last executing test programs: 1m53.964958883s ago: executing program 0 (id=1241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x2a0}, 0x948, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001600)=""/4087, 0xff7}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001540)=""/172, 0xac}, {&(0x7f0000001240)=""/118, 0x76}], 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x334) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x301) close(r7) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESOCT=r5, @ANYRESOCT=r5, @ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x1e, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)) 1m35.673555717s ago: executing program 0 (id=1241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x2a0}, 0x948, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001600)=""/4087, 0xff7}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001540)=""/172, 0xac}, {&(0x7f0000001240)=""/118, 0x76}], 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x334) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x301) close(r7) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESOCT=r5, @ANYRESOCT=r5, @ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x1e, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)) 1m15.48244547s ago: executing program 0 (id=1241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x2a0}, 0x948, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001600)=""/4087, 0xff7}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001540)=""/172, 0xac}, {&(0x7f0000001240)=""/118, 0x76}], 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x334) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x301) close(r7) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESOCT=r5, @ANYRESOCT=r5, @ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x1e, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)) 53.774286619s ago: executing program 0 (id=1241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x2a0}, 0x948, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001600)=""/4087, 0xff7}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001540)=""/172, 0xac}, {&(0x7f0000001240)=""/118, 0x76}], 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x334) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x301) close(r7) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESOCT=r5, @ANYRESOCT=r5, @ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x1e, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)) 26.936275965s ago: executing program 0 (id=1241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x2a0}, 0x948, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001600)=""/4087, 0xff7}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001540)=""/172, 0xac}, {&(0x7f0000001240)=""/118, 0x76}], 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x334) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x301) close(r7) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESOCT=r5, @ANYRESOCT=r5, @ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x1e, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)) 5.034237428s ago: executing program 1 (id=2632): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 4.896957624s ago: executing program 0 (id=1241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x90) r1 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x2a0}, 0x948, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001600)=""/4087, 0xff7}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001540)=""/172, 0xac}, {&(0x7f0000001240)=""/118, 0x76}], 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x334) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x301) close(r7) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESOCT=r5, @ANYRESOCT=r5, @ANYRESOCT=r9], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x1e, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)) 3.717288385s ago: executing program 1 (id=2634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000700000085000000210000002c0000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.717061866s ago: executing program 2 (id=2455): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b50901000000008526000000f9ffffff180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037200000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.63550361s ago: executing program 2 (id=2637): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000020100000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b5090100000000852600000000000085180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.474032958s ago: executing program 2 (id=2639): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8000, 0x791, 0x1, 0x1404, 0xffffffffffffffff, 0xa8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8000, 0x791, 0x1, 0x1404, 0xffffffffffffffff, 0xa8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000052bd957100000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000080)='jbd2_handle_stats\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x28, 0x1, 0x0) (async) socket$kcm(0x28, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) 3.10312863s ago: executing program 1 (id=2644): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500deff0f0000001b0786eeb6c073cd7ccaff7f1b67dd12f8ae730e0dd1afef67c346e0affc0d8be7d57b05fa7014dc987016f35abe55d6f2079f40737e26d88782af362de7ee0d2f01ef0e0c1e7589556229a32d36c7af48e1013589da34e56f7506074a378a1a"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (rerun: 32) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], 0x0}, 0x90) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff02, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc60070212010a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) socket$kcm(0xa, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x10, 0x2}, 0x48) (async) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305828, &(0x7f00000005c0)=0x8) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9, 0x3, 0x0, 0x5d31, 0x89280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xa, 0xffffffffffffffff, 0x1) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00}, 0x90) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91524fc60040207000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRES8=r6, @ANYRESHEX, @ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) 1.440976009s ago: executing program 3 (id=2647): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000ca85000000ae000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007b8af8ff00000000f5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.253743703s ago: executing program 2 (id=2650): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xb7, 0x3, 0x7, 0xfff, 0x200}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x3}, 0x90) close(r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1802000000000000000000000000000018", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001a000000000000000c0000000c0000000500000005000000"], &(0x7f0000000300)=""/147, 0x29, 0x93, 0x1, 0x101}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x1, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x4}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @remote}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58}, 0x10) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) 1.253483603s ago: executing program 4 (id=2651): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7964, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 1.21158176s ago: executing program 3 (id=2652): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) 1.169831142s ago: executing program 1 (id=2653): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000030100000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b5090100000000852600000000000085180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.0702184s ago: executing program 4 (id=2654): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) unlink(0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.069330514s ago: executing program 3 (id=2655): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ab96000000000000000000006e00000a8a0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="6a0ac4ff000000005ac456536ddedc3498d7c65eba3b6f8cc764c46503c36472cedd1adb03e8d80f2a2a3a2fe539eb73278f99d47328bc89ebe76dba46de642394544bf2ed98403ae20d1925fbfe6fd15c28056c1ceeb26edd2ed1e01449c2d24c3dae69e5160c05fd7c043eb5df687a99787d91034cf7433010716ec92061495e146d23e789ac66869035a7b9343f859f8863cf8ebab97f142587db8bcb143cce52e0ccc7a0521e2622b9302d2c8eaa6b146305c6618847b82fcf8bec5742edf3786b628a943a52"], &(0x7f0000000480)='GPL\x00'}, 0x80) socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0x10, 0x400000000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07"], 0xfe33) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r1, 0x0, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r3, &(0x7f00000006c0)="9085fae900c4545a27087cd14373bba12d8f06ac9cde9f62d43d413feda27886449eec57b2d40aeec16a6e09aeca02d25ed5683be7cbd752edb562a2544ff33955f44d1a5c6a044b58ad0dfbb2a12e42ea4411831997e320410fcd0cbf8f24e2e16a218967ba6383e071933673e2593b9759dcd2f411b75669c3bf57c9183bc64059963e4df348b735aff3212c72e39d80d7a43f4ea914ddb5f35f66b8277040d0be0ce35c6375f651216f4b862af3cdc582be0ca91d18e935bd36be09cb214aa0365674cd7ad1a57c7a950c54c7a7e94f7eda4e4f09b4ee23d1a9f2b88f575b14aac288", &(0x7f0000000180)=""/32, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000dabadbcdfab4009709", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, r5, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d00000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$inet(r0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0x2e, 0x0, &(0x7f00000008c0)="76389e0d99dd7087326d147483ddd0569ba56a88a8550588fb7dd803000000eae9613dd492958a56da93eb53a1965fa8ae4cb6f27fa38625afa9e2406810060771e325d490c0937951f4e1602b614b1f3d83b36cf4208ad0c42e49ae6a2cad3ecbeb402c28a78009e0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0xfffffffffffffd67}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x24}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r8}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x0, 0x1b, &(0x7f0000000a40)=ANY=[@ANYBLOB="950000000000000018110000", @ANYRES8=r7, @ANYRESDEC=r2, @ANYRES16=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af86100000000bfa20007020000f8ffffffb703000008000000b704040000000000850000008200000047109ffa9801deffef87d9b9abf2c7209d36c49f02fef1ec218a7203ce4c00fb29d4db1b7c347e79c76e0e36cbb34273c32e87fb228992ad7f3a7a253da8f4f7c9c71a9f57430017a6fb7da2a12d3b36b2138b90c62d265a5dbe65a8c280abfdc6f88701a45016c8f0fed0cda7c564ec37f441a0243fd0262f078217c699570bd4e96165b20b78b7dfe42253beaafc9728e66d3852fd1d31feed0243b47f9ed4de4b0d8dd71ac6a98a1270d6de7c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r9}, 0x38) 1.024639171s ago: executing program 3 (id=2656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000700000085000000210000002d0000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.018130798s ago: executing program 1 (id=2657): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b50901000000008526000000f9ffffff180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037570200f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 762.041227ms ago: executing program 1 (id=2658): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xc, 0x9, 0x0, 0xffffffffffffffc0}], &(0x7f0000000100)='GPL\x00', 0x3, 0xf3, &(0x7f0000000200)=""/243, 0x41000, 0x40, '\x00', 0x0, 0x8, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0xd, 0x8, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000380)=[{0x2, 0x3, 0xd, 0xc}, {0x5, 0x1, 0x7, 0x4}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x3, 0xa, 0x1}, {0x0, 0x2, 0xe, 0xc}, {0x1, 0x0, 0x5, 0x7}, {0x5, 0x5, 0xb, 0x8}, {0x3, 0x5, 0x6, 0x6}], 0x10, 0x9}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000061"], 0x0, 0x52}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 761.759808ms ago: executing program 3 (id=2659): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000000d3912d8d000008deffff84000000a50004009500"/40], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) 760.146836ms ago: executing program 2 (id=2660): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000019e1aa0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b50901000000001826000000f9ffffff180100002020702500000000802020207b9af8ff00000000bda9f9ff0000000037010000f8ffffffb702000008000000b70300000000000004000000060000002da0000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 754.560281ms ago: executing program 4 (id=2661): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x196000}, 0x4002, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000004f00000000000000950000000000007964100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 638.763584ms ago: executing program 2 (id=2662): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x14}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xcd, &(0x7f0000000340)=""/205, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x833, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x490, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x72, &(0x7f0000000000), 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES8=r6, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0xef5, 0x2, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x0, 0x4, 0x0, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000000140), 0x2, 0x0) 624.718891ms ago: executing program 3 (id=2663): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffded) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) (async) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x400000000, 0xfffffffc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000300)={0xf, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000000}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x2, 0xffffffffffffffff, 0x3) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0xa, 0x1, 0x106) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 442.079632ms ago: executing program 4 (id=2664): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x61) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000240), 0x0}, 0x20) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x48}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004a0000004a00000006000000030000000100000f02000000010000000300000810000000edcc00000000000000030000000002000000050000000b000000080000000000000804000000000000000000000b00000000000000005f2e0000"], &(0x7f00000006c0)=""/134, 0x6a, 0x86, 0x1, 0x1ff}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x289, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 141.580713ms ago: executing program 4 (id=2665): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000488c) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x196000, 0x8000}, 0x4002, 0x2, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4f, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xcb, &(0x7f0000000300)=""/203}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$kcm(0x2b, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x43}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000003f0000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=2666): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) kernel console output (not intermixed with test programs): (bridge_slave_0) entered forwarding state [ 176.420461][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.427790][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.506451][ T9483] netlink: 67516 bytes leftover after parsing attributes in process `syz.1.1470'. [ 176.757024][ T9491] validate_nla: 8 callbacks suppressed [ 176.757042][ T9491] netlink: 'syz.4.1472': attribute type 21 has an invalid length. [ 176.826609][ T9491] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.834465][ T9491] IPv6: Can't replace route, no match found [ 177.196646][ T9114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.330615][ T9526] netlink: 'syz.2.1478': attribute type 29 has an invalid length. [ 177.369617][ T9114] veth0_vlan: entered promiscuous mode [ 177.416316][ T9114] veth1_vlan: entered promiscuous mode [ 177.523944][ T9114] veth0_macvtap: entered promiscuous mode [ 177.569833][ T9114] veth1_macvtap: entered promiscuous mode [ 