last executing test programs: 1m54.098807464s ago: executing program 3 (id=235): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000015c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\x010\xa5`\xdfI\xe5b{\x18z\xa2\xe8\xc9\xde\xea\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x400}, 0x48) close(r3) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wlan1\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xba5, 0x2, 0x7f, 0x2, r5, 0xc6e9, '\x00', 0x0, r5, 0x0, 0x4, 0x5, 0xa}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xbfffffffffffffff, r4, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80) 1m35.986244813s ago: executing program 3 (id=235): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000015c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\x010\xa5`\xdfI\xe5b{\x18z\xa2\xe8\xc9\xde\xea\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x400}, 0x48) close(r3) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wlan1\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xba5, 0x2, 0x7f, 0x2, r5, 0xc6e9, '\x00', 0x0, r5, 0x0, 0x4, 0x5, 0xa}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xbfffffffffffffff, r4, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80) 1m13.333822967s ago: executing program 3 (id=235): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000015c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\x010\xa5`\xdfI\xe5b{\x18z\xa2\xe8\xc9\xde\xea\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x400}, 0x48) close(r3) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wlan1\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xba5, 0x2, 0x7f, 0x2, r5, 0xc6e9, '\x00', 0x0, r5, 0x0, 0x4, 0x5, 0xa}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xbfffffffffffffff, r4, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80) 57.502038888s ago: executing program 3 (id=235): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000015c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\x010\xa5`\xdfI\xe5b{\x18z\xa2\xe8\xc9\xde\xea\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x400}, 0x48) close(r3) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wlan1\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xba5, 0x2, 0x7f, 0x2, r5, 0xc6e9, '\x00', 0x0, r5, 0x0, 0x4, 0x5, 0xa}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xbfffffffffffffff, r4, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80) 49.906296171s ago: executing program 2 (id=855): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0xf, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r2, &(0x7f00000005c0), 0x20000000}, 0x20) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xd2, &(0x7f00000002c0)=""/210}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014008080c000a0000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func, @call={0x85, 0x0, 0x0, 0xba}, @generic]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xea, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x100200}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x38, 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 49.538492848s ago: executing program 2 (id=858): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xf0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe1b}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0xc020660b, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=r4, r3, 0x33, 0x2, 0x0, @link_id}, 0x20) 49.158557194s ago: executing program 2 (id=863): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0x29, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003bca2186850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='block_split\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB='a'], 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="21a300000000000061104e000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x80, 0x3, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 46.88559946s ago: executing program 2 (id=879): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000020006bcd210000006e04000081000000000000017aa60864", 0x1c}], 0xffffff1f, 0x0, 0x0, 0x1f00c00e}, 0x0) 29.791713203s ago: executing program 3 (id=235): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000015c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\x010\xa5`\xdfI\xe5b{\x18z\xa2\xe8\xc9\xde\xea\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x400}, 0x48) close(r3) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wlan1\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xba5, 0x2, 0x7f, 0x2, r5, 0xc6e9, '\x00', 0x0, r5, 0x0, 0x4, 0x5, 0xa}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xbfffffffffffffff, r4, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80) 28.409152483s ago: executing program 2 (id=879): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000020006bcd210000006e04000081000000000000017aa60864", 0x1c}], 0xffffff1f, 0x0, 0x0, 0x1f00c00e}, 0x0) 10.145268143s ago: executing program 2 (id=879): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000020006bcd210000006e04000081000000000000017aa60864", 0x1c}], 0xffffff1f, 0x0, 0x0, 0x1f00c00e}, 0x0) 9.837141424s ago: executing program 3 (id=235): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000015c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\x010\xa5`\xdfI\xe5b{\x18z\xa2\xe8\xc9\xde\xea\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x400}, 0x48) close(r3) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'wlan1\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xba5, 0x2, 0x7f, 0x2, r5, 0xc6e9, '\x00', 0x0, r5, 0x0, 0x4, 0x5, 0xa}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xbfffffffffffffff, r4, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80) 2.686433173s ago: executing program 4 (id=1160): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000180)) write$cgroup_int(r1, &(0x7f0000000000), 0xffe000) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 2.338385649s ago: executing program 4 (id=1164): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) r2 = socket$kcm(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xdd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000a798400000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014002485b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffff, 0x18}, 0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000440)={r9, r6}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000440)={r9, r6}) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0xc0c0583b, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func, @jmp={0x5, 0x1, 0x2, 0x0, 0x8, 0x10, 0x1}, @generic={0x4, 0xe, 0x0, 0xff81, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xfffffbff, 0x70, &(0x7f0000000300)=""/112, 0x40f00, 0x0, '\x00', 0x0, 0x9, r8, 0x8, &(0x7f00000003c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x3, 0x0, &(0x7f0000000400)=[{}, {0x1, 0x4, 0x2, 0x9}, {0x2, 0x2, 0xc, 0x1}]}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000340)='\x00') r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000080000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000064000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r10, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x8, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r10, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x8, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r11, r10, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x31e4}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}]}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x9b, &(0x7f00000005c0)=""/155, 0x40f00, 0x20, '\x00', 0x0, 0x26, r8, 0x8, &(0x7f0000000740)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x8, 0x8412}, 0x10, r11, r9, 0x2, 0x0, &(0x7f00000007c0)=[{0x2, 0x2, 0x10, 0x7}, {0x0, 0x2, 0xa, 0xc}], 0x10, 0x3749}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x31e4}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}]}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x9b, &(0x7f00000005c0)=""/155, 0x40f00, 0x20, '\x00', 0x0, 0x26, r8, 0x8, &(0x7f0000000740)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x8, 0x8412}, 0x10, r11, r9, 0x2, 0x0, &(0x7f00000007c0)=[{0x2, 0x2, 0x10, 0x7}, {0x0, 0x2, 0xa, 0xc}], 0x10, 0x3749}, 0x90) socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x0, 0xc, 0x0, @link_id}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x0, 0xc, 0x0, @link_id}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r12}, 0x10) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r13, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r13, 0x4010744d, 0x20000000) (async) ioctl$TUNSETOFFLOAD(r13, 0x4010744d, 0x20000000) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x14, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000004000000000000000001002839080001000000185300000500000000000000000000003f0105000500000085000000a00000000711050eff7f000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000416be0ffffffffff184a0000040000000000000000d7000000000000d9ee6f19d18c00fc61db1d3298511fd4bee761fee388fc7c8a1327c72062cb1f53bad634b0781d1c87c7bb2696f1bf2dca51ab3976cc5da5f50b3b5c746d2235f2cd9678e2ac673b4445168f7f14210ea4d826266ce4ef8fabbe1722b889facb813c669e8a4ff0fb8f9a32b962767068e978bb1bd844234eb5a327d671c55aeabf4ba133f9604f64599aa4370ba8f66280ca57762f2f4827d317aba09a9bdb0529dc5ca7d81f773a5d71ad6ddc9d501e22f645cec36375e0f2b40066", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000500000000000000000000009500000000000000"], &(0x7f00000008c0)='GPL\x00', 0x8, 0xa7, &(0x7f0000000900)=""/167, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x2, 0x4, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a00)=[r0], &(0x7f0000000a40)=[{0x2, 0x5, 0xb, 0x4}, {0x0, 0x2, 0xc, 0xc}, {0x4, 0x1, 0x10, 0x2}, {0x0, 0x4, 0x1, 0x7}, {0x5, 0x5, 0xb, 0x8}, {0x3, 0x1, 0xb, 0xa}, {0x3, 0x5, 0xd, 0x5}], 0x10, 0x2c8b4823}, 0x90) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x20, 0xf, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x5b}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', r3, 0x19, r4, 0x8, &(0x7f0000000780)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x0, 0x6, 0x8}, 0x10, r11, r14, 0x3, &(0x7f0000000c00)=[r15, r0, r1], &(0x7f0000000c40)=[{0x2, 0x2, 0xd, 0x5}, {0x4, 0x5, 0x9, 0x6}, {0x3, 0x2, 0x10, 0x1}], 0x10, 0x15}, 0x90) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) 2.263769088s ago: executing program 1 (id=1165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x27}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x34, 0x0, 0xfffffffb, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, r0, 0x7, 0x2c, 0x0, @link_id, r2}, 0x20) setsockopt$sock_attach_bpf(r1, 0x29, 0x18, 0x0, 0x2000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r5 = socket$kcm(0xf, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001b000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="561606d1d3ad"}) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000080)=@hci={0x1f, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x44d8}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r8, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 2.030089477s ago: executing program 0 (id=1167): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209000a00000004", 0x2f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (fail_nth: 4) 1.424576329s ago: executing program 1 (id=1168): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2038], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.361159856s ago: executing program 0 (id=1169): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000180)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000001c0)='syzkaller\x00', 0x1f, 0x57, &(0x7f0000000200)=""/87, 0x41000, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xc, 0x401, 0x2000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x2, 0x1, 0x16}], 0x10, 0x1000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', r0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x15, &(0x7f00000004c0)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x4, 0x1, 0x2, 0x4, 0x5, 0xfffffffffffffffe, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x2, 0x6, 0x6, 0x1, 0x38ed0eabe58d340a, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000580)='syzkaller\x00', 0xbf07, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x8, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r5, r1, r3, r6, r1, r3, r7, r1, r3, r3], &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0x1}, {0x5, 0x1, 0x5, 0x5}, {0x2, 0x4, 0x8, 0x7}], 0x10, 0x6560792a}, 0x90) r8 = openat$cgroup_ro(r4, &(0x7f00000008c0)='blkio.bfq.time\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r8, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], 0x0, 0xc0, &(0x7f0000000b00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0xc, &(0x7f0000000900)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x9, 0x9, 0x7, 0x4, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x0, 0x3, 0x4, 0xb, 0x18, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000980)='syzkaller\x00', 0x44e, 0x3, &(0x7f00000009c0)=""/3, 0x40f00, 0x4c, '\x00', r0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x2, 0x6, 0x7, 0x2}, 0x10, r10, r2, 0xa, &(0x7f0000000d40)=[r5, r6, r3, r7, r3, r6, r7, r6, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x2, 0x5, 0xd, 0x7}, {0x0, 0x1, 0x5, 0x1}, {0x0, 0x3, 0x3, 0xc}, {0x0, 0x4, 0x10, 0xa}, {0x0, 0x5, 0x10, 0xa}, {0x2, 0x1, 0xe, 0x8}, {0x1, 0x2, 0x5, 0x5}, {0x2, 0x1, 0x3, 0x2}, {0x0, 0x1, 0xc, 0x8}, {0x3, 0x5, 0xc, 0x1}]}, 0x90) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001040)=r10, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)='%pi6 \x00'}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1d, 0x1f, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x1, 0xb, 0x0, 0x1, 0xfffffffffffffffc, 0x4}, @generic={0xbf, 0x2, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x45}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001000)='GPL\x00', 0x1f, 0x0, 0x0, 0x41100, 0x4d, '\x00', r0, 0x1d, r11, 0x8, &(0x7f0000001080)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000010c0)={0x0, 0xa, 0x6472ea54}, 0x10, r10, r8, 0x9, &(0x7f00000011c0)=[r7, r12, r1, r7, r3, r1], &(0x7f0000001200)=[{0x0, 0x5, 0xb, 0x6}, {0x2, 0x2, 0x4, 0x93907b57385ab283}, {0x4, 0x5, 0x4, 0xa}, {0x0, 0x2, 0xc, 0xc7ebfb4c1921ea40}, {0x4, 0x4, 0xc, 0x9}, {0x1, 0x1}, {0x4, 0x1, 0xf, 0x1}, {0x2, 0x4, 0x5, 0x7}, {0x1, 0x3, 0x7, 0xc}], 0x10, 0x1073}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz1\x00', 0x1ff) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, r6, 0x3, '\x00', r0, r8, 0x4, 0x0, 0x5}, 0x48) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, r11, 0x5, 0x2, 0x5}, 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xf, 0x7, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, [@generic={0x9, 0x0, 0x7, 0x401, 0xff}, @alu={0x4, 0x1, 0x8, 0x6, 0x4, 0xfffffffffffffff0, 0x8}, @ldst={0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x10}, @generic={0x20, 0x6, 0x9, 0x20, 0x200}]}, &(0x7f0000001400)='syzkaller\x00', 0xff, 0x2f, &(0x7f0000001440)=""/47, 0x40f00, 0x10, '\x00', r9, 0xd, r11, 0x8, &(0x7f0000001480)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x0, 0x0, 0x45b, 0x4}, 0x10, r10, 0xffffffffffffffff, 0xa, &(0x7f0000001600)=[r7, r1, r14, r15], &(0x7f0000001640)=[{0x3, 0x5, 0x7, 0x3}, {0x2, 0x2, 0xe, 0x5}, {0x5, 0x1, 0xf}, {0x4, 0x1, 0xa, 0xd}, {0x4, 0x1, 0x10, 0x5}, {0x3, 0x5, 0xf}, {0x5, 0x2, 0x5, 0x7}, {0x1, 0x2, 0x7, 0x1}, {0x5, 0x5, 0x9, 0x8}, {0x3, 0x1, 0xe, 0xc}], 0x10, 0xdb7b}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001800)={'ip6erspan0\x00', 0x1000}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r10, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000001880)=0x7f) socketpair(0x1f, 0x76f2bac62f13673a, 0x8, &(0x7f00000018c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r13) r17 = openat$cgroup_ro(r11, &(0x7f0000001900)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{r17, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x1d, 0x2a, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@generic={0x9, 0x0, 0xa, 0x9, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r18}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x1ff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b80)='GPL\x00', 0x86, 0x57, &(0x7f0000001bc0)=""/87, 0x41000, 0xa, '\x00', r0, 0x29, r8, 0x8, &(0x7f0000001c40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001c80)={0x5, 0xc, 0x8, 0x3f}, 0x10, r10, r16, 0x4, &(0x7f0000001cc0)=[r14, r15, r1, r17, r15, r14], &(0x7f0000001d00)=[{0x4, 0x3, 0xf, 0x2}, {0x3, 0x4, 0xb, 0x7}, {0x2, 0x2, 0x7, 0x4}, {0x0, 0x2, 0xe, 0x5}], 0x10, 0x7}, 0x90) r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x7ff, '\x00', r0, r11, 0x5, 0x5, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x18, 0xf, &(0x7f0000001e80)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x1, 0x2, 0x0, r19, 0x0, 0x0, 0x0, 0x1000}, @call={0x85, 0x0, 0x0, 0xa3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @ldst={0x0, 0x1, 0x2, 0xb, 0x4, 0x2, 0x4}, @call={0x85, 0x0, 0x0, 0x60}], &(0x7f0000001f00)='syzkaller\x00', 0x400, 0x1a, &(0x7f0000001f40)=""/26, 0x41000, 0x1e, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000002280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000022c0)={0x1, 0x5, 0xaabb, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000002300)=[{0x3, 0x5, 0x10, 0x8}, {0x1, 0x1, 0x7, 0x1}, {0x0, 0x1, 0xc, 0xa}, {0x4, 0x1, 0xc}, {0x5, 0x2, 0x5, 0xb}, {0x5, 0x1, 0xc, 0xa}], 0x10, 0x3f}, 0x90) 1.262709005s ago: executing program 4 (id=1170): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8007a00140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.262355668s ago: executing program 1 (id=1171): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000020000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffbb0700000000000000b70200000900000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x13, &(0x7f0000000340)=""/222}, 0x21) 1.211182264s ago: executing program 0 (id=1172): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b03d25a806f8c6394f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.173682962s ago: executing program 4 (id=1173): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8fedcb7807001175f3751de486dd630080fc47ae2c00db5b685c58bbcfe8875a010000000000000000000000000033000000ac1414aa3c200007"], 0xfdef) 1.098634876s ago: executing program 1 (id=1174): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02", 0x3}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800290000000401040016000a00", 0x36}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x4b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='nmi_handler\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x3, 0x0, 0x50, 0x0, &(0x7f0000000300)="1cb77a838c256e8959799a9a16edc891f4afc073429eff81e8f1ad20ae5a2eb01832ce4b0e39ea71c16ee5123b0664c8e705e7975c06fa1dff494a1aa8120ffdc6ec640db653aed649ce93e8ff0a4b0e", 0x0, 0x2, 0x0, 0x74}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef80"], 0xfe33) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000180)={@cgroup, 0x0, 0x16, 0x0, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) 1.095667377s ago: executing program 0 (id=1175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b703000000000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xe) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0xf, &(0x7f0000000000), 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x0) openat$cgroup_devices(r6, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f90b24fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 999.321238ms ago: executing program 4 (id=1176): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000020006bcd210000006e04000081000000000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xf00000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 647.302397ms ago: executing program 1 (id=1177): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x10d, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x12, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3cd, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x3e, &(0x7f0000000180)=""/62, 0x41000, 0x8, '\x00', r1, 0x33, r3, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0xd, 0x2}, {0x5, 0x1, 0xa, 0x3}, {0x1, 0x2, 0x2, 0x8}, {0x3, 0x3, 0x7, 0xc}, {0x1, 0x2, 0x9, 0x5}, {0x5, 0x5, 0xf, 0xc}, {0x5, 0x1, 0x0, 0xa}], 0x10, 0x3ff}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='f2fs_writepages\x00', r3}, 0x10) sendmsg$kcm(r3, &(0x7f0000001900)={&(0x7f0000000700)=@isdn={0x22, 