Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. 2024/04/14 19:39:02 fuzzer started 2024/04/14 19:39:02 dialing manager at 10.128.0.169:30006 [ 53.570536][ T5064] cgroup: Unknown subsys name 'net' [ 53.702291][ T5064] cgroup: Unknown subsys name 'rlimit' 2024/04/14 19:39:04 code coverage: enabled 2024/04/14 19:39:04 comparison tracing: enabled 2024/04/14 19:39:04 extra coverage: enabled 2024/04/14 19:39:04 delay kcov mmap: enabled 2024/04/14 19:39:04 setuid sandbox: enabled 2024/04/14 19:39:04 namespace sandbox: enabled 2024/04/14 19:39:04 Android sandbox: /sys/fs/selinux/policy does not exist 2024/04/14 19:39:04 fault injection: enabled 2024/04/14 19:39:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/14 19:39:04 net packet injection: enabled 2024/04/14 19:39:04 net device setup: enabled 2024/04/14 19:39:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/14 19:39:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/14 19:39:04 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/14 19:39:04 USB emulation: enabled 2024/04/14 19:39:04 hci packet injection: enabled 2024/04/14 19:39:04 wifi device emulation: enabled 2024/04/14 19:39:04 802.15.4 emulation: enabled 2024/04/14 19:39:04 swap file: enabled [ 55.129705][ T5064] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/14 19:39:04 starting 5 executor processes [ 55.924868][ T5080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.939067][ T5080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.946988][ T5080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.979774][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.987776][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.990091][ T5092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.995652][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.004255][ T5092] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.011423][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.024264][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.026776][ T5092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.032152][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.039520][ T5092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.045992][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.053560][ T5092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.067159][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.074439][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.077267][ T5092] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.086365][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.090261][ T5092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.096861][ T5089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.110979][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.118177][ T5091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.118880][ T5094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.132819][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.132891][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.158334][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.166363][ T5094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.176753][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.185982][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.573882][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 56.772954][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.781308][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.788717][ T5076] bridge_slave_0: entered allmulticast mode [ 56.795751][ T5076] bridge_slave_0: entered promiscuous mode [ 56.804861][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 56.852376][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.859672][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.866987][ T5076] bridge_slave_1: entered allmulticast mode [ 56.873848][ T5076] bridge_slave_1: entered promiscuous mode [ 56.952664][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.973576][ T5084] chnl_net:caif_netlink_parms(): no params data found [ 56.991511][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 57.003722][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.096192][ T5076] team0: Port device team_slave_0 added [ 57.123700][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.131394][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.138799][ T5081] bridge_slave_0: entered allmulticast mode [ 57.145975][ T5081] bridge_slave_0: entered promiscuous mode [ 57.153787][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.161347][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.168956][ T5081] bridge_slave_1: entered allmulticast mode [ 57.176230][ T5081] bridge_slave_1: entered promiscuous mode [ 57.191684][ T5076] team0: Port device team_slave_1 added [ 57.210864][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 57.308843][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.319551][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.328211][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.335521][ T5084] bridge_slave_0: entered allmulticast mode [ 57.342212][ T5084] bridge_slave_0: entered promiscuous mode [ 57.350449][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.357645][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.364816][ T5084] bridge_slave_1: entered allmulticast mode [ 57.371838][ T5084] bridge_slave_1: entered promiscuous mode [ 57.379332][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.386748][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.412996][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.451099][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.491790][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.498887][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.525020][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.548020][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.555141][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.564848][ T5077] bridge_slave_0: entered allmulticast mode [ 57.571874][ T5077] bridge_slave_0: entered promiscuous mode [ 57.579647][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.586994][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.594317][ T5077] bridge_slave_1: entered allmulticast mode [ 57.601194][ T5077] bridge_slave_1: entered promiscuous mode [ 57.621279][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.633724][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.687448][ T5081] team0: Port device team_slave_0 added [ 57.746504][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.760079][ T5081] team0: Port device team_slave_1 added [ 57.790451][ T5084] team0: Port device team_slave_0 added [ 57.802856][ T5076] hsr_slave_0: entered promiscuous mode [ 57.809361][ T5076] hsr_slave_1: entered promiscuous mode [ 57.818499][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.826293][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.833527][ T5078] bridge_slave_0: entered allmulticast mode [ 57.841195][ T5078] bridge_slave_0: entered promiscuous mode [ 57.848921][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.856498][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.863744][ T5078] bridge_slave_1: entered allmulticast mode [ 57.870856][ T5078] bridge_slave_1: entered promiscuous mode [ 57.880793][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.901189][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.908523][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.934855][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.948934][ T5084] team0: Port device team_slave_1 added [ 58.003814][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.010978][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.037990][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.080659][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.087686][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.114096][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.116591][ T4466] Bluetooth: hci3: command tx timeout [ 58.132982][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.159204][ T5077] team0: Port device team_slave_0 added [ 58.176177][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.183145][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.195541][ T4466] Bluetooth: hci4: command tx timeout [ 58.212079][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.231466][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.265064][ T5077] team0: Port device team_slave_1 added [ 58.276312][ T5094] Bluetooth: hci1: command tx timeout [ 58.276330][ T5085] Bluetooth: hci2: command tx timeout [ 58.285387][ T4466] Bluetooth: hci0: command tx timeout [ 58.311449][ T5078] team0: Port device team_slave_0 added [ 58.366445][ T5084] hsr_slave_0: entered promiscuous mode [ 58.372675][ T5084] hsr_slave_1: entered promiscuous mode [ 58.379869][ T5084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.387897][ T5084] Cannot create hsr debugfs directory [ 58.395084][ T5078] team0: Port device team_slave_1 added [ 58.417503][ T5081] hsr_slave_0: entered promiscuous mode [ 58.423829][ T5081] hsr_slave_1: entered promiscuous mode [ 58.429979][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.437922][ T5081] Cannot create hsr debugfs directory [ 58.448181][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.455148][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.481589][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.493736][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.500780][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.527065][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.564486][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.571616][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.597900][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.643608][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.650829][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.677031][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.794432][ T5077] hsr_slave_0: entered promiscuous mode [ 58.801475][ T5077] hsr_slave_1: entered promiscuous mode [ 58.807744][ T5077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.815538][ T5077] Cannot create hsr debugfs directory [ 58.915446][ T5078] hsr_slave_0: entered promiscuous mode [ 58.922614][ T5078] hsr_slave_1: entered promiscuous mode [ 58.929367][ T5078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.937075][ T5078] Cannot create hsr debugfs directory [ 59.125085][ T5076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.136301][ T5076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.148056][ T5076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.178538][ T5076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.272953][ T5081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.285182][ T5081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.303962][ T5081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.314970][ T5081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.432829][ T5084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.442713][ T5084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.454159][ T5084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.470178][ T5084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.551328][ T5078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.574591][ T5078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.604108][ T5078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.649234][ T5078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.686377][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.697573][ T5077] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.714913][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.734258][ T5077] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.768516][ T5077] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.779645][ T5077] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.818041][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.826994][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.872027][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.879364][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.914344][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.921488][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.933362][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.940540][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.979898][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.987088][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.124291][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.194884][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.207448][ T4466] Bluetooth: hci3: command tx timeout [ 60.242699][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.274193][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.287369][ T4466] Bluetooth: hci4: command tx timeout [ 60.313809][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.321246][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.333010][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.340349][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.356566][ T4466] Bluetooth: hci1: command tx timeout [ 60.359598][ T5094] Bluetooth: hci0: command tx timeout [ 60.361984][ T5085] Bluetooth: hci2: command tx timeout [ 60.392176][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.440444][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.509924][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.517170][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.533245][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.540417][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.556922][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.564052][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.590806][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.597982][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.632829][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.657204][ T5084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.710538][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.746946][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.963768][ T5076] veth0_vlan: entered promiscuous mode [ 60.988700][ T5081] veth0_vlan: entered promiscuous mode [ 60.999761][ T5076] veth1_vlan: entered promiscuous mode [ 61.023636][ T5081] veth1_vlan: entered promiscuous mode [ 61.106131][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.134488][ T5076] veth0_macvtap: entered promiscuous mode [ 61.176625][ T5076] veth1_macvtap: entered promiscuous mode [ 61.214384][ T5081] veth0_macvtap: entered promiscuous mode [ 61.227565][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.241649][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.255191][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.273980][ T5081] veth1_macvtap: entered promiscuous mode [ 61.304872][ T5076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.314818][ T5076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.327931][ T5076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.337411][ T5076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.364710][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.376159][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.388386][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.403962][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.416981][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.433850][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.451345][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.501430][ T5084] veth0_vlan: entered promiscuous mode [ 61.518046][ T5081] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.527188][ T5081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.536546][ T5081] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.546688][ T5081] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.604681][ T5084] veth1_vlan: entered promiscuous mode [ 61.672608][ T5128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.691101][ T5128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.756727][ T5077] veth0_vlan: entered promiscuous mode [ 61.803326][ T5078] veth0_vlan: entered promiscuous mode [ 61.820804][ T5084] veth0_macvtap: entered promiscuous mode [ 61.856003][ T5077] veth1_vlan: entered promiscuous mode [ 61.866347][ T5084] veth1_macvtap: entered promiscuous mode [ 61.888411][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.890091][ T5078] veth1_vlan: entered promiscuous mode [ 61.899921][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.948753][ T5132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.997534][ T5132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.014555][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.025561][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.036472][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.052810][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.064756][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.077398][ T5077] veth0_macvtap: entered