177.671672][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.714733][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.755083][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.780927][ T9545] netlink: 'syz.3.1485': attribute type 8 has an invalid length. [ 177.793079][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.797166][ T9545] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1485'. [ 177.818871][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.832285][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.849853][ T9114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.869152][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.887408][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.901999][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.920150][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.930815][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.943569][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.960265][ T9114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.970557][ T9551] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1486'. [ 178.002126][ T9114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.014284][ T9114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.040452][ T9114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.074351][ T9114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.426782][ T7134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.472518][ T7134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.601739][ T7134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.642494][ T7134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.540708][ T9607] netlink: 'syz.3.1498': attribute type 21 has an invalid length. [ 179.575920][ T9607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1498'. [ 180.884804][ T7134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.015762][ T9661] veth0_vlan: entered allmulticast mode [ 181.282398][ T7134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.296894][ T4493] Bluetooth: hci2: command 0x0406 tx timeout [ 181.304615][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 181.380530][ T9661] veth0_vlan: left promiscuous mode [ 181.399696][ T9661] veth0_vlan: entered promiscuous mode [ 181.439504][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.453875][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.475925][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.502957][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.521825][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 181.529532][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.681964][ T7134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.972534][ T7134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.045560][ T9697] netlink: 'syz.4.1518': attribute type 3 has an invalid length. [ 182.130593][ T9697] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1518'. [ 182.283048][ T9697] netlink: 'syz.4.1518': attribute type 10 has an invalid length. [ 182.447811][ T9697] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.551549][ T9697] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.112636][ T5099] Bluetooth: hci3: Malformed Event: 0x13 [ 183.377886][ T9676] chnl_net:caif_netlink_parms(): no params data found [ 183.635573][ T5099] Bluetooth: hci1: command tx timeout [ 183.671622][ T7134] bridge_slave_1: left allmulticast mode [ 183.685585][ T7134] bridge_slave_1: left promiscuous mode [ 183.701615][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.731938][ T7134] bridge_slave_0: left allmulticast mode [ 183.769098][ T7134] bridge_slave_0: left promiscuous mode [ 183.775062][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.334761][ T7134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.361881][ T7134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.376463][ T7134] bond0 (unregistering): Released all slaves [ 184.401278][ T9749] netlink: 'syz.2.1528': attribute type 29 has an invalid length. [ 184.425900][ T9755] netlink: 'syz.1.1529': attribute type 4 has an invalid length. [ 184.635545][ T9777] veth0_vlan: left promiscuous mode [ 184.642967][ T9777] veth0_vlan: entered promiscuous mode [ 184.706342][ T9784] netlink: 'syz.2.1532': attribute type 8 has an invalid length. [ 184.746466][ T9784] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1532'. [ 184.768669][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.818700][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.865734][ T9676] bridge_slave_0: entered allmulticast mode [ 184.903515][ T9676] bridge_slave_0: entered promiscuous mode [ 184.939822][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.958028][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.994896][ T9676] bridge_slave_1: entered allmulticast mode [ 185.016968][ T9676] bridge_slave_1: entered promiscuous mode [ 185.256362][ T9797] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1538'. [ 185.281357][ T5145] bridge0: port 3(macvlan1) entered blocking state [ 185.288078][ T5145] bridge0: port 3(macvlan1) entered forwarding state [ 185.338682][ T9794] netlink: 'syz.1.1536': attribute type 3 has an invalid length. [ 185.347441][ T9794] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1536'. [ 185.361567][ T9797] netlink: 'syz.4.1538': attribute type 3 has an invalid length. [ 185.372300][ T9803] netlink: 'syz.1.1536': attribute type 10 has an invalid length. [ 185.421474][ T9803] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.454306][ T9803] Â: (slave team0): Enslaving as an active interface with an up link [ 185.485218][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.560525][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.705063][ T5099] Bluetooth: hci1: command tx timeout [ 185.819852][ T9676] team0: Port device team_slave_0 added [ 185.852268][ T9676] team0: Port device team_slave_1 added [ 186.005335][ T7134] hsr_slave_0: left promiscuous mode [ 186.058986][ T7134] hsr_slave_1: left promiscuous mode [ 186.075644][ T7134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.099505][ T7134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.118103][ T7134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.143411][ T7134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.250232][ T7134] veth1_macvtap: left promiscuous mode [ 186.285746][ T7134] veth0_macvtap: left promiscuous mode [ 186.307732][ T7134] veth1_vlan: left promiscuous mode [ 186.335713][ T7134] veth0_vlan: left promiscuous mode [ 187.689007][ T7134] team0 (unregistering): Port device team_slave_1 removed [ 187.724288][ T7134] team0 (unregistering): Port device team_slave_0 removed [ 187.786754][ T5099] Bluetooth: hci1: command tx timeout [ 188.156883][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.164640][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.249786][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.263528][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.272257][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.311793][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.356278][ T9880] netlink: 'syz.2.1557': attribute type 19 has an invalid length. [ 188.365918][ T9880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1557'. [ 188.603825][ T9676] hsr_slave_0: entered promiscuous mode [ 188.641483][ T9676] hsr_slave_1: entered promiscuous mode [ 188.662779][ T9676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.678057][ T9676] Cannot create hsr debugfs directory [ 188.928494][ T9909] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1562'. [ 189.466064][ T9931] netlink: 'syz.3.1567': attribute type 3 has an invalid length. [ 189.505716][ T9931] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1567'. [ 189.705787][ T9942] netlink: 'syz.3.1567': attribute type 10 has an invalid length. [ 189.823690][ T9942] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.836095][ T9953] netlink: 'syz.2.1574': attribute type 1 has an invalid length. [ 189.858990][ T5099] Bluetooth: hci1: command tx timeout [ 189.874227][ T9942] bond0: (slave team0): Enslaving as an active interface with an up link [ 190.122375][ T9966] netlink: 'syz.1.1578': attribute type 5 has an invalid length. [ 190.413499][ T9986] netlink: 'syz.4.1584': attribute type 3 has an invalid length. [ 190.475543][ T9986] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1584'. [ 190.643072][ T9990] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 190.695767][ T9990] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.1586'. [ 190.752112][ T9991] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 190.831922][ T9991] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.1586'. [ 190.912624][ T9676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.050059][T10011] netlink: 'syz.1.1590': attribute type 10 has an invalid length. [ 191.095589][T10011] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1590'. [ 191.135586][ T9676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.180921][ T9676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.246551][ T9676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.354859][T10028] vlan0: entered promiscuous mode [ 191.363561][T10028] vlan0: entered allmulticast mode [ 191.375943][T10028] veth0_vlan: entered allmulticast mode [ 191.709061][ T9676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.832935][ T9676] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.917789][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.925100][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.952606][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.959817][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.169685][ T9676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.191440][ T9676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.816993][T10092] netlink: 'syz.3.1611': attribute type 33 has an invalid length. [ 192.824957][T10092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1611'. [ 192.934705][T10092] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.972711][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.123827][ T9676] veth0_vlan: entered promiscuous mode [ 193.187447][ T9676] veth1_vlan: entered promiscuous mode [ 193.256688][ T9676] veth0_macvtap: entered promiscuous mode [ 193.279843][ T9676] veth1_macvtap: entered promiscuous mode [ 193.360006][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.386711][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.405487][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.416245][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.426654][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.460939][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.492675][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.553192][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.579322][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.617818][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.645182][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.675082][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.708141][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.739487][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.772516][T10124] netlink: 'syz.1.1622': attribute type 29 has an invalid length. [ 193.806117][ T9676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.826815][ T9676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.860957][ T9676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.880061][ T9676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.902571][T10127] delete_channel: no stack [ 193.983549][T10140] netlink: 'syz.3.1627': attribute type 1 has an invalid length. [ 194.020462][T10140] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1627'. [ 194.067872][T10140] netlink: 'syz.3.1627': attribute type 1 has an invalid length. [ 194.116131][T10140] netlink: 'syz.3.1627': attribute type 39 has an invalid length. [ 194.213850][T10140] veth0_macvtap: left promiscuous mode [ 194.353469][ T7129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.383844][ T7129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.464828][ T7134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.510841][ T7134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.543591][T10158] netlink: 'syz.3.1635': attribute type 10 has an invalid length. [ 194.562429][T10158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1635'. [ 194.584773][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.591211][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.608293][T10158] ipvlan1: entered promiscuous mode [ 194.637621][T10158] ipvlan1: entered allmulticast mode [ 194.653509][T10158] bridge0: port 3(ipvlan1) entered blocking state [ 194.682794][T10158] bridge0: port 3(ipvlan1) entered disabled state [ 194.704425][T10158] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 195.787003][T10204] netlink: 'syz.1.1649': attribute type 29 has an invalid length. [ 195.813526][T10204] netlink: 'syz.1.1649': attribute type 29 has an invalid length. [ 195.934200][T10209] netlink: 'syz.1.1649': attribute type 29 has an invalid length. [ 195.994428][ T5099] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 195.994462][ T5099] Bluetooth: unknown link type 69 [ 196.007304][ T5099] Bluetooth: hci0: connection err: -111 [ 196.388324][T10227] netlink: 'syz.1.1655': attribute type 1 has an invalid length. [ 196.399921][T10227] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1655'. [ 196.419903][T10224] netlink: 'syz.2.1658': attribute type 10 has an invalid length. [ 196.540079][T10227] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1655'. [ 196.616512][T10224] team0: Port device netdevsim0 added [ 196.678525][T10231] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 (while UP) [ 197.146821][T10237] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1662'. [ 197.171286][ T7131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.440259][ T7131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.509494][ T7131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.581055][ T7131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.821179][ T7131] bridge_slave_1: left allmulticast mode [ 197.837508][ T7131] bridge_slave_1: left promiscuous mode [ 197.855833][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.885814][ T7131] bridge_slave_0: left allmulticast mode [ 197.924218][ T7131] bridge_slave_0: left promiscuous mode [ 197.955330][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.327299][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.351707][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.361375][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.374374][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.384455][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.394984][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.711554][T10296] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1674'. [ 199.158754][ T7131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.174174][ T7131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.189794][ T7131] bond0 (unregistering): Released all slaves [ 199.216379][T10275] validate_nla: 5 callbacks suppressed [ 199.216393][T10275] netlink: 'syz.4.1670': attribute type 10 has an invalid length. [ 199.252355][T10275] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 199.844765][T10331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1686'. [ 199.871990][T10332] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1686'. [ 200.143605][T10347] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1690'. [ 200.276004][ T7131] hsr_slave_0: left promiscuous mode [ 200.296481][ T7131] hsr_slave_1: left promiscuous mode [ 200.310479][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.339974][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.366264][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.386303][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.430944][ T7131] veth1_macvtap: left promiscuous mode [ 200.453056][ T7131] veth0_macvtap: left promiscuous mode [ 200.459590][ T7131] veth1_vlan: left promiscuous mode [ 200.520170][ T5112] Bluetooth: hci1: command tx timeout [ 200.532129][ T7131] veth0_vlan: left promiscuous mode [ 200.556068][T10373] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1696'. [ 