0x0, 0x9, 0x80, 0x1f}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="23467ee84cee585444d9f30a67a3a4cf24964bf920f2fec4a8815969ee20e2d3bd09c961810d7ef807f7005b9f2aecf3006b704f729c6b577667afb031", 0x3d}, {&(0x7f00000007c0)="84bc8db3736d27", 0x7}], 0x2, &(0x7f0000000840)=[{0x60, 0x113, 0x0, "e2240bb37b75248d0fe976c5cbc5c6aebfa5b4ce42e6c27b611e2539da65fb0bc4f90b0d3537eea4816302de6a041565918ce0dd487903986b67c00242f7076568e71cfe9c661c41aa284cdbfa43fa0c"}, {0x28, 0x116, 0x4, "5016d2e0247c26174baae34a7466f7b1ab"}, {0x1010, 0x10f, 0x1, "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"}], 0x1098}, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@bloom_filter={0x1e, 0x2, 0x7, 0x1000, 0x10c8, r0, 0x7f, '\x00', 0x0, r4, 0x2, 0x1, 0x1, 0xf}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000019c0)='\x00') mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001a00)='syz1\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d00)={r4, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0], 0x0, 0xf8, &(0x7f0000001b00)=[{}], 0x8, 0x10, &(0x7f0000001b40), &(0x7f0000001b80), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000001bc0)}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001d40)={0xffffffffffffffff}) r9 = gettid() write$cgroup_pid(r3, &(0x7f0000001d80)=r9, 0x12) sendmsg$kcm(r3, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001dc0)="df8824b4babb417898c17dfb239e290e9a3b2c7f885cd3f7e175b5a7f65ad53bf0d6bc9cf87655c76d271ec2d295c68c51f1ee4b50f684c5035622a00dac16df67093f7aa849eb0759e099bdad430bf0", 0x50}, {&(0x7f0000001e40)="654dbe05e842ea6511e3b83e36f009b51f1984e340053f6e7e7411a2b7f54f14d5a219b7889840ec31761cbbe12a4e01bb7dcbabe89fa8f83bf45fe7f0acabc28010fb72bb683c2dfee8ec438ee74a52d133d0ef1100c4eea7e0eec2a7348e5e5d17b5bc94b8f67478d18f5a975dab2f26bd8e1b6752e214b34ba33b89efc8a4bb8738921b1cb1cd3065f2b7a2f3a3243958d664e2d6d2dbf0209caa40", 0x9d}, {&(0x7f0000001f00)="a62be98d5ceebb8eb4e79397813e9396f8027d2fa0c5257471f84adf5bda253246d3068832266d9d66817de5bed949affa67da868f5274e62e991eb5fb2e7564f092a45acad4bd80f323843cd85f5948e2dd73a1b5bc2aed9e", 0x59}], 0x3, &(0x7f0000001fc0)=[{0x20, 0x108, 0x9, "86a2a94063e960dab9"}], 0x20}, 0x804) sendmsg$inet(r8, &(0x7f0000002400)={&(0x7f0000002040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002080)="d9c00d0b034c9a0d69848b06353f3b3eb9d52aeea3a162d3f54636d4279b48dbf9099b332edd6c6d6ef15db74de1ab9d922e8593f2b9965f414e951666efbcb5bc461076768a72470238b70b286c26339c1b1ee9e3c22ffcc6a8e366756d7a360130a963bfbaa66832f18a07a29cfc1b0cb13413d54d83dbe1926fb072b92566a7a2dcd3ada7f31715bba61bd8", 0x8d}, {&(0x7f0000002140)="4cfd01752db6c45442c5d69cf730baf21aa7a543ccb913094e1fcff4d7d39d09c857eade18ecb2627ab4df8e6f6f934a17c8c7081df3ff009a8e4b76d546c8958682c5476a72849c06381df8e6464b043612682c930163a35f6061c147ea61dcec036fbb103b2117ce0a31b2640d578f1e0c8339629bfd01aa3034358fa2d99126976d5016f360d3aacfd14a0b1d8126a3cbb9e22dda926c89145fbbb768a18749777eacd5e6", 0xa6}, {&(0x7f0000002200)="4494776fd57aec8ac3a5a14ed3e4e460fccc61c24f8f64aef83a705d66371d098249b37ee3d463609a030a2c72a9794e97dbb455876e3f24a911972567ef35c690093fc33654f38f8483c46e6dab2e0a0750fecbda0b077b5bed7f0f3697bcbbd042dfaef32b9e737d62f42dcfa967787c1eac00d9078dcd0ac742ed0d3e8763f44b", 0x82}, {&(0x7f00000022c0)="c158977c3e7d76992b46f973b65cbe1034b9be89c012e879ce2433e16151ff076c3532ed04432d284bce4b01a0f77f7598c0eb65", 0x34}], 0x4, &(0x7f0000002340)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xa0}, 0x800) r10 = perf_event_open$cgroup(&(0x7f0000002540)={0x2, 0x80, 0xa, 0x8, 0x9, 0x5, 0x0, 0x80000001, 0x30252, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000002500)}, 0x9048, 0x9, 0x1000, 0x7, 0x0, 0x1, 0x5, 0x0, 0x55, 0x0, 0x100000000}, r3, 0xf, r3, 0x0) perf_event_open(&(0x7f0000002480)={0x2, 0x80, 0x0, 0x7, 0xfa, 0x80, 0x0, 0x7fff, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5ef, 0x1, @perf_bp={&(0x7f0000002440), 0x1}, 0x105041, 0x2, 0x2, 0x0, 0x9, 0x7f, 0x34b, 0x0, 0x3f, 0x0, 0x6}, r9, 0x3, r10, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x17, 0x12, &(0x7f00000025c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff74, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000000}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000002680)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x60, '\x00', r7, 0x2d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000026c0)=[{0x5, 0x1, 0x1}, {0x4, 0x1, 0x3, 0x7}, {0x0, 0x1, 0x6, 0x8}, {0x4, 0x2, 0x7}], 0x10, 0x2}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000027c0)={0xffffffffffffffff}) r12 = openat$cgroup(r3, &(0x7f0000002800)='syz0\x00', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000002840)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002880)='cpu.idle\x00', 0x2, 0x0) r14 = perf_event_open(&(0x7f00000028c0)={0x4, 0x80, 0x9, 0x2, 0x2, 0x8, 0x0, 0x7, 0x102000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x9, 0x2}, 0x402, 0x7, 0xd53, 0x9, 0x80, 0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, r9, 0x8, r5, 0x8) recvmsg$kcm(r13, &(0x7f0000002b40)={&(0x7f0000002940)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000029c0)=""/15, 0xf}], 0x1, &(0x7f0000002a40)=""/196, 0xc4}, 0x100c0) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x40082406, &(0x7f0000002b80)='cpu.idle\x00') syz_open_procfs$namespace(r9, &(0x7f0000002bc0)='ns/time\x00') perf_event_open(&(0x7f0000002c00)={0x2, 0x80, 0x0, 0xff, 0x40, 0x7, 0x0, 0x8, 0x200, 0xf86040a5612f894b, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1e, 0x4, @perf_config_ext={0x4, 0x1f}, 0x6, 0x7, 0x3ff, 0x5, 0x5, 0x7ff, 0x1, 0x0, 0x21fc, 0x0, 0x80}, r9, 0x5, r14, 0xa) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000002c80)={'veth0_to_batadv\x00', 0x200}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003dc0)={r0, 0x58, &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003e80)={0x6, 0x7, &(0x7f0000002cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x3, 0x6, 0x1, 0x100, 0xfffffffffffffff0}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x91}]}, &(0x7f0000002d00)='syzkaller\x00', 0x1e4, 0x1000, &(0x7f0000002d40)=""/4096, 0x40f00, 0x8, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003e00)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003e40)=[0x1, r11, r13, r6, r6], 0x0, 0x10, 0x100}, 0x90) 376.283668ms ago: executing program 4 (id=1178): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002fc0)={@cgroup, 0xffffffffffffffff, 0x31, 0x0, 0xffffffffffffffff, @link_id}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x1, 0x0, 0xae1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x824, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x3, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup(r4, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1c0000001d008104e00f80ecdb4cb9c89510c3a01000000088080efb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff000000ea87d49e4c2fe0bba4a100bfa10000010000f8ffffffbfa400000000000007040000f0ffffffbc608dc900000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x804) ioctl$SIOCSIFHWADDR(r7, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 375.930922ms ago: executing program 1 (id=1179): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209000a00000004", 0x2f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (fail_nth: 5) 129.889092ms ago: executing program 0 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/81, 0x51}}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r5, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840), &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0, 0xa2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r3, @ANYRES32=r6], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84ac"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x26, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @ldst={0x0, 0x1, 0x6, 0x6, 0x3, 0x4, 0xfffffffffffffffb}, @map_fd={0x18, 0xa, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0xd2, &(0x7f00000007c0)=""/210, 0x41000, 0x32, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xd, 0x2a, 0x7fb5}, 0x10, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r0, r10], 0x0, 0x10, 0x7fffffff}, 0x90) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001200)='memory.numa_stat\x00', 0x0, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@generic={0x10, "36672c20b559c2e29f2bb0252470ec42d292bf3a71ade99d4239c59940391ecb70aee26866d3e29dcb278591e86c94de084a9f40e08022d5b3e131fd92e979c16514f5fb1399382632cdb6119a86f780b3b20f2fb0437ac1ad3c90cb54bf110857a0ac462261118ecef583ed072db408a6b86416c9e30a08e8c2a1cec8f7"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)="fd0852a1f6e85b917f7c59304e13b5fb231c6c46cf07d10115e08a141d6e338cd9718a7d0628b34d81fa17672c9b0c40c8e3fdf1ba55fef39fff7cad1cc56decd8225b8c55199609b280ecf1f6ff50781a01eecb889b554b741eefefd8d23ddbe4a4e96f7b05f46e53100073750d19cc7d55056ccd4ae5394863c1330bcf5fe9713b1013df1fe200a6b0fc617155ef4de26fe21a435d3579ead01ec6b433053c6a0cb60fff91ded05b0b1bfffefd51db87353703d1fc1ba8dc99c019beda6925bc7379d142a971c993fb7572753df0281dc334fb034585888c464bff149d3b7aca5547353aef788e3c05ca8c6fad4dace7a296", 0xf3}, {&(0x7f0000000180)="c1c21a65e9da1b43eafe7aa548f72b168d9bc8f535dce2edeb170a20c0db9bc26a98f71e07a82048a34f2edc7ee3b638f149bc31b8ce376c23d6b4b0e34fd7f0e8ffefb5f477b691f4a6e400efa5e81cd6c94a152eacf54399859779bdf7675a4273655a590c69315cc22687dd8b1ba7be4b9142e25264b8c5f1db4a4c772e891b28b910e498ebece1fb92542ef4dbe71c71e6f9cb8c34866f052ac7e674d31ad50829cf75ed72b5e6436d58a27e044abec9e4f1ef7e1c501475f6e871b02ff7fcbf0974", 0xc4}, {&(0x7f0000000300)="2c3559a463656bdeeaa998af23ea0580d951a4d230825058beb5097dbbf6c9", 0x1f}, {&(0x7f0000000340)}, {&(0x7f0000000380)="85169b2ef6abacfd328ed1a75c75eb783fe57773b511cf762396fc1d90b513bb85349a5c4952aa86fac8e266e32bdefbc81eaa0d488a2db16ff642f7e3e62ba359e70d69787b337e15885cd358d20071564090f3c8bc9d7c42c025d8186af916c2721dcc74d6071d69fc1e6ef50b6fc70bf78eaabda591", 0x77}, {&(0x7f0000000400)="eb4d36978de91ab4dfc3ecc2f0be8aa7201e2c7fde92cead93eca8d42b1b5600c097459f6265c8539fe2d69d23d0771034f82ca9de8f46e84adadabb7163a6e752a273482886533c8e6a23888916c16cecc32d00455c242b19599532e8d3e0c851592bf919df57ecb624664fd00ae70ccc39f9b3aeaacf32b6c424f2fb7157f6d4dfc2c2e0e243626f3abe5c", 0x8c}, {&(0x7f00000004c0)="671f972b4b80c092c974d0a7e07bcac3e6c1d6e4c682a1873e76564410", 0x1d}], 0x7, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}, 0x8000) 0s ago: executing program 0 (id=1181): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7f, 0xfffffffc, 0x81, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x5}, 0x48) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000c778228e15cfb341697c466b8c0d8000b708000300000000000000ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400006c5c69288500000082000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rpc_request\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='kvm_userspace_exit\x00'}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x5452, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) kernel console output (not intermixed with test programs): netlink: 14 bytes leftover after parsing attributes in process `syz.1.366'. [ 117.354448][ T29] audit: type=1800 audit(1719814692.894:4): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.371" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 117.420447][ T6497] netlink: 'syz.4.370': attribute type 21 has an invalid length. [ 117.431439][ T6496] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 117.439616][ T6497] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.370'. [ 117.454537][ T6496] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.371'. [ 117.547867][ T29] audit: type=1804 audit(1719814693.084:5): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.371" name="/root/syzkaller.CJBLsG/72/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 118.921072][ T6537] syzkaller0: entered allmulticast mode [ 119.187897][ T6558] netlink: 'syz.2.384': attribute type 29 has an invalid length. [ 119.277171][ T6556] netlink: 'syz.1.383': attribute type 21 has an invalid length. [ 119.301964][ T6556] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.383'. [ 119.314641][ T6558] netlink: 'syz.2.384': attribute type 29 has an invalid length. [ 119.359164][ T6560] netlink: 'syz.2.384': attribute type 29 has an invalid length. [ 119.397469][ T6566] netlink: 'syz.2.384': attribute type 29 has an invalid length. [ 119.415715][ T6569] netlink: 'syz.4.385': attribute type 7 has an invalid length. [ 119.436170][ T6558] netlink: 'syz.2.384': attribute type 29 has an invalid length. [ 119.493716][ T6290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.516144][ T6290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.547184][ T6290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.618060][ T6290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.637962][ T6576] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.387'. [ 119.886943][ T6290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.948624][ T6290] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.974889][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.982842][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.034198][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.041491][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.660739][ T6290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.842114][ T6290] veth0_vlan: entered promiscuous mode [ 120.935210][ T6290] veth1_vlan: entered promiscuous mode [ 120.976164][ T6625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.398'. [ 121.127365][ T6636] netlink: 64847 bytes leftover after parsing attributes in process `syz.0.400'. [ 121.185147][ T6290] veth0_macvtap: entered promiscuous mode [ 121.218327][ T6290] veth1_macvtap: entered promiscuous mode [ 121.338679][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.391060][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.413150][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.423891][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.434934][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.455151][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.472612][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.492505][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.512440][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.534228][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.556566][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.583298][ T6648] validate_nla: 8 callbacks suppressed [ 121.583320][ T6648] netlink: 'syz.1.403': attribute type 29 has an invalid length. [ 121.606094][ T6659] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.404'. [ 121.624878][ T6652] netlink: 763 bytes leftover after parsing attributes in process `syz.0.404'. [ 121.789468][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.839628][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.854318][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.866895][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.883600][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.901821][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.912380][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.935690][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.953402][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.972082][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.010223][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.066442][ T6290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.100887][ T6290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.113937][ T6290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.144812][ T6290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.491933][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.530502][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.717535][ T6692] netlink: 152 bytes leftover after parsing attributes in process `syz.0.413'. [ 122.850740][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.899717][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.802316][ T6715] netlink: 'syz.2.418': attribute type 3 has an invalid length. [ 123.850673][ T6715] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.418'. [ 124.472090][ T6730] netlink: 'syz.0.420': attribute type 9 has an invalid length. [ 124.505430][ T6730] netlink: 275 bytes leftover after parsing attributes in process `syz.0.420'. [ 124.605848][ T6734] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.421'. [ 124.834875][ T6741] netlink: 'syz.1.426': attribute type 3 has an invalid length. [ 124.842561][ T6741] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.426'. [ 125.333332][ T6749] wg2: entered allmulticast mode [ 125.415556][ T6745] wg2: entered promiscuous mode [ 125.802486][ T6774] netlink: 'syz.4.434': attribute type 10 has an invalid length. [ 125.815686][ T6774] netlink: 44 bytes leftover after parsing attributes in process `syz.4.434'. [ 125.851784][ T6774] bridge_slave_0: entered allmulticast mode [ 125.873668][ T6778] netlink: 'syz.1.435': attribute type 10 has an invalid length. [ 125.893913][ T6778] veth0_macvtap: left promiscuous mode [ 125.916816][ T6778] macvtap0: entered allmulticast mode [ 125.966318][ T6780] netlink: 'syz.2.436': attribute type 29 has an invalid length. [ 125.982361][ T6780] netlink: 'syz.2.436': attribute type 29 has an invalid length. [ 125.991204][ T6780] netlink: 'syz.2.436': attribute type 29 has an invalid length. [ 126.006864][ T6780] netlink: 'syz.2.436': attribute type 29 has an invalid length. [ 126.883385][ T6807] validate_nla: 1 callbacks suppressed [ 126.883405][ T6807] netlink: 'syz.4.447': attribute type 3 has an invalid length. [ 126.897579][ T6807] __nla_validate_parse: 1 callbacks suppressed [ 126.897626][ T6807] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.447'. [ 127.318265][ T2472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.580775][ T2472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.642938][ T6832] netlink: 'syz.0.456': attribute type 21 has an invalid length. [ 127.665360][ T6832] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.456'. [ 127.839319][ T2472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.001491][ T2472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.028739][ T6844] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 128.086087][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.113314][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.122291][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.144800][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.159003][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.167451][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.300379][ T2472] bridge_slave_1: left allmulticast mode [ 128.326476][ T2472] bridge_slave_1: left promiscuous mode [ 128.332264][ T2472] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.386312][ T2472] bridge_slave_0: left allmulticast mode [ 128.428896][ T2472] bridge_slave_0: left promiscuous mode [ 128.451790][ T2472] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.576941][ T29] audit: type=1804 audit(1719814704.114:6): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.467" name="/root/syzkaller.r71ZbK/112/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 128.635070][ T29] audit: type=1800 audit(1719814704.124:7): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.467" name="cgroup.controllers" dev="sda1" ino=1968 res=0 errno=0 [ 129.143519][ T2472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.158318][ T2472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.169125][ T2472] bond0 (unregistering): Released all slaves [ 129.395441][ T5096] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 130.211563][ T2472] hsr_slave_0: left promiscuous mode [ 130.234652][ T5096] Bluetooth: hci2: command tx timeout [ 130.949717][ T2472] hsr_slave_1: left promiscuous mode [ 130.970641][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.980259][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.014478][ T2472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.021978][ T2472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.091929][ T2472] veth1_macvtap: left promiscuous mode [ 131.099897][ T2472] veth0_macvtap: left promiscuous mode [ 131.113224][ T2472] veth1_vlan: left promiscuous mode [ 131.121420][ T2472] veth0_vlan: left promiscuous mode [ 131.618760][ T2472] team0 (unregistering): Port device team_slave_1 removed [ 131.660581][ T2472] team0 (unregistering): Port