last executing test programs: 1m51.100988096s ago: executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet={0x6, @link_local}, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b603540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 1m37.917094706s ago: executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet={0x6, @link_local}, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b603540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 1m25.529165826s ago: executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet={0x6, @link_local}, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b603540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 1m12.649424888s ago: executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xf}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031000590400000000002f1eafbcf706e1050000004305000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 1m12.534903024s ago: executing program 4: r0 = socket$kcm(0x2, 0x200000000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff63, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018024f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m12.270583356s ago: executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xd, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000000400), 0x2, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000002b00), 0x2, 0x0) close(r8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b757517396ecf7e6613394881e020000020000008500000086000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3e2098e347763e93}, 0x48) 1m12.095418274s ago: executing program 4: r0 = socket$kcm(0xa, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200500, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000400), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090124fc602f6e35400400018025581d00d1bd00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 1m11.926234008s ago: executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet={0x6, @link_local}, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b603540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 46.904698693s ago: executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet={0x6, @link_local}, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b603540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 45.485276425s ago: executing program 4: r0 = socket$kcm(0xa, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200500, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000400), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090124fc602f6e35400400018025581d00d1bd00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 38.572290344s ago: executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800e2d61b1800000000800000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0000180000000000"], &(0x7f0000000180)=""/238, 0x1a, 0xee, 0xa}, 0x20) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00'}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)={r5}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000025e, &(0x7f0000000500)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=r0, @ANYRESHEX=r7, @ANYRESHEX=r2], &(0x7f0000000080)='syzkaller\x00', 0x818, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x90) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x10810, 0x0, 0x0, 0x0, 0x0, 0xa11}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup(r10, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r11, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 38.039388036s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000720d0000000000003018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000039000517d25a80648c63940d0324fc600b003540", 0x18}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 37.876999263s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, 0x0, 0xfc00}, 0x20040010) 37.750745603s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x7, 0x9, 0x7}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r1, 0x58, &(0x7f00000003c0)}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x3a) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2}, 0x10) socketpair(0x2, 0x3, 0xff, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x275a, 0x0) 37.569843863s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020a500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000200), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) 21.461065649s ago: executing program 1: r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet={0x6, @link_local}, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b603540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 17.641131365s ago: executing program 4: r0 = socket$kcm(0xa, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200500, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000400), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) sendmsg$tipc(r2, 0x0, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090124fc602f6e35400400018025581d00d1bd00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 12.186808968s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020a500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000200), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r1, r0, 0x5}, 0x10) 5.791396171s ago: executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018000f0", 0x2a}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a007a00053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.653831257s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001805000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000b90600008500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000440)='GPL\x00'}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffe9}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x58, &(0x7f0000000300)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000040)=0xfbc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0xfdef) 4.906451733s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000380)="b9ff03076804268c989e14f088a847e089061416e0885a0400000000000081", 0x0, 0x40000001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.807162216s ago: executing program 2: r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0], 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r0, r1, 0x0, 0x9, &(0x7f0000000040)='sys_exit\x00'}, 0x30) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_shrink_slab_end\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000003c0)=0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='ext4_ext_convert_to_initialized_enter\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x79}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x14}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="27010000000105000000002fd0a7d0884ac82b9200008100", 0x18}, {&(0x7f0000000240)="2f0f0806962269fa2ec79c385fe1a5f5ffffffffffffacb1fff7", 0x1a}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e7e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c2200af6c3784a1975fa657d05003a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f68d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b604e88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6f745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd80000f294fde7549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a07667ef515898f0f7dfd3fc198092af3265c5df377e66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c17638a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d734f6b6450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1807], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) sendmsg(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="daf8d64406", 0x5}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) 1.662929886s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e051800dd"], 0xffdd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x408) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xffe6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc020660b, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0x34100) 1.2333313s ago: executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="660a00000000000061118c100001000085000000c90000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xb9f, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10100, 0x0, 0x400, 0x7, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x32, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x1c008}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r2, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000140)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001480)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f00000011c0)=""/213, 0xd5}], 0x4, &(0x7f0000002480)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x40000060) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfe33) 1.203346156s ago: executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xf}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031000590400000000002f1eafbcf706e1050000004305000f1102ee1680ca82", 0x21}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33311e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) 1.116753767s ago: executing program 2: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}]}, 0x0}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x48, 0xfffffffffffffffe}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0xfffffffc}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r1, r2, 0x4, r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.030932581s ago: executing program 0: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) gettid() socket$kcm(0x10, 0x0, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x2}, {0x1, 0x1}, {0x5}, {0x8, 0x1}, {0x9}]}]}, {0x0, [0x0]}}, &(0x7f0000000800)=""/4096, 0x4f, 0x1000, 0x0, 0x7}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0x3, &(0x7f00000006c0)=@raw=[@jmp={0x5, 0x0, 0x0, 0xb, 0x2, 0xffffffffffffffe0}, @map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000700)='syzkaller\x00', 0x7, 0x2b, &(0x7f0000000740)=""/43, 0x41000, 0x39, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001840)={0x3, 0xe, 0x5, 0x7f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001880)=[r0, r0, r0, r0], &(0x7f00000018c0)=[{0x1, 0x5, 0x1}, {0x5, 0x5}, {0x0, 0x3, 0x9, 0x5}, {0x2, 0x4, 0x9, 0x7}, {0x3, 0x5, 0xd, 0x1}], 0x10, 0x7}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6a0ac4ff080000007110a0000019ed9df2216f8c7600e87725acce42a10000b5"], &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = socket$kcm(0x10, 0x2, 0x0) unlink(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90224fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xb00, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x2e, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) 152.786265ms ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc}, {0x4}, {}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0xd3, &(0x7f0000000600)=""/211}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800f4c300000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000000)=0xce) write$cgroup_int(r1, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000e500fdff0000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x90) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfcc1, 0x10, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x2d, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1200}, 0x0) 113.593791ms ago: executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x2e}], 0x1}, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='fsi_master_write\x00'}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800180081000200060004000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x4) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r5}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000000), 0x404, r6, 0x0, 0x1ba8847c99}, 0x38) kernel console output (not intermixed with test programs): evice bond0 [ 181.462585][ T5130] Bluetooth: hci4: command 0x0406 tx timeout [ 181.470892][ T4496] Bluetooth: hci3: command 0x0406 tx timeout [ 181.527050][ T8855] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.599035][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.606260][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.618076][ T5126] Bluetooth: hci2: command 0x0406 tx timeout [ 181.624127][ T5119] Bluetooth: hci0: command 0x0406 tx timeout [ 181.625943][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.637296][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.792571][ T8855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.825828][ T8855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.234487][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.326432][ T8855] veth0_vlan: entered promiscuous mode [ 182.348615][ T9070] FAULT_INJECTION: forcing a failure. [ 182.348615][ T9070] name failslab, interval 1, probability 0, space 0, times 0 [ 182.380904][ T9070] CPU: 1 PID: 9070 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 [ 182.381441][ T8855] veth1_vlan: entered promiscuous mode [ 182.391422][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 182.391438][ T9070] Call Trace: [ 182.391447][ T9070] [ 182.391454][ T9070] dump_stack_lvl+0x241/0x360 [ 182.391482][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.423183][ T9070] ? __pfx__printk+0x10/0x10 [ 182.427815][ T9070] should_fail_ex+0x3b0/0x4e0 [ 182.432533][ T9070] ? security_file_alloc+0x28/0x130 [ 182.437755][ T9070] should_failslab+0x9/0x20 [ 182.442299][ T9070] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 182.447802][ T9070] security_file_alloc+0x28/0x130 [ 182.452873][ T9070] init_file+0x99/0x200 [ 182.455916][ T8855] veth0_macvtap: entered promiscuous mode [ 182.457031][ T9070] alloc_empty_file+0xb8/0x1d0 [ 182.457057][ T9070] path_openat+0xfb/0x3280 [ 182.472055][ T9070] ? mark_lock+0x9a/0x350 [ 182.475663][ T8855] veth1_macvtap: entered promiscuous mode [ 182.476415][ T9070] ? perf_trace_lock+0x136/0x490 [ 182.476444][ T9070] ? __lock_acquire+0x1346/0x1fd0 [ 182.492211][ T9070] ? mark_lock+0x9a/0x350 [ 182.496613][ T9070] ? perf_trace_lock+0x136/0x490 [ 182.501592][ T9070] ? __lock_acquire+0x1346/0x1fd0 [ 182.506741][ T9070] ? __pfx_path_openat+0x10/0x10 [ 182.509246][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.511773][ T9070] ? __pfx_perf_trace_lock+0x10/0x10 [ 182.511815][ T9070] do_filp_open+0x235/0x490 [ 182.526671][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.527478][ T9070] ? __pfx_do_filp_open+0x10/0x10 [ 182.527522][ T9070] ? _raw_spin_unlock+0x28/0x50 [ 182.532431][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.542037][ T9070] ? alloc_fd+0x59d/0x640 [ 182.542079][ T9070] do_sys_openat2+0x13e/0x1d0 [ 182.542105][ T9070] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.542130][ T9070] ? __pfx_do_sys_openat2+0x10/0x10 [ 182.542150][ T9070] ? __fget_files+0x3f6/0x470 [ 182.542173][ T9070] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 182.542200][ T9070] __x64_sys_openat+0x247/0x2a0 [ 182.542221][ T9070] ? __pfx___x64_sys_openat+0x10/0x10 [ 182.542244][ T9070] ? do_syscall_64+0x100/0x230 [ 182.542268][ T9070] ? do_syscall_64+0xb6/0x230 [ 182.542289][ T9070] do_syscall_64+0xf3/0x230 [ 182.552980][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.562523][ T9070] ? clear_bhb_loop+0x35/0x90 [ 182.562555][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.562575][ T9070] RIP: 0033:0x7f94bbc7cf69 [ 182.562592][ T9070] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 182.562606][ T9070] RSP: 002b:00007f94bcae00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 182.562625][ T9070] RAX: ffffffffffffffda RBX: 00007f94bbdb3f80 RCX: 00007f94bbc7cf69 [ 182.571825][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.577638][ T9070] RDX: 0000000000100002 RSI: 0000000020000580 RDI: ffffffffffffff9c [ 182.577656][ T9070] RBP: 00007f94bcae0120 R08: 0000000000000000 R09: 0000000000000000 [ 182.577668][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.577679][ T9070] R13: 000000000000000b R14: 00007f94bbdb3f80 R15: 00007ffed6a74d38 [ 182.583783][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.587513][ T9070] [ 182.745052][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.771292][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.794979][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.818052][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.835321][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.872122][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.895000][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.930574][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.977383][ T8855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.991235][ T8855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.002400][ T8855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.011549][ T8855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.294351][ T7538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.303137][ T5119] Bluetooth: hci1: command tx timeout [ 183.309718][ T7538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.396376][ T7538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.422182][ T7538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.435109][ T9099] __nla_validate_parse: 5 callbacks suppressed [ 183.435132][ T9099] netlink: 65055 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.584870][ T9105] validate_nla: 7 callbacks suppressed [ 183.584890][ T9105] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 183.637368][ T9105] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.688732][ T9110] netlink: 196540 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.715688][ T9110] openvswitch: netlink: Key type 29 is not supported [ 184.022893][ T9126] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.219864][ T9128] netlink: 64859 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.567399][ T9142] netlink: 65055 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.792729][ T9154] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 184.802061][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.812337][ T9154] bridge0: port 5(syz_tun) entered blocking state [ 184.821268][ T9154] bridge0: port 5(syz_tun) entered disabled state [ 184.828483][ T9154] syz_tun: entered allmulticast mode [ 184.844765][ T9154] syz_tun: entered promiscuous mode [ 184.859749][ T9154] bridge0: port 5(syz_tun) entered blocking state [ 184.866357][ T9154] bridge0: port 5(syz_tun) entered forwarding state [ 184.922128][ T9158] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.934592][ T9154] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 184.994198][ T9154] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 185.027256][ T9154] netlink: 126008 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.064915][ T9165] netlink: 65055 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.381554][ T9185] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 185.767644][ T9198] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 185.835512][ T9205] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 186.038672][ T9218] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 186.054162][ T9218] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 186.256194][ T9228] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 186.746566][ T7538] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.869547][ T9259] Â: renamed from pim6reg1 [ 187.393318][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.404917][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.417165][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.434812][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.446132][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 187.456790][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.732624][ T7538] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.956907][ T9288] chnl_net:caif_netlink_parms(): no params data found [ 188.048421][ T7538] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.175611][ T7538] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.428286][ T9288] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.435476][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.476018][ T9288] bridge_slave_0: entered allmulticast mode [ 188.512451][ T9288] bridge_slave_0: entered promiscuous mode [ 188.552419][ T9288] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.579782][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.587159][ T9288] bridge_slave_1: entered allmulticast mode [ 188.627609][ T9288] bridge_slave_1: entered promiscuous mode [ 188.713981][ T9288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.782102][ T9361] __nla_validate_parse: 15 callbacks suppressed [ 188.782121][ T9361] netlink: 64535 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.849042][ T9288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.155852][ T9288] team0: Port device team_slave_0 added [ 189.209719][ T9366] syzkaller0: entered promiscuous mode [ 189.238290][ T9366] syzkaller0: entered allmulticast mode [ 189.265548][ T9288] team0: Port device team_slave_1 added [ 189.316372][ T9381] validate_nla: 4 callbacks suppressed [ 189.316392][ T9381] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 189.365486][ T7538] bridge_slave_1: left allmulticast mode [ 189.378453][ T7538] bridge_slave_1: left promiscuous mode [ 189.384285][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.428655][ T7538] bridge_slave_0: left allmulticast mode [ 189.434355][ T7538] bridge_slave_0: left promiscuous mode [ 189.451812][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.539143][ T5126] Bluetooth: hci1: command tx timeout [ 189.591495][ T9394] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.602354][ T9394] netlink: get zone limit has 8 unknown bytes [ 189.946174][ T7538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.957628][ T7538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.971861][ T7538] bond0 (unregistering): Released all slaves [ 190.006251][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.016889][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.043666][ T9288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.061697][ T9399] netlink: 64535 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.130651][ T9288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.143181][ T9288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.207107][ T9288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.225969][ T9407] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 190.245308][ T9407] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 190.254141][ T9407] netlink: 185032 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.465945][ T9413] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.666465][ T9288] hsr_slave_0: entered promiscuous mode [ 190.676004][ T9288] hsr_slave_1: entered promiscuous mode [ 190.687699][ T9288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.695502][ T9288] Cannot create hsr debugfs directory [ 190.747842][ T7538] hsr_slave_0: left promiscuous mode [ 190.777029][ T7538] hsr_slave_1: left promiscuous mode [ 190.796847][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.814190][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.832392][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.847153][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.916244][ T7538] veth1_macvtap: left promiscuous mode [ 190.922714][ T7538] veth0_macvtap: left promiscuous mode [ 190.929189][ T7538] veth1_vlan: left promiscuous mode [ 190.936672][ T7538] veth0_vlan: left promiscuous mode [ 191.532571][ T9439] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 191.573181][ T9439] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 191.599134][ T9439] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.627963][ T5126] Bluetooth: hci1: command tx timeout [ 191.970754][ T7538] team0 (unregistering): Port device team_slave_1 removed [ 192.007683][ T7538] team0 (unregistering): Port device team_slave_0 removed [ 192.402696][ T9426] netlink: 64535 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.973772][ T9465] netlink: 'syz-executor.3': attribute type 274 has an invalid length. [ 192.982243][ T9465] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.003891][ T9465] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 193.015591][ T9465] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 193.111682][ T9473] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 193.120839][ T9474] netlink: 64535 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.121021][ T9473] netlink: 210880 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.189129][ T9476] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 193.211733][ T9476] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 193.268729][ T9480] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 193.326430][ T9288] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.339499][ T9288] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.362484][ T9288] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.383500][ T9288] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.698156][ T5126] Bluetooth: hci1: command tx timeout [ 193.701759][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.745900][ T9288] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.790694][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.798067][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.834782][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.841977][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.925112][ T9288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.948817][ T9498] __nla_validate_parse: 3 callbacks suppressed [ 193.948838][ T9498] netlink: 64535 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.970936][ T9500] : renamed from bond0 (while UP) [ 194.202593][ T9507] netlink: 1002 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.211895][ T9512] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.266988][ T9511] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.274683][ T9511] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.347407][ T9513] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.354632][ T9513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.362135][ T9513] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.369442][ T9513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.448090][ T9513] bridge0: entered promiscuous mode [ 194.453358][ T9513] bridge0: entered allmulticast mode [ 194.502850][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.655589][ T9288] veth0_vlan: entered promiscuous mode [ 194.704151][ T9288] veth1_vlan: entered promiscuous mode [ 194.746650][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.753417][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.848969][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.861268][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.869831][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.878882][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.887586][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 194.897055][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.100740][ T9288] veth0_macvtap: entered promiscuous mode [ 195.125702][ T9534] netlink: 64535 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.187656][ T9288] veth1_macvtap: entered promiscuous mode [ 195.316707][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.338010][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.352974][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.365140][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.384337][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.404469][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.430193][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.514674][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.525620][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.535547][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.546066][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.556933][ T9288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.567623][ T9288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.581338][ T9288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.603967][ T9288] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.613018][ T9288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.622575][ T9288] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.636317][ T9288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.778401][ T5119] Bluetooth: hci1: command tx timeout [ 195.834520][ T9525] chnl_net:caif_netlink_parms(): no params data found [ 195.950018][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.963526][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.008681][ T9571] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.020409][ T9573] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 196.027503][ T9573] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 196.056033][ T9571] validate_nla: 9 callbacks suppressed [ 196.056071][ T9571] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 196.087480][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.127609][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.153780][ T9525] bridge_slave_0: entered allmulticast mode [ 196.165886][ T9525] bridge_slave_0: entered promiscuous mode [ 196.175921][ T9582] netlink: 64535 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.187404][ T9584] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 196.215490][ T9586] FAULT_INJECTION: forcing a failure. [ 196.215490][ T9586] name failslab, interval 1, probability 0, space 0, times 0 [ 196.216068][ T9584] : (slave netdevsim0): Enslaving as an active interface with an up link [ 196.232028][ T9586] CPU: 0 PID: 9586 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 [ 196.248445][ T9586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 196.258609][ T9586] Call Trace: [ 196.261912][ T9586] [ 196.264951][ T9586] dump_stack_lvl+0x241/0x360 [ 196.269750][ T9586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.275071][ T9586] ? __pfx__printk+0x10/0x10 [ 196.279788][ T9586] should_fail_ex+0x3b0/0x4e0 [ 196.284491][ T9586] ? sctp_add_bind_addr+0x89/0x3a0 [ 196.289631][ T9586] should_failslab+0x9/0x20 [ 196.294168][ T9586] kmalloc_trace_noprof+0x6c/0x2c0 [ 196.299318][ T9586] sctp_add_bind_addr+0x89/0x3a0 [ 196.304299][ T9586] sctp_copy_local_addr_list+0x311/0x500 [ 196.310041][ T9586] ? sctp_copy_local_addr_list+0xab/0x500 [ 196.315801][ T9586] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 196.321989][ T9586] ? sctp_v6_is_any+0x60/0x70 [ 196.326709][ T9586] sctp_bind_addr_copy+0xad/0x3b0 [ 196.331847][ T9586] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 