200.580514][T10373] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1696'. [ 200.939649][T10391] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.1699'. [ 201.184630][ T7131] team0 (unregistering): Port device team_slave_1 removed [ 201.220129][ T7131] team0 (unregistering): Port device team_slave_0 removed [ 202.055929][T10282] chnl_net:caif_netlink_parms(): no params data found [ 202.084476][T10426] netlink: 'syz.3.1707': attribute type 3 has an invalid length. [ 202.122728][T10426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1707'. [ 202.575377][ T5112] Bluetooth: hci1: command tx timeout [ 202.582127][T10448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.624904][T10282] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.634464][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.657831][T10282] bridge_slave_0: entered allmulticast mode [ 202.675170][T10282] bridge_slave_0: entered promiscuous mode [ 202.704417][T10282] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.723508][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.740728][ T5112] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 202.752252][T10282] bridge_slave_1: entered allmulticast mode [ 202.765166][T10282] bridge_slave_1: entered promiscuous mode [ 202.845969][T10451] wg2: entered allmulticast mode [ 202.924033][T10461] wg2: entered promiscuous mode [ 203.135497][T10282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.160400][T10282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.204015][T10485] netlink: 'syz.1.1722': attribute type 3 has an invalid length. [ 203.240912][T10485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1722'. [ 203.620050][T10282] team0: Port device team_slave_0 added [ 203.653701][T10282] team0: Port device team_slave_1 added [ 203.788937][T10282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.808602][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.846449][T10282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.903635][T10282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.933191][T10282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.969540][T10282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.297548][T10282] hsr_slave_0: entered promiscuous mode [ 204.345441][T10282] hsr_slave_1: entered promiscuous mode [ 204.379673][T10282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.408301][T10282] Cannot create hsr debugfs directory [ 204.665334][ T5112] Bluetooth: hci1: command tx timeout [ 206.474752][T10613] cgroup: fork rejected by pids controller in /syz3 [ 206.737498][ T5112] Bluetooth: hci1: command tx timeout [ 207.401868][T10759] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1763'. [ 207.448012][T10759] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1763'. [ 207.804960][T10282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.854905][T10282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.891814][T10282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.931646][T10282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.322983][T10282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.520284][T10282] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.758994][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.766232][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.810013][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.817259][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.878454][T10790] netlink: 'syz.2.1773': attribute type 33 has an invalid length. [ 208.928246][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.987161][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.996861][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.006401][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.014280][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.024950][T10790] bond0: entered promiscuous mode [ 209.033079][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.045448][T10790] bond_slave_0: entered promiscuous mode [ 209.057785][T10790] bond_slave_1: entered promiscuous mode [ 209.259008][T10282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.290408][T10282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.404118][T10282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.515902][T10282] veth0_vlan: entered promiscuous mode [ 210.570044][T10282] veth1_vlan: entered promiscuous mode [ 210.605918][T10794] chnl_net:caif_netlink_parms(): no params data found [ 210.741420][T10831] netlink: 16034 bytes leftover after parsing attributes in process `syz.2.1778'. [ 210.783831][T10831] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1778'. [ 210.813723][T10831] netlink: 16034 bytes leftover after parsing attributes in process `syz.2.1778'. [ 210.898513][T10794] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.925404][T10794] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.954623][T10794] bridge_slave_0: entered allmulticast mode [ 210.965929][T10794] bridge_slave_0: entered promiscuous mode [ 210.991479][T10282] veth0_macvtap: entered promiscuous mode [ 211.010771][T10794] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.022642][T10794] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.034641][T10794] bridge_slave_1: entered allmulticast mode [ 211.052265][T10794] bridge_slave_1: entered promiscuous mode [ 211.058680][ T5112] Bluetooth: hci3: command tx timeout [ 211.126047][T10282] veth1_macvtap: entered promiscuous mode [ 211.177617][T10794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.191490][T10794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.301357][T10794] team0: Port device team_slave_0 added [ 211.318813][T10794] team0: Port device team_slave_1 added [ 211.403024][T10860] netlink: 'syz.2.1784': attribute type 3 has an invalid length. [ 211.418860][T10860] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1784'. [ 211.454059][T10794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.476473][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.509783][T10794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.525754][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.540776][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.551618][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.562524][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.572821][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.585246][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.608128][T10282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.662116][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.702043][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.714766][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.726526][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.755104][T10282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.776763][T10282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.806796][T10282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.814889][T10794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.828352][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.914149][T10794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.098069][T10282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.124811][T10282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.147380][T10282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.156862][T10282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.198795][T10794] hsr_slave_0: entered promiscuous mode [ 212.252409][T10794] hsr_slave_1: entered promiscuous mode [ 212.287942][T10794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.298805][T10794] Cannot create hsr debugfs directory [ 212.501156][T10904] netlink: 'syz.1.1793': attribute type 27 has an invalid length. [ 212.525659][T10904] netlink: 'syz.1.1793': attribute type 4 has an invalid length. [ 212.554678][T10904] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1793'. [ 213.133036][T10914] veth1_macvtap: left promiscuous mode [ 213.143167][ T5112] Bluetooth: hci3: command tx timeout [ 213.206048][T10914] macsec0: entered promiscuous mode [ 213.600599][T10794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.682637][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.728773][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.878404][T10794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.307891][T10948] netlink: 'syz.1.1803': attribute type 37 has an invalid length. [ 214.407426][T10794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.447092][T10956] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1804'. [ 214.464712][ T7129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.482575][ T7129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.543956][T10794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.013616][T10794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.031735][T10794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.123379][T11006] netlink: 'syz.2.1812': attribute type 3 has an invalid length. [ 215.191085][T11006] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1812'. [ 215.215286][ T5112] Bluetooth: hci3: command tx timeout [ 215.249244][ T7132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.291953][T10794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.309834][T10794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.384793][ T7132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.492742][ T7132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.581121][ T7132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.685927][T10794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.743810][T10794] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.787058][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.794226][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.822970][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.830162][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.842820][ T7132] bridge_slave_1: left allmulticast mode [ 215.851943][ T7132] bridge_slave_1: left promiscuous mode [ 215.859676][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.872095][ T7132] bridge_slave_0: left allmulticast mode [ 215.878879][ T7132] bridge_slave_0: left promiscuous mode [ 215.884785][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.498357][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.511124][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.529601][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.541027][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.553969][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.561635][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.796947][ T7132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.814569][ T7132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.831762][ T7132] bond0 (unregistering): Released all slaves [ 217.020285][T10794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.298399][ T5099] Bluetooth: hci3: command tx timeout [ 217.597585][ T7132] hsr_slave_0: left promiscuous mode [ 217.622316][ T7132] hsr_slave_1: left promiscuous mode [ 217.833248][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.868517][ T7132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.931282][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.956116][ T7132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.020450][ T7132] veth1_macvtap: left promiscuous mode [ 218.032997][ T7132] veth0_macvtap: left promiscuous mode [ 218.048670][ T7132] veth1_vlan: left promiscuous mode [ 218.056176][ T7132] veth0_vlan: left promiscuous mode [ 218.474127][T11131] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1837'. [ 218.492010][T11131] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1837'. [ 218.502052][T11131] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1837'. [ 218.658133][ T5099] Bluetooth: hci1: command tx timeout [ 219.242699][ T7132] team0 (unregistering): Port device team_slave_1 removed [ 219.323894][ T7132] team0 (unregistering): Port device team_slave_0 removed [ 219.932227][T11133] batadv0: entered promiscuous mode [ 219.963969][T11134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.103279][T11139] netlink: 'syz.2.1839': attribute type 4 has an invalid length. [ 220.126145][T11139] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1839'. [ 220.280628][T10794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.360909][T11059] chnl_net:caif_netlink_parms(): no params data found [ 220.631540][T10794] veth0_vlan: entered promiscuous mode [ 220.696940][T10794] veth1_vlan: entered promiscuous mode [ 220.736081][ T5099] Bluetooth: hci1: command tx timeout [ 220.822664][T11059] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.850859][T11059] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.862924][T11059] bridge_slave_0: entered allmulticast mode [ 220.873687][T11059] bridge_slave_0: entered promiscuous mode [ 221.024581][T11147] syzkaller0: entered promiscuous mode [ 221.038611][T11147] syzkaller0: entered allmulticast mode [ 221.111463][T11059] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.119667][T11059] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.134979][T11059] bridge_slave_1: entered allmulticast mode [ 221.146083][T11059] bridge_slave_1: entered promiscuous mode [ 221.381346][T11166] syzkaller0: entered promiscuous mode [ 221.393967][T11166] syzkaller0: entered allmulticast mode [ 222.768858][T11059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.815322][ T5099] Bluetooth: hci1: command tx timeout [ 223.890625][T11191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1851'. [ 223.902848][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 223.915367][T11191] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1851'. [ 223.933363][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 223.942913][T11191] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1851'. [ 223.953602][T11192] netlink: 'syz.4.1851': attribute type 10 has an invalid length. [ 223.986657][T11192] team0: Port device netdevsim0 removed [ 223.994623][T11192] bridge0: port 3(netdevsim0) entered blocking state [ 224.019763][T11192] bridge0: port 3(netdevsim0) entered disabled state [ 224.027821][T11192] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 224.040730][T11192] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 224.108340][T11059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.139531][T10794] veth0_macvtap: entered promiscuous mode [ 224.146163][T11199] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1854'. [ 224.233300][T10794] veth1_macvtap: entered promiscuous mode [ 224.455708][T11059] team0: Port device team_slave_0 added [ 224.492356][T11059] team0: Port device team_slave_1 added [ 224.564779][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.613926][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.630997][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.642266][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.652990][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.669740][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.698898][T10794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.724819][T11215] netlink: 'syz.4.1859': attribute type 1 has an invalid length. [ 224.733493][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.761956][T11215] netlink: 'syz.4.1859': attribute type 1 has an invalid length. [ 224.772735][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.785210][T11215] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1859'. [ 224.789974][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.833681][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.860419][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.871700][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.886761][T10794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.896845][ T5099] Bluetooth: hci1: command tx timeout [ 224.920245][T11227] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1860'. [ 224.960586][T11220] netlink: 'syz.1.1860': attribute type 15 has an invalid length. [ 