device team_slave_0 removed [ 132.314698][ T5096] Bluetooth: hci2: command tx timeout [ 132.522877][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 132.953986][ T6960] raw_sendmsg: syz.0.486 forgot to set AF_INET. Fix it! [ 133.026408][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.033596][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.053115][ T6845] bridge_slave_0: entered allmulticast mode [ 133.072262][ T6845] bridge_slave_0: entered promiscuous mode [ 133.090801][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.106987][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.130754][ T6845] bridge_slave_1: entered allmulticast mode [ 133.145328][ T6845] bridge_slave_1: entered promiscuous mode [ 133.160356][ T6960] netdevsim netdevsim0 ªªªªªªìeÀ®c¤: renamed from netdevsim0 (while UP) [ 133.317369][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.323849][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.788682][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.852177][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.167639][ T6845] team0: Port device team_slave_0 added [ 134.227555][ T6845] team0: Port device team_slave_1 added [ 134.394592][ T5096] Bluetooth: hci2: command tx timeout [ 134.432517][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.458585][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.530526][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.598622][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.629758][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.737664][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.155202][ T6845] hsr_slave_0: entered promiscuous mode [ 135.220573][ T6845] hsr_slave_1: entered promiscuous mode [ 135.276866][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.311994][ T6845] Cannot create hsr debugfs directory [ 135.449006][ T7036] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.503'. [ 135.850422][ T7035] netdevsim netdevsim1 ªªªªªªìeÀ®c¤: renamed from netdevsim0 (while UP) [ 136.441437][ T7052] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.508'. [ 136.494630][ T5096] Bluetooth: hci2: command tx timeout [ 136.514467][ T7052] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 136.804754][ T7058] netlink: 'syz.4.509': attribute type 21 has an invalid length. [ 136.812553][ T7058] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.509'. [ 138.102211][ T7094] netlink: 'syz.0.518': attribute type 29 has an invalid length. [ 138.151580][ T7094] netlink: 'syz.0.518': attribute type 29 has an invalid length. [ 138.788111][ T7095] netdevsim netdevsim2 ªªªªªªìeÀ®c¤: renamed from netdevsim0 (while UP) [ 139.039672][ T6845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.168429][ T6845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.264195][ T6845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.298578][ T7120] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.525'. [ 139.338417][ T7115] netlink: 'syz.1.524': attribute type 21 has an invalid length. [ 139.350286][ T5096] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 139.354514][ T7115] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.524'. [ 139.479398][ T7120] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.525'. [ 139.524358][ T6845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.725149][ T7123] netlink: 184152 bytes leftover after parsing attributes in process `syz.0.527'. [ 140.136453][ T7129] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 140.231537][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.552064][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.632099][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.639346][ T6561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.716431][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.723655][ T6561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.550297][ T7160] netdevsim netdevsim4 ªªªªªªìeÀ®c¤: renamed from netdevsim0 (while UP) [ 141.693577][ T7172] netlink: 'syz.2.539': attribute type 21 has an invalid length. [ 141.744448][ T7172] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.539'. [ 141.846257][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.059804][ T7182] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.541'. [ 142.063866][ T6845] veth0_vlan: entered promiscuous mode [ 142.153010][ T6845] veth1_vlan: entered promiscuous mode [ 142.477513][ T7195] netlink: 'syz.4.542': attribute type 10 has an invalid length. [ 142.576309][ T7195] gretap0: entered promiscuous mode [ 142.683334][ T7195] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 142.735562][ T7189] netlink: 14 bytes leftover after parsing attributes in process `syz.4.542'. [ 142.989134][ T7198] hsr0: entered promiscuous mode [ 142.998429][ T7198] hsr0: entered allmulticast mode [ 143.003533][ T7198] hsr_slave_0: entered allmulticast mode [ 143.034421][ T7198] hsr_slave_1: entered allmulticast mode [ 143.127653][ T6845] veth0_macvtap: entered promiscuous mode [ 143.227883][ T6845] veth1_macvtap: entered promiscuous mode [ 143.328369][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.345838][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.357711][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.370412][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.398231][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.444454][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.469610][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.488939][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.514506][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.551019][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.679192][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.736629][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.772020][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.792462][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.824057][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.834647][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.849474][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.867896][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.893565][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.913232][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.939119][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.980725][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.019032][ T6845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.049788][ T6845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.065961][ T6845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.090013][ T6845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.538999][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.570437][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.683528][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.705209][ T7237] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.549'. [ 144.722114][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.844780][ T7243] netlink: 'syz.4.551': attribute type 21 has an invalid length. [ 144.885441][ T7243] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.551'. [ 145.973574][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.180879][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.547059][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.575681][ T7279] netlink: 'syz.0.557': attribute type 29 has an invalid length. [ 146.731696][ T7281] netlink: 'syz.2.559': attribute type 3 has an invalid length. [ 146.764522][ T7281] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.559'. [ 146.880832][ T7279] netlink: 'syz.0.557': attribute type 29 has an invalid length. [ 147.039526][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.124458][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.156392][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.169173][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.174392][ T7285] netlink: 'syz.0.557': attribute type 29 has an invalid length. [ 147.196357][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.207052][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.222617][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.274096][ T7286] netlink: 'syz.0.557': attribute type 29 has an invalid length. [ 147.402873][ T7301] netlink: 'syz.4.563': attribute type 21 has an invalid length. [ 147.456811][ T7301] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.563'. [ 147.792393][ T7318] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 147.825295][ T7318] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.566'. [ 148.408273][ T35] bridge_slave_1: left allmulticast mode [ 148.444978][ T35] bridge_slave_1: left promiscuous mode [ 148.451692][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.655601][ T35] bridge_slave_0: left allmulticast mode [ 148.681825][ T35] bridge_slave_0: left promiscuous mode [ 148.694653][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.274509][ T5106] Bluetooth: hci2: command tx timeout [ 149.725403][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.758194][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.795582][ T35] bond0 (unregistering): Released all slaves [ 150.687219][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 150.954824][ T35] hsr_slave_0: left promiscuous mode [ 151.080046][ T35] hsr_slave_1: left promiscuous mode [ 151.262815][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.277572][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.354485][ T5106] Bluetooth: hci2: command tx timeout [ 151.935854][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.963798][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.117722][ T35] veth1_macvtap: left promiscuous mode [ 152.123314][ T35] veth0_macvtap: left promiscuous mode [ 152.144499][ T35] veth1_vlan: left promiscuous mode [ 152.149909][ T35] veth0_vlan: left promiscuous mode [ 153.213065][ T35] team0 (unregistering): Port device team_slave_1 removed [ 153.248902][ T35] team0 (unregistering): Port device team_slave_0 removed [ 153.434603][ T5106] Bluetooth: hci2: command tx timeout [ 153.592279][ T7395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.578'. [ 153.915061][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.922309][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.942540][ T7298] bridge_slave_0: entered allmulticast mode [ 153.950413][ T7298] bridge_slave_0: entered promiscuous mode [ 153.977436][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.014661][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.021959][ T7298] bridge_slave_1: entered allmulticast mode [ 154.069120][ T7298] bridge_slave_1: entered promiscuous mode [ 154.202245][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.288773][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.452688][ T7298] team0: Port device team_slave_0 added [ 154.490186][ T7298] team0: Port device team_slave_1 added [ 154.746635][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.754189][ T7437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.783790][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.793514][ T7437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.901030][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.912625][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.939649][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.976531][ T7448] netlink: 'syz.0.589': attribute type 4 has an invalid length. [ 154.992224][ T7448] netlink: 152 bytes leftover after parsing attributes in process `syz.0.589'. [ 155.023891][ T7448] A link change request failed with some changes committed already. Interface ªªªªªªìeÀ®c¤ may have been left with an inconsistent configuration, please check. [ 155.052195][ T7447] netlink: 132 bytes leftover after parsing attributes in process `syz.2.590'. [ 155.092100][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.114911][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.142101][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.254025][ T7453] netlink: 'syz.2.591': attribute type 3 has an invalid length. [ 155.273663][ T7453] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.591'. [ 155.360141][ T7298] hsr_slave_0: entered promiscuous mode [ 155.371035][ T7298] hsr_slave_1: entered promiscuous mode [ 155.383932][ T7298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.401763][ T7298] Cannot create hsr debugfs directory [ 155.403224][ T7455] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 155.419813][ T7455] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.592'. [ 155.523049][ T5106] Bluetooth: hci2: command tx timeout [ 156.026706][ T7475] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.594'. [ 156.089668][ T7475] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.594'. [ 156.221923][ T7480] netlink: 'syz.0.598': attribute type 21 has an invalid length. [ 156.234396][ T7480] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.598'. [ 156.254001][ T7469] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.594'. [ 156.412194][ T7488] netlink: 14 bytes leftover after parsing attributes in process `syz.2.599'. [ 156.534462][ T7485] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 156.918522][ T7505] can: request_module (can-proto-0) failed. [ 156.976158][ T7508] syzkaller0: entered promiscuous mode [ 156.981682][ T7508] syzkaller0: entered allmulticast mode [ 157.201418][ T5106] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 157.295035][ T7298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.313963][ T7522] netlink: 'syz.1.610': attribute type 21 has an invalid length. [ 157.615136][ T7537] sctp: [Deprecated]: syz.4.613 (pid 7537) Use of int in maxseg socket option. [ 157.615136][ T7537] Use struct sctp_assoc_value instead [ 158.205361][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.219077][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.228195][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.245087][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.254095][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.263620][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.731145][ T7298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.743522][ T7298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.758769][ T7546] __nla_validate_parse: 6 callbacks suppressed [ 159.758789][ T7546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.617'. [ 159.856355][ T7550] netlink: 'syz.0.618': attribute type 21 has an invalid length. [ 159.885882][ T7550] netlink: 128 bytes leftover after parsing attributes in process `syz.0.618'. [ 159.925112][ T7550] netlink: 3 bytes leftover after parsing attributes in process `syz.0.618'. [ 159.958027][ T7298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.150937][ T1097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.187233][ T7571] netlink: 'syz.0.621': attribute type 21 has an invalid length. [ 160.196769][ T7571] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.621'. [ 160.287297][ T1097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.315362][ T5106] Bluetooth: hci1: command tx timeout [ 160.496364][ T1097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.529899][ T7589] netlink: 132 bytes leftover after parsing attributes in process `syz.4.628'. [ 160.625511][ T1097] netdevsim netdevsim1 ªªªªªªìeÀ®c¤ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.690156][ T7595] netlink: 'syz.2.631': attribute type 21 has an invalid length. [ 160.738199][ T29] audit: type=1800 audit(1719814736.284:8): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.632" name="memory.events" dev="sda1" ino=1970 res=0 errno=0 [ 160.759740][ T7595] netlink: 'syz.2.631': attribute type 15 has an invalid length. [ 160.769221][ T7595] netlink: 'syz.2.631': attribute type 1 has an invalid length. [ 160.812414][ T7599] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 160.828195][ T7599] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.632'. [ 160.874038][ T29] audit: type=1804 audit(1719814736.414:9): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.632" name="/root/syzkaller.KclsdH/163/memory.events" dev="sda1" ino=1970 res=1 errno=0 [ 161.002308][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.227185][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.678652][ T7637] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.642'. [ 161.689285][ T7637] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.642'. [ 161.728733][ T1097] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 161.762289][ T7639] netlink: 'syz.0.641': attribute type 3 has an invalid length. [ 161.776835][ T7639] netlink: 'syz.0.641': attribute type 11 has an invalid length. [ 161.803402][ T7639] netlink: 128512 bytes leftover after parsing attributes in process `syz.0.641'. [ 161.949812][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.973257][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.991701][ T1097] bond0 (unregistering): Released all slaves [ 162.013630][ T7628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.639'. [ 162.111352][ T7552] chnl_net:caif_netlink_parms(): no params data found [ 162.159732][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.167156][ T6562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.290762][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.298114][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.394667][ T5106] Bluetooth: hci1: command tx timeout [ 162.435893][ T7653] netlink: 'syz.4.644': attribute type 3 has an invalid length. [ 162.579682][ T7661] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 162.588454][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.624718][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.643199][ T7661] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 162.687790][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.700052][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.709527][ T7552] bridge_slave_0: entered allmulticast mode [ 162.720233][ T7552] bridge_slave_0: entered promiscuous mode [ 162.742828][ T7667] netlink: 'syz.4.648': attribute type 12 has an invalid length. [ 162.779957][ T1097] hsr_slave_0: left promiscuous mode [ 162.810134][ T1097] hsr_slave_1: left promiscuous mode [ 162.902033][ T1097] veth1_macvtap: left promiscuous mode [ 162.918828][ T1097] veth1_vlan: left promiscuous mode [ 163.139343][ T7683] netlink: 'syz.0.651': attribute type 153 has an invalid length. [ 163.880505][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 163.947241][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 164.267412][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.277496][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.288430][ T7552] bridge_slave_1: entered allmulticast mode [ 164.297211][ T7552] bridge_slave_1: entered promiscuous mode [ 164.448485][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.474972][ T5106] Bluetooth: hci1: command tx timeout [ 164.480492][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.591622][ T7552] team0: Port device team_slave_0 added [ 164.639549][ T7552] team0: Port device team_slave_1 added [ 164.764036][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.780193][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.817375][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.845119][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.854036][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.884465][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.916367][ T7710] netlink: 'syz.2.655': attribute type 11 has an invalid length. [ 164.935575][ T7710] __nla_validate_parse: 5 callbacks suppressed [ 164.935594][ T7710] netlink: 128512 bytes leftover after parsing attributes in process `syz.2.655'. [ 165.035688][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.050638][ T7552] hsr_slave_0: entered promiscuous mode [ 165.066091][ T7552] hsr_slave_1: entered promiscuous mode [ 165.072677][ T7552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.081356][ T7552] Cannot create hsr debugfs directory [ 165.500278][ T7298] veth0_vlan: entered promiscuous mode [ 165.583611][ T7298] veth1_vlan: entered promiscuous mode [ 165.607279][ T7731] validate_nla: 2 callbacks suppressed [ 165.607299][ T7731] netlink: 'syz.4.658': attribute type 11 has an invalid length. [ 165.654628][ T7731] netlink: 140 bytes leftover after parsing attributes in process `syz.4.658'. [ 165.708996][ T7735] netlink: 'syz.0.660': attribute type 