last executing test programs: 1m45.426469928s ago: executing program 3 (id=124): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) (async) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x90, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x40, 0x32, 0x0, 0x7, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x5000) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000c044) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) 1m27.896465024s ago: executing program 4 (id=409): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 1m27.33503502s ago: executing program 4 (id=413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600b000014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010048180000000000000000000000000000000200000000"], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) 1m25.195993473s ago: executing program 3 (id=124): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) (async) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x90, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x40, 0x32, 0x0, 0x7, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x5000) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000c044) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) 1m3.627832384s ago: executing program 4 (id=413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600b000014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010048180000000000000000000000000000000200000000"], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) 1m3.032835914s ago: executing program 3 (id=124): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) (async) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x90, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x40, 0x32, 0x0, 0x7, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x5000) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000c044) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) 45.984559307s ago: executing program 3 (id=124): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) (async) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x90, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x40, 0x32, 0x0, 0x7, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x5000) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000c044) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) 45.446522128s ago: executing program 4 (id=413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600b000014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010048180000000000000000000000000000000200000000"], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) 28.367819309s ago: executing program 3 (id=124): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) (async) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x90, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x40, 0x32, 0x0, 0x7, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x5000) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000c044) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) 26.836159808s ago: executing program 4 (id=413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600b000014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010048180000000000000000000000000000000200000000"], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) 9.455034959s ago: executing program 4 (id=413): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600b000014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010048180000000000000000000000000000000200000000"], &(0x7f00000001c0)=""/201, 0x1a, 0xc9, 0x1, 0x0, 0x0, @void, @value}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) 8.415260778s ago: executing program 3 (id=124): openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) (async) socketpair(0x9, 0x3, 0x10000, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x90, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x40, 0x32, 0x0, 0x7, 0x0, 0x0, 0xfbff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x5000) setsockopt$sock_attach_bpf(r2, 0x84, 0x76, &(0x7f0000000000)=r5, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2000c044) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) 3.456860064s ago: executing program 2 (id=880): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) r0 = perf_event_open$cgroup(&(0x7f0000000500)={0x4, 0x80, 0xff, 0x1, 0x7f, 0x55, 0x0, 0xffff, 0x2810, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x4}, 0x2840, 0x2, 0x0, 0x8, 0xc, 0x33f, 0x2a3, 0x0, 0x5, 0x0, 0x301}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743c, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000004000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008d3a100004000000bf91000000000000b70200000200"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400c3000000956bf35106d6f72e2fb8990380f0fa8c9556063f7768de895da3b26cc17e2ecae087678484d48dc28ac29ab0c4ad7a5c9edcbafcc0f6db49418ed352fb84e3418b556b6502f40a0825e360f40924"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000030000000000000000000000fd19d38f51d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000600000000000000000000000000000000d273224bc980c3a322e1f36d3d086fe3b523080731adaecc52b5d34e2cf6a7bd8fc76fc35b5efd84768aecd846020272aa8f62b8aeff714b10b20f9408731f5b5647ead3167c9e6e3b99cdde6d2d859f16161abbe40abcf6b8397bb4ffacb219b857e64a7d56002e3e098fbd313e15f0759f25bea5f668d34d67c26f4de9e556c2de216629b3cf212c43a8244480"], 0x48) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x6b6, 0x0, 0xb, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000740)}, 0x20) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001418) ioctl$TUNSETOFFLOAD(r3, 0x40107447, 0x20000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='rpcgss_svc_seqno_bad\x00', r1, 0x0, 0x100000002}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r6, @ANYRESHEX=r5, @ANYRES32, @ANYRES32=0x0, @ANYRESDEC=r8, @ANYRESDEC=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0xd50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000010000000000000000000004180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000051317580b70300000000000085000000050000001801000020646c250000000000202020db1af8ff51000000bda100000000002007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000f5ff0000008ff39f32f01827dc000000007b8af8ff00000004b7080000000000007b8af0ff00000000bfa1000000000000070100008f864ea53fd230331608426ff8ff47ffffbfa400000000000007840000f0ffff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 