224.978772][T11059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.994121][T11059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.024039][T11059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.042249][T11059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.058006][T11059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.098424][T11059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.119223][T10794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.147906][T10794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.165356][T10794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.174399][T10794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.444522][T11059] hsr_slave_0: entered promiscuous mode [ 226.258271][T11059] hsr_slave_1: entered promiscuous mode [ 226.276746][T11059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.284704][T11059] Cannot create hsr debugfs directory [ 226.679106][T11282] netlink: 'syz.4.1874': attribute type 13 has an invalid length. [ 226.697970][T11282] veth0_macvtap: left promiscuous mode [ 226.708919][T11282] macvtap0: entered promiscuous mode [ 226.930862][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.968139][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.347656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.383803][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.787500][T11304] netlink: 103 bytes leftover after parsing attributes in process `syz.3.1766'. [ 228.148368][ T5099] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 228.180517][T11059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.303953][T11059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.378599][T11059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.868892][T11059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.084077][T11340] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.1886'. [ 229.099111][T11342] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.1886'. [ 229.109504][T11342] netlink: 'syz.3.1886': attribute type 2 has an invalid length. [ 229.118177][T11342] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1886'. [ 229.147295][T11340] netlink: 'syz.3.1886': attribute type 11 has an invalid length. [ 229.157801][T11340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1886'. [ 229.189178][ T5112] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.206199][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.217469][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.241622][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.254129][ T5112] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.264502][ T5112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.475838][T11346] netlink: 'syz.4.1887': attribute type 2 has an invalid length. [ 229.484618][T11346] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1887'. [ 229.920677][T11343] chnl_net:caif_netlink_parms(): no params data found [ 229.968112][T11059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.158981][T11059] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.257952][T11387] netlink: 'syz.1.1895': attribute type 3 has an invalid length. [ 230.281247][T11387] netlink: 38565 bytes leftover after parsing attributes in process `syz.1.1895'. [ 230.291409][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.300976][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.327301][T11343] bridge_slave_0: entered allmulticast mode [ 230.340452][T11387] netlink: 92412 bytes leftover after parsing attributes in process `syz.1.1895'. [ 230.354111][T11343] bridge_slave_0: entered promiscuous mode [ 230.367217][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.367373][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.404220][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.411575][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.468749][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.479755][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.488631][T11343] bridge_slave_1: entered allmulticast mode [ 230.507671][T11343] bridge_slave_1: entered promiscuous mode [ 230.609872][T11343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.668042][T11343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.822146][T11343] team0: Port device team_slave_0 added [ 230.843810][T11343] team0: Port device team_slave_1 added [ 231.200389][T11343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.214976][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.258253][T11343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.282142][T11343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.293862][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.320807][ T5099] Bluetooth: hci4: command tx timeout [ 231.335653][T11343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.484037][T11343] hsr_slave_0: entered promiscuous mode [ 231.492147][T11343] hsr_slave_1: entered promiscuous mode [ 231.502696][T11343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.510755][T11343] Cannot create hsr debugfs directory [ 232.161784][T11343] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.675056][T11343] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.742602][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 232.777506][T11469] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1911'. [ 232.883818][T11343] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.951063][T11059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.173049][T11343] team0: Port device netdevsim0 removed [ 233.183500][T11343] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.248462][T11499] netlink: 'syz.1.1918': attribute type 46 has an invalid length. [ 233.258693][T11499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1918'. [ 233.375554][ T5099] Bluetooth: hci4: command tx timeout [ 233.378758][T11059] veth0_vlan: entered promiscuous mode [ 233.462012][T11059] veth1_vlan: entered promiscuous mode [ 233.569275][T11514] netlink: 'syz.1.1922': attribute type 29 has an invalid length. [ 233.597223][T11514] netlink: 'syz.1.1922': attribute type 29 has an invalid length. [ 233.637717][T11343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.698924][T11343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.714530][T11343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.734196][T11343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.773754][T11059] veth0_macvtap: entered promiscuous mode [ 233.822407][T11059] veth1_macvtap: entered promiscuous mode [ 233.954026][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.969634][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.980097][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.990964][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.001211][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.012572][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.024179][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.041766][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.069751][T11059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.118422][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.130392][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.143361][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.156927][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.169036][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.192224][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.206085][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.216839][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.237816][T11059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.266797][T11059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.276357][T11059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.287604][T11059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.299211][T11059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.434097][T11343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.469421][T11533] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 234.550129][T11343] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.574838][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.582057][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.614428][T11536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1928'. [ 234.646666][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.653917][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.694126][ T7132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.717592][ T7132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.850676][T11540] netlink: 'syz.1.1931': attribute type 6 has an invalid length. [ 234.886412][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.898266][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.090289][T11555] netlink: 'syz.1.1934': attribute type 29 has an invalid length. [ 235.180143][T11343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.278188][T11343] veth0_vlan: entered promiscuous mode [ 235.403879][ T7132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.455334][ T5099] Bluetooth: hci4: command tx timeout [ 235.561415][T11343] veth1_vlan: entered promiscuous mode [ 235.617958][ T7132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.643768][T11343] veth0_macvtap: entered promiscuous mode [ 235.653061][T11343] veth1_macvtap: entered promiscuous mode [ 235.672483][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.683387][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.693570][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.706324][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.716296][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.727089][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.737446][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.748532][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.758581][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.769290][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.782542][T11343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.802420][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.813239][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.823938][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.834607][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.849020][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.861059][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.871131][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.882296][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.892386][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.902976][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.914007][T11343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.933651][ T7132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.958605][T11343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.969363][T11343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.978652][T11343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.988978][T11343] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.049029][ T7132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.114018][ T7130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.123218][ T7130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.166036][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.190193][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.716963][ T7132] bridge_slave_1: left allmulticast mode [ 236.722682][ T7132] bridge_slave_1: left promiscuous mode [ 236.761257][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.789689][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.804845][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.816612][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.817106][ T7132] bridge_slave_0: left allmulticast mode [ 236.837578][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.849106][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 236.866140][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 236.867863][ T7132] bridge_slave_0: left promiscuous mode [ 236.897018][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.540006][ T5099] Bluetooth: hci4: command tx timeout [ 237.972282][ T7132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.985715][ T7132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.999280][ T7132] bond0 (unregistering): Released all slaves [ 238.022599][T11591] netlink: 'syz.3.1944': attribute type 29 has an invalid length. [ 238.631088][T11659] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1963'. [ 238.977640][ T5099] Bluetooth: hci1: command tx timeout [ 239.300537][T11674] netlink: 'syz.1.1968': attribute type 29 has an invalid length. [ 239.491416][ T7132] hsr_slave_0: left promiscuous mode [ 239.520504][ T7132] hsr_slave_1: left promiscuous mode [ 239.540974][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.555308][ T7132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.573963][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.601764][ T7132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.691560][ T7132] veth1_macvtap: left promiscuous mode [ 239.705328][ T7132] veth0_macvtap: left promiscuous mode [ 239.712833][ T7132] veth1_vlan: left promiscuous mode [ 239.728730][ T7132] veth0_vlan: left promiscuous mode [ 240.583018][ T7132] team0 (unregistering): Port device team_slave_1 removed [ 240.620306][ T7132] team0 (unregistering): Port device team_slave_0 removed [ 241.003182][T11581] chnl_net:caif_netlink_parms(): no params data found [ 241.026039][T11738] netlink: 'syz.2.1989': attribute type 29 has an invalid length. [ 241.055281][ T5099] Bluetooth: hci1: command tx timeout [ 241.072983][T11695] bridge0: port 3(team0) entered blocking state [ 241.095482][T11695] bridge0: port 3(team0) entered disabled state [ 241.112312][T11695] team0: entered allmulticast mode [ 241.123067][T11695] team_slave_0: entered allmulticast mode [ 241.142253][T11695] team_slave_1: entered allmulticast mode [ 241.157350][T11695] team0: entered promiscuous mode [ 241.163643][T11695] team_slave_0: entered promiscuous mode [ 241.191327][T11695] team_slave_1: entered promiscuous mode [ 241.208842][T11695] bridge0: port 3(team0) entered blocking state [ 241.215554][T11695] bridge0: port 3(team0) entered forwarding state [ 241.366001][T11755] netlink: 'syz.4.1994': attribute type 3 has an invalid length. [ 241.409036][T11755] netlink: 3285 bytes leftover after parsing attributes in process `syz.4.1994'. [ 241.571153][T11760] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1994'. [ 241.682454][T11761] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1997'. [ 241.752130][T11581] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.816896][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.825692][T11581] bridge_slave_0: entered allmulticast mode [ 241.834299][T11581] bridge_slave_0: entered promiscuous mode [ 241.942683][T11581] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.974963][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.012199][T11581] bridge_slave_1: entered allmulticast mode [ 242.052769][T11581] bridge_slave_1: entered promiscuous mode [ 242.377125][T11581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.400569][T11789] netlink: 'syz.1.2003': attribute type 29 has an invalid length. [ 242.432645][T11581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.729202][T11815] netlink: 'syz.2.2012': attribute type 126 has an invalid length. [ 242.822708][T11581] team0: Port device team_slave_0 added [ 242.844806][T11581] team0: Port device team_slave_1 added [ 243.037855][T11581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.095122][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.135256][ T5099] Bluetooth: hci1: command tx timeout [ 243.205128][T11581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.250123][T11581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.293256][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.442421][T11581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.083142][T11834] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 244.213475][T11835] syzkaller0: entered promiscuous mode [ 244.221984][T11835] syzkaller0: entered allmulticast mode [ 245.225327][ T5099] Bluetooth: hci1: command tx timeout [ 246.706661][T11891] netlink: 'syz.3.2037': attribute type 29 has an invalid length. [ 246.860117][T11581] hsr_slave_0: entered promiscuous mode [ 246.890257][T11581] hsr_slave_1: entered promiscuous mode [ 