196.338189][ T9586] sctp_connect_new_asoc+0x2f3/0x6c0 [ 196.343474][ T9586] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 196.349274][ T9586] ? sctp_sendmsg+0xbb9/0x3520 [ 196.354063][ T9586] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 196.359623][ T9586] ? security_sctp_bind_connect+0x90/0xb0 [ 196.365351][ T9586] sctp_sendmsg+0x219a/0x3520 [ 196.370046][ T9586] ? __pfx_sctp_sendmsg+0x10/0x10 [ 196.375178][ T9586] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.380040][ T9586] ? inet_sendmsg+0x330/0x390 [ 196.384719][ T9586] __sock_sendmsg+0x1a6/0x270 [ 196.389400][ T9586] ____sys_sendmsg+0x525/0x7d0 [ 196.394168][ T9586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.399458][ T9586] __sys_sendmsg+0x2b0/0x3a0 [ 196.404134][ T9586] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.409239][ T9586] ? vfs_write+0x7c4/0xc90 [ 196.413682][ T9586] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.420004][ T9586] ? do_syscall_64+0x100/0x230 [ 196.424849][ T9586] ? do_syscall_64+0xb6/0x230 [ 196.429517][ T9586] do_syscall_64+0xf3/0x230 [ 196.434041][ T9586] ? clear_bhb_loop+0x35/0x90 [ 196.438717][ T9586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.444610][ T9586] RIP: 0033:0x7f94bbc7cf69 [ 196.449023][ T9586] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 196.468625][ T9586] RSP: 002b:00007f94bcae00c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.477035][ T9586] RAX: ffffffffffffffda RBX: 00007f94bbdb3f80 RCX: 00007f94bbc7cf69 [ 196.484997][ T9586] RDX: 0000000000000000 RSI: 0000000020000a40 RDI: 0000000000000003 [ 196.493069][ T9586] RBP: 00007f94bcae0120 R08: 0000000000000000 R09: 0000000000000000 [ 196.501044][ T9586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.509096][ T9586] R13: 000000000000000b R14: 00007f94bbdb3f80 R15: 00007ffed6a74d38 [ 196.517070][ T9586] [ 196.524581][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.531835][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.539126][ T9525] bridge_slave_1: entered allmulticast mode [ 196.546454][ T9525] bridge_slave_1: entered promiscuous mode [ 196.554009][ T6863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.570275][ T6863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.634517][ T9525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.661909][ T9525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.844374][ T9525] team0: Port device team_slave_0 added [ 196.861116][ T9599] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.873945][ T9599] team_slave_0: entered allmulticast mode [ 196.880322][ T9599] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 196.913599][ T9525] team0: Port device team_slave_1 added [ 196.978805][ T5119] Bluetooth: hci3: command tx timeout [ 197.002893][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.013724][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.040898][ T9525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.056326][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.064453][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.095642][ T9525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.219235][ T9612] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.250016][ T9525] hsr_slave_0: entered promiscuous mode [ 197.259238][ T9525] hsr_slave_1: entered promiscuous mode [ 197.272016][ T9614] netlink: 64535 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.593399][ T9625] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.810408][ T9525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.817467][ T9633] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 197.949379][ T9525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.017199][ T9647] syz-executor.2[9647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.017338][ T9647] syz-executor.2[9647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.121278][ T9525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.249495][ T9525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.567103][ T9525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 198.595441][ T9525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 198.610002][ T9525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 198.638100][ T9525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 198.709279][ T9675] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 198.718402][ T9675] bridge0: port 4(syz_tun) entered blocking state [ 198.730676][ T9675] bridge0: port 4(syz_tun) entered disabled state [ 198.737524][ T9675] syz_tun: entered allmulticast mode [ 198.747557][ T9675] syz_tun: entered promiscuous mode [ 198.754204][ T9675] bridge0: port 4(syz_tun) entered blocking state [ 198.761082][ T9675] bridge0: port 4(syz_tun) entered forwarding state [ 198.886316][ T29] audit: type=1804 audit(1717993918.491:11): pid=9681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir6286437/syzkaller.4l2cz8/358/memory.events" dev="sda1" ino=1935 res=1 errno=0 [ 198.923686][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.038635][ T9525] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.067980][ T5119] Bluetooth: hci3: command tx timeout [ 199.092745][ T6863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.145852][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.153074][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.253391][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.260684][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.308178][ T9695] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 199.420885][ T9525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.554133][ T9710] __nla_validate_parse: 4 callbacks suppressed [ 199.554153][ T9710] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.591026][ T9708] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 199.607912][ T9708] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.690156][ T6863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.888907][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.909310][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.913337][ T6863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.928299][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.951913][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.969458][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 199.979362][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.171202][ T6863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.225081][ T9525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.635479][ T6863] bridge_slave_1: left allmulticast mode [ 200.658480][ T6863] bridge_slave_1: left promiscuous mode [ 200.664284][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.690018][ T6863] bridge_slave_0: left allmulticast mode [ 200.695712][ T6863] bridge_slave_0: left promiscuous mode [ 200.725856][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.143781][ T5119] Bluetooth: hci3: command tx timeout [ 201.301515][ T6863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.314561][ T6863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.327491][ T6863] bond0 (unregistering): Released all slaves [ 201.350550][ T9737] netlink: 61211 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.414214][ T9525] veth0_vlan: entered promiscuous mode [ 201.565444][ T9525] veth1_vlan: entered promiscuous mode [ 201.691576][ T29] audit: type=1804 audit(1717993921.301:12): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2728267426/syzkaller.H2L1Lh/375/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 201.764821][ T9717] chnl_net:caif_netlink_parms(): no params data found [ 201.775276][ T29] audit: type=1800 audit(1717993921.331:13): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1955 res=0 errno=0 [ 201.902908][ T9525] veth0_macvtap: entered promiscuous mode [ 201.910274][ T9781] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.951612][ T9525] veth1_macvtap: entered promiscuous mode [ 202.018481][ T5119] Bluetooth: hci1: command tx timeout [ 202.057353][ T6863] hsr_slave_0: left promiscuous mode [ 202.070616][ T6863] hsr_slave_1: left promiscuous mode [ 202.077393][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.095041][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.112228][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.129959][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.163808][ T6863] veth1_macvtap: left promiscuous mode [ 202.169517][ T6863] veth0_macvtap: left promiscuous mode [ 202.175279][ T6863] veth1_vlan: left promiscuous mode [ 202.183181][ T6863] veth0_vlan: left promiscuous mode [ 203.123820][ T6863] team0 (unregistering): Port device team_slave_1 removed [ 203.164348][ T6863] team0 (unregistering): Port device team_slave_0 removed [ 203.218385][ T5119] Bluetooth: hci3: command tx timeout [ 203.563848][ T9794] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.702821][ T9807] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 203.711477][ T9807] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.727056][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.738070][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.753511][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.765108][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.775274][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.785888][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.818079][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.837513][ T9717] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.852266][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.863230][ T9717] bridge_slave_0: entered allmulticast mode [ 203.878273][ T9717] bridge_slave_0: entered promiscuous mode [ 203.895670][ T9717] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.905565][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.925497][ T9717] bridge_slave_1: entered allmulticast mode [ 203.933375][ T9717] bridge_slave_1: entered promiscuous mode [ 203.948294][ T9815] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 203.968480][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.985143][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.995252][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.011478][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.022043][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.032649][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.044431][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.107980][ T5119] Bluetooth: hci1: command tx timeout [ 204.158497][ T9827] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 204.167860][ T9827] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.221012][ T9717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.261057][ T9717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.282957][ T9525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.292014][ T9525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.302800][ T9525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.311724][ T9525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.331732][ T9831] netlink: 212916 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.369481][ T9834] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 204.378464][ T9834] batman_adv: batadv0: Interface deactivated: team0 [ 204.413385][ T9834] batman_adv: batadv0: Removing interface: team0 [ 204.439690][ T9834] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.454494][ T9834] bond0: (slave team0): Enslaving as an active interface with an up link [ 204.553741][ T9717] team0: Port device team_slave_0 added [ 204.613964][ T9717] team0: Port device team_slave_1 added [ 204.662956][ T9841] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.719224][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.731008][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.761137][ T9717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.827837][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.834827][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.887673][ T9717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.053541][ T9853] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.081648][ T9717] hsr_slave_0: entered promiscuous mode [ 205.101762][ T9717] hsr_slave_1: entered promiscuous mode [ 205.120562][ T9717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.136545][ T9717] Cannot create hsr debugfs directory [ 205.217117][ T9855] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 205.223028][ T9865] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 205.230413][ T9855] batman_adv: batadv0: Interface deactivated: team0 [ 205.235026][ T9865] netlink: 131496 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.271370][ T9855] batman_adv: batadv0: Removing interface: team0 [ 205.282828][ T9855] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.290922][ T9855] team_slave_0: entered promiscuous mode [ 205.296918][ T9855] team_slave_1: entered promiscuous mode [ 205.304263][ T9855] bond0: (slave team0): Enslaving as an active interface with an up link [ 205.315640][ T9858] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 205.399404][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.407264][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.476155][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.507857][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.700182][ T9876] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.979924][ T9885] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.167589][ T9893] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 206.179347][ T5119] Bluetooth: hci1: command tx timeout [ 206.416433][ T9897] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 206.455138][ T9897] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 206.611834][ T9717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.631825][ T9717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.652761][ T9907] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 206.672203][ T9717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.681192][ T9907] netlink: 154788 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.704508][ T9717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.826864][ T9919] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.877221][ T9917] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.911259][ T9917] netlink: zone id is out of range [ 206.917214][ T9917] netlink: zone id is out of range [ 206.923867][ T9917] netlink: zone id is out of range [ 206.962684][ T9917] netlink: zone id is out of range [ 206.972616][ T9922] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.986519][ T9917] netlink: zone id is out of range [ 206.996095][ T9917] netlink: zone id is out of range [ 207.022477][ T9917] netlink: zone id is out of range [ 207.038034][ T9917] netlink: zone id is out of range [ 207.044943][ T9717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.053266][ T9917] netlink: zone id is out of range [ 207.090323][ T9917] netlink: zone id is out of range [ 207.104657][ T9717] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.196135][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.203372][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.363878][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.371221][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.693557][ T9939] syzkaller0: entered promiscuous