 4(veth0_to_bond) entered disabled state [ 329.190697][T14917] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3298'. [ 329.205286][T14917] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 329.242260][ T8720] bridge0: port 3(batadv0) entered disabled state [ 329.288461][ T8720] bridge_slave_1: left allmulticast mode [ 329.336570][ T8720] bridge_slave_1: left promiscuous mode [ 329.348641][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.361428][ T8720] bridge_slave_0: left allmulticast mode [ 329.367494][ T8720] bridge_slave_0: left promiscuous mode [ 329.373314][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.396599][ T8720] bridge_slave_1: left allmulticast mode [ 329.402285][ T8720] bridge_slave_1: left promiscuous mode [ 329.418754][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.440395][ T8720] bridge_slave_0: left allmulticast mode [ 329.446857][ T8720] bridge_slave_0: left promiscuous mode [ 329.453224][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.924637][ T8720] team0: Port device bridge0 removed [ 330.088149][ T8720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.099950][ T8720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.112634][ T8720] bond0 (unregistering): (slave team0): Releasing backup interface [ 330.122927][ T8720] bond0 (unregistering): Released all slaves [ 330.214417][ T8720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.227333][ T8720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.237626][ T8720] bond0 (unregistering): Released all slaves [ 330.266049][ T54] Bluetooth: hci1: command tx timeout [ 330.267861][T14737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.279071][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.333512][T14737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.413839][T14737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.433566][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.479383][T14946] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3308'. [ 330.515575][T14737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.873143][T14737] hsr_slave_0: entered promiscuous mode [ 330.889301][T14967] netlink: 'syz.4.3315': attribute type 10 has an invalid length. [ 330.898314][T14967] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.3315'. [ 330.898751][T14737] hsr_slave_1: entered promiscuous mode [ 330.925959][T14737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.933669][T14737] Cannot create hsr debugfs directory [ 330.956965][T14958] netlink: 'syz.3.3313': attribute type 2 has an invalid length. [ 330.966537][T14958] netlink: 'syz.3.3313': attribute type 11 has an invalid length. [ 330.974397][T14958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3313'. [ 331.008046][T14964] netlink: 'syz.0.3311': attribute type 10 has an invalid length. [ 331.035445][T14964] team0: Device ipvlan1 failed to register rx_handler [ 331.188539][T14959] syzkaller0: entered promiscuous mode [ 331.195252][T14959] syzkaller0: entered allmulticast mode [ 331.324897][T14967] netlink: 'syz.4.3315': attribute type 29 has an invalid length. [ 331.338467][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3315'. [ 331.635854][T14982] ip6_tunnel: non-ECT from db5b:6861:58bb:cf68:875a:5996:9ff5:7b00 with DS=0x3f [ 332.468493][T14993] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3324'. [ 332.537734][T14995] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3324'. [ 332.981082][ C0] ================================================================== [ 332.989183][ C0] BUG: KASAN: slab-use-after-free in rhashtable_lookup_fast+0x77a/0x9b0 [ 332.997531][ C0] Read of size 4 at addr ffff888070130008 by task rcu_exp_gp_kthr/19 [ 333.005582][ C0] [ 333.007894][ C0] CPU: 0 PID: 19 Comm: rcu_exp_gp_kthr Not tainted 6.10.0-syzkaller-04483-g0be9ae5486cd #0 [ 333.017866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 