246.924849][T11581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.944552][T11581] Cannot create hsr debugfs directory [ 248.062007][T11946] netlink: 'syz.2.2058': attribute type 29 has an invalid length. [ 249.472235][T11993] syzkaller0: entered promiscuous mode [ 249.521660][T11993] syzkaller0: entered allmulticast mode [ 249.732800][T12013] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2077'. [ 251.481385][T12002] netlink: 'syz.2.2074': attribute type 29 has an invalid length. [ 251.503323][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2077'. [ 251.581633][T11581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.640020][T11581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.664714][T11581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.760551][T11581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.091308][T11581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.232451][T11581] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.284268][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.291623][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.430347][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.437609][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.575588][T12082] netlink: 'syz.1.2102': attribute type 29 has an invalid length. [ 252.601492][T11581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.017310][T12108] netlink: 'syz.3.2110': attribute type 3 has an invalid length. [ 253.066280][T12108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2110'. [ 253.124485][T11581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.197585][T12119] netlink: 'syz.4.2112': attribute type 4 has an invalid length. [ 253.246683][T12119] netlink: 18430 bytes leftover after parsing attributes in process `syz.4.2112'. [ 253.301091][T12119] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2112'. [ 253.487957][T11581] veth0_vlan: entered promiscuous mode [ 253.538188][T11581] veth1_vlan: entered promiscuous mode [ 253.663832][T11581] veth0_macvtap: entered promiscuous mode [ 253.679139][T11581] veth1_macvtap: entered promiscuous mode [ 253.729977][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.755157][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.773391][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.799352][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.817922][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.833174][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.852155][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.878352][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.897378][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.917989][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.942597][T11581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.976454][T12151] netlink: 'syz.4.2118': attribute type 29 has an invalid length. [ 254.003914][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.030129][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.050107][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.064221][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.080546][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.094552][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.117101][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.134534][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.162415][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.180296][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.192277][T11581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.273666][T11581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.303855][T11581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.319014][T12158] netlink: 88432 bytes leftover after parsing attributes in process `syz.2.2124'. [ 254.324504][T11581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.353902][T11581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.686182][T11636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.694887][T11636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.848810][T11636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.893596][T11636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.371731][T12201] netlink: 'syz.4.2136': attribute type 3 has an invalid length. [ 255.402583][T12201] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2136'. [ 255.468658][T12203] netlink: 'syz.3.2135': attribute type 29 has an invalid length. [ 255.744127][T12219] netlink: 'syz.3.2138': attribute type 3 has an invalid length. [ 255.766214][T12219] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2138'. [ 256.025307][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.031720][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.609192][T12252] syzkaller0: entered promiscuous mode [ 256.614720][T12252] syzkaller0: entered allmulticast mode [ 256.660263][ T12] syzkaller0: tun_net_xmit 48 [ 256.706331][T12252] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 256.715083][T12252] syzkaller0: Linktype set failed because interface is up [ 256.761326][T12252] syzkaller0: tun_net_xmit 1280 [ 256.783613][T12256] netlink: 'syz.3.2148': attribute type 29 has an invalid length. [ 256.785429][T12252] syzkaller0: create flow: hash 587448001 index 1 [ 257.027723][T12251] syzkaller0: delete flow: hash 587448001 index 1 [ 258.331827][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.348812][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.362103][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.387744][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.424026][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.437969][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.930308][T12308] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2163'. [ 259.127816][T12314] netlink: 'syz.3.2165': attribute type 8 has an invalid length. [ 259.137177][T12314] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2165'. [ 259.283863][T12306] netlink: 'syz.1.2161': attribute type 21 has an invalid length. [ 259.296808][T12306] netlink: 'syz.1.2161': attribute type 1 has an invalid length. [ 259.346172][T12314] netlink: 'syz.3.2165': attribute type 2 has an invalid length. [ 259.354090][T12314] netlink: 'syz.3.2165': attribute type 4 has an invalid length. [ 259.366493][T12314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2165'. [ 259.463424][T11636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.719252][T11636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.968400][T11636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.094050][T11636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.262847][T12346] syzkaller0: entered promiscuous mode [ 260.302784][T12346] syzkaller0: entered allmulticast mode [ 260.313137][T11637] syzkaller0: tun_net_xmit 48 [ 260.335815][T12368] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 260.343071][T12368] syzkaller0: Linktype set failed because interface is up [ 260.359364][T12370] netlink: 'syz.4.2183': attribute type 21 has an invalid length. [ 260.385846][T12370] netlink: 'syz.4.2183': attribute type 1 has an invalid length. [ 260.416754][T12287] chnl_net:caif_netlink_parms(): no params data found [ 260.472598][T12346] syzkaller0: tun_net_xmit 1280 [ 260.495544][ T5099] Bluetooth: hci1: command tx timeout [ 260.513312][T12346] syzkaller0: create flow: hash 587448001 index 1 [ 260.805122][T12345] syzkaller0: delete flow: hash 587448001 index 1 [ 261.115389][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.128252][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.157509][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.168140][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.183909][ T5112] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 261.196401][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.575159][ T5099] Bluetooth: hci1: command tx timeout [ 263.230707][T12407] netlink: 'syz.2.2199': attribute type 46 has an invalid length. [ 263.244423][T12407] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2199'. [ 263.298885][ T5099] Bluetooth: hci5: command tx timeout [ 263.317163][T12287] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.333335][T12287] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.352696][T12287] bridge_slave_0: entered allmulticast mode [ 263.402525][T12287] bridge_slave_0: entered promiscuous mode [ 263.423210][T12287] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.436541][T12287] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.443981][T12287] bridge_slave_1: entered allmulticast mode [ 263.453704][T12287] bridge_slave_1: entered promiscuous mode [ 263.465850][T11636] bridge_slave_1: left allmulticast mode [ 263.482874][T11636] bridge_slave_1: left promiscuous mode [ 263.489335][T11636] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.532374][T11636] bridge_slave_0: left allmulticast mode [ 263.545757][T11636] bridge_slave_0: left promiscuous mode [ 263.551528][T11636] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.571917][T11636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.588642][T11636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.601587][T11636] bond0 (unregistering): Released all slaves [ 264.659382][ T5099] Bluetooth: hci1: command tx timeout [ 264.719621][T12440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2214'. [ 264.822487][T12441] syzkaller0: entered promiscuous mode [ 264.837794][T12441] syzkaller0: entered allmulticast mode [ 264.998920][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.375190][ T5099] Bluetooth: hci5: command tx timeout [ 266.735427][ T5099] Bluetooth: hci1: command tx timeout [ 267.060875][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.136260][T12476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2226'. [ 267.165634][T12476] netlink: 'syz.2.2226': attribute type 3 has an invalid length. [ 267.173701][T12476] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2226'. [ 267.323997][T12489] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2232'. [ 267.387163][T12287] team0: Port device team_slave_0 added [ 267.456639][ T5099] Bluetooth: hci5: command tx timeout [ 267.513786][T11636] hsr_slave_0: left promiscuous mode [ 267.595299][T11636] hsr_slave_1: left promiscuous mode [ 267.618067][T11636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.647119][T11636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.686023][T11636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.693587][T11636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.800532][T11636] veth1_macvtap: left promiscuous mode [ 267.825255][T11636] veth0_macvtap: left promiscuous mode [ 267.832189][T11636] veth1_vlan: left promiscuous mode [ 267.852902][T11636] veth0_vlan: left promiscuous mode [ 268.098301][T12528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.043419][T11636] team0 (unregistering): Port device team_slave_1 removed [ 269.093926][T11636] team0 (unregistering): Port device team_slave_0 removed [ 269.537486][T12287] team0: Port device team_slave_1 added [ 269.548772][ T5099] Bluetooth: hci5: command tx timeout [ 269.668405][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.684866][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.719839][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.763778][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.771001][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.798456][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.983185][T12287] hsr_slave_0: entered promiscuous mode [ 270.012917][T12287] hsr_slave_1: entered promiscuous mode [ 270.049288][T12287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.077076][T12287] Cannot create hsr debugfs directory [ 270.387996][T12603] netlink: 'syz.4.2270': attribute type 4 has an invalid length. [ 270.420119][T12603] netlink: 204164 bytes leftover after parsing attributes in process `syz.4.2270'. [ 270.729647][T12392] chnl_net:caif_netlink_parms(): no params data found [ 271.064920][T11636] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.402474][T11636] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.749615][T11636] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.077244][T11636] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.147109][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.175370][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.182757][T12392] bridge_slave_0: entered allmulticast mode [ 272.220689][T12392] bridge_slave_0: entered promiscuous mode [ 272.378272][T12681] syzkaller0: entered promiscuous mode [ 272.383904][T12681] syzkaller0: entered allmulticast mode [ 272.393972][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.403394][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.411427][T12392] bridge_slave_1: entered allmulticast mode [ 272.420986][T12392] bridge_slave_1: entered promiscuous mode [ 272.507388][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.618750][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.693269][T12392] team0: Port device team_slave_0 added [ 273.041969][ T5099] Bluetooth: hci4: unexpected event 0x30 length: 15 > 3 [ 274.692756][T12392] team0: Port device team_slave_1 added [ 274.762104][T12735] netlink: 'syz.2.2316': attribute type 19 has an invalid length. [ 274.772025][T12735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2316'. [ 274.795568][T11636] macvlan1: left promiscuous mode [ 274.811231][T11636] bridge0: port 3(macvlan1) entered disabled state [ 274.859819][T11636] bridge_slave_1: left allmulticast mode [ 274.895256][T11636] bridge_slave_1: left promiscuous mode [ 274.901066][T11636] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.978663][T11636] bridge_slave_0: left promiscuous mode [ 274.984486][T11636] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.790700][T11636] Â (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.803597][T11636] Â (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.819846][T11636] Â (unregistering): (slave team0): Releasing backup interface [ 275.831885][T11636] Â (unregistering): Released all slaves [ 275.845481][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.857528][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.884602][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.913878][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.922658][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.953692][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.966957][T12287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.997530][T12774] netlink: 'syz.3.2331': attribute type 29 has an invalid length. [ 276.019333][T12287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.144297][T12287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.221365][T12287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.356308][T12392] hsr_slave_0: entered promiscuous mode [ 276.370149][T12392] hsr_slave_1: entered promiscuous mode [ 276.394427][T12392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.408477][T12392] Cannot create hsr debugfs directory [ 276.499863][T11636] hsr_slave_0: left promiscuous mode [ 276.611662][T11636] hsr_slave_1: left promiscuous mode [ 276.672907][T11636] veth1_macvtap: left promiscuous mode [ 276.678837][T11636] veth0_macvtap: left promiscuous mode [ 276.684529][T11636] veth1_vlan: left allmulticast mode [ 276.718944][T11636] veth1_vlan: left promiscuous mode [ 276.724515][T11636] veth0_vlan: left promiscuous mode [ 277.422677][T12849] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2363'. [ 277.832632][T11636] team0 (unregistering): Port device team_slave_1 removed [ 277.891437][T11636] team0 (unregistering): Port device team_slave_0 removed [ 278.412564][T12872] syzkaller0: entered promiscuous mode [ 278.430962][T12872] syzkaller0: entered allmulticast mode [ 279.305304][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.513831][T12287] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.595859][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.603367][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.664491][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.671779][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.244057][T12392] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.300497][T12392] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.334209][T12392] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.373726][T12392] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.672738][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.747396][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.819907][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.892071][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.899304][ T5104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.956876][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.964185][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.088238][T12287] veth0_vlan: entered promiscuous mode [ 281.191678][T12287] veth1_vlan: entered promiscuous mode [ 281.395029][T12287] veth0_macvtap: entered promiscuous mode [ 281.430415][T12287] veth1_macvtap: entered promiscuous mode [ 281.508584][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.555043][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.598965][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.646948][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.688724][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.721825][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.753202][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.795150][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.821452][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.856677][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.893079][T12287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.951742][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.981542][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.016973][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.036076][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.058844][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.084020][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.121635][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.140093][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.160574][T12287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.198209][T12287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.216800][T12287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.419301][T13036] netlink: 'syz.2.2419': attribute type 29 has an invalid length. [ 282.440630][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.514188][T12287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.523264][T12287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.533744][T12287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.544411][T12287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.566992][T13015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.787170][T11635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.822797][T12392] veth0_vlan: entered promiscuous mode [ 282.822922][T11635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.915000][T12392] veth1_vlan: entered promiscuous mode [ 282.959842][T11635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.991623][T11635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.032166][T12392] veth0_macvtap: entered promiscuous mode [ 283.062577][T12392] veth1_macvtap: entered promiscuous mode [ 283.179041][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.221767][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.247234][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.272203][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.284740][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.313007][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.333612][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.344559][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.373184][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.400229][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.411895][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.423502][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.442565][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.569859][T13070] netlink: 'syz.3.2430': attribute type 29 has an invalid length. [ 283.590083][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.613415][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.624100][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.634946][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.646977][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.657990][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.668809][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.679337][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.689386][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.702522][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.713846][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.724470][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.737764][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.760363][T12392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.773198][T12392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.810222][T12392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.845178][T12392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.156671][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.242286][T13086] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2434'. [ 284.382657][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.484206][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.496085][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.524874][ T7132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.533285][ T7132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.610362][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.309415][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.771582][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.785233][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.794399][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.806252][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.814922][ T5112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.822890][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.888860][T13111] netlink: 'syz.3.2442': attribute type 29 has an invalid length. [ 285.931649][ T12] bridge_slave_1: left allmulticast mode [ 285.946116][ T12] bridge_slave_1: left promiscuous mode [ 285.965882][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.014953][ T12] bridge_slave_0: left allmulticast mode [ 286.021001][ T12] bridge_slave_0: left promiscuous mode [ 286.055309][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.937090][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.964503][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.973426][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.996387][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.004136][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 287.014865][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.269469][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.282593][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.298467][ T12] bond0 (unregistering): Released all slaves [ 287.411012][T13176] netlink: 'syz.1.2463': attribute type 29 has an invalid length. [ 287.758788][ T12] hsr_slave_0: left promiscuous mode [ 287.769920][ T12] hsr_slave_1: left promiscuous mode [ 287.777445][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.793919][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.813950][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.821910][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.867959][ T12] veth1_macvtap: left promiscuous mode [ 287.873827][ T12] veth0_macvtap: left promiscuous mode [ 287.880264][ T12] veth1_vlan: left promiscuous mode [ 287.886047][ T12] veth0_vlan: left promiscuous mode [ 287.938073][ T5099] Bluetooth: hci0: command tx timeout [ 288.636242][ T12] team0 (unregistering): Port device team_slave_1 removed [ 288.699968][ T12] team0 (unregistering): Port device team_slave_0 removed [ 289.068171][ T5099] Bluetooth: hci1: command tx timeout [ 289.889543][T13124] chnl_net:caif_netlink_parms(): no params data found [ 290.015192][ T5099] Bluetooth: hci0: command tx timeout [ 290.112950][T13165] chnl_net:caif_netlink_parms(): no params data found [ 290.802376][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.811349][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.819022][T13124] bridge_slave_0: entered allmulticast mode [ 290.826578][T13124] bridge_slave_0: entered promiscuous mode [ 290.836214][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.843844][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.851434][T13124] bridge_slave_1: entered allmulticast mode [ 290.859052][T13124] bridge_slave_1: entered promiscuous mode [ 291.053224][T13165] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.063623][T13165] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.072557][T13165] bridge_slave_0: entered allmulticast mode [ 291.093797][T13165] bridge_slave_0: entered promiscuous mode [ 291.102810][T13165] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.112344][T13165] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.119979][T13165] bridge_slave_1: entered allmulticast mode [ 291.129874][T13165] bridge_slave_1: entered promiscuous mode [ 291.153374][ T5099] Bluetooth: hci1: command tx timeout [ 291.507706][T13124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.012306][T13124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.080526][T13292] netlink: 'syz.1.2496': attribute type 7 has an invalid length. [ 292.095075][ T5099] Bluetooth: hci0: command tx timeout [ 292.113403][T13165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.160324][T13124] team0: Port device team_slave_0 added [ 292.183767][T13165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.259924][T13124] team0: Port device team_slave_1 added [ 292.511242][T13165] team0: Port device team_slave_0 added [ 292.559374][T13165] team0: Port device team_slave_1 added [ 292.615854][T13124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.622847][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.660916][T13124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.789450][T13124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.830344][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.879084][T13124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.891550][T13165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.902104][T13165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.001643][T13165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.031020][T13331] netlink: 'syz.3.2509': attribute type 7 has an invalid length. [ 293.064215][T13165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.075201][T13165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.141894][T13165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.225247][ T5099] Bluetooth: hci1: command tx timeout [ 293.392560][T13124] hsr_slave_0: entered promiscuous mode [ 293.401807][T13124] hsr_slave_1: entered promiscuous mode [ 293.410253][T13124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.419018][T13124] Cannot create hsr debugfs directory [ 293.454533][T13165] hsr_slave_0: entered promiscuous mode [ 293.462696][T13165] hsr_slave_1: entered promiscuous mode [ 293.471539][T13165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.484826][T13165] Cannot create hsr debugfs directory [ 293.852505][T13360] netlink: 'syz.4.2521': attribute type 7 has an invalid length. [ 293.864614][T13358] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 293.895294][T13358] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 293.903195][T13358] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 293.913054][T13358] team0: Port device netdevsim0 added [ 293.965499][T13361] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 294.176030][ T5099] Bluetooth: hci0: command tx timeout [ 294.364426][T13165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.519618][T13165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.719012][T13165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.980406][T13165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.133836][T13412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.295660][ T5099] Bluetooth: hci1: command tx timeout [ 295.696979][T13439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2544'. [ 296.304347][T13465] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 296.314485][T13465] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 296.507947][T13124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 296.557220][T13124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 296.589426][T13124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.644174][T13124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.767069][T13165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 296.803264][T13165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 296.881379][T13165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 296.909146][T13165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.116915][ T1113] bridge_slave_1: left allmulticast mode [ 297.122621][ T1113] bridge_slave_1: left promiscuous mode [ 297.150007][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.178404][ T1113] bridge_slave_0: left allmulticast mode [ 297.194724][ T1113] bridge_slave_0: left promiscuous mode [ 297.203236][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.715219][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.724066][ T1113] bond_slave_0: left promiscuous mode [ 297.738511][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.749293][ T1113] bond_slave_1: left promiscuous mode [ 297.761941][ T1113] bond0 (unregistering): Released all slaves [ 297.788321][T13513] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2567'. [ 297.911862][T13124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.026702][T13124] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.063062][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.070279][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.196474][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.203652][ T5185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.284729][T13165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.537879][T13542] FAULT_INJECTION: forcing a failure. [ 298.537879][T13542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.575798][T13542] CPU: 0 PID: 13542 Comm: syz.4.2574 Not tainted 6.10.0-syzkaller-04483-g0be9ae5486cd #0 [ 298.585664][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 298.595754][T13542] Call Trace: [ 298.599044][T13542] [ 298.601988][T13542] dump_stack_lvl+0x241/0x360 [ 298.606705][T13542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.611931][T13542] ? __pfx__printk+0x10/0x10 [ 298.616645][T13542] ? __pfx_lock_release+0x10/0x10 [ 298.621708][T13542] should_fail_ex+0x3b0/0x4e0 [ 298.626412][T13542] _copy_from_user+0x2f/0xe0 [ 298.631033][T13542] __sys_bpf+0x1a4/0x810 [ 298.635295][T13542] ? __pfx___sys_bpf+0x10/0x10 [ 298.640066][T13542] ? bpf_trace_run2+0x36e/0x540 [ 298.644945][T13542] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.650961][T13542] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.657315][T13542] __x64_sys_bpf+0x7c/0x90 [ 298.661763][T13542] do_syscall_64+0xf3/0x230 [ 298.666292][T13542] ? clear_bhb_loop+0x35/0x90 [ 298.670986][T13542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.676920][T13542] RIP: 0033:0x7ff764b75b59 [ 298.681333][T13542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.700938][T13542] RSP: 002b:00007ff765a02048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.709368][T13542] RAX: ffffffffffffffda RBX: 00007ff764d05f60 RCX: 00007ff764b75b59 [ 298.717352][T13542] RDX: 0000000000000048 RSI: 0000000020000440 RDI: 0000000000000005 [ 298.725319][T13542] RBP: 00007ff765a020a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.733375][T13542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.741337][T13542] R13: 000000000000000b R14: 00007ff764d05f60 R15: 00007ffd20e12b98 [ 298.749315][T13542] [ 299.044594][T13165] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.526217][ T1113] hsr_slave_0: left promiscuous mode [ 299.630548][ T1113] hsr_slave_1: left promiscuous mode [ 