3.38441916s ago: executing program 1 (id=881): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x4, 0x2, 0x5, 0x2, 0x0, 0x4d, 0x100, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x40, 0x551, 0xca, 0x2, 0xfffffffffffffffc, 0x800, 0x5, 0x0, 0xca45, 0x0, 0x1ff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x1, 0x9, [@multicast, @empty, @empty, @remote, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc60a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d254f9ea7b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cacee1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40) 3.09116978s ago: executing program 0 (id=884): r0 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80044944, 0x0) 2.991562309s ago: executing program 0 (id=885): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc60a10a0015000600142603600e12a4000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d254f9ea7b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cacee1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40) 1.860663086s ago: executing program 0 (id=886): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b06, 0x0) 1.85964958s ago: executing program 1 (id=887): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0xffffffa6) 1.804466402s ago: executing program 0 (id=888): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0x241, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='m', 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 1.750627848s ago: executing program 1 (id=889): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x13, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x7fffffff}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x130, 0x0, &(0x7f00000011c0)="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", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='kfree_skb\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xd9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={r1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) 1.701148134s ago: executing program 2 (id=890): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0xe, 0x0, 0x66, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@fallback=r0, r0, 0x4, 0x4, r0, @void, @value=r1, @void, @void, r2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d001000250002000f2c000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.456992612s ago: executing program 0 (id=891): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x14a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) 1.25069675s ago: executing program 2 (id=892): socket$kcm(0x2, 0x5, 0x84) (async) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x10) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90a24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x23, &(0x7f0000000000)=r8, 0x8) 446.013351ms ago: executing program 2 (id=893): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 377.813169ms ago: executing program 0 (id=894): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f00000001c0), &(0x7f0000000040)=""/85}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x10, &(0x7f0000000d00)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$inet(r1, &(0x7f00000017c0)={&(0x7f0000000cc0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r5, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x13, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000d40)=""/212, 0xd4}, {&(0x7f0000000b00)=""/246, 0xf6}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000005680)=""/4100, 0x1004}, {&(0x7f0000004680)=""/4094, 0xffe}, {&(0x7f0000000cc0)=""/88, 0x58}], 0xa}, 0x0) recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000900)={'netdevsim0\x00', @random='\x00\x00\x00 \x00'}) 250.824183ms ago: executing program 1 (id=895): r0 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x80044944, 0x0) 238.860317ms ago: executing program 1 (id=896): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000008c0)='H', 0x1}], 0x1}, 0x881) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x2e, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="851000000600000018160000", @ANYRES32=r4, @ANYBLOB="0001000000000000f7900500bef1ffff18000000ca0000000000000004000000"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x6a, &(0x7f0000000380)=""/106, 0x40f00, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x80000000, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[r4], &(0x7f0000000640)=[{0x2, 0x5, 0x5, 0xc}, {0x0, 0x1, 0x2, 0x1}, {0x4, 0x2, 0xe, 0xc}, {0x4, 0x4, 0x2, 0x1}, {0x5, 0x5, 0xa, 0x8}, {0x2, 0x2, 0x7, 0x6}, {0x5, 0x5, 0x9}], 0x10, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r7, 0x0, 0x24, 0x68, &(0x7f0000000780)="6408720cdecf635d2965fe24b8cce401c80aa0425ff47cebb5bc5542b9443eb10e907b3d", &(0x7f00000007c0)=""/104, 0x7, 0x0, 0x91, 0xbf, &(0x7f0000000840)="d18ef08472ac7dd941bef2d735ae2739d20bed28d633a7e6bd41e4a656f1af744e0596ec5a084acd4a5f6e1a63fd89f76984ae0c07a4e265b1e2ab61928b81528f8e5f86a3dadc908a57b2c98f956cba585db08c6e397b0ea513fc05d742a3cf37cc6573515eef166afa21d0ceb9102fbfd42500ae5a1e43ca23eccbbeeb3dedcad235b4eb6ef614152f9edd2a6c9ab9d4", &(0x7f0000000f40)="0a8da981e2e4888959b44da88520e58d5805dc2a60e040a6dd0972e1239240003346586052cab2df9591a74b3d6dfadb79530cc8c233b97dcbcb8f7f12a3fe42cf6aed1a3555185e8371b3d01a7ede318ce1893c85dffea2c0f8f89e0cbfcab0e39f4bc90cf2493cc87b19b33a3ae8b34d1dade356773022c28c59b12d32bc0dd1dd0414fb8db1a24f9ee98be6d7c2c4f19f306de321f277e155f3a55350dd9af1d50d653d170d9024b4f764f61335a62449c784eaa1f484af1c271de02cc8", 0x5, 0x0, 0x2}, 0x50) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a800160004000140060700000000000000d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4e1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccfb42b1073520ae", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000940)="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", 0x162}, {&(0x7f0000003bc0)="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", 0xde6}], 0x2}, 0x9cdc2384056b48b8) 228.877714ms ago: executing program 2 (id=897): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0x2f, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) 