21 has an invalid length. [ 165.736202][ T7735] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.660'. [ 165.907216][ T7746] netlink: 'syz.0.664': attribute type 6 has an invalid length. [ 165.922408][ T7746] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 165.946742][ T7744] netlink: 'syz.4.662': attribute type 21 has an invalid length. [ 165.956821][ T7746] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.664'. [ 165.965489][ T7744] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.662'. [ 166.012656][ T7298] veth0_macvtap: entered promiscuous mode [ 166.190996][ T7298] veth1_macvtap: entered promiscuous mode [ 166.294437][ T7758] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.669'. [ 166.401180][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.425598][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.436846][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.452713][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.463306][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.478372][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.513165][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.547621][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.565117][ T5106] Bluetooth: hci1: command tx timeout [ 166.602247][ T7768] syz.4.671[7768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.602481][ T7768] syz.4.671[7768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.614482][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.639503][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.650866][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.661117][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.673643][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.685815][ T7298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.697006][ T7298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.712434][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.729525][ T7772] netlink: 'syz.2.673': attribute type 21 has an invalid length. [ 166.749798][ T7772] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.673'. [ 166.786849][ T7298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.797331][ T7298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.806488][ T7298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.816137][ T7298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.983098][ T7552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.010588][ T7552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.062274][ T7552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.087516][ T7552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.150039][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.174820][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.262203][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.291881][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.488402][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.610343][ T7552] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.725907][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.733115][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.843187][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.850421][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.879734][ T7803] netlink: 'syz.4.684': attribute type 21 has an invalid length. [ 167.887936][ T7803] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.684'. [ 167.989670][ T7552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.214696][ T2407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.281860][ T7815] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 168.368690][ T2407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.472999][ T7815] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 168.547329][ T2407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.646637][ T2407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.686868][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.874174][ T2407] bridge_slave_1: left allmulticast mode [ 168.901290][ T2407] bridge_slave_1: left promiscuous mode [ 168.921730][ T2407] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.979652][ T2407] bridge_slave_0: left allmulticast mode [ 168.998983][ T2407] bridge_slave_0: left promiscuous mode [ 169.268526][ T2407] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.620345][ T7857] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.694'. [ 169.677574][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.687931][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.698505][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.708720][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.717585][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.731000][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.249302][ T2407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.261632][ T2407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.282935][ T2407] bond0 (unregistering): Released all slaves [ 170.297565][ T7552] veth0_vlan: entered promiscuous mode [ 170.304182][ T7857] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.694'. [ 170.335045][ T7882] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 170.408089][ T7883] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 170.460808][ T7552] veth1_vlan: entered promiscuous mode [ 170.471096][ T7890] netlink: 3068 bytes leftover after parsing attributes in process `syz.0.699'. [ 170.503429][ T7890] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 170.522169][ T7890] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.699'. [ 170.558326][ T7885] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.605625][ T7885] netlink: 1 bytes leftover after parsing attributes in process `syz.0.699'. [ 171.227373][ T7922] netlink: 830 bytes leftover after parsing attributes in process `syz.2.708'. [ 171.376086][ T2407] hsr_slave_0: left promiscuous mode [ 171.419640][ T2407] hsr_slave_1: left promiscuous mode [ 171.467644][ T2407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.498083][ T2407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.524898][ T2407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.542987][ T2407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.669450][ T2407] veth1_macvtap: left promiscuous mode [ 171.697202][ T2407] veth0_macvtap: left promiscuous mode [ 171.703250][ T2407] veth1_vlan: left promiscuous mode [ 171.738100][ T2407] veth0_vlan: left promiscuous mode [ 171.835954][ T5096] Bluetooth: hci2: command tx timeout [ 172.930991][ T2407] team0 (unregistering): Port device team_slave_1 removed [ 173.000198][ T2407] team0 (unregistering): Port device team_slave_0 removed [ 173.481381][ T7552] veth0_macvtap: entered promiscuous mode [ 173.610176][ T7552] veth1_macvtap: entered promiscuous mode [ 173.689503][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.702778][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.721290][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.742200][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.766111][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.787497][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.801638][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.827233][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.851257][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.861941][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.872686][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.895262][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.905999][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.917702][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.924779][ T5096] Bluetooth: hci2: command tx timeout [ 173.953998][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 173.977036][ T7552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.041723][ T7552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.074544][ T7552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.083304][ T7552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.202441][ T7985] netlink: 144 bytes leftover after parsing attributes in process `syz.4.722'. [ 174.813610][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.847500][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.876086][ T7864] bridge_slave_0: entered allmulticast mode [ 174.896090][ T7864] bridge_slave_0: entered promiscuous mode [ 174.922569][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.930093][ T8012] netlink: 6 bytes leftover after parsing attributes in process `syz.4.725'. [ 174.944816][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.952174][ T7864] bridge_slave_1: entered allmulticast mode [ 174.981574][ T7864] bridge_slave_1: entered promiscuous mode [ 174.992036][ T8012] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.725'. [ 175.102477][ T8017] netlink: 'syz.2.728': attribute type 12 has an invalid length. [ 175.105088][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.123540][ T8017] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.728'. [ 175.126183][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.162926][ T8021] netlink: 'syz.0.729': attribute type 16 has an invalid length. [ 175.181442][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.194725][ T8021] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.729'. [ 175.218484][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.323309][ T8021] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 175.342149][ T8021] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 175.369532][ T7864] team0: Port device team_slave_0 added [ 175.420311][ T7864] team0: Port device team_slave_1 added [ 175.467255][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.504345][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.612124][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.627791][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.668797][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.691579][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.708760][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.763089][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.994338][ T5096] Bluetooth: hci2: command tx timeout [ 176.002362][ T7864] hsr_slave_0: entered promiscuous mode [ 176.031615][ T7864] hsr_slave_1: entered promiscuous mode [ 176.047767][ T7864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.060455][ T7864] Cannot create hsr debugfs directory [ 176.219646][ T8051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.736'. [ 176.236894][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 177.016626][ T8086] netlink: 'syz.2.746': attribute type 2 has an invalid length. [ 177.154516][ T8086] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 177.162236][ T8086] netlink: 152 bytes leftover after parsing attributes in process `syz.2.746'. [ 177.525676][ T8103] netlink: 132 bytes leftover after parsing attributes in process `syz.4.751'. [ 178.033905][ T7864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.054910][ T7864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.075522][ T5106] Bluetooth: hci2: command tx timeout [ 178.135425][ T7864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.173150][ T7864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.272619][ T8138] netlink: 'syz.0.762': attribute type 3 has an invalid length. [ 178.293697][ T8138] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.762'. [ 178.323160][ T8139] netlink: 128 bytes leftover after parsing attributes in process `syz.4.761'. [ 178.422547][ T8143] netlink: 'syz.2.764': attribute type 21 has an invalid length. [ 178.432743][ T8143] netlink: 'syz.2.764': attribute type 2 has an invalid length. [ 178.440998][ T8143] netlink: 12374 bytes leftover after parsing attributes in process `syz.2.764'. [ 178.629540][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.692301][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.757466][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.764706][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.821728][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.828934][ T6562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.975299][ T7864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.227707][ T8173] netlink: 'syz.1.773': attribute type 10 has an invalid length. [ 179.264426][ T8173] netlink: 2 bytes leftover after parsing attributes in process `syz.1.773'. [ 179.325310][ T8173] bond0: entered promiscuous mode [ 179.330585][ T8173] bond_slave_0: entered promiscuous mode [ 179.366110][ T8173] bond_slave_1: entered promiscuous mode [ 179.407889][ T8173] bridge0: port 3(bond0) entered blocking state [ 179.426313][ T8173] bridge0: port 3(bond0) entered disabled state [ 179.436182][ T8173] bond0: entered allmulticast mode [ 179.444423][ T8173] bond_slave_0: entered allmulticast mode [ 179.455947][ T8173] bond_slave_1: entered allmulticast mode [ 179.492869][ T8173] bridge0: port 3(bond0) entered blocking state [ 179.499829][ T8173] bridge0: port 3(bond0) entered forwarding state [ 179.562468][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.718553][ T7864] veth0_vlan: entered promiscuous mode [ 179.753489][ T7864] veth1_vlan: entered promiscuous mode [ 179.847172][ T8201] netlink: 'syz.1.776': attribute type 3 has an invalid length. [ 179.891578][ T8201] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.776'. [ 179.969536][ T7864] veth0_macvtap: entered promiscuous mode [ 180.033282][ T7864] veth1_macvtap: entered promiscuous mode [ 180.141734][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.189848][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.221076][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.262708][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.285389][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.307207][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.357299][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.430723][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.462303][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.500518][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.531859][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.624526][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.659784][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.692810][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.714871][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.732539][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.743575][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.766614][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.790375][ T7864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.834443][ T7864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.863671][ T7864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.887515][ T7864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.058331][ T8234] netlink: 'syz.0.784': attribute type 10 has an invalid length. [ 181.133608][ T8234] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.784'. [ 181.195209][ T8234] openvswitch: netlink: Flow key attr not present in new flow. [ 181.207624][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.242582][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.382847][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.414176][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.465286][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.514106][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.546170][ T8256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.563932][ T8256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.066264][ T5106] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 182.410681][ T8288] netlink: 'syz.2.798': attribute type 21 has an invalid length. [ 182.419590][ T8288] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.798'. [ 182.461851][ T8291] netlink: 'syz.4.799': attribute type 29 has an invalid length. [ 182.482326][ T8291] netlink: 'syz.4.799': attribute type 29 has an invalid length. [ 182.495663][ T8291] netlink: 'syz.4.799': attribute type 29 has an invalid length. [ 182.513739][ T8291] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 182.561258][ T8291] bond0: (slave ªªªªªªìeÀ®c¤): Enslaving as an active interface with an up link [ 182.662140][ T8301] netlink: 'syz.0.802': attribute type 3 has an invalid length. [ 182.678376][ T8301] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.802'. [ 183.106911][ T8316] netlink: 2 bytes leftover after parsing attributes in process `syz.2.811'. [ 183.154495][ T8316] batadv_slave_1: entered promiscuous mode [ 183.818963][ T8328] netlink: 'syz.4.815': attribute type 10 has an invalid length. [ 183.869944][ T8328] syz_tun: entered promiscuous mode [ 183.925153][ T8328] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 183.968276][ T8330] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 184.024462][ T8330] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.817'. [ 184.220834][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.682876][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.776903][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.891792][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.986829][ T8344] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.822'. [ 185.060962][ T8348] netlink: 'syz.4.823': attribute type 3 has an invalid length. [ 185.094387][ T8348] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.823'. [ 185.267395][ T11] bridge_slave_1: left allmulticast mode [ 185.304493][ T11] bridge_slave_1: left promiscuous mode [ 185.311987][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.424092][ T11] bridge_slave_0: left allmulticast mode [ 185.434415][ T11] bridge_slave_0: left promiscuous mode [ 185.440803][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.709066][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.724497][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.732889][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.764378][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.775211][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.782638][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.181276][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.210980][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.236184][ T11] bond0 (unregistering): Released all slaves [ 187.302995][ T8380] bridge_slave_0: entered promiscuous mode [ 187.367376][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.835'. [ 187.589595][ T8404] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.837'. [ 187.723802][ T8411] netlink: 184472 bytes leftover after parsing attributes in process `syz.0.838'. [ 187.844653][ T5096] Bluetooth: hci2: command tx timeout [ 188.029494][ T8406] netlink: 'syz.0.838': attribute type 21 has an invalid length. [ 188.073664][ T8406] netlink: 'syz.0.838': attribute type 4 has an invalid length. [ 188.112583][ T8406] netlink: 156 bytes leftover after parsing attributes in process `syz.0.838'. [ 188.985514][ T11] hsr_slave_0: left promiscuous mode [ 189.010550][ T11] hsr_slave_1: left promiscuous mode [ 189.028448][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.047852][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.065176][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.073399][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.117519][ T11] veth1_macvtap: left promiscuous mode [ 189.127042][ T11] veth0_macvtap: left promiscuous mode [ 189.132944][ T11] veth1_vlan: left promiscuous mode [ 189.138948][ T11] veth0_vlan: left promiscuous mode [ 189.924476][ T5096] Bluetooth: hci2: command tx timeout [ 190.018605][ T11] team0 (unregistering): Port device team_slave_1 removed [ 190.060469][ T11] team0 (unregistering): Port device team_slave_0 removed [ 191.109487][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 191.140623][ T8468] netlink: 'syz.1.850': attribute type 3 has an invalid length. [ 191.194888][ T8468] netlink: 'syz.1.850': attribute type 291 has an invalid length. [ 191.221170][ T8364] chnl_net:caif_netlink_parms(): no params data found [ 191.279251][ T8468] netlink: 'syz.1.850': attribute type 3 has an invalid length. [ 191.308994][ T8468] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.850'. [ 191.589885][ T8492] netlink: 'syz.4.854': attribute type 63 has an invalid length. [ 191.599873][ T8492] netlink: 48 bytes leftover after parsing attributes in