333.027919][ C0] Call Trace: [ 333.031187][ C0] [ 333.034064][ C0] dump_stack_lvl+0x241/0x360 [ 333.038744][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.043937][ C0] ? __pfx__printk+0x10/0x10 [ 333.048525][ C0] ? _printk+0xd5/0x120 [ 333.052675][ C0] ? __virt_addr_valid+0x183/0x530 [ 333.057784][ C0] ? __virt_addr_valid+0x183/0x530 [ 333.062893][ C0] print_report+0x169/0x550 [ 333.067395][ C0] ? __virt_addr_valid+0x183/0x530 [ 333.072502][ C0] ? __virt_addr_valid+0x183/0x530 [ 333.077605][ C0] ? __virt_addr_valid+0x45f/0x530 [ 333.082707][ C0] ? __phys_addr+0xba/0x170 [ 333.087202][ C0] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 333.092741][ C0] kasan_report+0x143/0x180 [ 333.097243][ C0] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 333.102785][ C0] rhashtable_lookup_fast+0x77a/0x9b0 [ 333.108150][ C0] ? rhashtable_lookup_fast+0xe9/0x9b0 [ 333.113602][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 333.118356][ C0] ? __pfx_rhashtable_lookup_fast+0x10/0x10 [ 333.124243][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 333.129014][ C0] ila_nf_input+0x1fe/0x3c0 [ 333.133859][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 333.138618][ C0] ? ila_nf_input+0xe4/0x3c0 [ 333.143226][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 333.148247][ C0] nf_hook_slow+0xc3/0x220 [ 333.152664][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 333.157850][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 333.163035][ C0] NF_HOOK+0x29e/0x450 [ 333.167094][ C0] ? skb_orphan+0x4b/0xd0 [ 333.171413][ C0] ? NF_HOOK+0x9a/0x450 [ 333.175557][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 333.180137][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 333.185326][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 333.189997][ C0] __netif_receive_skb+0x1ea/0x650 [ 333.195102][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 333.200117][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 333.205742][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.211709][ C0] ? __pfx_lock_release+0x10/0x10 [ 333.216722][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 333.221828][ C0] process_backlog+0x662/0x15b0 [ 333.226675][ C0] ? process_backlog+0x33b/0x15b0 [ 333.231693][ C0] ? __pfx_process_backlog+0x10/0x10 [ 333.236965][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.242935][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.249252][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.255220][ C0] __napi_poll+0xcb/0x490 [ 333.259547][ C0] net_rx_action+0x89b/0x1240 [ 333.264222][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 333.269328][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 333.274782][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.281101][ C0] handle_softirqs+0x2c4/0x970 [ 333.285857][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 333.290608][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 333.295884][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 333.301073][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 333.305651][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 333.310846][ C0] irq_exit_rcu+0x9/0x30 [ 333.315072][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 333.320706][ C0] [ 333.323621][ C0] [ 333.326548][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.332529][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 333.339022][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 8e 8d 65 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 e3 bf ce f5 65 8b 05 94 d1 6c 74 85 c0 74 43 48 c7 04 24 0e 36 [ 333.358619][ C0] RSP: 0018:ffffc90000187ba0 EFLAGS: 00000206 [ 333.364677][ C0] RAX: f2fc9cef5599fc00 RBX: 1ffff92000030f78 RCX: ffffffff8173011a [ 333.372635][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcac920 RDI: 0000000000000001 [ 333.380599][ C0] RBP: ffffc90000187c30 