promiscuous mode 19:39:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) [ 62.110371][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.122726][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.133061][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.144433][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.168075][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_1 19:39:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0}, 0x0) [ 62.209759][ C0] hrtimer: interrupt took 28338 ns [ 62.221114][ T5084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.234640][ T5084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.243572][ T5084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.276111][ T5085] Bluetooth: hci3: command tx timeout [ 62.282411][ T5164] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 62.304191][ T5084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 19:39:11 executing program 0: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000022ebcbbc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x16, 0x0, 0xfff, 0x5}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) [ 62.321732][ T5077] veth1_macvtap: entered promiscuous mode [ 62.346445][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.350876][ T5078] veth0_macvtap: entered promiscuous mode [ 62.361666][ T5085] Bluetooth: hci4: command tx timeout [ 62.390023][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.423354][ T5078] veth1_macvtap: entered promiscuous mode [ 62.436497][ T5085] Bluetooth: hci0: command tx timeout [ 62.442212][ T5085] Bluetooth: hci2: command tx timeout [ 62.446223][ T4466] Bluetooth: hci1: command tx timeout [ 62.454733][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.465632][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:39:12 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) [ 62.483295][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.493941][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.504977][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.517661][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.529655][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 19:39:12 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="db"}, 0x48) [ 62.628287][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.651979][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.664978][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 19:39:12 executing program 0: r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18, 0x68000000}, 0x0) [ 62.678078][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.689602][ T5077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.700882][ T5077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.726833][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.772495][ T5077] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.802375][ T5077] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.819728][ T5077] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.839064][ T5077] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 19:39:12 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x6a) [ 62.885047][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.956814][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.985405][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.006455][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.028704][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 19:39:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0xc000, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 63.064957][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.087494][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.126865][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.147165][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.220570][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.254749][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.265505][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.276684][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.287413][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.311490][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.326548][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.337818][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.338230][ T5094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.354368][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.364422][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 19:39:12 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) [ 63.374419][ T5094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.387929][ T5094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.403719][ T5094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.413854][ T5094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 19:39:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000cf0000020000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 19:39:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00', r5}, 0x10) write$cgroup_subtree(r4, 0x0, 0x32600) [ 63.601477][ T5081] syz-executor.1 (5081) used greatest stack depth: 18680 bytes left [ 63.622715][ T5078] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.628206][ T5111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.633942][ T5078] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 19:39:13 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b80)={&(0x7f0000000040)='scsi_dispatch_cmd_start\x00', r3}, 0x10) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) ioctl$SIOCSIFHWADDR(r0, 0x40305829, &(0x7f0000000540)={'\x00', @link_local}) [ 63.656401][ T5111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.657838][ T5078] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.672998][ T5078] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 19:39:13 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}}, 0x0}, 0x90) [ 63.741988][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:39:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) close(0xffffffffffffffff) [ 63.859504][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:39:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1}, 0x48) [ 63.950351][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.976543][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.991410][ T5130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.006219][ T5130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.061871][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:39:13 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35df8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c000000005f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe75303000000651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e5ff7f000000000000a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbee135877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc55c73c303e383cdf8ef3f6d6265f05ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4c69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c630000000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r2, &(0x7f0000001c80)}, 0x20) [ 64.171337][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:39:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9b, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r5, 0x8914, 0x20000000) [ 64.253747][ T782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.291014][ T782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:39:13 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000010c0)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) [ 64.389472][ T5202] macvtap0: entered promiscuous mode 19:39:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1eb095040016000000008500"], 0x0}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000a) [ 64.413113][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.435745][ T4466] Bluetooth: hci4: command tx timeout [ 64.446026][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:39:13 executing program 4: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b2c7c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c9944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20008044) [ 64.515653][ T4466] Bluetooth: hci1: command tx timeout [ 64.527067][ T4466] Bluetooth: hci2: command tx timeout [ 64.527078][ T5094] Bluetooth: hci0: command tx timeout 19:39:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='ext4_da_reserve_space\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) 19:39:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19:39:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x84062421, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 19:39:14 executing program 0: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xe5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f0000000240)=@abs, 0x6e, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x20021100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) [ 64.714400][ T5215] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! 19:39:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=0x100000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000200)) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xffe6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40086602, &(0x7f0000000140)) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x1b) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) [ 64.840813][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.867028][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:39:14 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 64.950626][ T50] bridge_slave_1: left allmulticast mode [ 64.965049][ T50] bridge_slave_1: left promiscuous mode [ 65.011406][ T50] bridge0: port 2(bridge_slave_1) entered disabled state 19:39:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x45, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086607, &(0x7f0000000440)) [ 65.059188][ T50] bridge_slave_0: left allmulticast mode [ 65.078035][ T50] bridge_slave_0: left promiscuous mode [ 65.101578][ T50] bridge0: port 1(bridge_slave_0) entered disabled state 19:39:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 19:39:14 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x23000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe80000000000000875a65969ff57b00000000000000000000000000ac1414"], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) [ 65.363686][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 19:39:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x1801200, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) [ 65.424797][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.453353][ T50] bond0 (unregistering): Released all slaves [ 65.486660][ T4466] Bluetooth: hci3: command tx timeout [ 65.540904][ T5181] chnl_net:caif_netlink_parms(): no params data found 19:39:15 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8902, 0x2000fcc6) 19:39:15 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 19:39:15 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000480)="1f6c00c2231bc4cb50017d870800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19:39:15 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:39:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x3, 0x5}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) 19:39:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001400)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000001f80)=""/226, 