mode [ 207.712020][ T9939] syzkaller0: entered allmulticast mode [ 207.758439][ T35] syzkaller0: tun_net_xmit 48 [ 207.772645][ T9939] syzkaller0: tun_net_xmit 1280 [ 207.790683][ T9939] syzkaller0: create flow: hash 3315222791 index 2 [ 207.947175][ T9937] syzkaller0: delete flow: hash 3315222791 index 2 [ 208.261917][ T5119] Bluetooth: hci1: command tx timeout [ 209.492070][ T9717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.644052][ T9717] veth0_vlan: entered promiscuous mode [ 209.691718][ T9717] veth1_vlan: entered promiscuous mode [ 209.786415][ T9717] veth0_macvtap: entered promiscuous mode [ 209.807157][ T9717] veth1_macvtap: entered promiscuous mode [ 209.845720][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.890982][ T9988] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.917282][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.977080][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.033507][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.081793][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.158903][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.217375][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.278328][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.352120][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.390804][ T9996] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.436519][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.510916][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.563876][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.619182][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.666080][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.696512][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.717892][ T9717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.736476][ T9717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.778367][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.840685][T10000] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.927189][ T9717] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.958112][ T9717] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.977880][ T9717] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.986630][ T9717] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.205199][T10012] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 211.257584][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.267006][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.342333][ T2482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.359342][T10021] validate_nla: 4 callbacks suppressed [ 211.359362][T10021] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 211.369797][ T2482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.383852][T10021] netlink: 399 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.572373][T10029] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 211.598912][T10027] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 211.625838][T10027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.649655][T10027] batadv0: entered promiscuous mode [ 211.659226][T10027] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 211.671330][T10029] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 211.681266][T10033] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.712711][T10029] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.730627][T10029] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.754560][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.764319][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.930936][T10046] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 211.943784][T10046] netlink: 201372 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.031343][T10052] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.057052][T10052] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.472331][ T5113] bridge0: port 4(syz_tun) entered disabled state [ 212.492406][ T5113] syz_tun (unregistering): left allmulticast mode [ 212.499784][ T5113] syz_tun (unregistering): left promiscuous mode [ 212.506637][ T5113] bridge0: port 4(syz_tun) entered disabled state [ 212.694354][T10068] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 212.701205][ T6863] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.002154][T10081] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 213.579348][ T6863] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.744926][ T6863] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.769816][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.780815][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.789462][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.857983][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.875253][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.885811][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.902698][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.911574][ T6863] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.912875][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.935437][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.949878][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.969578][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.984574][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.200367][ T6863] bridge_slave_1: left allmulticast mode [ 214.206810][ T6863] bridge_slave_1: left promiscuous mode [ 214.212947][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.222809][ T6863] bridge_slave_0: left allmulticast mode [ 214.229036][ T6863] bridge_slave_0: left promiscuous mode [ 214.234818][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.686028][ T6863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.706387][ T6863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.729383][ T6863] bond0 (unregistering): Released all slaves [ 215.437677][T10095] chnl_net:caif_netlink_parms(): no params data found [ 215.488108][T10148] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 215.496538][T10148] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 215.505977][T10148] __nla_validate_parse: 5 callbacks suppressed [ 215.505994][T10148] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.536123][T10150] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 215.594294][ T6863] hsr_slave_0: left promiscuous mode [ 215.619730][ T6863] hsr_slave_1: left promiscuous mode [ 215.642213][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.657949][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.675938][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.683635][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.714900][ T6863] veth1_macvtap: left promiscuous mode [ 215.720958][ T6863] veth0_macvtap: left promiscuous mode [ 215.726557][ T6863] veth1_vlan: left promiscuous mode [ 215.732051][ T6863] veth0_vlan: left promiscuous mode [ 215.769223][T10163] netlink: 171632 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.018318][ T5126] Bluetooth: hci0: command tx timeout [ 216.018350][ T5119] Bluetooth: hci1: command tx timeout [ 216.647539][ T6863] team0 (unregistering): Port device team_slave_1 removed [ 216.687247][ T6863] team0 (unregistering): Port device team_slave_0 removed [ 217.087949][T10165] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.134273][T10100] chnl_net:caif_netlink_parms(): no params data found [ 217.439832][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.447415][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.455613][T10095] bridge_slave_0: entered allmulticast mode [ 217.463956][T10095] bridge_slave_0: entered promiscuous mode [ 217.468674][T10183] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.476218][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.486953][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.495042][T10095] bridge_slave_1: entered allmulticast mode [ 217.504837][T10095] bridge_slave_1: entered promiscuous mode [ 217.649703][T10183] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.699743][T10187] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.795963][T10186] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.830552][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.863948][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.885499][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.908571][T10192] net_ratelimit: 16 callbacks suppressed [ 217.908594][T10192] netlink: zone id is out of range [ 217.919660][T10100] bridge_slave_0: entered allmulticast mode [ 217.927196][T10100] bridge_slave_0: entered promiscuous mode [ 217.953406][T10192] netlink: set zone limit has 8 unknown bytes [ 217.974215][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.990403][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.998406][T10100] bridge_slave_1: entered allmulticast mode [ 218.006560][T10100] bridge_slave_1: entered promiscuous mode [ 218.020066][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.099094][ T5126] Bluetooth: hci0: command tx timeout [ 218.099113][ T5119] Bluetooth: hci1: command tx timeout [ 218.146635][T10095] team0: Port device team_slave_0 added [ 218.156956][T10095] team0: Port device team_slave_1 added [ 218.166786][T10100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.227583][T10100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.090816][T10211] : renamed from bond0 (while UP) [ 219.213504][T10207] syzkaller0: entered promiscuous mode [ 219.250572][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.257570][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.295385][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.327180][T10100] team0: Port device team_slave_0 added [ 219.395855][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.406402][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.439611][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.465168][T10100] team0: Port device team_slave_1 added [ 219.484198][T10224] wg2: entered promiscuous mode [ 219.490275][T10224] wg2: entered allmulticast mode [ 220.178074][ T5126] Bluetooth: hci1: command tx timeout [ 220.186242][ T5119] Bluetooth: hci0: command tx timeout [ 220.912559][T10100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.919773][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.949973][T10100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.000772][T10100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.014351][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.046566][T10100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.076436][T10230] netlink: 194200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.077159][T10095] hsr_slave_0: entered promiscuous mode [ 221.105689][T10095] hsr_slave_1: entered promiscuous mode [ 221.119170][T10095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.135845][T10095] Cannot create hsr debugfs directory [ 221.305597][T10100] hsr_slave_0: entered promiscuous mode [ 221.338649][T10100] hsr_slave_1: entered promiscuous mode [ 221.338962][T10239] syz-executor.0[10239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.347344][T10239] syz-executor.0[10239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.360261][T10100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.380943][T10100] Cannot create hsr debugfs directory [ 221.727346][T10247] validate_nla: 1 callbacks suppressed [ 221.727364][T10247] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 221.747880][T10247] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.258144][ T5126] Bluetooth: hci1: command tx timeout [ 222.263609][ T5126] Bluetooth: hci0: command tx timeout [ 224.844580][T10259] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 224.867490][T10259] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 224.876155][T10259] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.052859][T10269] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.631130][T10095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.692709][T10100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.716622][T10095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.730036][T10095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.753408][T10095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.802269][T10100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.903401][T10282] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 225.914047][T10280] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 225.930206][T10100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.953405][T10280] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 225.967135][T10285] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 225.985992][T10282] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 228.999242][T10286] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 229.066746][T10100] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 229.080411][T10100] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 229.107888][T10100] bridge0: port 3(netdevsim0) entered disabled state [ 229.115417][T10294] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 229.132399][T10100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.202826][T10294] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 229.248405][T10294] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 229.265544][T10297] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 229.267442][T10294] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 229.309422][T10294] netlink: 176412 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.325513][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.333175][T10301] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 229.342657][T10301] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 229.351893][T10301] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.413744][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.428431][T10305] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.451277][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.458472][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.531945][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.539160][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.599043][T10100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.615951][T10100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.691547][T10100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.736078][T10100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.858020][T10316] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.898865][T10315] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.090925][T10100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.145259][T10100] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.166171][T10324] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 230.173126][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.181441][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.205232][T10324] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.227612][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.234856][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.506080][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.627406][T10095] veth0_vlan: entered promiscuous mode [ 230.657263][T10095] veth1_vlan: entered promiscuous mode [ 230.746874][T10095] veth0_macvtap: entered promiscuous mode [ 230.776093][T10095] veth1_macvtap: entered