299.667354][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.682003][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.700235][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.727124][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.770846][T13588] FAULT_INJECTION: forcing a failure. [ 299.770846][T13588] name failslab, interval 1, probability 0, space 0, times 1 [ 299.792586][T13588] CPU: 0 PID: 13588 Comm: syz.3.2587 Not tainted 6.10.0-syzkaller-04483-g0be9ae5486cd #0 [ 299.802534][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 299.812703][T13588] Call Trace: [ 299.816000][T13588] [ 299.818946][T13588] dump_stack_lvl+0x241/0x360 [ 299.823651][T13588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.828875][T13588] ? __pfx__printk+0x10/0x10 [ 299.833493][T13588] ? __pfx___might_resched+0x10/0x10 [ 299.838806][T13588] ? validate_chain+0x11e/0x5900 [ 299.843780][T13588] should_fail_ex+0x3b0/0x4e0 [ 299.848583][T13588] should_failslab+0x9/0x20 [ 299.853116][T13588] kmalloc_node_trace_noprof+0x74/0x300 [ 299.858697][T13588] ? __get_vm_area_node+0x113/0x270 [ 299.863926][T13588] __get_vm_area_node+0x113/0x270 [ 299.868987][T13588] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 299.874912][T13588] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 299.880485][T13588] ? mark_lock+0x9a/0x350 [ 299.884947][T13588] ? aa_get_newest_label+0xff/0x6f0 [ 299.890184][T13588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 299.896567][T13588] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 299.902140][T13588] __vmalloc_noprof+0x79/0x90 [ 299.906853][T13588] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 299.912436][T13588] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 299.917831][T13588] ? bpf_prog_alloc+0x28/0x1b0 [ 299.919703][ T1113] veth1_macvtap: left promiscuous mode [ 299.922612][T13588] bpf_prog_alloc+0x3a/0x1b0 [ 299.922641][T13588] bpf_prog_load+0x7f7/0x20f0 [ 299.922673][T13588] ? __pfx_bpf_prog_load+0x10/0x10 [ 299.942335][ T1113] veth0_macvtap: left promiscuous mode [ 299.942440][T13588] ? __pfx___might_resched+0x10/0x10 [ 299.951936][ T1113] veth1_vlan: left promiscuous mode [ 299.953154][T13588] ? __might_fault+0xc6/0x120 [ 299.953181][T13588] ? bpf_lsm_bpf+0x9/0x10 [ 299.959196][ T1113] veth0_vlan: left promiscuous mode [ 299.963169][T13588] ? security_bpf+0x87/0xb0 [ 299.977317][T13588] __sys_bpf+0x4ee/0x810 [ 299.981575][T13588] ? __pfx___sys_bpf+0x10/0x10 [ 299.986363][T13588] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.992349][T13588] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.998677][T13588] ? do_syscall_64+0x100/0x230 [ 300.003461][T13588] __x64_sys_bpf+0x7c/0x90 [ 300.007993][T13588] do_syscall_64+0xf3/0x230 [ 300.012505][T13588] ? clear_bhb_loop+0x35/0x90 [ 300.017198][T13588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.023092][T13588] RIP: 0033:0x7faeba775b59 [ 300.027502][T13588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.047200][T13588] RSP: 002b:00007faebb4f1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.055700][T13588] RAX: ffffffffffffffda RBX: 00007faeba905f60 RCX: 00007faeba775b59 [ 300.063666][T13588] RDX: 0000000000000048 RSI: 0000000020000440 RDI: 0000000000000005 [ 300.071634][T13588] RBP: 00007faebb4f10a0 R08: 0000000000000000 R09: 0000000000000000 [ 300.079645][T13588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.087623][T13588] R13: 000000000000000b R14: 00007faeba905f60 R15: 00007ffd337eeb48 [ 300.095615][T13588] [ 300.156030][T13588] syz.3.2587: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 300.186514][T13588] CPU: 1 PID: 13588 Comm: syz.3.2587 Not tainted 6.10.0-syzkaller-04483-g0be9ae5486cd #0 [ 300.196373][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 300.206462][T13588] Call Trace: [ 300.209788][T13588] [ 300.212741][T13588] dump_stack_lvl+0x241/0x360 [ 300.217450][T13588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.222681][T13588] ? __pfx__printk+0x10/0x10 [ 300.227302][T13588] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 300.233746][T13588] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 300.240278][T13588] warn_alloc+0x278/0x410 [ 300.244615][T13588] ? __pfx_warn_alloc+0x10/0x10 [ 300.249551][T13588] ? __get_vm_area_node+0x113/0x270 [ 300.254750][T13588] ? __get_vm_area_node+0x261/0x270 [ 300.259952][T13588] __vmalloc_node_range_noprof+0x3e0/0x1460 [ 300.265840][T13588] ? mark_lock+0x9a/0x350 [ 300.270364][T13588] ? aa_get_newest_label+0xff/0x6f0 [ 300.275564][T13588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 300.282413][T13588] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 300.288388][T13588] __vmalloc_noprof+0x79/0x90 [ 300.293065][T13588] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 300.298617][T13588] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 300.304130][T13588] ? bpf_prog_alloc+0x28/0x1b0 [ 300.308893][T13588] bpf_prog_alloc+0x3a/0x1b0 [ 300.313573][T13588] bpf_prog_load+0x7f7/0x20f0 [ 300.318604][T13588] ? __pfx_bpf_prog_load+0x10/0x10 [ 300.323940][T13588] ? __pfx___might_resched+0x10/0x10 [ 300.329606][T13588] ? __might_fault+0xc6/0x120 [ 300.334375][T13588] ? bpf_lsm_bpf+0x9/0x10 [ 300.338813][T13588] ? security_bpf+0x87/0xb0 [ 300.343574][T13588] __sys_bpf+0x4ee/0x810 [ 300.347902][T13588] ? __pfx___sys_bpf+0x10/0x10 [ 300.352785][T13588] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.358987][T13588] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.365409][T13588] ? do_syscall_64+0x100/0x230 [ 300.370182][T13588] __x64_sys_bpf+0x7c/0x90 [ 300.374623][T13588] do_syscall_64+0xf3/0x230 [ 300.379120][T13588] ? clear_bhb_loop+0x35/0x90 [ 300.383811][T13588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.389799][T13588] RIP: 0033:0x7faeba775b59 [ 300.394212][T13588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.414702][T13588] RSP: 002b:00007faebb4f1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 300.423134][T13588] RAX: ffffffffffffffda RBX: 00007faeba905f60 RCX: 00007faeba775b59 [ 300.431102][T13588] RDX: 0000000000000048 RSI: 0000000020000440 RDI: 0000000000000005 [ 300.439066][T13588] RBP: 00007faebb4f10a0 R08: 0000000000000000 R09: 0000000000000000 [ 300.447029][T13588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.455078][T13588] R13: 000000000000000b R14: 00007faeba905f60 R15: 00007ffd337eeb48 [ 300.463160][T13588] [ 300.533953][T13588] Mem-Info: [ 300.540696][T13588] active_anon:6189 inactive_anon:0 isolated_anon:0 [ 300.540696][T13588] active_file:19364 inactive_file:38254 isolated_file:0 [ 300.540696][T13588] unevictable:768 dirty:57 writeback:0 [ 300.540696][T13588] slab_reclaimable:9013 slab_unreclaimable:103122 [ 300.540696][T13588] mapped:13257 shmem:1262 pagetables:798 [ 300.540696][T13588] sec_pagetables:0 bounce:0 [ 300.540696][T13588] kernel_misc_reclaimable:0 [ 300.540696][T13588] free:1381696 free_pcp:462 free_cma:0 [ 300.602922][T13588] Node 0 active_anon:24456kB inactive_anon:0kB active_file:77456kB inactive_file:152948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52928kB dirty:228kB writeback:0kB shmem:3512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11000kB pagetables:3192kB sec_pagetables:0kB all_unreclaimable? no [ 300.645282][T13588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 300.684156][T13588] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.717429][T13588] lowmem_reserve[]: 0 2571 2571 0 0 [ 300.723117][T13588] Node 0 DMA32 free:1566776kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:24708kB inactive_anon:0kB active_file:77456kB inactive_file:152648kB unevictable:1536kB writepending:224kB present:3129332kB managed:2659840kB mlocked:0kB bounce:0kB free_pcp:1788kB local_pcp:1004kB free_cma:0kB [ 300.758747][T13588] lowmem_reserve[]: 0 0 0 0 0 [ 300.763513][T13588] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:300kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 300.800692][T13588] lowmem_reserve[]: 0 0 0 0 0 [ 300.828152][T13588] Node 1 Normal free:3944716kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1000kB local_pcp:0kB free_cma:0kB [ 300.865736][T13588] lowmem_reserve[]: 0 0 0 0 0 [ 300.870961][T13588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 300.899354][T13588] Node 0 DMA32: 48*4kB (UME) 953*8kB (UME) 1159*16kB (UME) 599*32kB (UME) 111*64kB (UME) 29*128kB (UME) 25*256kB (UM) 25*512kB (UME) 13*1024kB (UME) 3*2048kB (UME) 359*4096kB (UM) = 1565464kB [ 300.920636][T13588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 300.933879][T13588] Node 1 Normal: 3*4kB (U) 2*8kB (U) 3*16kB (U) 0*32kB 3*64kB (UM) 8*128kB (U) 4*256kB (UM) 6*512kB (UM) 5*1024kB (U) 1*2048kB (U) 960*4096kB (M) = 3944716kB [ 300.950618][T13588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.963183][T13588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 300.991028][T13588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.024602][T13588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 301.046815][T13588] 58880 total pagecache pages [ 301.051553][T13588] 0 pages in swap cache [ 301.064891][T13588] Free swap = 124996kB [ 301.080137][T13588] Total swap = 124996kB [ 301.084354][T13588] 2097051 pages RAM [ 301.088789][T13588] 0 pages HighMem/MovableOnly [ 301.099940][T13588] 400881 pages reserved [ 301.104131][T13588] 0 pages cma reserved [ 301.638877][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 301.748913][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 302.527487][T13664] netlink: 'syz.1.2596': attribute type 9 has an invalid length. [ 302.549558][T13664] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.2596'. [ 302.569421][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.576654][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.586990][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.594237][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.857637][T13124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.997720][T13124] veth0_vlan: entered promiscuous mode [ 303.078805][T13124] veth1_vlan: entered promiscuous mode [ 303.258327][T13124] veth0_macvtap: entered promiscuous mode [ 303.300223][T13124] veth1_macvtap: entered promiscuous mode [ 303.384544][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.405250][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.445033][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.465339][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.475678][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.487015][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.506895][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.524856][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.537398][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.563682][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.606005][T13124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.665959][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.685104][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.707966][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.727122][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.750489][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.765025][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.787447][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.799712][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.809935][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.820575][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.833109][T13124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.860568][T13124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.872339][T13124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.884799][T13124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.893643][T13124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.933488][T13165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.191545][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.228027][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.322579][T13720] netlink: 'syz.4.2611': attribute type 29 has an invalid length. [ 304.584684][T13165] veth0_vlan: entered promiscuous mode [ 304.637284][T13165] veth1_vlan: entered promiscuous mode [ 304.733388][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.784453][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.938376][T13165] veth0_macvtap: entered promiscuous mode [ 304.982838][T13165] veth1_macvtap: entered promiscuous mode [ 305.052945][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.120175][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.137843][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.164709][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.194412][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.280587][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.294292][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.306749][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.323081][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.351775][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.371980][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.383100][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.412276][T13165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.434068][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.457607][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.469805][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.481728][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.496242][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.515581][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.526454][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.538502][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.548824][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.560818][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.571130][T13165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.581986][T13165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.583988][T13771] netlink: 'syz.4.2631': attribute type 4 has an invalid length. [ 305.609073][T13771] netlink: 'syz.4.2631': attribute type 1 has an invalid length. [ 305.609806][T13165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.624526][T13771] netlink: 88156 bytes leftover after parsing attributes in process `syz.4.2631'. [ 305.650514][T13762] netlink: 'syz.3.2628': attribute type 29 has an invalid length. [ 305.742359][T13165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.754361][T13165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.791388][T13165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.800310][T13165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.015229][T11637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.023092][T11637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.138134][T11638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.172059][T11636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.181978][T11636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.411135][T11638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.481906][T11638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.559719][T11638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.690632][T11638] bridge_slave_1: left allmulticast mode [ 306.699937][T11638] bridge_slave_1: left promiscuous mode [ 306.706202][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.714804][T11638] bridge_slave_0: left allmulticast mode [ 306.720796][T11638] bridge_slave_0: left promiscuous mode [ 306.727141][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.109742][T11638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.393693][T11638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.439325][T11638] bond0 (unregistering): Released all slaves [ 307.553902][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.573992][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.585565][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.593143][T13805] netlink: 'syz.3.2642': attribute type 29 has an invalid length. [ 307.615334][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.634366][ T5112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.642121][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.047977][T13806] chnl_net:caif_netlink_parms(): no params data found [ 309.696171][ T5112] Bluetooth: hci0: command tx timeout [ 309.759388][T13853] veth1_macvtap: left promiscuous mode [ 309.774570][T13853] macsec0: entered allmulticast mode [ 310.063792][T13806] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.090838][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.104250][T13806] bridge_slave_0: entered allmulticast mode [ 310.129427][T13806] bridge_slave_0: entered promiscuous mode [ 310.159248][T13806] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.174680][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.199103][T13806] bridge_slave_1: entered allmulticast mode [ 310.209357][T13806] bridge_slave_1: entered promiscuous mode [ 310.279241][T11638] hsr_slave_0: left promiscuous mode [ 310.333711][T11638] hsr_slave_1: left promiscuous mode [ 310.342709][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.354080][T11638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.379061][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.387781][T11638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.439694][T11638] veth1_macvtap: left promiscuous mode [ 310.449827][T11638] veth0_macvtap: left promiscuous mode [ 310.465235][T11638] veth1_vlan: left promiscuous mode [ 310.475135][T11638] veth0_vlan: left promiscuous mode [ 310.880324][T13902] [ 310.882865][T13902] ====================================================== [ 310.889942][T13902] WARNING: possible circular locking dependency detected [ 310.897269][T13902] 6.10.0-syzkaller-04483-g0be9ae5486cd #0 Not tainted [ 310.904236][T13902] ------------------------------------------------------ [ 310.911594][T13902] syz.4.2667/13902 is trying to acquire lock: [ 310.917677][T13902] ffff888022e45c98 (&sighand->siglock){-.