R08: ffffffff92fcf5d7 R09: 1ffffffff25f9eba [ 333.388558][ C0] R10: dffffc0000000000 R11: fffffbfff25f9ebb R12: dffffc0000000000 [ 333.396516][ C0] R13: 1ffff92000030f74 R14: ffffc90000187bc0 R15: 0000000000000246 [ 333.404480][ C0] ? mark_lock+0x9a/0x350 [ 333.408806][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.415121][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 333.420132][ C0] ? autoremove_wake_function+0x37/0x110 [ 333.425770][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 333.431048][ C0] rcu_exp_sel_wait_wake+0x18ac/0x1db0 [ 333.436509][ C0] ? __pfx_rcu_exp_sel_wait_wake+0x10/0x10 [ 333.442310][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 333.447417][ C0] kthread_worker_fn+0x500/0xaf0 [ 333.452348][ C0] ? kthread_worker_fn+0xdc/0xaf0 [ 333.457365][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 333.462664][ C0] ? __pfx_kthread_worker_fn+0x10/0x10 [ 333.468140][ C0] kthread+0x2f0/0x390 [ 333.472218][ C0] ? __pfx_kthread_worker_fn+0x10/0x10 [ 333.477672][ C0] ? __pfx_kthread+0x10/0x10 [ 333.482256][ C0] ret_from_fork+0x4b/0x80 [ 333.486664][ C0] ? __pfx_kthread+0x10/0x10 [ 333.491245][ C0] ret_from_fork_asm+0x1a/0x30 [ 333.496007][ C0] [ 333.499009][ C0] [ 333.501314][ C0] Allocated by task 4549: [ 333.505635][ C0] kasan_save_track+0x3f/0x80 [ 333.510308][ C0] __kasan_kmalloc+0x98/0xb0 [ 333.514886][ C0] __kmalloc_noprof+0x1f9/0x400 [ 333.519721][ C0] tomoyo_realpath_from_path+0xcf/0x5e0 [ 333.525254][ C0] tomoyo_path_number_perm+0x23a/0x880 [ 333.530699][ C0] tomoyo_path_mknod+0x176/0x1b0 [ 333.535626][ C0] security_path_mknod+0xf8/0x150 [ 333.540640][ C0] path_openat+0xca2/0x3470 [ 333.545131][ C0] do_filp_open+0x235/0x490 [ 333.549628][ C0] do_sys_openat2+0x13e/0x1d0 [ 333.554289][ C0] __x64_sys_openat+0x247/0x2a0 [ 333.559127][ C0] do_syscall_64+0xf3/0x230 [ 333.563619][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.569500][ C0] [ 333.571806][ C0] Freed by task 4549: [ 333.575770][ C0] kasan_save_track+0x3f/0x80 [ 333.580446][ C0] kasan_save_free_info+0x40/0x50 [ 333.585457][ C0] poison_slab_object+0xe0/0x150 [ 333.590382][ C0] __kasan_slab_free+0x37/0x60 [ 333.595133][ C0] kfree+0x149/0x360 [ 333.599012][ C0] tomoyo_realpath_from_path+0x5a9/0x5e0 [ 333.604632][ C0] tomoyo_path_number_perm+0x23a/0x880 [ 333.610076][ C0] tomoyo_path_mknod+0x176/0x1b0 [ 333.615002][ C0] security_path_mknod+0xf8/0x150 [ 333.620016][ C0] path_openat+0xca2/0x3470 [ 333.624504][ C0] do_filp_open+0x235/0x490 [ 333.628996][ C0] do_sys_openat2+0x13e/0x1d0 [ 333.633658][ C0] __x64_sys_openat+0x247/0x2a0 [ 333.638495][ C0] do_syscall_64+0xf3/0x230 [ 333.642981][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.648861][ C0] [ 333.651169][ C0] The buggy address belongs to the object at ffff888070130000 [ 333.651169][ C0] which belongs to the cache kmalloc-4k of size 4096 [ 333.665228][ C0] The buggy address is located 8 bytes inside of [ 333.665228][ C0] freed 4096-byte region [ffff888070130000, ffff888070131000) [ 333.678936][ C0] [ 333.681245][ C0] The buggy address belongs to the physical page: [ 333.687648][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70130 [ 333.696397][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 333.704876][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 333.712412][ C0] page_type: 0xffffefff(slab) [ 333.717076][ C0] raw: 00fff00000000040 ffff888015042140 dead000000000122 0000000000000000 [ 333.725645][ C0] raw: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 333.734219][ C0] head: 00fff00000000040 ffff888015042140 dead000000000122 0000000000000000 [ 333.742873][ C0] head: 0000000000000000 0000000000040004 00000001ffffefff 0000000000000000 [ 333.751527][ C0] head: 00fff00000000003 ffffea0001c04c01 ffffffffffffffff 0000000000000000 [ 333.760184][ C0] head: 0000000700000008 0000000000000000 00000000ffffffff 0000000000000000 [ 333.768833][ C0] page dumped because: kasan: bad access detected [ 333.775233][ C0] page_owner tracks the page as allocated [ 333.780931][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4549, tgid 4549 (udevd), ts 330618164348, free_ts 330604304487 [ 333.802447][ C0] post_alloc_hook+0x1f3/0x230 [ 333.807198][ C0] get_page_from_freelist+0x2e4c/0x2f10 [ 333.812729][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 333.817912][ C0] alloc_slab_page+0x5f/0x120 [ 333.822576][ C0] allocate_slab+0x5a/0x2f0 [ 333.827073][ C0] ___slab_alloc+0xcd1/0x14b0 [ 333.831736][ C0] __slab_alloc+0x58/0xa0 [ 333.836053][ C0] __kmalloc_noprof+0x257/0x400 [ 333.840891][ C0] tomoyo_realpath_from_path+0xcf/0x5e0 [ 333.846424][ C0] tomoyo_path_number_perm+0x23a/0x880 [ 333.851865][ C0] tomoyo_path_mknod+0x176/0x1b0 [ 333.856793][ C0] security_path_mknod+0xf8/0x150 [ 333.861808][ C0] path_openat+0xca2/0x3470 [ 333.866297][ C0] do_filp_open+0x235/0x490 [ 333.870788][ C0] do_sys_openat2+0x13e/0x1d0 [ 333.875452][ C0] __x64_sys_openat+0x247/0x2a0 [ 333.880287][ C0] page last free pid 8720 tgid 8720 stack trace: [ 333.886597][ C0] free_unref_page+0xd22/0xea0 [ 333.891347][ C0] __folio_put+0x3b9/0x620 [ 333.895749][ C0] free_large_kmalloc+0x105/0x1c0 [ 333.900758][ C0] kfree+0x1c4/0x360 [ 333.904635][ C0] rhashtable_free_and_destroy+0x7c6/0x920 [ 333.910428][ C0] ila_xlat_exit_net+0x55/0x110 [ 333.915268][ C0] cleanup_net+0x802/0xcc0 [ 333.919669][ C0] process_scheduled_works+0xa2c/0x1830 [ 333.925198][ C0] worker_thread+0x86d/0xd40 [ 333.929772][ C0] kthread+0x2f0/0x390 [ 333.933834][ C0] ret_from_fork+0x4b/0x80 [ 333.938238][ C0] ret_from_fork_asm+0x1a/0x30 [ 333.943007][ C0] [ 333.945330][ C0] Memory state around the buggy address: [ 333.950940][ C0] ffff88807012ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.958994][ C0] ffff88807012ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.967040][ C0] >ffff888070130000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.975082][ C0] ^ [ 333.979389][ C0] ffff888070130080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.987433][ C0] ffff888070130100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.995471][ C0] ================================================================== [ 334.003612][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 334.010814][ C0] CPU: 0 PID: 19 Comm: rcu_exp_gp_kthr Not tainted 6.10.0-syzkaller-04483-g0be9ae5486cd #0 [ 334.020803][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 334.030866][ C0] Call Trace: [ 334.034138][ C0] [ 334.036971][ C0] dump_stack_lvl+0x241/0x360 [ 334.041643][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.046829][ C0] ? __pfx__printk+0x10/0x10 [ 334.051408][ C0] ? vscnprintf+0x5d/0x90 [ 334.055733][ C0] panic+0x349/0x860 [ 334.059622][ C0] ? check_panic_on_warn+0x21/0xb0 [ 334.064729][ C0] ? __pfx_panic+0x10/0x10 [ 334.069145][ C0] ? mark_lock+0x9a/0x350 [ 334.073466][ C0] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 334.079348][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 334.085227][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 334.091541][ C0] ? print_report+0x502/0x550 [ 334.096223][ C0] check_panic_on_warn+0x86/0xb0 [ 334.101151][ C0] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 334.106720][ C0] end_report+0x77/0x160 [ 334.110952][ C0] kasan_report+0x154/0x180 [ 334.115449][ C0] ? rhashtable_lookup_fast+0x77a/0x9b0 [ 334.120987][ C0] rhashtable_lookup_fast+0x77a/0x9b0 [ 334.126355][ C0] ? rhashtable_lookup_fast+0xe9/0x9b0 [ 334.131805][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 334.136563][ C0] ? __pfx_rhashtable_lookup_fast+0x10/0x10 [ 334.142446][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 334.147209][ C0] ila_nf_input+0x1fe/0x3c0 [ 334.151706][ C0] ? __pfx_ila_cmpfn+0x10/0x10 [ 334.156462][ C0] ? ila_nf_input+0xe4/0x3c0 [ 334.161042][ C0] ? __pfx_ila_nf_input+0x10/0x10 [ 