14.676601ms ago: executing program 2 (id=898): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x400000005, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) (async, rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x18}, 0xc) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0xffffffff, 0x1, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x3d, 0x29, &(0x7f0000000080)="d4d1994c03da66d4672558cb2b51c9329204883473a55ac779fe72399e209e7a9addabf1f9d0eef932480319fc48318a1e17fff18a125fd906278f4224", &(0x7f0000000200)=""/41, 0xfffffffd, 0x0, 0x19, 0x2f, &(0x7f0000000280)="dda9bb14435b86de575e528bddf8d02568420228b24c271806", &(0x7f0000000300)="f82a48fa66a78d100587fa233ff9fd6c1ca8e21e5778ad6602eb9b0109574dd47756422139800e347125fb66a7585e", 0x1, 0x0, 0x2}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeb2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=899): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xf}, 0x56, 0x0, 0xf00}, 0x0) kernel console output (not intermixed with test programs): c 0x1003 length: 249 > 9 [ 129.966635][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 129.989444][ T7249] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 129.999312][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.005845][ T7249] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.325'. [ 130.032266][ T6128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.058938][ T7246] netlink: 'syz.4.323': attribute type 7 has an invalid length. [ 130.063489][ T7249] nbd: couldn't find a device at index 64 [ 130.076204][ T5153] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.090245][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.096629][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 130.166839][ T6128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.333494][ T7262] netlink: set zone limit has 8 unknown bytes [ 130.334327][ T6128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.564504][ T6128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.614477][ T7276] netlink: 'syz.2.333': attribute type 7 has an invalid length. [ 130.665196][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 130.795458][ T7278] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 130.805080][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 130.922517][ T6128] bridge_slave_1: left allmulticast mode [ 130.929454][ T6128] bridge_slave_1: left promiscuous mode [ 130.955957][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.989092][ T6128] bridge_slave_0: left allmulticast mode [ 131.004293][ T6128] bridge_slave_0: left promiscuous mode [ 131.021397][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.259388][ T7296] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 131.269880][ T7296] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.339'. [ 131.280415][ T7296] nbd: couldn't find a device at index 64 [ 131.389783][ T7300] netlink: set zone limit has 8 unknown bytes [ 131.549003][ T5153] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 131.681208][ T6128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.699943][ T6128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.726928][ T6128] bond0 (unregistering): Released all slaves [ 131.803392][ T7250] chnl_net:caif_netlink_parms(): no params data found [ 131.945840][ T7314] netlink: 'syz.1.346': attribute type 3 has an invalid length. [ 131.973836][ T7314] netlink: 'syz.1.346': attribute type 153 has an invalid length. [ 131.983651][ T7318] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 131.986042][ T7314] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.346'. [ 131.990510][ T7318] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 132.196329][ T5153] Bluetooth: hci0: command tx timeout [ 133.037794][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.044175][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.284634][ T5153] Bluetooth: hci0: command tx timeout [ 135.169146][ T7357] netlink: set zone limit has 8 unknown bytes [ 135.295285][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.345284][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.373725][ T7250] bridge_slave_0: entered allmulticast mode [ 135.394847][ T7250] bridge_slave_0: entered promiscuous mode [ 135.503457][ T7371] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.509936][ T7371] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.614378][ T7373] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.357'. [ 135.674731][ T7373] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 135.996256][ T6128] hsr_slave_0: left promiscuous mode [ 136.003014][ T6128] hsr_slave_1: left promiscuous mode [ 136.082854][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.091614][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.355810][ T5153] Bluetooth: hci0: command tx timeout [ 137.183774][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.192861][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.214933][ T6128] veth1_macvtap: left promiscuous mode [ 137.220785][ T6128] veth0_macvtap: left promiscuous mode [ 137.226616][ T6128] veth1_vlan: left promiscuous mode [ 137.231917][ T6128] veth0_vlan: left promiscuous mode [ 137.551853][ T6128] team0 (unregistering): Port device team_slave_1 removed [ 137.586457][ T6128] team0 (unregistering): Port device team_slave_0 removed [ 137.865137][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.872446][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.884693][ T7250] bridge_slave_1: entered allmulticast mode [ 137.892859][ T7250] bridge_slave_1: entered promiscuous mode [ 137.900067][ T7367] netlink: 'syz.1.356': attribute type 3 has an invalid length. [ 137.909760][ T7367] netlink: 'syz.1.356': attribute type 153 has an invalid length. [ 137.917715][ T7367] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.356'. [ 138.505324][ T5153] Bluetooth: hci0: command tx timeout [ 138.828697][ T7417] netlink: set zone limit has 8 unknown bytes [ 138.904274][ T7403] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 138.912324][ T7403] netlink: 'syz.4.363': attribute type 153 has an invalid length. [ 138.921756][ T7403] netlink: 129204 bytes leftover after parsing attributes in process `syz.4.363'. [ 139.008118][ T7250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.081214][ T7250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.673092][ T7250] team0: Port device team_slave_0 added [ 139.770232][ T7250] team0: Port device team_slave_1 added [ 140.042366][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.053365][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.088253][ T7250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.116272][ T7250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.128907][ T7250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.190135][ T7250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.220070][ T7457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.226577][ T7457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.237467][ T7452] netlink: 'syz.4.372': attribute type 3 has an invalid length. [ 140.245400][ T7452] netlink: 'syz.4.372': attribute type 153 has an invalid length. [ 140.255497][ T7452] netlink: 129204 bytes leftover after parsing attributes in process `syz.4.372'. [ 140.611690][ T7250] hsr_slave_0: entered promiscuous mode [ 140.676094][ T7250] hsr_slave_1: entered promiscuous mode [ 140.705795][ T7250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.713555][ T7250] Cannot create hsr debugfs directory [ 142.126042][ T7472] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 142.295415][ T7481] netlink: 'syz.4.378': attribute type 3 has an invalid length. [ 142.342703][ T7481] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.378'. [ 142.741728][ T7502] netlink: 'syz.4.383': attribute type 3 has an invalid length. [ 142.761564][ T7502] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.383'. [ 143.929458][ T7250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.950996][ T7250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.964349][ T7250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.977860][ T7250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.149688][ T7547] netlink: 'syz.1.394': attribute type 6 has an invalid length. [ 144.195906][ T7547] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.394'. [ 144.272584][ T7250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.424304][ T7250] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.514232][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.521438][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.629640][ T7559] netlink: 'syz.1.398': attribute type 3 has an invalid length. [ 144.669522][ T7559] netlink: 'syz.1.398': attribute type 153 has an invalid length. [ 144.699719][ T7559] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.398'. [ 144.741046][ T7562] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 144.747543][ T7562] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 144.775677][ T7561] netlink: 128 bytes leftover after parsing attributes in process `syz.2.397'. [ 144.813233][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.820434][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.536270][ T7250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.621501][ T7250] veth0_vlan: entered promiscuous mode [ 145.660659][ T7250] veth1_vlan: entered promiscuous mode [ 145.728953][ T7250] veth0_macvtap: entered promiscuous mode [ 145.849430][ T7585] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 145.920503][ T7585] batman_adv: batadv0: Removing interface: team0 [ 146.029383][ T7585] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.078300][ T7585] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.128808][ T7250] veth1_macvtap: entered promiscuous mode [ 146.174460][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.215651][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.235714][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.255628][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.282180][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.294319][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.306225][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.315754][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.326494][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.336917][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.348725][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.358717][ T7250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.369253][ T7250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.380282][ T7250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.390188][ T7250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.399029][ T7250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.407833][ T7250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.416591][ T7250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.557514][ T7610] netlink: set zone limit has 8 unknown bytes [ 146.621233][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.644516][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.729852][ T7611] netlink: 'syz.1.407': attribute type 29 has an invalid length. [ 146.759793][ T7606] netlink: 'syz.1.407': attribute type 29 has an invalid length. [ 146.810054][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.830254][ T7611] netlink: 'syz.1.407': attribute type 29 has an invalid length. [ 146.850221][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.080872][ T7618] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.410'. [ 147.285710][ T7624] netlink: 132 bytes leftover after parsing attributes in process `syz.1.407'. [ 147.495309][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.622787][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.917684][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.217674][ T7664] netlink: set zone limit has 8 unknown bytes [ 148.291357][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.300309][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.308306][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.317114][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.326208][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.334286][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.383221][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.422344][ T7690] netlink: 'syz.0.422': attribute type 3 has an invalid length. [ 