promiscuous mode [ 230.849137][T10100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.866534][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.884779][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.894851][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.913524][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.926141][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.945089][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.956747][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.974701][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.996941][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.012038][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.022775][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.034398][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.047425][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.061768][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.075271][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.097103][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.126420][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.145090][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.160974][T10095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.176731][T10095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.186546][T10095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.195598][T10095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.240228][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.256256][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.359434][T10352] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 233.379018][T10352] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 233.400431][T10352] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.434879][ T2482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.452065][ T2482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.460715][T10100] veth0_vlan: entered promiscuous mode [ 233.563109][T10100] veth1_vlan: entered promiscuous mode [ 233.691858][T10364] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 233.827432][T10100] veth0_macvtap: entered promiscuous mode [ 233.864127][T10361] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.910691][T10100] veth1_macvtap: entered promiscuous mode [ 233.980085][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.002526][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.024545][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.047869][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.062898][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.075945][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.095068][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.114805][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.129103][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.139750][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.156334][T10100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.191315][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.212549][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.226976][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.242009][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.254488][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.274252][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.286257][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.306926][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.316919][T10376] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 234.320401][T10100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.341403][T10100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.349289][T10374] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 234.359587][T10374] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.362981][T10100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.387328][T10376] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 234.405494][T10377] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 234.441457][T10376] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 234.470450][T10100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.507377][T10100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.528792][T10100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.537633][T10100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.800143][T10393] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 237.812833][ T1103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.837919][T10393] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 237.846029][T10393] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.020003][ T1103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.128263][ T7533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.136125][ T7533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.205093][ T1103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.313918][ T7533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.335231][ T7533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.350076][ T1103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.659692][ T1103] bridge_slave_1: left allmulticast mode [ 238.668052][ T1103] bridge_slave_1: left promiscuous mode [ 238.684084][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.709501][ T1103] bridge_slave_0: left allmulticast mode [ 238.721748][ T1103] bridge_slave_0: left promiscuous mode [ 238.734594][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.767598][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.779629][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.789253][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.798093][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.813334][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 238.829424][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.224190][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.245052][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.264378][ T1103] bond0 (unregistering): Released all slaves [ 239.569578][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.617433][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.632250][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.636481][T10438] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 239.652597][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.660927][T10438] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 239.670184][T10438] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.687393][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.699310][T10434] netlink: 94588 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.715249][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.732289][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.902572][T10448] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 239.934586][T10448] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.365676][ T1103] hsr_slave_0: left promiscuous mode [ 240.399617][ T1103] hsr_slave_1: left promiscuous mode [ 240.406650][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.416125][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.425491][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.448511][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.491725][ T1103] veth1_macvtap: left promiscuous mode [ 240.497304][ T1103] veth0_macvtap: left promiscuous mode [ 240.509443][ T1103] veth1_vlan: left promiscuous mode [ 240.520798][ T1103] veth0_vlan: left promiscuous mode [ 240.800678][T10465] netlink: 204716 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.899460][ T5126] Bluetooth: hci0: command tx timeout [ 240.908614][ T5126] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 241.735050][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 241.788997][ T5126] Bluetooth: hci1: command tx timeout [ 241.824416][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 242.255325][T10456] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.297865][T10471] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 242.313767][T10472] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 242.340801][T10475] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 242.357363][T10475] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 242.392804][T10475] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.804896][T10425] chnl_net:caif_netlink_parms(): no params data found [ 242.841325][T10495] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 242.887965][T10495] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.978996][ T5126] Bluetooth: hci2: command 0x0406 tx timeout [ 242.979005][ T5119] Bluetooth: hci0: command tx timeout [ 243.026700][T10437] chnl_net:caif_netlink_parms(): no params data found [ 243.078640][T10501] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 243.191109][T10505] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.217341][T10425] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.238012][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.245520][T10425] bridge_slave_0: entered allmulticast mode [ 243.260236][T10425] bridge_slave_0: entered promiscuous mode [ 243.341011][T10425] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.354116][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.364145][T10425] bridge_slave_1: entered allmulticast mode [ 243.376320][T10425] bridge_slave_1: entered promiscuous mode [ 243.418238][T10515] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.515903][T10524] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 243.576708][ T1103] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.636709][T10425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.730303][ T1103] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.793252][T10425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.861141][ T5119] Bluetooth: hci1: command tx timeout [ 244.487459][ T1103] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.553270][T10425] team0: Port device team_slave_0 added [ 244.564787][T10437] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.573155][T10437] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.580481][T10437] bridge_slave_0: entered allmulticast mode [ 244.595401][T10437] bridge_slave_0: entered promiscuous mode [ 244.616604][T10437] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.631386][T10437] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.638872][T10437] bridge_slave_1: entered allmulticast mode [ 244.657710][T10437] bridge_slave_1: entered promiscuous mode [ 244.681767][ T1103] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.705740][T10425] team0: Port device team_slave_1 added [ 244.766211][T10437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.800977][T10437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.828553][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 244.831039][T10425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.854212][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.889515][T10425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.921330][T10562] validate_nla: 5 callbacks suppressed [ 244.921351][T10562] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 244.940521][T10562] __nla_validate_parse: 5 callbacks suppressed [ 244.940538][T10562] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.956323][T10562] bond0: entered promiscuous mode [ 244.970152][T10562] team0: entered promiscuous mode [ 244.976205][T10562] bridge0: port 6(bond0) entered blocking state [ 244.982968][T10562] bridge0: port 6(bond0) entered disabled state [ 244.989868][T10562] bond0: entered allmulticast mode [ 244.995024][T10562] bond_slave_0: entered allmulticast mode [ 245.002001][T10562] bond_slave_1: entered allmulticast mode [ 245.008509][T10562] bridge0: entered allmulticast mode [ 245.023767][T10562] vlan0: entered allmulticast mode [ 245.029524][T10562] veth0_vlan: entered allmulticast mode [ 245.035111][T10562] team0: entered allmulticast mode [ 245.040617][T10562] team_slave_0: entered allmulticast mode [ 245.046714][T10562] team_slave_1: entered allmulticast mode [ 245.052744][T10562] batadv0: entered allmulticast mode [ 245.064223][ T5119] Bluetooth: hci0: command tx timeout [ 245.078538][T10562] bond0: left allmulticast mode [ 245.083427][T10562] bond_slave_0: left allmulticast mode [ 245.106025][T10562] bond_slave_1: left allmulticast mode [ 245.112841][T10562] bridge0: left allmulticast mode [ 245.118752][T10562] vlan0: left allmulticast mode [ 245.123636][T10562] veth0_vlan: left allmulticast mode [ 245.129273][T10562] team0: left allmulticast mode [ 245.134422][T10562] team_slave_0: left allmulticast mode [ 245.140507][T10562] team_slave_1: left allmulticast mode [ 245.146012][T10562] batadv0: left allmulticast mode [ 245.173841][T10437] team0: Port device team_slave_0 added [ 245.181951][T10425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.189672][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.216233][T10425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.270027][T10437] team0: Port device team_slave_1 added [ 245.336143][T10575] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 245.346375][T10575] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 245.360445][T10575] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.372630][T10437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.380350][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.430482][T10437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.504301][T10437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.512120][T10437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.549433][T10437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.632482][ T1103] bridge_slave_1: left allmulticast mode [ 245.638720][ T1103] bridge_slave_1: left promiscuous mode [ 245.644718][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.683353][ T1103] bridge_slave_0: left allmulticast mode [ 245.691780][ T1103] bridge_slave_0: left promiscuous mode [ 245.697708][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.939998][ T5119] Bluetooth: hci1: command tx timeout [ 246.125970][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.144432][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.159028][ T1103] bond0 (unregistering): Released all slaves [ 246.186701][T10425] hsr_slave_0: entered promiscuous mode [ 246.212858][T10425] hsr_slave_1: entered promiscuous mode [ 246.240056][T10425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.252216][T10425] Cannot create hsr debugfs directory [ 246.303905][T10595] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 246.313354][T10595] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.332549][T10595] team0: entered promiscuous mode [ 246.338002][T10595] team_slave_0: entered promiscuous mode [ 246.345137][T10595] team_slave_1: entered promiscuous mode [ 246.352315][T10595] team0: entered allmulticast mode [ 246.357650][T10595] team_slave_0: entered allmulticast mode [ 246.366274][T10595] team_slave_1: entered allmulticast mode [ 246.373298][T10595] bridge0: port 3(team0) entered blocking state [ 246.380147][T10595] bridge0: port 3(team0) entered disabled state [ 246.560899][T10437] hsr_slave_0: entered promiscuous mode [ 246.574716][T10437] hsr_slave_1: entered promiscuous mode [ 246.600245][T10437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.613739][T10437] Cannot