334.166065][ C0] nf_hook_slow+0xc3/0x220 [ 334.170480][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 334.175666][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 334.180855][ C0] NF_HOOK+0x29e/0x450 [ 334.184912][ C0] ? skb_orphan+0x4b/0xd0 [ 334.189229][ C0] ? NF_HOOK+0x9a/0x450 [ 334.193371][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 334.197949][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 334.203137][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 334.207800][ C0] __netif_receive_skb+0x1ea/0x650 [ 334.212907][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 334.217920][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 334.223547][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.229514][ C0] ? __pfx_lock_release+0x10/0x10 [ 334.234529][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 334.239640][ C0] process_backlog+0x662/0x15b0 [ 334.244482][ C0] ? process_backlog+0x33b/0x15b0 [ 334.249497][ C0] ? __pfx_process_backlog+0x10/0x10 [ 334.254766][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.260739][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.267056][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.273028][ C0] __napi_poll+0xcb/0x490 [ 334.277354][ C0] net_rx_action+0x89b/0x1240 [ 334.282031][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 334.287138][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 334.292589][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.298910][ C0] handle_softirqs+0x2c4/0x970 [ 334.303666][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 334.308416][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 334.313688][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 334.318877][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 334.323451][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 334.328638][ C0] irq_exit_rcu+0x9/0x30 [ 334.332864][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 334.338490][ C0] [ 334.341418][ C0] [ 334.344334][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.350303][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 334.356797][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 8e 8d 65 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 e3 bf ce f5 65 8b 05 94 d1 6c 74 85 c0 74 43 48 c7 04 24 0e 36 [ 334.376395][ C0] RSP: 0018:ffffc90000187ba0 EFLAGS: 00000206 [ 334.382451][ C0] RAX: f2fc9cef5599fc00 RBX: 1ffff92000030f78 RCX: ffffffff8173011a [ 334.390409][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcac920 RDI: 0000000000000001 [ 334.398366][ C0] RBP: ffffc90000187c30 R08: ffffffff92fcf5d7 R09: 1ffffffff25f9eba [ 334.406326][ C0] R10: dffffc0000000000 R11: fffffbfff25f9ebb R12: dffffc0000000000 [ 334.414296][ C0] R13: 1ffff92000030f74 R14: ffffc90000187bc0 R15: 0000000000000246 [ 334.422272][ C0] ? mark_lock+0x9a/0x350 [ 334.426601][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 334.432925][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 334.437936][ C0] ? autoremove_wake_function+0x37/0x110 [ 334.443559][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 334.448842][ C0] rcu_exp_sel_wait_wake+0x18ac/0x1db0 [ 334.454308][ C0] ? __pfx_rcu_exp_sel_wait_wake+0x10/0x10 [ 334.460106][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 334.465211][ C0] kthread_worker_fn+0x500/0xaf0 [ 334.470142][ C0] ? kthread_worker_fn+0xdc/0xaf0 [ 334.475157][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 334.480438][ C0] ? __pfx_kthread_worker_fn+0x10/0x10 [ 334.485913][ C0] kthread+0x2f0/0x390 [ 334.489986][ C0] ? __pfx_kthread_worker_fn+0x10/0x10 [ 334.495446][ C0] ? __pfx_kthread+0x10/0x10 [ 334.500035][ C0] ret_from_fork+0x4b/0x80 [ 334.504452][ C0] ? __pfx_kthread+0x10/0x10 [ 334.509037][ C0] ret_from_fork_asm+0x1a/0x30 [ 334.513972][ C0] [ 334.517202][ C0] Kernel Offset: disabled [ 334.521521][ C0] Rebooting in 86400 seconds..