-.}-{2:2}, at: __lock_task_sighand+0x149/0x2d0 [ 310.927612][T13902] [ 310.927612][T13902] but task is already holding lock: [ 310.935072][T13902] ffff8880b9538798 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 310.945559][T13902] [ 310.945559][T13902] which lock already depends on the new lock. [ 310.945559][T13902] [ 310.956134][T13902] [ 310.956134][T13902] the existing dependency chain (in reverse order) is: [ 310.965147][T13902] [ 310.965147][T13902] -> #2 (lock#10){+.+.}-{2:2}: [ 310.972103][T13902] lock_acquire+0x1ed/0x550 [ 310.977135][T13902] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 310.984256][T13902] stack_map_get_build_id_offset+0x9af/0x9d0 [ 310.990757][T13902] __bpf_get_stack+0x4ad/0x5a0 [ 310.996059][T13902] bpf_get_stack_raw_tp+0x1a3/0x240 [ 311.001807][T13902] 0xffffffffa000498e [ 311.006322][T13902] bpf_trace_run2+0x2ec/0x540 [ 311.011553][T13902] trace_tlb_flush+0x118/0x140 [ 311.016856][T13902] switch_mm_irqs_off+0x7cb/0xae0 [ 311.022414][T13902] __schedule+0x1079/0x4a60 [ 311.027657][T13902] schedule+0x14b/0x320 [ 311.032333][T13902] do_nanosleep+0x197/0x600 [ 311.037364][T13902] hrtimer_nanosleep+0x227/0x470 [ 311.042874][T13902] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 311.048995][T13902] do_syscall_64+0xf3/0x230 [ 311.054015][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.060583][T13902] [ 311.060583][T13902] -> #1 (&rq->__lock){-.-.}-{2:2}: [ 311.068053][T13902] lock_acquire+0x1ed/0x550 [ 311.073081][T13902] _raw_spin_lock_nested+0x31/0x40 [ 311.078811][T13902] raw_spin_rq_lock_nested+0x2a/0x140 [ 311.084795][T13902] sched_mm_cid_exit_signals+0x17b/0x4b0 [ 311.091058][T13902] exit_signals+0x2a1/0x5c0 [ 311.096091][T13902] do_exit+0x6b4/0x27f0 [ 311.100975][T13902] __pfx___ia32_sys_exit+0x0/0x10 [ 311.106632][T13902] x64_sys_call+0x2622/0x2640 [ 311.111827][T13902] do_syscall_64+0xf3/0x230 [ 311.116873][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.123278][T13902] [ 311.123278][T13902] -> #0 (&sighand->siglock){-.-.}-{2:2}: [ 311.131117][T13902] validate_chain+0x18e0/0x5900 [ 311.136506][T13902] __lock_acquire+0x1346/0x1fd0 [ 311.141884][T13902] lock_acquire+0x1ed/0x550 [ 311.147100][T13902] _raw_spin_lock_irqsave+0xd5/0x120 [ 311.152920][T13902] __lock_task_sighand+0x149/0x2d0 [ 311.158555][T13902] group_send_sig_info+0x274/0x310 [ 311.164207][T13902] bpf_send_signal_common+0x2dd/0x430 [ 311.170126][T13902] bpf_send_signal_thread+0x16/0x20 [ 311.175837][T13902] bpf_prog_7aab9edbcd54ca16+0x22/0x27 [ 311.181808][T13902] bpf_trace_run4+0x334/0x590 [ 311.187020][T13902] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 311.194212][T13902] __access_remote_vm+0x805/0x830 [ 311.199770][T13902] mem_rw+0x1e6/0x400 [ 311.204263][T13902] vfs_write+0x2a2/0xc90 [ 311.209016][T13902] ksys_write+0x1a0/0x2c0 [ 311.213855][T13902] do_syscall_64+0xf3/0x230 [ 311.218867][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.225301][T13902] [ 311.225301][T13902] other info that might help us debug this: [ 311.225301][T13902] [ 311.235517][T13902] Chain exists of: [ 311.235517][T13902] &sighand->siglock --> &rq->__lock --> lock#10 [ 311.235517][T13902] [ 311.248395][T13902] Possible unsafe locking scenario: [ 311.248395][T13902] [ 311.255836][T13902] CPU0 CPU1 [ 311.261186][T13902] ---- ---- [ 311.266533][T13902] lock(lock#10); [ 311.270257][T13902] lock(&rq->__lock); [ 311.276845][T13902] lock(lock#10); [ 311.283083][T13902] lock(&sighand->siglock); [ 311.287661][T13902] [ 311.287661][T13902] *** DEADLOCK *** [ 311.287661][T13902] [ 311.295880][T13902] 7 locks held by syz.4.2667/13902: [ 311.301061][T13902] #0: ffff88802b85d9c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 311.310279][T13902] #1: ffff88807a82e420 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 311.319158][T13902] #2: ffff88807c2af398 (&mm->mmap_lock){++++}-{3:3}, at: __access_remote_vm+0xa4/0x830 [ 311.328912][T13902] #3: ffff8880b9538798 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 311.340164][T13902] #4: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 311.349748][T13902] #5: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 311.359150][T13902] #6: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x29/0x2d0 [ 311.368900][T13902] [ 311.368900][T13902] stack backtrace: [ 311.374861][T13902] CPU: 1 PID: 13902 Comm: syz.4.2667 Not tainted 6.10.0-syzkaller-04483-g0be9ae5486cd #0 [ 311.384648][T13902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 311.394693][T13902] Call Trace: [ 311.397973][T13902] [ 311.400901][T13902] dump_stack_lvl+0x241/0x360 [ 311.405573][T13902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.410765][T13902] ? print_circular_bug+0x130/0x1a0 [ 311.415964][T13902] check_noncircular+0x36a/0x4a0 [ 311.420897][T13902] ? __pfx_check_noncircular+0x10/0x10 [ 311.426532][T13902] ? lockdep_lock+0x123/0x2b0 [ 311.431200][T13902] ? __bfs+0x368/0x6f0 [ 311.435264][T13902] ? __pfx_hlock_conflict+0x10/0x10 [ 311.440460][T13902] ? _find_first_zero_bit+0xd3/0x100 [ 311.445750][T13902] validate_chain+0x18e0/0x5900 [ 311.450608][T13902] ? __pfx_validate_chain+0x10/0x10 [ 311.455802][T13902] ? lockdep_unlock+0x16a/0x300 [ 311.460658][T13902] ? __bfs+0x368/0x6f0 [ 311.464807][T13902] ? __pfx_validate_chain+0x10/0x10 [ 311.470002][T13902] ? validate_chain+0x15b1/0x5900 [ 311.475021][T13902] ? __pfx_validate_chain+0x10/0x10 [ 311.480671][T13902] ? mark_lock+0x9a/0x350 [ 311.485000][T13902] __lock_acquire+0x1346/0x1fd0 [ 311.489948][T13902] lock_acquire+0x1ed/0x550 [ 311.494445][T13902] ? __lock_task_sighand+0x149/0x2d0 [ 311.499739][T13902] ? __pfx_lock_acquire+0x10/0x10 [ 311.504753][T13902] ? _raw_spin_lock_irqsave+0xb0/0x120 [ 311.510206][T13902] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 311.516794][T13902] ? __pfx_lock_acquire+0x10/0x10 [ 311.521817][T13902] _raw_spin_lock_irqsave+0xd5/0x120 [ 311.527098][T13902] ? __lock_task_sighand+0x149/0x2d0 [ 311.532379][T13902] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 311.538275][T13902] __lock_task_sighand+0x149/0x2d0 [ 311.543397][T13902] ? __lock_task_sighand+0x29/0x2d0 [ 311.548594][T13902] group_send_sig_info+0x274/0x310 [ 311.553709][T13902] ? __pfx_group_send_sig_info+0x10/0x10 [ 311.559354][T13902] bpf_send_signal_common+0x2dd/0x430 [ 311.564720][T13902] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 311.570696][T13902] ? bpf_trace_run4+0x244/0x590 [ 311.575536][T13902] bpf_send_signal_thread+0x16/0x20 [ 311.580725][T13902] bpf_prog_7aab9edbcd54ca16+0x22/0x27 [ 311.586170][T13902] bpf_trace_run4+0x334/0x590 [ 311.590924][T13902] ? __pfx_bpf_trace_run4+0x10/0x10 [ 311.596112][T13902] ? get_mm_memcg_path+0x36c/0x600 [ 311.601215][T13902] ? get_mm_memcg_path+0x4e6/0x600 [ 311.606332][T13902] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 311.613001][T13902] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 311.619756][T13902] __access_remote_vm+0x805/0x830 [ 311.624869][T13902] ? __pfx_lock_release+0x10/0x10 [ 311.629889][T13902] ? __pfx___access_remote_vm+0x10/0x10 [ 311.635434][T13902] ? __might_fault+0xc6/0x120 [ 311.640114][T13902] mem_rw+0x1e6/0x400 [ 311.644092][T13902] ? __pfx_mem_write+0x10/0x10 [ 311.648861][T13902] vfs_write+0x2a2/0xc90 [ 311.653129][T13902] ? __pfx_vfs_write+0x10/0x10 [ 311.657892][T13902] ? do_futex+0x392/0x560 [ 311.662215][T13902] ? __fget_files+0x29/0x470 [ 311.666803][T13902] ? __fget_files+0x3f6/0x470 [ 311.671480][T13902] ksys_write+0x1a0/0x2c0 [ 311.676001][T13902] ? __pfx_ksys_write+0x10/0x10 [ 311.680867][T13902] ? rcu_is_watching+0x15/0xb0 [ 311.685632][T13902] ? trace_sys_enter+0x1f/0xd0 [ 311.690493][T13902] do_syscall_64+0xf3/0x230 [ 311.695001][T13902] ? clear_bhb_loop+0x35/0x90 [ 311.699694][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.705581][T13902] RIP: 0033:0x7ff764b75b59 [ 311.709988][T13902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.729762][T13902] RSP: 002b:00007ff765a02048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.738179][T13902] RAX: ffffffffffffffda RBX: 00007ff764d05f60 RCX: 00007ff764b75b59 [ 311.746151][T13902] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000007 [ 311.754116][T13902] RBP: 00007ff764be4e5d R08: 0000000000000000 R09: 0000000000000000 [ 311.762086][T13902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.770052][T13902] R13: 000000000000000b R14: 00007ff764d05f60 R15: 00007ffd20e12b98 [ 311.778048][T13902] [ 311.796823][ T5112] Bluetooth: hci0: command tx timeout [ 311.817335][T13902] Dead loop on virtual device ip6_vti0, fix it urgently! [ 312.082491][T11638] team0 (unregistering): Port device team_slave_1 removed [ 312.113376][T11638] team0 (unregistering): Port device team_slave_0 removed [ 312.441890][T13884] netlink: 'syz.1.2658': attribute type 29 has an invalid length. [ 312.454708][T13806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.480150][T13806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.529495][T13806] team0: Port device team_slave_0 added [ 312.539241][T13806] team0: Port device team_slave_1 added [ 312.572464][T13806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.580931][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.607898][T13806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.621231][T13806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.628604][T13806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.654677][T13806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.732653][T13806] hsr_slave_0: entered promiscuous mode [ 312.739420][T13806] hsr_slave_1: entered promiscuous mode [ 313.158203][T13806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.181094][T13806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.194051][T13806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.204488][T13806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.276730][T13806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.301487][T13806] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.313730][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.320878][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.336324][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.343501][ T5185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.523112][T13806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.569523][T13806] veth0_vlan: entered promiscuous mode [ 313.586721][T13806] veth1_vlan: entered promiscuous mode [ 313.627260][T13806] veth0_macvtap: entered promiscuous mode [ 313.640006][T13806] veth1_macvtap: entered promiscuous mode [ 313.661100][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.671918][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.683097][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.697363][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.709156][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.719913][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.730298][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.741086][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.751201][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.764182][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.774350][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.788237][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.800859][T13806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.821907][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.834700][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.848416][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.855816][ T5112] Bluetooth: hci0: command tx timeout [ 313.863972][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.877840][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.888394][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.899059][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.910666][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.920737][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.931286][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.941441][T13806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.952302][T13806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.964072][T13806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.983265][T13806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.998143][T13806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.008013][T13806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.018197][T13806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.061981][T13806] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 314.094873][T11638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.103753][T13806] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 314.107763][T11638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.146078][T11638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.154464][T11638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.789880][T11638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.458232][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.464575][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.226528][T11638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.293476][T11638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.361921][T11638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.469753][T11638] bridge_slave_1: left allmulticast mode [ 319.479125][T11638] bridge_slave_1: left promiscuous mode [ 319.484888][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.504354][T11638] bridge_slave_0: left allmulticast mode [ 319.510478][T11638] bridge_slave_0: left promiscuous mode [ 319.516349][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.654452][T11638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.665507][T11638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.676309][T11638] bond0 (unregistering): Released all slaves [ 319.961546][T11638] hsr_slave_0: left promiscuous mode [ 319.974047][T11638] hsr_slave_1: left promiscuous mode [ 319.981689][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.989427][T11638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.998287][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.006201][T11638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.016606][T11638] veth1_macvtap: left promiscuous mode [ 320.022196][T11638] veth0_macvtap: left promiscuous mode [ 320.028346][T11638] veth1_vlan: left promiscuous mode [ 320.033682][T11638] veth0_vlan: left promiscuous mode [ 320.289949][T11638] team0 (unregistering): Port device team_slave_1 removed [ 320.309197][T11638] team0 (unregistering): Port device team_slave_0 removed