0x1a, 0xe2, 0xf}, 0x20) 19:39:15 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000041d8500000007000000650000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='jbd2_checkpoint_stats\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x40086607, 0x20001412) 19:39:15 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x100}, 0x0) 19:39:15 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002540)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c506cc7c3bf6ba0b6cef5f5ed0dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eeec4309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5a4318e1b29e697f4b1f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000010000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd9e95356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e3fedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209260a07682c4e14e3a83558df6f3fc97f1730a136bdee074639ae9507a25d941b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda34536020076eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485c6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b34ffff31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852ca4e031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab9789bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688000c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a0ba17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc8400003fa490b043d5c7d26e67eeb112c5a1b9786b4ff71e085b5086eb85831d1b864ebf3cd889c73f4a9247afd58a81853a3baf6a38de2a73cfde16709dff876740ad3300e4819bb9283e34df128e8e7f7803d941f3a34d92dfc41be4021595a92a283d4f7e58a00b5cec000000000000000000000000000000eaec2078188acb895ccecc4b9e9b1c60eb14c1b1ada901cb98fd3e7e40b38b2580900b5f9790d84d48a3cb18f3077f41e3e9858cfbb11fe69a4cb4002b21fb350d827a52936efa2cd00b32eb6608fb4796fbb7900699ab0b2e3e0c03626901fc4af0f049c56b3994cc82bf527501edec06dfd41fb684ab001f67ab589126fc35bf8f8a95b9897ceb48bcfe08c89b5d1567396064687eda9b20469a8bc8dbfa586770168b"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') [ 66.078619][ T5257] syz-executor.0[5257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! 19:39:15 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:39:15 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:39:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x23000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe80000000000000875a65969ff57b00000000000000000000000000ac1414"], 0xfe1b) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) 19:39:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x6, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 19:39:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 19:39:15 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:39:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000a9000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) [ 66.078714][ T5257] syz-executor.0[5257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.629404][ T5285] [ 66.646314][ T5285] ============================= [ 66.651162][ T5285] WARNING: suspicious RCU usage [ 66.656115][ T5285] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted [ 66.662781][ T5285] ----------------------------- [ 66.667690][ T5285] kernel/sched/core.c:5982 Illegal context switch in RCU-bh read-side critical section! [ 66.677430][ T5285] [ 66.677430][ T5285] other info that might help us debug this: [ 66.677430][ T5285] [ 66.688622][ T5285] [ 66.688622][ T5285] rcu_scheduler_active = 2, debug_locks = 1 [ 66.697149][ T5285] 1 lock held by syz-executor.4/5285: [ 66.702508][ T5285] #0: ffffffff94511910 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xacf/0x2130 [ 66.712012][ T5285] [ 66.712012][ T5285] stack backtrace: [ 66.717942][ T5285] CPU: 1 PID: 5285 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 66.727902][ T5285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 66.738010][ T5285] Call Trace: [ 66.741278][ T5285] [ 66.744197][ T5285] dump_stack_lvl+0x1e7/0x2e0 [ 66.748875][ T5285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.754060][ T5285] ? __pfx__printk+0x10/0x10 [ 66.758629][ T5285] ? validate_chain+0x11b/0x58e0 [ 66.763563][ T5285] lockdep_rcu_suspicious+0x221/0x340 [ 66.768920][ T5285] __schedule+0x23b/0x4a20 [ 66.773329][ T5285] ? rcu_is_watching+0x15/0xb0 [ 66.778099][ T5285] ? rcu_is_watching+0x15/0xb0 [ 66.782847][ T5285] ? __pfx___schedule+0x10/0x10 [ 66.787692][ T5285] ? lock_release+0xbf/0x9d0 [ 66.792351][ T5285] ? sock_hash_delete_elem+0x1a6/0x300 [ 66.797822][ T5285] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 66.803615][ T5285] ? sock_hash_delete_elem+0x1a6/0x300 [ 66.809055][ T5285] ? do_raw_spin_unlock+0x13c/0x8b0 [ 66.814327][ T5285] preempt_schedule_notrace+0x100/0x140 [ 66.819861][ T5285] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 66.826244][ T5285] ? bpf_trace_run2+0x2c3/0x420 [ 66.831177][ T5285] ? bpf_trace_run2+0x114/0x420 [ 66.836013][ T5285] ? __pfx_bpf_trace_run2+0x10/0x10 [ 66.841214][ T5285] preempt_schedule_notrace_thunk+0x1a/0x30 [ 66.847131][ T5285] ? lock_release+0xb0/0x9d0 [ 66.851704][ T5285] trace_contention_end+0x108/0x120 [ 66.856889][ T5285] __pv_queued_spin_lock_slowpath+0x939/0xc60 [ 66.862943][ T5285] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 66.869522][ T5285] ? lockdep_unlock+0x16a/0x300 [ 66.874357][ T5285] ? __pfx_lockdep_unlock+0x10/0x10 [ 66.879550][ T5285] queued_spin_lock_slowpath+0x42/0x50 [ 66.885082][ T5285] lockdep_lock+0x1b0/0x2b0 [ 66.889571][ T5285] ? __pfx_lockdep_lock+0x10/0x10 [ 66.894577][ T5285] ? register_lock_class+0x674/0x980 [ 66.899935][ T5285] ? __pfx_register_lock_class+0x10/0x10 [ 66.905553][ T5285] graph_lock+0x5/0x60 [ 66.909625][ T5285] mark_lock+0x15c/0x350 [ 66.913851][ T5285] ? __pfx_validate_chain+0x10/0x10 [ 66.919153][ T5285] __lock_acquire+0x112d/0x1fd0 [ 66.923990][ T5285] lock_acquire+0x1e4/0x530 [ 66.928472][ T5285] ? bp_constraints_lock+0xdd/0x1c0 [ 66.933653][ T5285] ? __pfx_lock_acquire+0x10/0x10 [ 66.938656][ T5285] ? __pfx___might_resched+0x10/0x10 [ 66.943921][ T5285] ? __lock_acquire+0x1346/0x1fd0 [ 66.948930][ T5285] percpu_down_write+0x57/0x320 [ 66.953760][ T5285] ? bp_constraints_lock+0xdd/0x1c0 [ 66.958965][ T5285] bp_constraints_lock+0xdd/0x1c0 [ 66.963974][ T5285] register_perf_hw_breakpoint+0x90/0x250 [ 66.969677][ T5285] ? __pfx_register_perf_hw_breakpoint+0x10/0x10 [ 66.976167][ T5285] ? __pfx_lock_release+0x10/0x10 [ 66.981177][ T5285] hw_breakpoint_event_init+0x8d/0x110 [ 66.986619][ T5285] perf_try_init_event+0x139/0x3f0 [ 66.991726][ T5285] ? perf_event_alloc+0xee1/0x2130 [ 66.996832][ T5285] perf_event_alloc+0xeed/0x2130 [ 67.001842][ T5285] ? perf_event_alloc+0xacf/0x2130 [ 67.006962][ T5285] __se_sys_perf_event_open+0x7f9/0x38d0 [ 67.012597][ T5285] ? __pfx_lock_release+0x10/0x10 [ 67.017604][ T5285] ? bpf_raw_tracepoint_open+0x1b1/0x210 [ 67.023221][ T5285] ? __might_fault+0xaa/0x120 [ 67.027880][ T5285] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 67.033938][ T5285] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.040245][ T5285] ? do_syscall_64+0x10a/0x240 [ 67.044992][ T5285] ? __x64_sys_perf_event_open+0x20/0xc0 [ 67.050609][ T5285] do_syscall_64+0xfb/0x240 [ 67.055111][ T5285] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 67.060988][ T5285] RIP: 0033:0x7f1ad6e7de69 [ 67.065389][ T5285] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 67.085068][ T5285] RSP: 002b:00007f1ad7c780c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 67.093470][ T5285] RAX: ffffffffffffffda RBX: 00007f1ad6fabf80 RCX: 00007f1ad6e7de69 [ 67.101562][ T5285] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 67.109563][ T5285] RBP: 00007f1ad6eca47a R08: 0000000000000000 R09: 0000000000000000 [ 67.117628][ T5285] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 67.125608][ T5285] R13: 000000000000000b R14: 00007f1ad6fabf80 R15: 00007fff0dbffce8 [ 67.133680][ T5285] [ 67.137278][ T5285] [ 67.139594][ T5285] ============================= [ 67.144418][ T5285] WARNING: suspicious RCU usage [ 67.150470][ T5285] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted [ 67.157274][ T5285] ----------------------------- [ 67.162111][ T5285] kernel/sched/core.c:5982 Illegal context switch in RCU-sched read-side critical section! [ 67.172252][ T5285] [ 67.172252][ T5285] other info that might help us debug this: [ 67.172252][ T5285] [ 67.182533][ T5285] [ 67.182533][ T5285] rcu_scheduler_active = 2, debug_locks = 1 [ 67.191176][ T5285] 1 lock held by syz-executor.4/5285: [ 67.197270][ T5285] #0: ffffffff94511910 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xacf/0x2130 [ 67.206753][ T5285] [ 67.206753][ T5285] stack backtrace: [ 67.212629][ T5285] CPU: 1 PID: 5285 Comm: syz-executor.4 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 67.222603][ T5285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 67.232651][ T5285] Call Trace: [ 67.235919][ T5285] [ 67.238841][ T5285] dump_stack_lvl+0x1e7/0x2e0 [ 67.243609][ T5285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.248818][ T5285] ? __pfx__printk+0x10/0x10 [ 67.253402][ T5285] ? validate_chain+0x11b/0x58e0 [ 67.258419][ T5285] lockdep_rcu_suspicious+0x221/0x340 [ 67.263904][ T5285] __schedule+0x28a/0x4a20 [ 67.268509][ T5285] ? rcu_is_watching+0x15/0xb0 [ 67.273269][ T5285] ? rcu_is_watching+0x15/0xb0 [ 67.278022][ T5285] ? __pfx___schedule+0x10/0x10 [ 67.282860][ T5285] ? lock_release+0xbf/0x9d0 [ 67.287433][ T5285] ? sock_hash_delete_elem+0x1a6/0x300 [ 67.293013][ T5285] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 67.298731][ T5285] ? sock_hash_delete_elem+0x1a6/0x300 [ 67.304190][ T5285] ? do_raw_spin_unlock+0x13c/0x8b0 [ 67.309415][ T5285] preempt_schedule_notrace+0x100/0x140 [ 67.314945][ T5285] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 67.321006][ T5285] ? bpf_trace_run2+0x2c3/0x420 [ 67.325841][ T5285] ? bpf_trace_run2+0x114/0x420 [ 67.330688][ T5285] ? __pfx_bpf_trace_run2+0x10/0x10 [ 67.335955][ T5285] preempt_schedule_notrace_thunk+0x1a/0x30 [ 67.341832][ T5285] ? lock_release+0xb0/0x9d0 [ 67.346406][ T5285] trace_contention_end+0x108/0x120 [ 67.351608][ T5285] __pv_queued_spin_lock_slowpath+0x939/0xc60 [ 67.357775][ T5285] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 67.364370][ T5285] ? lockdep_unlock+0x16a/0x300 [ 67.369223][ T5285] ? __pfx_lockdep_unlock+0x10/0x10 [ 67.374433][ T5285] queued_spin_lock_slowpath+0x42/0x50 [ 67.379993][ T5285] lockdep_lock+0x1b0/0x2b0 [ 67.384510][ T5285] ? __pfx_lockdep_lock+0x10/0x10 [ 67.389542][ T5285] ? register_lock_class+0x674/0x980 [ 67.394852][ T5285] ? __pfx_register_lock_class+0x10/0x10 [ 67.400491][ T5285] graph_lock+0x5/0x60 [ 67.404562][ T5285] mark_lock+0x15c/0x350 [ 67.408789][ T5285] ? __pfx_validate_chain+0x10/0x10 [ 67.414004][ T5285] __lock_acquire+0x112d/0x1fd0 [ 67.418845][ T5285] lock_acquire+0x1e4/0x530 [ 67.423345][ T5285] ? bp_constraints_lock+0xdd/0x1c0 [ 67.428532][ T5285] ? __pfx_lock_acquire+0x10/0x10 [ 67.433541][ T5285] ? __pfx___might_resched+0x10/0x10 [ 67.438820][ T5285] ? __lock_acquire+0x1346/0x1fd0 [ 67.443961][ T5285] percpu_down_write+0x57/0x320 [ 67.448811][ T5285] ? bp_constraints_lock+0xdd/0x1c0 [ 67.454021][ T5285] bp_constraints_lock+0xdd/0x1c0 [ 67.459099][ T5285] register_perf_hw_breakpoint+0x90/0x250 [ 67.464809][ T5285] ? __pfx_register_perf_hw_breakpoint+0x10/0x10 [ 67.471127][ T5285] ? __pfx_lock_release+0x10/0x10 [ 67.476139][ T5285] hw_breakpoint_event_init+0x8d/0x110 [ 67.481583][ T5285] perf_try_init_event+0x139/0x3f0 [ 67.486783][ T5285] ? perf_event_alloc+0xee1/0x2130 [ 67.491913][ T5285] perf_event_alloc+0xeed/0x2130 [ 67.496861][ T5285] ? perf_event_alloc+0xacf/0x2130 [ 67.501961][ T5285] __se_sys_perf_event_open+0x7f9/0x38d0 [ 67.507691][ T5285] ? __pfx_lock_release+0x10/0x10 [ 67.512699][ T5285] ? bpf_raw_tracepoint_open+0x1b1/0x210 [ 67.518311][ T5285] ? __might_fault+0xaa/0x120 [ 67.522971][ T5285] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 67.529036][ T5285] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.535347][ T5285] ? do_syscall_64+0x10a/0x240 [ 67.540103][ T5285] ? __x64_sys_perf_event_open+0x20/0xc0 [ 67.545751][ T5285] do_syscall_64+0xfb/0x240 [ 67.550238][ T5285] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 67.556119][ T5285] RIP: 0033:0x7f1ad6e7de69 [ 67.560515][ T5285] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 67.580100][ T5285] RSP: 002b:00007f1ad7c780c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 67.588494][ T5285] RAX: ffffffffffffffda RBX: 00007f1ad6fabf80 RCX: 00007f1ad6e7de69 [ 67.596538][ T5285] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000020000180 [ 67.604491][ T5285] RBP: 00007f1ad6eca47a R08: 0000000000000000 R09: 0000000000000000 [ 67.612533][ T5285] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 67.620506][ T5285] R13: 000000000000000b R14: 00007f1ad6fabf80 R15: 00007fff0dbffce8 [ 67.628493][ T5285] [ 67.632140][ T5076] [ 67.634458][ T5076] ============================= [ 67.639682][ T5076] WARNING: suspicious RCU usage [ 67.644512][ T5076] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted [ 67.651192][ T5076] ----------------------------- [ 67.657127][ T5076] kernel/sched/core.c:10149 Illegal context switch in RCU-bh read-side critical section! [ 67.667358][ T5076] [ 67.667358][ T5076] other info that might help us debug this: [ 67.667358][ T5076] [ 67.677690][ T5076] [ 67.677690][ T5076] rcu_scheduler_active = 2, debug_locks = 1 [ 67.685745][ T5076] no locks held by syz-executor.0/5076. [ 67.691273][ T5076] [ 67.691273][ T5076] stack backtrace: [ 67.697182][ T5076] CPU: 1 PID: 5076 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 67.707219][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 67.717338][ T5076] Call Trace: [ 67.720610][ T5076] [ 67.723560][ T5076] dump_stack_lvl+0x1e7/0x2e0 [ 67.728310][ T5076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.733488][ T5076] ? __pfx__printk+0x10/0x10 [ 67.738057][ T5076] ? print_tainted+0x14a/0x170 [ 67.742821][ T5076] lockdep_rcu_suspicious+0x221/0x340 [ 67.748261][ T5076] __might_resched+0xda/0x780 [ 67.752917][ T5076] ? __pfx_debug_object_free+0x10/0x10 [ 67.758357][ T5076] ? __pfx___might_resched+0x10/0x10 [ 67.763619][ T5076] ? __asan_memset+0x23/0x50 [ 67.768192][ T5076] ? __hrtimer_init+0x170/0x250 [ 67.773034][ T5076] ? hrtimer_nanosleep+0x387/0x470 [ 67.778140][ T5076] __might_fault+0x72/0x120 [ 67.782623][ T5076] __rseq_handle_notify_resume+0x120/0x1490 [ 67.788503][ T5076] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 67.794816][ T5076] ? rcu_is_watching+0x15/0xb0 [ 67.799560][ T5076] syscall_exit_to_user_mode+0x114/0x360 [ 67.805172][ T5076] do_syscall_64+0x10a/0x240 [ 67.809744][ T5076] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 67.815633][ T5076] RIP: 0033:0x7f2442aa9275 [ 67.820042][ T5076] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 67.839814][ T5076] RSP: 002b:00007ffffa28ea60 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 67.848208][ T5076] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 00007f2442aa9275 [ 67.856158][ T5076] RDX: 00007ffffa28eaa0 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.864116][ T5076] RBP: 00007ffffa28eb2c R08: 0000000000000000 R09: 00007f24438b20b0 [ 67.872071][ T5076] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 67.880023][ T5076] R13: 00000000000103d7 R14: 0000000000010395 R15: 000000000000000b [ 67.887978][ T5076] [ 67.892049][ T5286] [ 67.894366][ T5286] ============================= [ 67.899810][ T5286] WARNING: suspicious RCU usage [ 67.904642][ T5286] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted [ 67.911745][ T5286] ----------------------------- [ 67.916918][ T5286] kernel/sched/core.c:10149 Illegal context switch in RCU-sched read-side critical section! [ 67.926980][ T5286] [ 67.926980][ T5286] other info that might help us debug this: [ 67.926980][ T5286] [ 67.937220][ T5286] [ 67.937220][ T5286] rcu_scheduler_active = 2, debug_locks = 1 [ 67.945282][ T5286] no locks held by syz-executor.2/5286. [ 67.950888][ T5286] [ 67.950888][ T5286] stack backtrace: [ 67.956794][ T5286] CPU: 1 PID: 5286 Comm: syz-executor.2 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 67.966763][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 67.976885][ T5286] Call Trace: [ 67.980164][ T5286] [ 67.983080][ T5286] dump_stack_lvl+0x1e7/0x2e0 [ 67.987757][ T5286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.992935][ T5286] ? __pfx__printk+0x10/0x10 [ 67.997537][ T5286] ? print_tainted+0x14a/0x170 [ 68.002288][ T5286] lockdep_rcu_suspicious+0x221/0x340 [ 68.007643][ T5286] __might_resched+0x129/0x780 [ 68.012477][ T5286] ? __pfx_lock_release+0x10/0x10 [ 68.017481][ T5286] ? __perf_event_task_sched_in+0xee/0x1310 [ 68.023367][ T5286] ? __pfx___perf_event_task_sched_in+0x10/0x10 [ 68.029588][ T5286] ? __pfx___might_resched+0x10/0x10 [ 68.034851][ T5286] ? do_raw_spin_unlock+0x13c/0x8b0 [ 68.040042][ T5286] ? rcu_is_watching+0x15/0xb0 [ 68.044786][ T5286] __might_fault+0x72/0x120 [ 68.049268][ T5286] schedule_tail+0x6c/0xb0 [ 68.053691][ T5286] ret_from_fork+0x24/0x80 [ 68.058096][ T5286] ret_from_fork_asm+0x1a/0x30 [ 68.062847][ T5286]