create hsr debugfs directory [ 246.630793][T10606] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 246.639236][T10606] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 246.663595][T10606] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.682749][ T1103] hsr_slave_0: left promiscuous mode [ 246.691276][ T1103] hsr_slave_1: left promiscuous mode [ 246.704968][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.715269][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.739943][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.757991][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.794145][ T1103] veth1_macvtap: left promiscuous mode [ 246.803649][ T1103] veth0_macvtap: left promiscuous mode [ 246.809992][ T1103] veth1_vlan: left promiscuous mode [ 246.816697][ T1103] veth0_vlan: left promiscuous mode [ 247.156663][ T5119] Bluetooth: hci0: command tx timeout [ 247.503303][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 247.549997][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 247.966805][T10614] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 247.975515][T10614] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 248.018713][ T5119] Bluetooth: hci1: command tx timeout [ 248.054367][T10625] syz-executor.2[10625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.054516][T10625] syz-executor.2[10625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.069674][T10625] syz-executor.2[10625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.083806][T10623] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.502920][ T29] audit: type=1804 audit(1717993968.101:14): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir6286437/syzkaller.4l2cz8/460/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 248.601108][ T29] audit: type=1800 audit(1717993968.101:15): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 248.777031][ T1103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.803865][T10638] netlink: 'syz-executor.0': attribute type 274 has an invalid length. [ 248.814512][T10638] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.825568][T10638] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 248.847095][T10638] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 248.884907][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.904993][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.913943][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.916734][ T1103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.937601][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.958243][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 248.965712][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.006616][ T1103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.059024][T10642] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 249.067148][T10642] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 249.077963][T10642] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.132236][ T1103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.270272][T10425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.327148][T10425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.339099][T10425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.412142][T10425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.483956][ T1103] bridge0: port 3(team0) entered disabled state [ 249.502394][ T1103] bridge_slave_1: left allmulticast mode [ 249.513710][ T1103] bridge_slave_1: left promiscuous mode [ 249.519943][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.531565][ T1103] bridge_slave_0: left allmulticast mode [ 249.537378][ T1103] bridge_slave_0: left promiscuous mode [ 249.543837][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.935381][ T1103]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.971548][ T1103]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.987007][ T1103]  (unregistering): Released all slaves [ 250.069606][T10437] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.086024][T10652] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 250.114644][T10437] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.236920][T10437] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.306568][T10437] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.367932][T10639] chnl_net:caif_netlink_parms(): no params data found [ 250.480018][T10674] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 250.510765][T10674] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 250.534937][T10674] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.604222][T10674] @: mtu less than device minimum [ 250.705145][ T1103] hsr_slave_0: left promiscuous mode [ 250.715259][ T1103] hsr_slave_1: left promiscuous mode [ 250.743397][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.773852][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.795910][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.816388][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.857013][ T1103] veth1_macvtap: left promiscuous mode [ 250.864843][ T1103] veth0_macvtap: left promiscuous mode [ 250.872067][ T1103] veth1_vlan: left promiscuous mode [ 250.877432][ T1103] veth0_vlan: left promiscuous mode [ 251.058475][ T5126] Bluetooth: hci3: command tx timeout [ 251.501704][ T1103] team_slave_1 (unregistering): left promiscuous mode [ 251.511673][ T1103] team_slave_1 (unregistering): left allmulticast mode [ 251.526188][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 251.566992][ T1103] team_slave_0 (unregistering): left promiscuous mode [ 251.573948][ T1103] team_slave_0 (unregistering): left allmulticast mode [ 251.586194][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 252.045692][T10639] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.053155][T10639] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.060727][T10639] bridge_slave_0: entered allmulticast mode [ 252.067638][T10639] bridge_slave_0: entered promiscuous mode [ 252.082455][T10695] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 252.151725][T10639] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.182093][T10639] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.190350][T10639] bridge_slave_1: entered allmulticast mode [ 252.204505][T10639] bridge_slave_1: entered promiscuous mode [ 252.306470][T10639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.361390][T10639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.462054][T10639] team0: Port device team_slave_0 added [ 252.520372][T10639] team0: Port device team_slave_1 added [ 252.633636][T10639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.643335][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.678017][T10639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.710507][T10425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.736796][T10639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.745454][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.774517][T10639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.884653][T10425] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.138664][ T5126] Bluetooth: hci3: command tx timeout [ 253.311519][T10723] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.435751][T10639] hsr_slave_0: entered promiscuous mode [ 253.473756][T10639] hsr_slave_1: entered promiscuous mode [ 253.501497][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.508684][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.531400][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.538632][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.562077][T10725] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 253.575873][T10725] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 253.622990][T10437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.822325][T10733] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 253.839514][T10735] netlink: 199828 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.906840][T10437] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.029780][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.036989][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.104465][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.111672][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.426169][T10425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.600184][T10425] veth0_vlan: entered promiscuous mode [ 254.616555][T10425] veth1_vlan: entered promiscuous mode [ 254.635710][T10639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.655907][T10639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 254.689337][T10639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 254.945957][T10639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.972747][T10437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.052321][T10425] veth0_macvtap: entered promiscuous mode [ 255.132581][T10425] veth1_macvtap: entered promiscuous mode [ 255.246466][ T5126] Bluetooth: hci3: command tx timeout [ 255.474955][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.518300][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.542475][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.557862][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.568008][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.587975][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.611779][T10425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.638230][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.651104][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.661233][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.672043][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.682638][T10425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.693361][T10425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.705712][T10425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.756323][T10425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.775702][T10425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.785201][T10425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.807014][T10425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.182868][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.189526][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.298643][ T5126] Bluetooth: hci3: command tx timeout [ 258.099812][ T35] : left allmulticast mode [ 258.104368][ T35] bond_slave_0: left allmulticast mode [ 258.124555][ T35] bond_slave_1: left allmulticast mode [ 258.133363][ T35] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 258.168228][ T35] : left promiscuous mode [ 258.257817][ T35] bond_slave_0: left promiscuous mode [ 258.263359][ T35] bond_slave_1: left promiscuous mode [ 258.271637][ T35] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 258.279128][ T35] bridge0: port 3() entered disabled state [ 258.298662][ T35] bridge_slave_1: left allmulticast mode [ 258.304363][ T35] bridge_slave_1: left promiscuous mode [ 258.317238][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.329212][ T35] bridge_slave_0: left allmulticast mode [ 258.334891][ T35] bridge_slave_0: left promiscuous mode [ 258.341338][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.019652][ T35]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.034430][ T35]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.046057][ T35]  (unregistering): (slave wlan1): Releasing backup interface [ 259.058020][ T35]  (unregistering): Released all slaves [ 259.161928][ T35] tipc: Left network mode [ 259.224906][T10639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.266116][T10437] veth0_vlan: entered promiscuous mode [ 259.275249][ T7538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.305765][ T7538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.472597][T10639] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.504920][ T7538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.540441][T10437] veth1_vlan: entered promiscuous mode [ 259.548230][ T7538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.576054][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.583276][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.749123][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.756298][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.893081][T10437] veth0_macvtap: entered promiscuous mode [ 259.972407][ T35] hsr_slave_0: left promiscuous mode [ 259.981754][ T35] hsr_slave_1: left promiscuous mode [ 260.004969][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.018644][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.974665][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.991108][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.099062][ T35] veth1_macvtap: left promiscuous mode [ 263.104662][ T35] veth0_macvtap: left promiscuous mode [ 263.128103][ T35] veth1_vlan: left promiscuous mode [ 263.133478][ T35] veth0_vlan: left promiscuous mode [ 263.799711][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.810327][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.832047][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.845502][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.852155][ T35] team0 (unregistering): Port device team_slave_1 removed [ 263.862213][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 263.881475][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.914920][ T35] team0 (unregistering): Port device team_slave_0 removed [ 264.366441][T10818] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.401078][T10437] veth1_macvtap: entered promiscuous mode [ 264.540337][T10437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.566721][T10437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.582769][T10437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.604994][T10437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.615256][T10437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.644811][T10437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.679743][T10437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.711004][T10437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.743106][T10437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.768012][T10437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.786154][T10437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.805503][T10835] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 264.816371][T10437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.827943][T10835] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.838259][T10437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.853996][T10437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.866169][T10437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.878340][T10437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.887081][T10437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.896981][T10437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.986490][T10838] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 265.056548][T10838] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 265.065609][T10838] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.153297][T10639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.288075][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.324071][T10845] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.417543][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.438993][ T7538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.446831][ T7538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.477242][T10820] chnl_net:caif_netlink_parms(): no params data found [ 265.561075][T10851] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.572246][T10851] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 265.601805][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.671218][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.938042][ T5126] Bluetooth: hci0: command tx timeout [ 266.528272][T10639] veth0_vlan: entered promiscuous mode [ 266.592883][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.600440][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.609509][T10820] bridge_slave_0: entered allmulticast mode [ 266.618873][T10820] bridge_slave_0: entered promiscuous mode [ 266.626564][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.635681][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.643232][T10820] bridge_slave_1: entered allmulticast mode [ 266.650948][T10820] bridge_slave_1: entered promiscuous mode [ 266.700535][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.792000][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.850726][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.894588][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.928982][T10639] veth1_vlan: entered promiscuous mode [ 267.090289][T10820] team0: Port device team_slave_0 added [ 267.106277][T10820] team0: Port device team_slave_1 added [ 267.249761][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.256756][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.294616][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.308264][T10877] netlink: 763 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.336087][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.354979][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.383974][T10879] netlink: 1053 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.406653][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.534728][ T35] bridge_slave_1: left allmulticast mode [ 267.544703][ T35] bridge_slave_1: left promiscuous mode [ 267.554768][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.589180][ T35] bridge_slave_0: left allmulticast mode [ 267.601789][ T35] bridge_slave_0: left promiscuous mode [ 267.614455][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.692779][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.704402][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.718162][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.729795][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.740281][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 267.749071][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.018195][ T5126] Bluetooth: hci0: command tx timeout [ 268.051608][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.063803][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.086642][ T35] bond0 (unregistering): Released all slaves [ 268.116879][T10820] hsr_slave_0: entered promiscuous mode [ 268.136313][T10820] hsr_slave_1: entered promiscuous mode [ 268.147058][T10820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.168133][T10820] Cannot create hsr debugfs directory [ 268.230709][T10639] veth0_macvtap: entered promiscuous mode [ 268.375816][T10639] veth1_macvtap: entered promiscuous mode [ 268.545444][ T35] hsr_slave_0: left promiscuous mode [ 268.554468][ T35] hsr_slave_1: left promiscuous mode [ 268.581965][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.592677][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.605876][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.617011][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.649675][ T35] veth1_macvtap: left promiscuous mode [ 268.655356][ T35] veth0_macvtap: left promiscuous mode [ 268.661655][ T35] veth1_vlan: left promiscuous mode [ 268.668723][ T35] veth0_vlan: left promiscuous mode [ 269.436300][ T35] team0 (unregistering): Port device team_slave_1 removed [ 269.508219][ T35] team0 (unregistering): Port device team_slave_0 removed [ 269.778462][ T5126] Bluetooth: hci1: command tx timeout [ 270.099967][ T5126] Bluetooth: hci0: command tx timeout [ 270.227930][T10918] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 270.270730][T10920] netlink: 'syz-executor.0': attribute type 274 has an invalid length. [ 270.279250][T10920] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.292607][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.303926][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.314794][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.326860][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.338117][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.348848][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.360499][T10639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.384593][T10920] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 270.395233][T10920] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 270.510902][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.521956][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.532465][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.543261][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.553359][T10639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.564163][T10639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.575663][T10639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.673820][T10639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.691996][T10639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.705850][T10639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.717339][T10639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.755110][T10884] chnl_net:caif_netlink_parms(): no params data found [ 270.943067][T10884] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.953708][T10884] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.961492][T10884] bridge_slave_0: entered allmulticast mode [ 270.970409][T10884] bridge_slave_0: entered promiscuous mode [ 271.001847][T10884] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.015871][T10884] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.023756][T10884] bridge_slave_1: entered allmulticast mode [ 271.032558][T10884] bridge_slave_1: entered promiscuous mode [ 271.142877][T10884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.160370][ T6863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.178771][ T6863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.210678][T10884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.336597][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.442714][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.527020][T10884] team0: Port device team_slave_0 added [ 271.578967][ T6863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.586872][ T6863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.691666][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.719019][T10884] team0: Port device team_slave_1 added [ 271.782676][T10820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.851532][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.868133][ T5126] Bluetooth: hci1: command tx timeout [ 271.924434][T10884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.938176][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.965150][T10884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.979692][T10954] netlink: 'syz-executor.0': attribute type 274 has an invalid length. [ 271.989593][T10954] netlink: 131748 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.006849][T10884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.014018][T10884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.042227][T10884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.053908][T10820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.097275][T10954] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 272.114046][T10820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.122986][T10954] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 272.136887][T10820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.189362][ T5126] Bluetooth: hci0: command tx timeout [ 272.217566][T10884] hsr_slave_0: entered promiscuous mode [ 272.224471][T10884] hsr_slave_1: entered promiscuous mode [ 272.234173][T10884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.242087][T10884] Cannot create hsr debugfs directory [ 272.556455][ T35] bridge_slave_1: left allmulticast mode [ 272.571714][ T35] bridge_slave_1: left promiscuous mode [ 272.590017][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.645789][ T35] bridge_slave_0: left allmulticast mode [ 272.665173][ T35] bridge_slave_0: left promiscuous mode [ 272.686512][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.263977][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.279613][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.291738][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.305214][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.316621][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.332762][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.554438][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.565808][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.576593][ T35] bond0 (unregistering): Released all slaves [ 273.940211][ T5119] Bluetooth: hci1: command tx timeout [ 274.015760][T10820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.070028][ T35] hsr_slave_0: left promiscuous mode [ 274.083228][ T35] hsr_slave_1: left promiscuous mode [ 274.089965][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.093260][T10984] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.097537][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.122071][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.133044][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.188889][ T35] veth1_macvtap: left promiscuous mode [ 274.190680][T10986] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 274.194450][ T35] veth0_macvtap: left promiscuous mode [ 274.207963][T10986] netlink: 391 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.219230][ T35] veth1_vlan: left promiscuous mode [ 274.224634][ T35] veth0_vlan: left promiscuous mode [ 274.267251][T10990] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 274.276683][T10990] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.423370][T10992] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 274.437993][T10992] netlink: 212412 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.458303][T10992] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 274.824439][ T35] team0 (unregistering): Port device team_slave_1 removed [ 274.863616][ T35] team0 (unregistering): Port device team_slave_0 removed [ 275.264455][T10988] ·U*: renamed from vxcan1 (while UP) [ 275.378569][ T5119] Bluetooth: hci3: command tx timeout [ 275.395670][T10820] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.414996][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.422223][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.455641][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.462962][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.604029][T10966] chnl_net:caif_netlink_parms(): no params data found [ 275.732104][T10884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.804568][T10884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.816218][T10884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.837894][T11011] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 275.851100][T11011] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 275.867352][T11011] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 275.883894][T11011] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 275.971742][T10884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.995509][T10966] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.012883][T10966] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.026596][T10966] bridge_slave_0: entered allmulticast mode [ 276.028668][ T5119] Bluetooth: hci1: command tx timeout [ 276.041020][T10966] bridge_slave_0: entered promiscuous mode [ 276.056667][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.066681][T10966] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.081889][T10966] bridge_slave_1: entered allmulticast mode [ 276.092746][T10966] bridge_slave_1: entered promiscuous mode [ 276.176702][T10966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.202138][T10966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.313491][T10966] team0: Port device team_slave_0 added [ 276.374301][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.416385][T10966] team0: Port device team_slave_1 added [ 276.495022][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.656973][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.682575][T10966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.694846][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.723184][T10966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.761734][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.774602][T11040] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 276.796951][T11040] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.806310][T10966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.818787][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.846221][T10966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.933288][T10820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.986386][T10966] hsr_slave_0: entered promiscuous mode [ 276.994395][T10966] hsr_slave_1: entered promiscuous mode [ 277.003429][T10966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.011273][T10966] Cannot create hsr debugfs directory [ 277.284783][ T35] bridge_slave_1: left allmulticast mode [ 277.296349][ T35] bridge_slave_1: left promiscuous mode [ 277.312171][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.329575][ T35] bridge_slave_0: left allmulticast mode [ 277.335273][ T35] bridge_slave_0: left promiscuous mode [ 277.349478][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.467806][ T5119] Bluetooth: hci3: command tx timeout [ 277.986072][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.997208][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.011399][ T35] bond0 (unregistering): Released all slaves [ 278.043777][T10884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.055949][T11062] bridge0: port 5(syz_tun) entered disabled state [ 278.062787][T11062] bridge0: port 3(veth0_to_bond) entered disabled state [ 278.070037][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.077394][T11062] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.107354][T11063] bridge0: port 5(syz_tun) entered blocking state [ 278.113974][T11063] bridge0: port 5(syz_tun) entered forwarding state [ 278.120897][T11063] bridge0: port 3(veth0_to_bond) entered blocking state [ 278.128026][T11063] bridge0: port 3(veth0_to_bond) entered forwarding state [ 278.135426][T11063] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.142699][T11063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.150168][T11063] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.157374][T11063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.173705][T11063] bridge0: entered