process `syz.4.854'. [ 191.621615][ T8492] bridge_slave_0: left promiscuous mode [ 191.793991][ T8494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.854'. [ 191.926480][ T8364] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.933647][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.976219][ T8364] bridge_slave_0: entered allmulticast mode [ 191.992088][ T8364] bridge_slave_0: entered promiscuous mode [ 191.998226][ T5096] Bluetooth: hci2: command tx timeout [ 192.126578][ T8364] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.147104][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.174028][ T8364] bridge_slave_1: entered allmulticast mode [ 192.197219][ T8364] bridge_slave_1: entered promiscuous mode [ 192.371261][ T8364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.424887][ T8364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.542285][ T1112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.668007][ T8364] team0: Port device team_slave_0 added [ 192.690535][ T8529] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 192.703217][ T8529] netlink: 55 bytes leftover after parsing attributes in process `syz.1.866'. [ 192.849363][ T1112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.952474][ T8364] team0: Port device team_slave_1 added [ 193.081661][ T1112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.183088][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.190837][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.274805][ T8364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.437761][ T1112] team0: Port device ªªªªªªìeÀ®c¤ removed [ 193.477876][ T1112] netdevsim netdevsim2 ªªªªªªìeÀ®c¤ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.545569][ T8364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.567667][ T8364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.646879][ T8364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.828730][ T8561] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 193.906012][ T8561] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 193.934570][ T8561] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 193.942725][ T8561] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 194.065378][ T8364] hsr_slave_0: entered promiscuous mode [ 194.074521][ T5096] Bluetooth: hci2: command tx timeout [ 194.120783][ T8364] hsr_slave_1: entered promiscuous mode [ 194.195433][ T8364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.203048][ T8364] Cannot create hsr debugfs directory [ 194.653634][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.664938][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.463163][ T8603] netlink: 'syz.4.885': attribute type 3 has an invalid length. [ 195.484438][ T8603] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.885'. [ 195.898557][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.909212][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.921817][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.931821][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.942031][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 195.953072][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.071886][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.092799][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.103618][ T1112] bond0 (unregistering): Released all slaves [ 196.139540][ T8619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.886'. [ 196.399435][ T8631] netlink: 'syz.0.888': attribute type 21 has an invalid length. [ 196.450046][ T8631] netlink: 830 bytes leftover after parsing attributes in process `syz.0.888'. [ 196.474553][ T8631] bond_slave_0: entered promiscuous mode [ 196.480521][ T8631] bond_slave_1: entered promiscuous mode [ 196.487027][ T8631] batadv_slave_0: entered promiscuous mode [ 196.836860][ T8645] netlink: 'syz.0.894': attribute type 3 has an invalid length. [ 196.861124][ T8645] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.894'. [ 196.986703][ T8644] netlink: 'syz.0.894': attribute type 21 has an invalid length. [ 197.002034][ T8644] netlink: 'syz.0.894': attribute type 4 has an invalid length. [ 197.011690][ T8644] netlink: 156 bytes leftover after parsing attributes in process `syz.0.894'. [ 197.021246][ T8646] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.390943][ T1112] hsr_slave_0: left promiscuous mode [ 197.420781][ T1112] hsr_slave_1: left promiscuous mode [ 197.496617][ T1112] veth1_macvtap: left promiscuous mode [ 197.502971][ T1112] veth0_macvtap: left promiscuous mode [ 197.513470][ T1112] veth1_vlan: left promiscuous mode [ 197.520070][ T1112] veth0_vlan: left promiscuous mode [ 197.994528][ T5096] Bluetooth: hci3: command tx timeout [ 198.520427][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 198.555733][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 198.889699][ T8665] netlink: 48 bytes leftover after parsing attributes in process `syz.4.899'. [ 198.914502][ T8683] netlink: 'syz.1.907': attribute type 10 has an invalid length. [ 198.922285][ T8683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.907'. [ 198.952860][ T8683] bridge0: port 4(syz_tun) entered blocking state [ 198.968771][ T8683] bridge0: port 4(syz_tun) entered disabled state [ 198.976499][ T8683] syz_tun: entered allmulticast mode [ 198.983625][ T8683] syz_tun: entered promiscuous mode [ 198.995122][ T8683] bridge0: port 4(syz_tun) entered blocking state [ 199.001718][ T8683] bridge0: port 4(syz_tun) entered forwarding state [ 199.183503][ T8364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.291487][ T5096] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 199.313657][ T8700] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.914'. [ 199.402984][ T8700] netlink: 'syz.0.914': attribute type 2 has an invalid length. [ 199.447102][ T8364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.484485][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 199.532690][ T8364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.600375][ T8364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.017785][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.062178][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.074450][ T5096] Bluetooth: hci3: command tx timeout [ 200.099069][ T8618] bridge_slave_0: entered allmulticast mode [ 200.125516][ T8618] bridge_slave_0: entered promiscuous mode [ 200.171404][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.204211][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.221614][ T8618] bridge_slave_1: entered allmulticast mode [ 200.252466][ T8618] bridge_slave_1: entered promiscuous mode [ 200.258983][ T8717] netlink: 'syz.0.919': attribute type 29 has an invalid length. [ 200.339894][ T8719] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.920'. [ 200.351821][ T8717] netlink: 'syz.0.919': attribute type 29 has an invalid length. [ 200.431975][ T8727] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 200.432277][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.454368][ T8727] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 200.463399][ T8727] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.920'. [ 200.474573][ T8724] netlink: 74 bytes leftover after parsing attributes in process `syz.1.921'. [ 200.552374][ T8721] IPv6: NLM_F_REPLACE set, but no existing node found! [ 200.567576][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.579677][ T1112] bridge_slave_1: left allmulticast mode [ 200.599516][ T1112] bridge_slave_1: left promiscuous mode [ 200.606616][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.631894][ T1112] bridge_slave_0: left allmulticast mode [ 200.643641][ T1112] bridge_slave_0: left promiscuous mode [ 200.652111][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.317787][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.338919][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.354548][ T5096] Bluetooth: hci4: command tx timeout [ 201.365399][ T1112] bond0 (unregistering): Released all slaves [ 201.510711][ T8618] team0: Port device team_slave_0 added [ 201.903786][ T8618] team0: Port device team_slave_1 added [ 202.154401][ T5096] Bluetooth: hci3: command tx timeout [ 202.218451][ T8765] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.928'. [ 203.721757][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.729295][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.762500][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.843319][ T8774] bridge0: port 4(syz_tun) entered disabled state [ 203.850616][ T8774] bridge0: port 3(bond0) entered disabled state [ 203.858566][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.870582][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.934189][ T8775] syz_tun: left allmulticast mode [ 203.953437][ T8775] syz_tun: left promiscuous mode [ 203.958857][ T8775] bridge0: port 4(syz_tun) entered disabled state [ 203.975993][ T8775] bond0: left allmulticast mode [ 204.015743][ T8775] bond_slave_0: left allmulticast mode [ 204.030649][ T8775] bond_slave_1: left allmulticast mode [ 204.036292][ T8775] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 204.043641][ T8775] bridge0: port 3(bond0) entered disabled state [ 204.051910][ T8775] bridge_slave_1: left allmulticast mode [ 204.057812][ T8775] bridge_slave_1: left promiscuous mode [ 204.063485][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.072130][ T8775] bridge_slave_0: left allmulticast mode [ 204.080011][ T8775] bridge_slave_0: left promiscuous mode [ 204.085955][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.180679][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.187984][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.224518][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.236025][ T5096] Bluetooth: hci3: command tx timeout [ 204.335212][ T8777] lo: mtu less than device minimum [ 204.352862][ T8364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.402424][ T8618] hsr_slave_0: entered promiscuous mode [ 204.409057][ T8618] hsr_slave_1: entered promiscuous mode [ 204.417844][ T8618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.425571][ T8618] Cannot create hsr debugfs directory [ 204.449260][ T1112] hsr_slave_0: left promiscuous mode [ 204.462227][ T1112] hsr_slave_1: left promiscuous mode [ 204.469946][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.477735][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.489017][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.497006][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.505811][ T1112] batman_adv: batadv0: Removing interface: hsr_slave_0 [ 204.522504][ T1112] veth1_macvtap: left promiscuous mode [ 204.528296][ T1112] veth0_macvtap: left promiscuous mode [ 204.533959][ T1112] veth1_vlan: left promiscuous mode [ 204.539568][ T1112] veth0_vlan: left promiscuous mode [ 205.353962][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 205.410187][ T8789] syz.4.933 (8789) used greatest stack depth: 16928 bytes left [ 205.410213][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 205.790195][ T8785] netlink: 'syz.1.932': attribute type 39 has an invalid length. [ 205.946897][ T8364] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.980746][ T8797] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.936'. [ 206.036956][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.044139][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.074046][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.081286][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.223303][ T8799] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.936'. [ 206.752761][ T8364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.814568][ T8829] netlink: 64 bytes leftover after parsing attributes in process `syz.4.943'. [ 207.151110][ T8844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.946'. [ 207.205314][ T8846] netlink: 'syz.1.947': attribute type 3 has an invalid length. [ 207.241200][ T8846] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.947'. [ 207.568870][ T8364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.619227][ T8618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.658859][ T8618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.689682][ T8618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.742413][ T8618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.976806][ T8364] veth0_vlan: entered promiscuous mode [ 208.027521][ T8364] veth1_vlan: entered promiscuous mode [ 208.201698][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.290554][ T8364] veth0_macvtap: entered promiscuous mode [ 208.306218][ T8889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.958'. [ 208.371993][ T8618] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.408789][ T8364] veth1_macvtap: entered promiscuous mode [ 208.423989][ T8898] netlink: 'syz.4.960': attribute type 29 has an invalid length. [ 208.449064][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.456284][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.495629][ T8898] netlink: 'syz.4.960': attribute type 29 has an invalid length. [ 208.517151][ T8902] netlink: 'syz.4.960': attribute type 29 has an invalid length. [ 208.556831][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.564019][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.614601][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.630733][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.643401][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.665653][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.703095][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.766178][ T8898] netlink: 'syz.4.960': attribute type 29 has an invalid length. [ 208.803741][ T8908] netlink: 'syz.1.962': attribute type 13 has an invalid length. [ 209.265256][ T8908] veth0_macvtap: left promiscuous mode [ 209.273707][ T8908] macvtap0: entered promiscuous mode [ 209.323600][ T8908] macvtap0: refused to change device tx_queue_len [ 209.346423][ T8913] netlink: 830 bytes leftover after parsing attributes in process `syz.0.963'. [ 209.367332][ T8902] netlink: 'syz.4.960': attribute type 29 has an invalid length. [ 209.401901][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.427551][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.450528][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.464853][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.518159][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.542665][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.570858][ T8364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.762080][ T8364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.823265][ T8364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.854806][ T8364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.863623][ T8364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.336389][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.481568][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.564374][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.707309][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.733099][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.783266][ T8618] veth0_vlan: entered promiscuous mode [ 210.819971][ T8618] veth1_vlan: entered promiscuous mode [ 211.027572][ T8618] veth0_macvtap: entered promiscuous mode [ 211.260005][ T8618] veth1_macvtap: entered promiscuous mode [ 211.341246][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.359109][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.369555][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.391197][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.411764][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.451770][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.479469][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.600316][ T8993] lo: entered allmulticast mode [ 211.864137][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.895895][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.942998][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.972287][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.007908][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.018338][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.029320][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.044327][ T8618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.058556][ T8618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.070700][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.105941][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.170068][ T8618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.184305][ T8618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.193047][ T8618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.205494][ T8618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.228864][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.345584][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.353444][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.393999][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.432703][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.442434][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.634108][ T35] bridge_slave_1: left allmulticast mode [ 212.641646][ T35] bridge_slave_1: left promiscuous mode [ 212.657527][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.672996][ T35] bridge_slave_0: left allmulticast mode [ 212.679450][ T35] bridge_slave_0: left promiscuous mode [ 212.691154][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.946206][ T9036] netlink: 'syz.0.980': attribute type 29 has an invalid length. [ 213.272240][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.282186][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.291138][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.302999][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.311766][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.328048][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.694068][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.708479][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.726341][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.746168][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.756029][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.763598][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.813264][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.827037][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.839098][ T35] bond0 (unregistering): Released all slaves [ 213.864130][ T9036] netlink: 'syz.0.980': attribute type 29 has an invalid length. [ 214.177803][ T9069] netlink: 11835 bytes leftover after parsing attributes in process `syz.1.988'. [ 214.711886][ T35] hsr_slave_0: left promiscuous mode [ 214.759874][ T35] hsr_slave_1: left promiscuous mode [ 214.805509][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.813153][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.851774][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.859833][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.912337][ T35] veth1_macvtap: left promiscuous mode [ 214.922594][ T35] veth0_macvtap: left promiscuous mode [ 214.929603][ T35] veth1_vlan: left promiscuous mode [ 214.936258][ T35] veth0_vlan: left promiscuous mode [ 215.434904][ T5106] Bluetooth: hci2: command tx timeout [ 215.837309][ T5106] Bluetooth: hci3: command tx timeout [ 215.929227][ T35] team0 (unregistering): Port device team_slave_1 removed [ 215.970533][ T35] team0 (unregistering): Port device team_slave_0 removed [ 216.345783][ T9083] netlink: 'syz.4.992': attribute type 6 has an invalid length. [ 216.671398][ T9125] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 216.766741][ T9125] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 216.771708][ T9141] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 216.798242][ T9141] netlink: 191384 bytes leftover after parsing attributes in process `syz.1.1002'. [ 216.805639][ T9133] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1001'. [ 216.823926][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.840563][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.852553][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.870230][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.880850][ T9133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.902037][ T9133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.923435][ T9133] batadv_slave_1: entered promiscuous mode [ 217.015369][ T9147] netlink: 'syz.1.1003': attribute type 10 has an invalid length. [ 217.127109][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.146462][ T9147] team0: Port device batadv0 added [ 217.168670][ T9047] chnl_net:caif_netlink_parms(): no params data found [ 217.201673][ T9053] chnl_net:caif_netlink_parms(): no params data found [ 217.525721][ T5106] Bluetooth: hci2: command tx timeout [ 217.914364][ T5106] Bluetooth: hci3: command tx timeout [ 218.018148][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.040921][ T9192] netlink: 'syz.4.1013': attribute type 27 has an invalid length. [ 218.052875][ T9192] netlink: 'syz.4.1013': attribute type 3 has an invalid length. [ 218.061648][ T9192] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1013'. [ 218.186469][ T9201] netlink: 'syz.4.1013': attribute type 3 has an invalid length. [ 218.195446][ T9201] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1013'. [ 218.217049][ T9047] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.225913][ T9047] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.233239][ T9047] bridge_slave_0: entered allmulticast mode [ 218.250719][ T9047] bridge_slave_0: entered promiscuous mode [ 218.315802][ T9192] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 218.425260][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.538146][ T9047] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.588532][ T9047] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.614471][ T9047] bridge_slave_1: entered allmulticast mode [ 218.623973][ T9047] bridge_slave_1: entered promiscuous mode [ 218.739024][ T9208] netlink: 'syz.1.1016': attribute type 21 has an invalid length. [ 218.747559][ T9208] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1016'. [ 218.782440][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.829855][ T9047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.873723][ T9047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.905827][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.916728][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.934534][ T9053] bridge_slave_0: entered allmulticast mode [ 218.942233][ T9053] bridge_slave_0: entered promiscuous mode [ 218.951806][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.959872][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.967271][ T9053] bridge_slave_1: entered allmulticast mode [ 218.974919][ T9053] bridge_slave_1: entered promiscuous mode [ 219.010157][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.268020][ T9047] team0: Port device team_slave_0 added [ 219.301668][ T9047] team0: Port device team_slave_1 added [ 219.365665][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.583903][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.595759][ T5106] Bluetooth: hci2: command tx timeout [ 219.774015][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.796569][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.855726][ T9047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.893840][ T9047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.910507][ T9047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.986102][ T9047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.997870][ T5106] Bluetooth: hci3: command tx timeout [ 220.002424][ T9242] netlink: 'syz.4.1025': attribute type 3 has an invalid length. [ 220.027513][ T9053] team0: Port device team_slave_0 added [ 220.033844][ T9242] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1025'. [ 220.217692][ T9053] team0: Port device team_slave_1 added [ 220.419135][ T9256] netlink: 'syz.1.1027': attribute type 1 has an invalid length. [ 220.445731][ T9047] hsr_slave_0: entered promiscuous mode [ 220.478974][ T9256] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1027'. [ 220.484808][ T9047] hsr_slave_1: entered promiscuous mode [ 220.511505][ T9047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.525047][ T9047] Cannot create hsr debugfs directory [ 220.538971][ T9256] block nbd10: not configured, cannot reconfigure [ 220.598956][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.610749][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.659913][ T9053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.860114][ T9262] tun0: tun_chr_ioctl cmd 1074025677 [ 220.870267][ T9262] tun0: linktype set to 768 [ 220.892461][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.914869][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.957582][ T9053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.002716][ T35] bridge_slave_1: left allmulticast mode [ 221.011289][ T35] bridge_slave_1: left promiscuous mode [ 221.017764][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.030326][ T35] bridge_slave_0: left allmulticast mode [ 221.036487][ T35] bridge_slave_0: left promiscuous mode [ 221.042465][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.439239][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.455841][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.479072][ T35] bond0 (unregistering): Released all slaves [ 221.572843][ T9278] netlink: 'syz.1.1033': attribute type 21 has an invalid length. [ 221.585446][ T9278] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1033'. [ 221.646851][ T9053] hsr_slave_0: entered promiscuous mode [ 221.661193][ T9053] hsr_slave_1: entered promiscuous mode [ 221.672215][ T9053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.674611][ T5106] Bluetooth: hci2: command tx timeout [ 221.680833][ T9053] Cannot create hsr debugfs directory [ 222.074400][ T5106] Bluetooth: hci3: command tx timeout [ 222.090476][ T35] hsr_slave_0: left promiscuous mode [ 222.100024][ T35] hsr_slave_1: left promiscuous mode [ 222.124660][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.149525][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.186559][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.194027][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.293362][ T35] veth1_macvtap: left promiscuous mode [ 222.314619][ T35] veth0_macvtap: left promiscuous mode [ 222.320322][ T35] veth1_vlan: left promiscuous mode [ 222.342586][ T35] veth0_vlan: left promiscuous mode [ 222.464681][ T9306] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 222.472494][ T9306] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1041'. [ 222.541463][ T9306] block nbd10: not configured, cannot reconfigure [ 223.566854][ T35] team0 (unregistering): Port device team_slave_1 removed [ 223.585759][ T9322] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.1044'. [ 223.617237][ T35] team0 (unregistering): Port device team_slave_0 removed [ 224.054922][ T9304] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1042'. [ 224.070694][ T9305] netlink: 'syz.0.1040': attribute type 21 has an invalid length. [ 224.080829][ T9305] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1040'. [ 224.134697][ T9322] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.1044'. [ 224.247522][ T9319] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.1044'. [ 224.361278][ T9321] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.1044'. [ 224.785191][ T9332] netlink: 'syz.1.1047': attribute type 21 has an invalid length. [ 224.801853][ T9334] netlink: 'syz.4.1049': attribute type 16 has an invalid length. [ 224.839978][ T9334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 224.906332][ T9334] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 225.261880][ T9047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.288420][ T9047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.318979][ T9351] __nla_validate_parse: 2 callbacks suppressed [ 225.318999][ T9351] netlink: 35083 bytes leftover after parsing attributes in process `syz.0.1053'. [ 225.371456][ T9047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.439014][ T9047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.521682][ T9356] netlink: 'syz.1.1054': attribute type 1 has an invalid length. [ 225.588100][ T9356] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1054'. [ 225.609399][ T9359] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1055'. [ 225.651145][ T9356] block nbd10: not configured, cannot reconfigure [ 226.165530][ T9053] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.193221][ T9053] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.220348][ T9053] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.255067][ T9047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.304078][ T9053] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.366308][ T9047] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.408922][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.416153][ T6562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.439502][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.446794][ T6562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.759592][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.805062][ T9397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1067'. [ 226.838880][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.916595][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.923744][ T6562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.990111][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.997337][ T6562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.417797][ T9047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.496359][ T9421] netlink: 'syz.0.1073': attribute type 21 has an invalid length. [ 227.518001][ T9421] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 227.575798][ T9421] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1073'. [ 227.691886][ T9047] veth0_vlan: entered promiscuous mode [ 227.747114][ T9047] veth1_vlan: entered promiscuous mode [ 227.898082][ T9047] veth0_macvtap: entered promiscuous mode [ 227.931287][ T9047] veth1_macvtap: entered promiscuous mode [ 228.168049][ T9047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.224307][ T9047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.266913][ T9047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.290450][ T9047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.322132][ T9047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.346839][ T9047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.365918][ T9047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.380805][ T9047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.397705][ T9047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.414342][ T9047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.431987][ T9047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.460687][ T9047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.515484][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.548047][ T9047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.578885][ T9047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.608875][ T9047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.649770][ T9047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.140994][ T9053] veth0_vlan: entered promiscuous mode [ 229.258280][ T9481] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 229.278716][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.300554][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.306637][ T9053] veth1_vlan: entered promiscuous mode [ 229.400683][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.422106][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.518005][ T9053] veth0_macvtap: entered promiscuous mode [ 229.542479][ T9053] veth1_macvtap: entered promiscuous mode [ 229.581751][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.602708][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.614309][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.633792][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.644420][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.666441][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.700946][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.886955][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.915682][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.948282][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.980138][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.019482][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.045414][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.064926][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.084618][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.096504][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.115504][ T9053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.127684][ T9053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.138379][ T9053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.152920][ T9053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.323982][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.345722][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.403288][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.412845][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.730946][ T9530] netlink: 'syz.1.1098': attribute type 17 has an invalid length. [ 230.752467][ T9530] netlink: 'syz.1.1098': attribute type 41 has an invalid length. [ 230.764637][ T9530] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1098'. [ 230.938610][ T9535] netlink: 'syz.4.1102': attribute type 21 has an invalid length. [ 231.039412][ T9540] netlink: 'syz.1.1105': attribute type 29 has an invalid length. [ 231.067238][ T9540] netlink: 'syz.1.1105': attribute type 29 has an invalid length. [ 231.090202][ T9540] netlink: 'syz.1.1105': attribute type 29 has an invalid length. [ 231.301911][ T9550] netlink: 'syz.1.1108': attribute type 29 has an invalid length. [ 231.329299][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.363921][ T9549] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1107'. [ 231.388515][ T9550] netlink: 'syz.1.1108': attribute type 29 has an invalid length. [ 231.415202][ T9552] netlink: 'syz.1.1108': attribute type 29 has an invalid length. [ 231.437547][ T9551] netlink: 'syz.1.1108': attribute type 29 has an invalid length. [ 231.570163][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.812259][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.823022][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.831209][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.840081][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.849622][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 231.857020][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.919560][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.024058][ T9556] chnl_net:caif_netlink_parms(): no params data found [ 232.084159][ T9556] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.091581][ T9556] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.100081][ T9556] bridge_slave_0: entered allmulticast mode [ 232.109173][ T9556] bridge_slave_0: entered promiscuous mode [ 232.127480][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.141027][ T9556] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.149520][ T9556] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.157184][ T9556] bridge_slave_1: entered allmulticast mode [ 232.165206][ T9556] bridge_slave_1: entered promiscuous mode [ 232.198052][ T9556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.210893][ T9556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.260865][ T9556] team0: Port device team_slave_0 added [ 232.269753][ T9556] team0: Port device team_slave_1 added [ 232.296100][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.303072][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.331714][ T9556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.344629][ T9556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.351726][ T9556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.378238][ T9556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.475997][ T9556] hsr_slave_0: entered promiscuous mode [ 232.482705][ T9556] hsr_slave_1: entered promiscuous mode [ 232.490248][ T9556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.498739][ T9556] Cannot create hsr debugfs directory [ 232.504862][ T35] bridge_slave_1: left allmulticast mode [ 232.510521][ T35] bridge_slave_1: left promiscuous mode [ 232.521866][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.557816][ T35] bridge_slave_0: left allmulticast mode [ 232.574415][ T35] bridge_slave_0: left promiscuous mode [ 232.581066][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.028899][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.046522][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.065865][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.081583][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.091728][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.101220][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.233930][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.248807][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.260047][ T35] bond0 (unregistering): Released all slaves [ 233.300186][ T9580] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1116'. [ 233.937332][ T5096] Bluetooth: hci2: command tx timeout [ 234.091801][ T9607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1123'. [ 234.186276][ T35] hsr_slave_0: left promiscuous mode [ 234.196824][ T35] hsr_slave_1: left promiscuous mode [ 234.213366][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.235002][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.257537][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.271745][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.340379][ T35] veth1_macvtap: left promiscuous mode [ 234.359520][ T35] veth0_macvtap: left promiscuous mode [ 234.373041][ T35] veth1_vlan: left promiscuous mode [ 234.389155][ T35] veth0_vlan: left promiscuous mode [ 235.194528][ T5096] Bluetooth: hci3: command tx timeout [ 235.201011][ T35] team0 (unregistering): Port device team_slave_1 removed [ 235.238067][ T35] team0 (unregistering): Port device team_slave_0 removed [ 235.620145][ T9607] bond_slave_0: left promiscuous mode [ 235.626052][ T9607] bond_slave_1: left promiscuous mode [ 235.631485][ T9607] batadv_slave_0: left promiscuous mode [ 235.736335][ T9640] validate_nla: 3 callbacks suppressed [ 235.736355][ T9640] netlink: 'syz.1.1129': attribute type 10 has an invalid length. [ 235.768691][ T9640] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.782983][ T9640] team0: entered promiscuous mode [ 235.788160][ T9640] team_slave_0: entered promiscuous mode [ 235.795272][ T9640] team_slave_1: entered promiscuous mode [ 235.801098][ T9640] batadv0: entered promiscuous mode [ 235.820238][ T9640] bond0: (slave team0): Enslaving as an active interface with an up link [ 235.884340][ T5096] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 235.994483][ T5096] Bluetooth: hci2: command tx timeout [ 236.166216][ T9656] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1136'. [ 236.406488][ T9587] chnl_net:caif_netlink_parms(): no params data found [ 236.509401][ T9677] FAULT_INJECTION: forcing a failure. [ 236.509401][ T9677] name failslab, interval 1, probability 0, space 0, times 1 [ 236.599931][ T9677] CPU: 0 PID: 9677 Comm: syz.1.1141 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 236.610049][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 236.620112][ T9677] Call Trace: [ 236.623383][ T9677] [ 236.626303][ T9677] dump_stack_lvl+0x241/0x360 [ 236.630996][ T9677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.636185][ T9677] ? __pfx__printk+0x10/0x10 [ 236.640765][ T9677] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 236.646305][ T9677] ? __phys_addr+0xba/0x170 [ 236.650803][ T9677] should_fail_ex+0x3b0/0x4e0 [ 236.655566][ T9677] ? __build_skb+0x4b/0x90 [ 236.659974][ T9677] should_failslab+0x9/0x20 [ 236.664473][ T9677] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 236.670012][ T9677] __build_skb+0x4b/0x90 [ 236.674251][ T9677] netlink_alloc_large_skb+0x65/0x100 [ 236.679621][ T9677] netlink_sendmsg+0x631/0xcb0 [ 236.684388][ T9677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.689667][ T9677] ? aa_sock_msg_perm+0x91/0x160 [ 236.694670][ T9677] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 236.699951][ T9677] ? security_socket_sendmsg+0x87/0xb0 [ 236.705477][ T9677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.710757][ T9677] __sock_sendmsg+0x221/0x270 [ 236.715429][ T9677] sock_write_iter+0x2dd/0x400 [ 236.720190][ T9677] ? __pfx_sock_write_iter+0x10/0x10 [ 236.725474][ T9677] ? bpf_lsm_file_permission+0x9/0x10 [ 236.730838][ T9677] ? security_file_permission+0x7f/0xa0 [ 236.736434][ T9677] vfs_write+0xa72/0xc90 [ 236.740679][ T9677] ? __pfx_sock_write_iter+0x10/0x10 [ 236.746047][ T9677] ? __pfx_vfs_write+0x10/0x10 [ 236.750843][ T9677] ksys_write+0x1a0/0x2c0 [ 236.755194][ T9677] ? __pfx_ksys_write+0x10/0x10 [ 236.760081][ T9677] ? do_syscall_64+0x100/0x230 [ 236.764846][ T9677] ? do_syscall_64+0xb6/0x230 [ 236.769608][ T9677] do_syscall_64+0xf3/0x230 [ 236.774099][ T9677] ? clear_bhb_loop+0x35/0x90 [ 236.778776][ T9677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.784778][ T9677] RIP: 0033:0x7fdf16b75b99 [ 236.789189][ T9677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.808788][ T9677] RSP: 002b:00007fdf17886048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.817212][ T9677] RAX: ffffffffffffffda RBX: 00007fdf16d03fa0 RCX: 00007fdf16b75b99 [ 236.825263][ T9677] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 236.833220][ T9677] RBP: 00007fdf178860a0 R08: 0000000000000000 R09: 0000000000000000 [ 236.841177][ T9677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.849223][ T9677] R13: 000000000000000b R14: 00007fdf16d03fa0 R15: 00007fff854bbca8 [ 236.857195][ T9677] [ 237.048693][ T9556] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 237.188798][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.220467][ T9587] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.243322][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.260823][ T9587] bridge_slave_0: entered allmulticast mode [ 237.273798][ T9587] bridge_slave_0: entered promiscuous mode [ 237.286019][ T5096] Bluetooth: hci3: command tx timeout [ 237.304984][ T9556] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 237.326939][ T9556] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 237.452135][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.476699][ T9587] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.483853][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.492235][ T9587] bridge_slave_1: entered allmulticast mode [ 237.499913][ T9587] bridge_slave_1: entered promiscuous mode [ 237.683760][ T9556] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 237.751227][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.855202][ T9587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.912956][ T9587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.992758][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.058117][ T9725] FAULT_INJECTION: forcing a failure. [ 238.058117][ T9725] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 238.073947][ T9725] CPU: 1 PID: 9725 Comm: syz.4.1155 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 238.084048][ T9725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 238.094236][ T9725] Call Trace: [ 238.097524][ T9725] [ 238.100534][ T9725] dump_stack_lvl+0x241/0x360 [ 238.105214][ T9725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.110415][ T9725] ? __pfx__printk+0x10/0x10 [ 238.114996][ T9725] ? __pfx_lock_release+0x10/0x10 [ 238.120013][ T9725] should_fail_ex+0x3b0/0x4e0 [ 238.124701][ T9725] _copy_from_iter+0x1f6/0x1960 [ 238.129650][ T9725] ? __virt_addr_valid+0x183/0x520 [ 238.134788][ T9725] ? __pfx_lock_release+0x10/0x10 [ 238.139830][ T9725] ? __pfx__copy_from_iter+0x10/0x10 [ 238.145117][ T9725] ? __virt_addr_valid+0x183/0x520 [ 238.150243][ T9725] ? __virt_addr_valid+0x183/0x520 [ 238.155349][ T9725] ? __virt_addr_valid+0x44e/0x520 [ 238.160463][ T9725] ? __check_object_size+0x49c/0x900 [ 238.165742][ T9725] netlink_sendmsg+0x743/0xcb0 [ 238.170504][ T9725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.175790][ T9725] ? aa_sock_msg_perm+0x91/0x160 [ 238.180734][ T9725] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 238.186012][ T9725] ? security_socket_sendmsg+0x87/0xb0 [ 238.191485][ T9725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.196765][ T9725] __sock_sendmsg+0x221/0x270 [ 238.201436][ T9725] sock_write_iter+0x2dd/0x400 [ 238.206258][ T9725] ? __pfx_sock_write_iter+0x10/0x10 [ 238.211539][ T9725] ? bpf_lsm_file_permission+0x9/0x10 [ 238.216905][ T9725] ? security_file_permission+0x7f/0xa0 [ 238.222445][ T9725] vfs_write+0xa72/0xc90 [ 238.226684][ T9725] ? __pfx_sock_write_iter+0x10/0x10 [ 238.231964][ T9725] ? __pfx_vfs_write+0x10/0x10 [ 238.236731][ T9725] ksys_write+0x1a0/0x2c0 [ 238.241053][ T9725] ? __pfx_ksys_write+0x10/0x10 [ 238.245897][ T9725] ? do_syscall_64+0x100/0x230 [ 238.250653][ T9725] ? do_syscall_64+0xb6/0x230 [ 238.255323][ T9725] do_syscall_64+0xf3/0x230 [ 238.259814][ T9725] ? clear_bhb_loop+0x35/0x90 [ 238.264479][ T9725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.270361][ T9725] RIP: 0033:0x7fdb41b75b99 [ 238.274764][ T9725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.294362][ T9725] RSP: 002b:00007fdb4288f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.302767][ T9725] RAX: ffffffffffffffda RBX: 00007fdb41d03fa0 RCX: 00007fdb41b75b99 [ 238.310726][ T9725] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 238.318687][ T9725] RBP: 00007fdb4288f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 238.326646][ T9725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.334691][ T9725] R13: 000000000000000b R14: 00007fdb41d03fa0 R15: 00007ffef279aca8 [ 238.342661][ T9725] [ 238.363372][ T5096] Bluetooth: hci2: command tx timeout [ 238.391649][ T9727] netlink: 'syz.0.1154': attribute type 21 has an invalid length. [ 238.412149][ T9727] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.498189][ T9587] team0: Port device team_slave_0 added [ 238.513560][ T9587] team0: Port device team_slave_1 added [ 238.679821][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.693330][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.730244][ T9587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.746797][ T9587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.762332][ T9587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.799934][ T9587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.069392][ T9587] hsr_slave_0: entered promiscuous mode [ 239.099847][ T9587] hsr_slave_1: entered promiscuous mode [ 239.109161][ T9587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.122306][ T9587] Cannot create hsr debugfs directory [ 239.151410][ T35] bridge_slave_1: left allmulticast mode [ 239.157652][ T35] bridge_slave_1: left promiscuous mode [ 239.163489][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.180061][ T35] bridge_slave_0: left allmulticast mode [ 239.186367][ T35] bridge_slave_0: left promiscuous mode [ 239.192081][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.297945][ T9760] FAULT_INJECTION: forcing a failure. [ 239.297945][ T9760] name failslab, interval 1, probability 0, space 0, times 0 [ 239.312502][ T9760] CPU: 1 PID: 9760 Comm: syz.0.1167 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 239.322578][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 239.332632][ T9760] Call Trace: [ 239.335902][ T9760] [ 239.338822][ T9760] dump_stack_lvl+0x241/0x360 [ 239.343493][ T9760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.348679][ T9760] ? __pfx__printk+0x10/0x10 [ 239.353256][ T9760] ? ref_tracker_alloc+0x332/0x490 [ 239.358463][ T9760] should_fail_ex+0x3b0/0x4e0 [ 239.363142][ T9760] ? skb_clone+0x20c/0x390 [ 239.367567][ T9760] should_failslab+0x9/0x20 [ 239.372101][ T9760] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 239.377501][ T9760] skb_clone+0x20c/0x390 [ 239.381764][ T9760] __netlink_deliver_tap+0x3cc/0x7c0 [ 239.387061][ T9760] ? netlink_deliver_tap+0x2e/0x1b0 [ 239.392265][ T9760] netlink_deliver_tap+0x19d/0x1b0 [ 239.397383][ T9760] netlink_unicast+0x7b8/0x980 [ 239.402153][ T9760] ? __pfx_netlink_unicast+0x10/0x10 [ 239.407432][ T9760] ? __virt_addr_valid+0x183/0x520 [ 239.412538][ T9760] ? __check_object_size+0x49c/0x900 [ 239.417821][ T9760] ? bpf_lsm_netlink_send+0x9/0x10 [ 239.422937][ T9760] netlink_sendmsg+0x8db/0xcb0 [ 239.427782][ T9760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.433090][ T9760] ? aa_sock_msg_perm+0x91/0x160 [ 239.438038][ T9760] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 239.443318][ T9760] ? security_socket_sendmsg+0x87/0xb0 [ 239.448776][ T9760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.454052][ T9760] __sock_sendmsg+0x221/0x270 [ 239.458724][ T9760] sock_write_iter+0x2dd/0x400 [ 239.463484][ T9760] ? __pfx_sock_write_iter+0x10/0x10 [ 239.468783][ T9760] ? bpf_lsm_file_permission+0x9/0x10 [ 239.474149][ T9760] ? security_file_permission+0x7f/0xa0 [ 239.479699][ T9760] vfs_write+0xa72/0xc90 [ 239.483938][ T9760] ? __pfx_sock_write_iter+0x10/0x10 [ 239.489231][ T9760] ? __pfx_vfs_write+0x10/0x10 [ 239.494355][ T9760] ksys_write+0x1a0/0x2c0 [ 239.498685][ T9760] ? __pfx_ksys_write+0x10/0x10 [ 239.503527][ T9760] ? rcu_is_watching+0x15/0xb0 [ 239.508281][ T9760] ? trace_sys_enter+0x1f/0xd0 [ 239.513036][ T9760] do_syscall_64+0xf3/0x230 [ 239.517535][ T9760] ? clear_bhb_loop+0x35/0x90 [ 239.522207][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.528098][ T9760] RIP: 0033:0x7f2ccf575b99 [ 239.532522][ T9760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.552211][ T9760] RSP: 002b:00007f2cd03b8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.560618][ T9760] RAX: ffffffffffffffda RBX: 00007f2ccf703fa0 RCX: 00007f2ccf575b99 [ 239.568604][ T9760] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 239.576650][ T9760] RBP: 00007f2cd03b80a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.584619][ T9760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.592580][ T9760] R13: 000000000000000b R14: 00007f2ccf703fa0 R15: 00007ffe3eaded98 [ 239.600554][ T9760] [ 239.612737][ T5096] Bluetooth: hci3: command tx timeout [ 239.843515][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.855533][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.870470][ T35] bond0 (unregistering): Released all slaves [ 239.917286][ T9760] netlink: 'syz.0.1167': attribute type 21 has an invalid length. [ 239.925470][ T9760] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1167'. [ 240.394552][ T5096] Bluetooth: hci2: command tx timeout [ 240.482542][ T9778] netlink: 'syz.1.1174': attribute type 21 has an invalid length. [ 240.514899][ T9778] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1174'. [ 240.895925][ T35] hsr_slave_0: left promiscuous mode [ 240.933888][ T35] hsr_slave_1: left promiscuous mode [ 240.947997][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.975215][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.017445][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.047940][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.117390][ T35] veth1_macvtap: left promiscuous mode [ 241.123065][ T35] veth0_macvtap: left promiscuous mode [ 241.148489][ T35] veth1_vlan: left promiscuous mode [ 241.153963][ T35] veth0_vlan: left promiscuous mode [ 241.678887][ T5096] Bluetooth: hci3: command tx timeout [ 241.898197][ T35] team0 (unregistering): Port device team_slave_1 removed [ 241.943198][ T35] team0 (unregistering): Port device team_slave_0 removed [ 242.388335][ T9801] netlink: 'syz.1.1179': attribute type 21 has an invalid length. [ 242.396396][ T9801] FAULT_INJECTION: forcing a failure. [ 242.396396][ T9801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.397246][ T9801] [ 242.397252][ T9801] ====================================================== [ 242.397257][ T9801] WARNING: possible circular locking dependency detected [ 242.397271][ T9801] 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 Not tainted [ 242.397279][ T9801] ------------------------------------------------------ [ 242.397284][ T9801] syz.1.1179/9801 is trying to acquire lock: [ 242.397290][ T9801] ffffffff8e328140 (console_owner){-...}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 242.397331][ T9801] [ 242.397331][ T9801] but task is already holding lock: [ 242.397334][ T9801] ffff8880b943e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 242.397360][ T9801] [ 242.397360][ T9801] which lock already depends on the new lock. [ 242.397360][ T9801] [ 242.397363][ T9801] [ 242.397363][ T9801] the existing dependency chain (in reverse order) is: [ 242.397371][ T9801] [ 242.397371][ T9801] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 242.397383][ T9801] lock_acquire+0x1ed/0x550 [ 242.397394][ T9801] _raw_spin_lock_nested+0x31/0x40 [ 242.397406][ T9801] raw_spin_rq_lock_nested+0x2a/0x140 [ 242.397418][ T9801] task_fork_fair+0x61/0x1e0 [ 242.397430][ T9801] sched_cgroup_fork+0x37c/0x410 [ 242.397440][ T9801] copy_process+0x2217/0x3dc0 [ 242.397450][ T9801] kernel_clone+0x226/0x8f0 [ 242.397459][ T9801] user_mode_thread+0x132/0x1a0 [ 242.397469][ T9801] rest_init+0x23/0x300 [ 242.397479][ T9801] start_kernel+0x47a/0x500 [ 242.397493][ T9801] x86_64_start_reservations+0x2a/0x30 [ 242.397505][ T9801] x86_64_start_kernel+0x99/0xa0 [ 242.397516][ T9801] common_startup_64+0x13e/0x147 [ 242.397526][ T9801] [ 242.397526][ T9801] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 242.397538][ T9801] lock_acquire+0x1ed/0x550 [ 242.397546][ T9801] _raw_spin_lock_irqsave+0xd5/0x120 [ 242.397557][ T9801] try_to_wake_up+0xb0/0x1470 [ 242.397567][ T9801] __wake_up_common_lock+0x130/0x1e0 [ 242.397580][ T9801] tty_port_default_wakeup+0xa6/0xf0 [ 242.397655][ T9801] serial8250_tx_chars+0x6e2/0x930 [ 242.397678][ T9801] serial8250_handle_irq+0x558/0x710 [ 242.397688][ T9801] serial8250_default_handle_irq+0xd1/0x1f0 [ 242.397700][ T9801] serial8250_interrupt+0xa9/0x1f0 [ 242.397710][ T9801] __handle_irq_event_percpu+0x29a/0xa80 [ 242.397722][ T9801] handle_irq_event+0x89/0x1f0 [ 242.397732][ T9801] handle_edge_irq+0x25f/0xc20 [ 242.397742][ T9801] __common_interrupt+0x136/0x230 [ 242.397753][ T9801] common_interrupt+0xa5/0xd0 [ 242.397763][ T9801] asm_common_interrupt+0x26/0x40 [ 242.397773][ T9801] acpi_safe_halt+0x21/0x30 [ 242.397782][ T9801] acpi_idle_enter+0xe4/0x140 [ 242.397792][ T9801] cpuidle_enter_state+0x112/0x480 [ 242.397801][ T9801] cpuidle_enter+0x5d/0xa0 [ 242.397830][ T9801] do_idle+0x375/0x5d0 [ 242.397839][ T9801] cpu_startup_entry+0x42/0x60 [ 242.397848][ T9801] __pfx_ap_starting+0x0/0x10 [ 242.397858][ T9801] common_startup_64+0x13e/0x147 [ 242.397867][ T9801] [ 242.397867][ T9801] -> #2 (&tty->write_wait){-...}-{2:2}: [ 242.397879][ T9801] lock_acquire+0x1ed/0x550 [ 242.397887][ T9801] _raw_spin_lock_irqsave+0xd5/0x120 [ 242.397897][ T9801] __wake_up_common_lock+0x25/0x1e0 [ 242.397906][ T9801] tty_port_default_wakeup+0xa6/0xf0 [ 242.397918][ T9801] serial8250_tx_chars+0x6e2/0x930 [ 242.397928][ T9801] serial8250_handle_irq+0x558/0x710 [ 242.397938][ T9801] serial8250_default_handle_irq+0xd1/0x1f0 [ 242.397950][ T9801] serial8250_interrupt+0xa9/0x1f0 [ 242.397960][ T9801] __handle_irq_event_percpu+0x29a/0xa80 [ 242.397971][ T9801] handle_irq_event+0x89/0x1f0 [ 242.397981][ T9801] handle_edge_irq+0x25f/0xc20 [ 242.397991][ T9801] __common_interrupt+0x136/0x230 [ 242.398001][ T9801] common_interrupt+0xa5/0xd0 [ 242.398011][ T9801] asm_common_interrupt+0x26/0x40 [ 242.398020][ T9801] acpi_safe_halt+0x21/0x30 [ 242.398030][ T9801] acpi_idle_enter+0xe4/0x140 [ 242.398039][ T9801] cpuidle_enter_state+0x112/0x480 [ 242.398048][ T9801] cpuidle_enter+0x5d/0xa0 [ 242.398056][ T9801] do_idle+0x375/0x5d0 [ 242.398065][ T9801] cpu_startup_entry+0x42/0x60 [ 242.398074][ T9801] __pfx_ap_starting+0x0/0x10 [ 242.398083][ T9801] common_startup_64+0x13e/0x147 [ 242.398092][ T9801] [ 242.398092][ T9801] -> #1 (&port_lock_key){-...}-{2:2}: [ 242.398104][ T9801] lock_acquire+0x1ed/0x550 [ 242.398112][ T9801] _raw_spin_lock_irqsave+0xd5/0x120 [ 242.398122][ T9801] serial8250_console_write+0x1a8/0x1770 [ 242.398133][ T9801] console_flush_all+0x867/0xfd0 [ 242.398144][ T9801] console_unlock+0x13b/0x4d0 [ 242.398155][ T9801] vprintk_emit+0x5a6/0x770 [ 242.398165][ T9801] _printk+0xd5/0x120 [ 242.398173][ T9801] register_console+0x722/0xce0 [ 242.398184][ T9801] univ8250_console_init+0x49/0x50 [ 242.398195][ T9801] console_init+0x1b8/0x6f0 [ 242.398204][ T9801] start_kernel+0x2d3/0x500 [ 242.398213][ T9801] x86_64_start_reservations+0x2a/0x30 [ 242.398225][ T9801] x86_64_start_kernel+0x99/0xa0 [ 242.398236][ T9801] common_startup_64+0x13e/0x147 [ 242.398244][ T9801] [ 242.398244][ T9801] -> #0 (console_owner){-...}-{0:0}: [ 242.398256][ T9801] validate_chain+0x18e0/0x5900 [ 242.398266][ T9801] __lock_acquire+0x1346/0x1fd0 [ 242.398275][ T9801] lock_acquire+0x1ed/0x550 [ 242.398283][ T9801] console_flush_all+0x810/0xfd0 [ 242.398294][ T9801] console_unlock+0x13b/0x4d0 [ 242.398304][ T9801] vprintk_emit+0x5a6/0x770 [ 242.398315][ T9801] _printk+0xd5/0x120 [ 242.398322][ T9801] should_fail_ex+0x391/0x4e0 [ 242.398334][ T9801] strncpy_from_user+0x36/0x2f0 [ 242.398344][ T9801] strncpy_from_user_nofault+0x71/0x140 [ 242.398355][ T9801] bpf_probe_read_user_str+0x2a/0x70 [ 242.398365][ T9801] bpf_prog_d944b8c152a67c20+0x63/0x67 [ 242.398381][ T9801] bpf_trace_run2+0x2ec/0x540 [ 242.398392][ T9801] trace_tlb_flush+0x118/0x140 [ 242.398404][ T9801] switch_mm_irqs_off+0x7cb/0xae0 [ 242.398416][ T9801] __schedule+0x1066/0x4a20 [ 242.398426][ T9801] preempt_schedule_common+0x84/0xd0 [ 242.398437][ T9801] preempt_schedule+0xe1/0xf0 [ 242.398446][ T9801] preempt_schedule_thunk+0x1a/0x30 [ 242.398455][ T9801] vprintk_emit+0x690/0x770 [ 242.398466][ T9801] _printk+0xd5/0x120 [ 242.398473][ T9801] __nla_validate_parse+0x1af9/0x3090 [ 242.398482][ T9801] __nla_parse+0x40/0x60 [ 242.398490][ T9801] ipmr_rtm_getroute+0x254/0xf30 [ 242.398503][ T9801] rtnetlink_rcv_msg+0x89b/0x1180 [ 242.398512][ T9801] netlink_rcv_skb+0x1e3/0x430 [ 242.398524][ T9801] netlink_unicast+0x7ea/0x980 [ 242.398535][ T9801] netlink_sendmsg+0x8db/0xcb0 [ 242.398546][ T9801] __sock_sendmsg+0x221/0x270 [ 242.398555][ T9801] sock_write_iter+0x2dd/0x400 [ 242.398567][ T9801] vfs_write+0xa72/0xc90 [ 242.398578][ T9801] ksys_write+0x1a0/0x2c0 [ 242.398587][ T9801] do_syscall_64+0xf3/0x230 [ 242.398596][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.398605][ T9801] [ 242.398605][ T9801] other info that might help us debug this: [ 242.398605][ T9801] [ 242.398609][ T9801] Chain exists of: [ 242.398609][ T9801] console_owner --> &p->pi_lock --> &rq->__lock [ 242.398609][ T9801] [ 242.398622][ T9801] Possible unsafe locking scenario: [ 242.398622][ T9801] [ 242.398625][ T9801] CPU0 CPU1 [ 242.398627][ T9801] ---- ---- [ 242.398630][ T9801] lock(&rq->__lock); [ 242.398636][ T9801] lock(&p->pi_lock); [ 242.398642][ T9801] lock(&rq->__lock); [ 242.398648][ T9801] lock(console_owner); [ 242.398654][ T9801] [ 242.398654][ T9801] *** DEADLOCK *** [ 242.398654][ T9801] [ 242.398657][ T9801] 5 locks held by syz.1.1179/9801: [ 242.398662][ T9801] #0: ffffffff8f5e6cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 242.398684][ T9801] #1: ffff8880b943e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 242.398709][ T9801] #2: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 242.398734][ T9801] #3: ffffffff8e20fa60 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 242.398753][ T9801] #4: ffffffff8e20f690 (console_srcu){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 242.398777][ T9801] [ 242.398777][ T9801] stack backtrace: [ 242.398781][ T9801] CPU: 0 PID: 9801 Comm: syz.1.1179 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 242.398791][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 242.398797][ T9801] Call Trace: [ 242.398802][ T9801] [ 242.398806][ T9801] dump_stack_lvl+0x241/0x360 [ 242.398817][ T9801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.398830][ T9801] ? print_circular_bug+0x130/0x1a0 [ 242.398842][ T9801] check_noncircular+0x36a/0x4a0 [ 242.398855][ T9801] ? __pfx_check_noncircular+0x10/0x10 [ 242.398867][ T9801] ? lockdep_lock+0x123/0x2b0 [ 242.398877][ T9801] ? add_lock_to_list+0x1de/0x2e0 [ 242.398891][ T9801] validate_chain+0x18e0/0x5900 [ 242.398909][ T9801] ? __pfx_validate_chain+0x10/0x10 [ 242.398921][ T9801] ? sprintf+0xda/0x120 [ 242.398933][ T9801] ? vsnprintf+0x1cc3/0x1da0 [ 242.398948][ T9801] ? info_print_prefix+0x204/0x310 [ 242.398959][ T9801] ? mark_lock+0x9a/0x350 [ 242.398970][ T9801] __lock_acquire+0x1346/0x1fd0 [ 242.398985][ T9801] lock_acquire+0x1ed/0x550 [ 242.398994][ T9801] ? console_flush_all+0x152/0xfd0 [ 242.399008][ T9801] ? __pfx_lock_acquire+0x10/0x10 [ 242.399018][ T9801] ? __pfx_lock_release+0x10/0x10 [ 242.399027][ T9801] ? do_raw_spin_lock+0x14f/0x370 [ 242.399042][ T9801] ? do_raw_spin_unlock+0x13c/0x8b0 [ 242.399054][ T9801] ? console_flush_all+0x3a8/0xfd0 [ 242.399068][ T9801] console_flush_all+0x810/0xfd0 [ 242.399079][ T9801] ? console_flush_all+0x152/0xfd0 [ 242.399093][ T9801] ? console_flush_all+0x152/0xfd0 [ 242.399108][ T9801] ? __pfx_console_flush_all+0x10/0x10 [ 242.399121][ T9801] ? __pfx_lock_acquire+0x10/0x10 [ 242.399132][ T9801] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 242.399145][ T9801] console_unlock+0x13b/0x4d0 [ 242.399158][ T9801] ? __pfx_console_unlock+0x10/0x10 [ 242.399169][ T9801] ? _printk+0xd5/0x120 [ 242.399177][ T9801] ? _printk+0xd5/0x120 [ 242.399186][ T9801] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 242.399199][ T9801] ? validate_chain+0x11e/0x5900 [ 242.399210][ T9801] ? prb_first_seq+0x131/0x210 [ 242.399220][ T9801] ? __pfx_validate_chain+0x10/0x10 [ 242.399233][ T9801] vprintk_emit+0x5a6/0x770 [ 242.399245][ T9801] ? __pfx_vprintk_emit+0x10/0x10 [ 242.399258][ T9801] ? mark_lock+0x9a/0x350 [ 242.399267][ T9801] ? __pfx_validate_chain+0x10/0x10 [ 242.399280][ T9801] _printk+0xd5/0x120 [ 242.399290][ T9801] ? __pfx__printk+0x10/0x10 [ 242.399302][ T9801] should_fail_ex+0x391/0x4e0 [ 242.399316][ T9801] strncpy_from_user+0x36/0x2f0 [ 242.399327][ T9801] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 242.399341][ T9801] strncpy_from_user_nofault+0x71/0x140 [ 242.399353][ T9801] bpf_probe_read_user_str+0x2a/0x70 [ 242.399364][ T9801] ? bpf_trace_run2+0x1fc/0x540 [ 242.399380][ T9801] bpf_prog_d944b8c152a67c20+0x63/0x67 [ 242.399388][ T9801] bpf_trace_run2+0x2ec/0x540 [ 242.399402][ T9801] ? __pfx_bpf_trace_run2+0x10/0x10 [ 242.399417][ T9801] ? __perf_event_task_sched_out+0x2bb/0x28a0 [ 242.399429][ T9801] trace_tlb_flush+0x118/0x140 [ 242.399442][ T9801] switch_mm_irqs_off+0x7cb/0xae0 [ 242.399457][ T9801] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 242.399472][ T9801] __schedule+0x1066/0x4a20 [ 242.399488][ T9801] ? mark_lock+0x9a/0x350 [ 242.399498][ T9801] ? __pfx___schedule+0x10/0x10 [ 242.399510][ T9801] ? prb_read_valid+0xa9/0xf0 [ 242.399524][ T9801] ? preempt_schedule+0xe1/0xf0 [ 242.399535][ T9801] preempt_schedule_common+0x84/0xd0 [ 242.399546][ T9801] preempt_schedule+0xe1/0xf0 [ 242.399557][ T9801] ? __pfx_preempt_schedule+0x10/0x10 [ 242.399568][ T9801] ? _printk+0xd5/0x120 [ 242.399576][ T9801] ? _printk+0xd5/0x120 [ 242.399585][ T9801] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 242.399599][ T9801] preempt_schedule_thunk+0x1a/0x30 [ 242.399609][ T9801] ? vprintk_emit+0x619/0x770 [ 242.399620][ T9801] ? vprintk_emit+0x68b/0x770 [ 242.399631][ T9801] vprintk_emit+0x690/0x770 [ 242.399643][ T9801] ? __pfx_vprintk_emit+0x10/0x10 [ 242.399655][ T9801] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 242.399667][ T9801] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 242.399681][ T9801] _printk+0xd5/0x120 [ 242.399690][ T9801] ? __nla_validate_parse+0x4f4/0x3090 [ 242.399700][ T9801] ? __pfx__printk+0x10/0x10 [ 242.399712][ T9801] __nla_validate_parse+0x1af9/0x3090 [ 242.399727][ T9801] ? __pfx___nla_validate_parse+0x10/0x10 [ 242.399738][ T9801] ? __lock_acquire+0x1346/0x1fd0 [ 242.399755][ T9801] __nla_parse+0x40/0x60 [ 242.399766][ T9801] ipmr_rtm_getroute+0x254/0xf30 [ 242.399780][ T9801] ? __pfx_ipmr_rtm_getroute+0x10/0x10 [ 242.399803][ T9801] ? __pfx_ipmr_rtm_getroute+0x10/0x10 [ 242.399815][ T9801] rtnetlink_rcv_msg+0x89b/0x1180 [ 242.399825][ T9801] ? rtnetlink_rcv_msg+0x208/0x1180 [ 242.399834][ T9801] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 242.399845][ T9801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.399853][ T9801] ? __local_bh_enable_ip+0x106/0x200 [ 242.399864][ T9801] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 242.399875][ T9801] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.399886][ T9801] ? __local_bh_enable_ip+0x168/0x200 [ 242.399896][ T9801] ? lockdep_hardirqs_on+0x99/0x150 [ 242.399905][ T9801] ? __local_bh_enable_ip+0x168/0x200 [ 242.399914][ T9801] ? dev_hard_start_xmit+0x773/0x7e0 [ 242.399926][ T9801] ? __dev_queue_xmit+0x2d2/0x3d30 [ 242.399937][ T9801] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 242.399948][ T9801] ? __dev_queue_xmit+0x2d2/0x3d30 [ 242.399961][ T9801] ? __dev_queue_xmit+0x16c9/0x3d30 [ 242.399976][ T9801] ? __dev_queue_xmit+0x2d2/0x3d30 [ 242.399991][ T9801] ? ref_tracker_free+0x643/0x7e0 [ 242.400006][ T9801] netlink_rcv_skb+0x1e3/0x430 [ 242.400018][ T9801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 242.400029][ T9801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.400047][ T9801] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.400060][ T9801] netlink_unicast+0x7ea/0x980 [ 242.400074][ T9801] ? __pfx_netlink_unicast+0x10/0x10 [ 242.400085][ T9801] ? __virt_addr_valid+0x183/0x520 [ 242.400098][ T9801] ? __check_object_size+0x49c/0x900 [ 242.400107][ T9801] ? bpf_lsm_netlink_send+0x9/0x10 [ 242.400122][ T9801] netlink_sendmsg+0x8db/0xcb0 [ 242.400138][ T9801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.400152][ T9801] ? aa_sock_msg_perm+0x91/0x160 [ 242.400166][ T9801] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 242.400176][ T9801] ? security_socket_sendmsg+0x87/0xb0 [ 242.400188][ T9801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.400200][ T9801] __sock_sendmsg+0x221/0x270 [ 242.400210][ T9801] sock_write_iter+0x2dd/0x400 [ 242.400224][ T9801] ? __pfx_sock_write_iter+0x10/0x10 [ 242.400240][ T9801] ? bpf_lsm_file_permission+0x9/0x10 [ 242.400250][ T9801] ? security_file_permission+0x7f/0xa0 [ 242.400265][ T9801] vfs_write+0xa72/0xc90 [ 242.400277][ T9801] ? __pfx_sock_write_iter+0x10/0x10 [ 242.400291][ T9801] ? __pfx_vfs_write+0x10/0x10 [ 242.400307][ T9801] ksys_write+0x1a0/0x2c0 [ 242.400320][ T9801] ? __pfx_ksys_write+0x10/0x10 [ 242.400331][ T9801] ? do_syscall_64+0x100/0x230 [ 242.400341][ T9801] ? do_syscall_64+0xb6/0x230 [ 242.400352][ T9801] do_syscall_64+0xf3/0x230 [ 242.400362][ T9801] ? clear_bhb_loop+0x35/0x90 [ 242.400376][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.400387][ T9801] RIP: 0033:0x7fdf16b75b99 [ 242.400395][ T9801] Code: Unable to access opcode bytes at 0x7fdf16b75b6f. [ 242.400400][ T9801] RSP: 002b:00007fdf17886048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.400410][ T9801] RAX: ffffffffffffffda RBX: 00007fdf16d03fa0 RCX: 00007fdf16b75b99 [ 242.400417][ T9801] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 242.400423][ T9801] RBP: 00007fdf178860a0 R08: 0000000000000000 R09: 0000000000000000 [ 242.400429][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.400436][ T9801] R13: 000000000000000b R14: 00007fdf16d03fa0 R15: 00007fff854bbca8 [ 242.400446][ T9801] [ 243.967045][ T9801] CPU: 0 PID: 9801 Comm: syz.1.1179 Not tainted 6.10.0-rc2-syzkaller-00797-ga12978712d90 #0 [ 243.977431][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 243.987657][ T9801] Call Trace: [ 243.990925][ T9801] [ 243.993844][ T9801] dump_stack_lvl+0x241/0x360 [ 243.998508][ T9801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.003683][ T9801] ? __pfx__printk+0x10/0x10 [ 244.008255][ T9801] should_fail_ex+0x3b0/0x4e0 [ 244.012919][ T9801] strncpy_from_user+0x36/0x2f0 [ 244.017754][ T9801] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 244.023540][ T9801] strncpy_from_user_nofault+0x71/0x140 [ 244.029067][ T9801] bpf_probe_read_user_str+0x2a/0x70 [ 244.034331][ T9801] ? bpf_trace_run2+0x1fc/0x540 [ 244.039160][ T9801] bpf_prog_d944b8c152a67c20+0x63/0x67 [ 244.044591][ T9801] bpf_trace_run2+0x2ec/0x540 [ 244.049252][ T9801] ? __pfx_bpf_trace_run2+0x10/0x10 [ 244.054457][ T9801] ? __perf_event_task_sched_out+0x2bb/0x28a0 [ 244.060501][ T9801] trace_tlb_flush+0x118/0x140 [ 244.065244][ T9801] switch_mm_irqs_off+0x7cb/0xae0 [ 244.070247][ T9801] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 244.075781][ T9801] __schedule+0x1066/0x4a20 [ 244.080267][ T9801] ? mark_lock+0x9a/0x350 [ 244.084582][ T9801] ? __pfx___schedule+0x10/0x10 [ 244.089408][ T9801] ? prb_read_valid+0xa9/0xf0 [ 244.094089][ T9801] ? preempt_schedule+0xe1/0xf0 [ 244.098958][ T9801] preempt_schedule_common+0x84/0xd0 [ 244.104245][ T9801] preempt_schedule+0xe1/0xf0 [ 244.108915][ T9801] ? __pfx_preempt_schedule+0x10/0x10 [ 244.114268][ T9801] ? _printk+0xd5/0x120 [ 244.118406][ T9801] ? _printk+0xd5/0x120 [ 244.122545][ T9801] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 244.128781][ T9801] preempt_schedule_thunk+0x1a/0x30 [ 244.133965][ T9801] ? vprintk_emit+0x619/0x770 [ 244.138620][ T9801] ? vprintk_emit+0x68b/0x770 [ 244.143294][ T9801] vprintk_emit+0x690/0x770 [ 244.147815][ T9801] ? __pfx_vprintk_emit+0x10/0x10 [ 244.152816][ T9801] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 244.158703][ T9801] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 244.165063][ T9801] _printk+0xd5/0x120 [ 244.169154][ T9801] ? __nla_validate_parse+0x4f4/0x3090 [ 244.174601][ T9801] ? __pfx__printk+0x10/0x10 [ 244.179175][ T9801] __nla_validate_parse+0x1af9/0x3090 [ 244.184532][ T9801] ? __pfx___nla_validate_parse+0x10/0x10 [ 244.190236][ T9801] ? __lock_acquire+0x1346/0x1fd0 [ 244.195248][ T9801] __nla_parse+0x40/0x60 [ 244.199489][ T9801] ipmr_rtm_getroute+0x254/0xf30 [ 244.204410][ T9801] ? __pfx_ipmr_rtm_getroute+0x10/0x10 [ 244.209856][ T9801] ? __pfx_ipmr_rtm_getroute+0x10/0x10 [ 244.215289][ T9801] rtnetlink_rcv_msg+0x89b/0x1180 [ 244.220286][ T9801] ? rtnetlink_rcv_msg+0x208/0x1180 [ 244.225458][ T9801] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 244.231674][ T9801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.237103][ T9801] ? __local_bh_enable_ip+0x106/0x200 [ 244.242453][ T9801] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 244.248410][ T9801] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.254717][ T9801] ? __local_bh_enable_ip+0x168/0x200 [ 244.260067][ T9801] ? lockdep_hardirqs_on+0x99/0x150 [ 244.265239][ T9801] ? __local_bh_enable_ip+0x168/0x200 [ 244.270586][ T9801] ? dev_hard_start_xmit+0x773/0x7e0 [ 244.275859][ T9801] ? __dev_queue_xmit+0x2d2/0x3d30 [ 244.281046][ T9801] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 244.286741][ T9801] ? __dev_queue_xmit+0x2d2/0x3d30 [ 244.291914][ T9801] ? __dev_queue_xmit+0x16c9/0x3d30 [ 244.297094][ T9801] ? __dev_queue_xmit+0x2d2/0x3d30 [ 244.302220][ T9801] ? ref_tracker_free+0x643/0x7e0 [ 244.307240][ T9801] netlink_rcv_skb+0x1e3/0x430 [ 244.311990][ T9801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.317436][ T9801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.322713][ T9801] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.327983][ T9801] netlink_unicast+0x7ea/0x980 [ 244.332727][ T9801] ? __pfx_netlink_unicast+0x10/0x10 [ 244.337996][ T9801] ? __virt_addr_valid+0x183/0x520 [ 244.343085][ T9801] ? __check_object_size+0x49c/0x900 [ 244.348346][ T9801] ? bpf_lsm_netlink_send+0x9/0x10 [ 244.353434][ T9801] netlink_sendmsg+0x8db/0xcb0 [ 244.358189][ T9801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.363474][ T9801] ? aa_sock_msg_perm+0x91/0x160 [ 244.368404][ T9801] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 244.373711][ T9801] ? security_socket_sendmsg+0x87/0xb0 [ 244.379165][ T9801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.384458][ T9801] __sock_sendmsg+0x221/0x270 [ 244.389118][ T9801] sock_write_iter+0x2dd/0x400 [ 244.393867][ T9801] ? __pfx_sock_write_iter+0x10/0x10 [ 244.399141][ T9801] ? bpf_lsm_file_permission+0x9/0x10 [ 244.404494][ T9801] ? security_file_permission+0x7f/0xa0 [ 244.410021][ T9801] vfs_write+0xa72/0xc90 [ 244.414242][ T9801] ? __pfx_sock_write_iter+0x10/0x10 [ 244.419506][ T9801] ? __pfx_vfs_write+0x10/0x10 [ 244.424250][ T9801] ksys_write+0x1a0/0x2c0 [ 244.428559][ T9801] ? __pfx_ksys_write+0x10/0x10 [ 244.433388][ T9801] ? do_syscall_64+0x100/0x230 [ 244.438140][ T9801] ? do_syscall_64+0xb6/0x230 [ 244.442794][ T9801] do_syscall_64+0xf3/0x230 [ 244.447272][ T9801] ? clear_bhb_loop+0x35/0x90 [ 244.451965][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.457838][ T9801] RIP: 0033:0x7fdf16b75b99 [ 244.462231][ T9801] Code: Unable to access opcode bytes at 0x7fdf16b75b6f. [ 244.469223][ T9801] RSP: 002b:00007fdf17886048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.477785][ T9801] RAX: ffffffffffffffda RBX: 00007fdf16d03fa0 RCX: 00007fdf16b75b99 [ 244.485739][ T9801] RDX: 000000000000fe33 RSI: 0000000020000000 RDI: 0000000000000003 [ 244.493792][ T9801] RBP: 00007fdf178860a0 R08: 0000000000000000 R09: 0000000000000000 [ 244.501740][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.509686][ T9801] R13: 000000000000000b R14: 00007fdf16d03fa0 R15: 00007fff854bbca8 [ 244.517637][ T9801] [ 244.552684][ T9801] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1179'. [ 244.610989][ T9556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.683528][ T9556] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.707639][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.714794][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.728779][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.736025][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.961890][ T9587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.981378][ T9587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 244.992624][ T9587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.015604][ T9587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.039936][ T9556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.117318][ T9556] veth0_vlan: entered promiscuous mode [ 245.132139][ T9556] veth1_vlan: entered promiscuous mode [ 245.171834][ T9587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.193292][ T9556] veth0_macvtap: entered promiscuous mode [ 245.208090][ T9587] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.217371][ T9556] veth1_macvtap: entered promiscuous mode [ 245.236649][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.247901][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.257906][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.268362][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.279109][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.288856][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.296141][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.312562][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.319886][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.331407][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.345628][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.362732][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.374024][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.385466][ T9556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.396713][ T9556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.409706][ T9556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.422143][ T9556] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.433140][ T9556] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.443763][ T9556] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.454549][ T9556] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.568883][ T9556] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 245.615961][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.619738][ T9556] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 245.644564][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.672030][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.684895][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.758105][ T9587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.789672][ T9587] veth0_vlan: entered promiscuous mode [ 245.799832][ T9587] veth1_vlan: entered promiscuous mode [ 245.822294][ T9587] veth0_macvtap: entered promiscuous mode [ 245.831019][ T9587] veth1_macvtap: entered promiscuous mode [ 245.847688][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.858981][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.869263][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.880995][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.891310][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.901904][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.912825][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.926521][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.937862][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.948830][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.959827][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.969932][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.980399][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.990572][ T9587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.001618][ T9587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.012443][ T9587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.026096][ T9587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.036141][ T9587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.045333][ T9587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.054078][ T9587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.087382][ T9587] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 246.110554][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.112814][ T9587] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 246.122820][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.146886][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.155726][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.551099][ T1097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.028678][ T1097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.419575][ T1097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.892281][ T1097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.042277][ T1097] bridge_slave_1: left allmulticast mode [ 249.048200][ T1097] bridge_slave_1: left promiscuous mode [ 249.054184][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.076126][ T1097] bridge_slave_0: left allmulticast mode [ 249.081809][ T1097] bridge_slave_0: left promiscuous mode [ 249.088044][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.320570][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.340877][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.351337][ T1097] bond0 (unregistering): Released all slaves [ 249.589000][ T1097] hsr_slave_0: left promiscuous mode [ 249.597461][ T1097] hsr_slave_1: left promiscuous mode [ 249.603325][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.611322][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.622811][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.631355][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.640980][ T1097] veth1_macvtap: left promiscuous mode [ 249.646657][ T1097] veth0_macvtap: left promiscuous mode [ 249.652407][ T1097] veth1_vlan: left promiscuous mode [ 249.658675][ T1097] veth0_vlan: left promiscuous mode [ 249.882434][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 249.925082][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 250.399921][ T1097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.522162][ T1097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.589738][ T1097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.650829][ T1097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.790111][ T1097] bridge_slave_1: left allmulticast mode [ 251.804323][ T1097] bridge_slave_1: left promiscuous mode [ 251.810050][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.820651][ T1097] bridge_slave_0: left allmulticast mode [ 251.827155][ T1097] bridge_slave_0: left promiscuous mode [ 251.832859][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.981589][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.992276][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.003514][ T1097] bond0 (unregistering): Released all slaves [ 252.246906][ T1097] hsr_slave_0: left promiscuous mode [ 252.265132][ T1097] hsr_slave_1: left promiscuous mode [ 252.275734][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.283373][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.316408][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.324016][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.347616][ T1097] veth1_macvtap: left promiscuous mode [ 252.353175][ T1097] veth0_macvtap: left promiscuous mode [ 252.359156][ T1097] veth1_vlan: left promiscuous mode [ 252.364489][ T1097] veth0_vlan: left promiscuous mode