allmulticast mode [ 278.349609][T10820] veth0_vlan: entered promiscuous mode [ 278.534769][T10884] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.591497][T10820] veth1_vlan: entered promiscuous mode [ 278.624122][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.631342][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.667123][ T35] hsr_slave_0: left promiscuous mode [ 278.675758][ T35] hsr_slave_1: left promiscuous mode [ 278.693128][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.712290][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.735750][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.742369][T11089] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 278.743795][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.768294][T11089] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 278.776409][T11089] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.815618][ T35] veth1_macvtap: left promiscuous mode [ 278.822439][ T35] veth0_macvtap: left promiscuous mode [ 278.834335][ T35] veth1_vlan: left promiscuous mode [ 278.840736][ T35] veth0_vlan: left promiscuous mode [ 279.555461][ T5119] Bluetooth: hci3: command tx timeout [ 279.594682][ T35] team0 (unregistering): Port device team_slave_1 removed [ 279.640285][ T35] team0 (unregistering): Port device team_slave_0 removed [ 281.617943][ T5119] Bluetooth: hci3: command tx timeout [ 283.092671][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.099907][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.110028][T11094] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 283.117884][T11094] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 283.286248][T10820] veth0_macvtap: entered promiscuous mode [ 283.376494][T10820] veth1_macvtap: entered promiscuous mode [ 283.471431][T10966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.576940][T11114] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 283.586044][T11114] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.191547][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.204284][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.214363][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.225124][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.238372][T10820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.270691][T10966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.287573][T10966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 284.314712][T10966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 284.352586][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.372717][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.382704][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.400392][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.425190][T10820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.472418][T10820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.482947][T10820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.492913][T10820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.509946][T10820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.555163][T11125] [ 284.557525][T11125] ====================================================== [ 284.564526][T11125] WARNING: possible circular locking dependency detected [ 284.571609][T11125] 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 Not tainted [ 284.578719][T11125] ------------------------------------------------------ [ 284.585728][T11125] syz-executor.0/11125 is trying to acquire lock: [ 284.592115][T11125] ffff8880b9538828 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 284.602448][T11125] [ 284.602448][T11125] but task is already holding lock: [ 284.609789][T11125] ffff8880b953e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 284.619244][T11125] [ 284.619244][T11125] which lock already depends on the new lock. [ 284.619244][T11125] [ 284.629659][T11125] [ 284.629659][T11125] the existing dependency chain (in reverse order) is: [ 284.638649][T11125] [ 284.638649][T11125] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 284.645952][T11125] lock_acquire+0x1ed/0x550 [ 284.651048][T11125] _raw_spin_lock_nested+0x31/0x40 [ 284.656661][T11125] raw_spin_rq_lock_nested+0x2a/0x140 [ 284.662552][T11125] sched_mm_cid_exit_signals+0x17b/0x4b0 [ 284.668684][T11125] exit_signals+0x2a1/0x5c0 [ 284.673685][T11125] do_exit+0x6b4/0x27e0 [ 284.678339][T11125] __pfx___ia32_sys_exit+0x0/0x10 [ 284.683869][T11125] do_syscall_64+0xf3/0x230 [ 284.688869][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.695263][T11125] [ 284.695263][T11125] -> #1 (&sighand->siglock){-.-.}-{2:2}: [ 284.703058][T11125] lock_acquire+0x1ed/0x550 [ 284.708172][T11125] _raw_spin_lock_irqsave+0xd5/0x120 [ 284.713976][T11125] __lock_task_sighand+0x149/0x2d0 [ 284.719635][T11125] group_send_sig_info+0x274/0x310 [ 284.725251][T11125] bpf_send_signal_common+0x2dd/0x430 [ 284.731141][T11125] bpf_send_signal_thread+0x16/0x20 [ 284.736843][T11125] 0xffffffffa00017c6 [ 284.741323][T11125] bpf_trace_run4+0x334/0x590 [ 284.746503][T11125] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 284.753679][T11125] lock_mm_and_find_vma+0x213/0x2f0 [ 284.759391][T11125] exc_page_fault+0x1bf/0x8c0 [ 284.764572][T11125] asm_exc_page_fault+0x26/0x30 [ 284.769929][T11125] rep_movs_alternative+0x33/0x70 [ 284.775472][T11125] _copy_to_iter+0x26b/0x1960 [ 284.780656][T11125] copy_page_to_iter+0xb1/0x160 [ 284.786017][T11125] pipe_read+0x59c/0x13e0 [ 284.790951][T11125] vfs_read+0x9c4/0xbd0 [ 284.795697][T11125] ksys_read+0x1a0/0x2c0 [ 284.800438][T11125] do_syscall_64+0xf3/0x230 [ 284.805437][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.811838][T11125] [ 284.811838][T11125] -> #0 (lock#10){+.+.}-{2:2}: [ 284.818766][T11125] validate_chain+0x18e0/0x5900 [ 284.824118][T11125] __lock_acquire+0x1346/0x1fd0 [ 284.829467][T11125] lock_acquire+0x1ed/0x550 [ 284.834468][T11125] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 284.841555][T11125] stack_map_get_build_id_offset+0x9af/0x9d0 [ 284.848040][T11125] __bpf_get_stack+0x4ad/0x5a0 [ 284.853301][T11125] bpf_get_stack_raw_tp+0x1a3/0x240 [ 284.859000][T11125] bpf_prog_ec3b2eefa702d8d3+0x42/0x46 [ 284.864956][T11125] bpf_trace_run2+0x2ec/0x540 [ 284.870140][T11125] trace_tlb_flush+0x118/0x140 [ 284.875420][T11125] switch_mm_irqs_off+0x7cb/0xae0 [ 284.880945][T11125] __schedule+0x1066/0x4a20 [ 284.885947][T11125] preempt_schedule_common+0x84/0xd0 [ 284.891752][T11125] preempt_schedule+0xe1/0xf0 [ 284.896928][T11125] preempt_schedule_thunk+0x1a/0x30 [ 284.902624][T11125] _raw_spin_unlock+0x3e/0x50 [ 284.907810][T11125] __text_poke+0xa6b/0xd30 [ 284.912726][T11125] text_poke_bp_batch+0x265/0xb30 [ 284.918249][T11125] text_poke_finish+0x30/0x50 [ 284.923425][T11125] arch_jump_label_transform_apply+0x1c/0x30 [ 284.930013][T11125] static_key_enable_cpuslocked+0x136/0x260 [ 284.936410][T11125] static_key_enable+0x1a/0x20 [ 284.941685][T11125] tracepoint_add_func+0x953/0x9e0 [ 284.947294][T11125] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 284.954815][T11125] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 284.960691][T11125] bpf_raw_tracepoint_open+0x1c2/0x240 [ 284.966647][T11125] __sys_bpf+0x3c0/0x810 [ 284.971389][T11125] __x64_sys_bpf+0x7c/0x90 [ 284.976306][T11125] do_syscall_64+0xf3/0x230 [ 284.981331][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.987926][T11125] [ 284.987926][T11125] other info that might help us debug this: [ 284.987926][T11125] [ 284.998129][T11125] Chain exists of: [ 284.998129][T11125] lock#10 --> &sighand->siglock --> &rq->__lock [ 284.998129][T11125] [ 285.010274][T11125] Possible unsafe locking scenario: [ 285.010274][T11125] [ 285.017715][T11125] CPU0 CPU1 [ 285.023061][T11125] ---- ---- [ 285.028403][T11125] lock(&rq->__lock); [ 285.032450][T11125] lock(&sighand->siglock); [ 285.039555][T11125] lock(&rq->__lock); [ 285.046118][T11125] lock(lock#10); [ 285.049822][T11125] [ 285.049822][T11125] *** DEADLOCK *** [ 285.049822][T11125] [ 285.057940][T11125] 8 locks held by syz-executor.0/11125: [ 285.063460][T11125] #0: ffffffff8e3809e8 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register_prio_may_exist+0xbb/0x190 [ 285.075351][T11125] #1: ffffffff8e1ce5b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 285.085071][T11125] #2: ffffffff8e3e1a48 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xd7/0x260 [ 285.095836][T11125] #3: ffffffff8e1e3688 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0x17/0x30 [ 285.106249][T11125] #4: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x82/0x380 [ 285.115704][T11125] #5: ffff8880b953e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 285.125596][T11125] #6: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 285.134968][T11125] #7: ffff88802f8fcd98 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x237/0x9d0 [ 285.145816][T11125] [ 285.145816][T11125] stack backtrace: [ 285.151678][T11125] CPU: 1 PID: 11125 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 [ 285.162256][T11125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 285.172389][T11125] Call Trace: [ 285.175652][T11125] [ 285.178581][T11125] dump_stack_lvl+0x241/0x360 [ 285.183243][T11125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.188426][T11125] ? print_circular_bug+0x130/0x1a0 [ 285.193612][T11125] check_noncircular+0x36a/0x4a0 [ 285.198532][T11125] ? hlock_conflict+0x59/0x1e0 [ 285.203277][T11125] ? __pfx_check_noncircular+0x10/0x10 [ 285.208715][T11125] ? lockdep_lock+0x123/0x2b0 [ 285.213370][T11125] ? __pfx_lock_release+0x10/0x10 [ 285.218391][T11125] validate_chain+0x18e0/0x5900 [ 285.223249][T11125] ? __pfx_validate_chain+0x10/0x10 [ 285.228428][T11125] ? validate_chain+0x11e/0x5900 [ 285.233357][T11125] ? mark_lock+0x9a/0x350 [ 285.237675][T11125] ? mark_lock+0x9a/0x350 [ 285.242014][T11125] __lock_acquire+0x1346/0x1fd0 [ 285.246954][T11125] lock_acquire+0x1ed/0x550 [ 285.251437][T11125] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 285.258184][T11125] ? __pfx_lock_acquire+0x10/0x10 [ 285.263229][T11125] ? __pfx_validate_chain+0x10/0x10 [ 285.268435][T11125] ? validate_chain+0x11e/0x5900 [ 285.273383][T11125] ? __pfx_validate_chain+0x10/0x10 [ 285.278664][T11125] ? exc_int3+0xe/0x80 [ 285.282726][T11125] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 285.289515][T11125] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 285.296130][T11125] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 285.302989][T11125] stack_map_get_build_id_offset+0x9af/0x9d0 [ 285.308968][T11125] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 285.315457][T11125] __bpf_get_stack+0x4ad/0x5a0 [ 285.320207][T11125] ? __pfx___bpf_get_stack+0x10/0x10 [ 285.325499][T11125] ? __perf_event_task_sched_out+0xef6/0x28a0 [ 285.331547][T11125] ? __pfx___cant_migrate+0x10/0x10 [ 285.336730][T11125] bpf_get_stack_raw_tp+0x1a3/0x240 [ 285.341915][T11125] ? bpf_trace_run2+0x1fc/0x540 [ 285.346765][T11125] bpf_prog_ec3b2eefa702d8d3+0x42/0x46 [ 285.352251][T11125] bpf_trace_run2+0x2ec/0x540 [ 285.356926][T11125] ? __pfx_bpf_trace_run2+0x10/0x10 [ 285.362113][T11125] ? ctx_sched_out+0x426/0x560 [ 285.366864][T11125] ? __perf_event_task_sched_out+0x2bb/0x28a0 [ 285.372957][T11125] trace_tlb_flush+0x118/0x140 [ 285.377717][T11125] switch_mm_irqs_off+0x7cb/0xae0 [ 285.382732][T11125] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 285.388265][T11125] __schedule+0x1066/0x4a20 [ 285.392850][T11125] ? __pfx_lock_release+0x10/0x10 [ 285.397875][T11125] ? __pfx___schedule+0x10/0x10 [ 285.402731][T11125] ? __text_poke+0xa6b/0xd30 [ 285.407305][T11125] ? preempt_schedule+0xe1/0xf0 [ 285.412252][T11125] preempt_schedule_common+0x84/0xd0 [ 285.417565][T11125] preempt_schedule+0xe1/0xf0 [ 285.422252][T11125] ? __pfx_preempt_schedule+0x10/0x10 [ 285.427623][T11125] ? faultin_page_range+0x394/0x850 [ 285.432823][T11125] ? faultin_page_range+0x394/0x850 [ 285.438287][T11125] preempt_schedule_thunk+0x1a/0x30 [ 285.443580][T11125] _raw_spin_unlock+0x3e/0x50 [ 285.448268][T11125] __text_poke+0xa6b/0xd30 [ 285.452685][T11125] ? faultin_page_range+0x394/0x850 [ 285.457867][T11125] ? __pfx_text_poke_memcpy+0x10/0x10 [ 285.463221][T11125] ? __pfx___text_poke+0x10/0x10 [ 285.468141][T11125] ? __pfx___might_resched+0x10/0x10 [ 285.473406][T11125] ? __mutex_trylock_common+0x183/0x2e0 [ 285.478944][T11125] ? __pfx___might_resched+0x10/0x10 [ 285.484220][T11125] ? faultin_page_range+0x394/0x850 [ 285.489399][T11125] text_poke_bp_batch+0x265/0xb30 [ 285.494408][T11125] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 285.499960][T11125] ? __pfx___mutex_lock+0x10/0x10 [ 285.504967][T11125] ? arch_jump_label_transform_queue+0x9b/0x100 [ 285.511214][T11125] text_poke_finish+0x30/0x50 [ 285.515898][T11125] arch_jump_label_transform_apply+0x1c/0x30 [ 285.521861][T11125] static_key_enable_cpuslocked+0x136/0x260 [ 285.527770][T11125] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 285.535033][T11125] static_key_enable+0x1a/0x20 [ 285.539800][T11125] tracepoint_add_func+0x953/0x9e0 [ 285.544896][T11125] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 285.552157][T11125] tracepoint_probe_register_prio_may_exist+0x122/0x190 [ 285.559077][T11125] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 285.566528][T11125] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 285.573887][T11125] ? anon_inode_getfile+0xff/0x180 [ 285.578980][T11125] ? bpf_probe_register+0x134/0x1f0 [ 285.584160][T11125] bpf_raw_tp_link_attach+0x48b/0x6e0 [ 285.589514][T11125] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 285.595399][T11125] bpf_raw_tracepoint_open+0x1c2/0x240 [ 285.600837][T11125] __sys_bpf+0x3c0/0x810 [ 285.605067][T11125] ? __pfx___sys_bpf+0x10/0x10 [ 285.609812][T11125] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 285.615871][T11125] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 285.621835][T11125] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.628149][T11125] ? do_syscall_64+0x100/0x230 [ 285.632909][T11125] __x64_sys_bpf+0x7c/0x90 [ 285.637311][T11125] do_syscall_64+0xf3/0x230 [ 285.641796][T11125] ? clear_bhb_loop+0x35/0x90 [ 285.646516][T11125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.652405][T11125] RIP: 0033:0x7f798067cf69 [ 285.656806][T11125] Code: Unable to access opcode bytes at 0x7f798067cf3f. [ 285.663820][T11125] RSP: 002b:00007f79813e90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.672215][T11125] RAX: ffffffffffffffda RBX: 00007f79807b3f80 RCX: 00007f798067cf69 [ 285.680168][T11125] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011 [ 285.688120][T11125] RBP: 00007f79806da6fe R08: 0000000000000000 R09: 0000000000000000 [ 285.696083][T11125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 2024/06/10 04:33:25 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 285.704038][T11125] R13: 000000000000000b R14: 00007f79807b3f80 R15: 00007ffdee668988 [ 285.712005][T11125] [ 285.824102][T10884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.920685][T10820] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 286.045011][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.077830][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.087685][T10820] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 286.164970][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.173541][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.243507][T11119] bridge0: port 5(syz_tun) entered disabled state [