149.443963][ T7690] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.422'. [ 149.541891][ T7694] netlink: 'syz.2.421': attribute type 3 has an invalid length. [ 149.549872][ T7694] netlink: 'syz.2.421': attribute type 153 has an invalid length. [ 149.558867][ T7694] netlink: 129204 bytes leftover after parsing attributes in process `syz.2.421'. [ 149.919899][ T11] bridge_slave_1: left allmulticast mode [ 149.937266][ T11] bridge_slave_1: left promiscuous mode [ 149.943614][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.962181][ T11] bridge_slave_0: left allmulticast mode [ 149.972101][ T11] bridge_slave_0: left promiscuous mode [ 149.997267][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.435711][ T54] Bluetooth: hci0: command tx timeout [ 150.517984][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 150.534871][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 150.542664][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 150.568445][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 150.577452][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 150.584804][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 150.662619][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.676486][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.691089][ T11] bond0 (unregistering): Released all slaves [ 150.838982][ T7721] syzkaller0: entered promiscuous mode [ 150.849501][ T7721] syzkaller0: entered allmulticast mode [ 150.871658][ T7666] chnl_net:caif_netlink_parms(): no params data found [ 152.519663][ T5153] Bluetooth: hci0: command tx timeout [ 152.680205][ T5153] Bluetooth: hci2: command tx timeout [ 153.165917][ T7736] bridge0: port 3(veth0_to_bond) entered blocking state [ 153.173129][ T7736] bridge0: port 3(veth0_to_bond) entered disabled state [ 153.182608][ T7736] veth0_to_bond: entered allmulticast mode [ 153.190017][ T7736] veth0_to_bond: entered promiscuous mode [ 153.196894][ T7736] bridge0: port 3(veth0_to_bond) entered blocking state [ 153.204065][ T7736] bridge0: port 3(veth0_to_bond) entered forwarding state [ 153.212735][ T7737] veth0_to_bond: left allmulticast mode [ 153.221084][ T7737] veth0_to_bond: left promiscuous mode [ 153.227350][ T7737] bridge0: port 3(veth0_to_bond) entered disabled state [ 153.477706][ T3498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 153.527608][ T7753] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 153.535755][ T7753] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.434'. [ 153.564806][ T11] hsr_slave_0: left promiscuous mode [ 153.573878][ T11] hsr_slave_1: left promiscuous mode [ 153.612602][ T11] veth1_macvtap: left promiscuous mode [ 153.623683][ T11] veth0_macvtap: left promiscuous mode [ 153.636453][ T11] veth1_vlan: left promiscuous mode [ 153.666710][ T11] @ÿ: left promiscuous mode [ 154.060738][ T11] team0 (unregistering): Port device vlan0 removed [ 154.333985][ T11] team0 (unregistering): Port device team_slave_1 removed [ 154.370580][ T11] team0 (unregistering): Port device team_slave_0 removed [ 154.597524][ T5153] Bluetooth: hci0: command tx timeout [ 154.684158][ T7758] netlink: 'syz.1.435': attribute type 10 has an invalid length. [ 154.693066][ T7758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.435'. [ 154.703695][ T7758] bridge0: port 3(batadv0) entered blocking state [ 154.723364][ T7758] bridge0: port 3(batadv0) entered disabled state [ 154.731121][ T7758] batadv0: entered allmulticast mode [ 154.737817][ T7758] batadv0: entered promiscuous mode [ 154.744123][ T7758] bridge0: port 3(batadv0) entered blocking state [ 154.750675][ T7758] bridge0: port 3(batadv0) entered forwarding state [ 154.757837][ T5153] Bluetooth: hci2: command tx timeout [ 154.776755][ T7764] netlink: 'syz.1.435': attribute type 2 has an invalid length. [ 154.873762][ T3498] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 154.883316][ T3498] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 154.895955][ T7666] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.964065][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.008525][ T7666] bridge_slave_0: entered allmulticast mode [ 155.034474][ T7666] bridge_slave_0: entered promiscuous mode [ 155.275535][ T7666] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.321736][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.358089][ T7666] bridge_slave_1: entered allmulticast mode [ 155.424357][ T7666] bridge_slave_1: entered promiscuous mode [ 156.688642][ T5153] Bluetooth: hci0: command tx timeout [ 156.839652][ T5153] Bluetooth: hci2: command tx timeout [ 157.377842][ T7812] veth1_macvtap: left promiscuous mode [ 157.383402][ T7812] macsec0: entered promiscuous mode [ 157.389985][ T7812] macsec0: entered allmulticast mode [ 157.464018][ T7666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.474276][ T7813] veth1_macvtap: entered promiscuous mode [ 157.485329][ T7813] veth1_macvtap: entered allmulticast mode [ 157.651079][ T7666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.826367][ T7666] team0: Port device team_slave_0 added [ 157.868250][ T7666] team0: Port device team_slave_1 added [ 158.040363][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.158251][ T7666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.165239][ T7666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.206719][ T7834] netlink: set zone limit has 8 unknown bytes [ 158.257397][ T7666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.286865][ T7724] chnl_net:caif_netlink_parms(): no params data found [ 158.388737][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.442621][ T7666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.456494][ T7666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.525370][ T7666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.623885][ T7854] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.630379][ T7854] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 158.716225][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.733040][ T7850] netlink: 'syz.1.459': attribute type 3 has an invalid length. [ 158.745837][ T7850] netlink: 'syz.1.459': attribute type 153 has an invalid length. [ 158.753769][ T7850] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.459'. [ 158.803328][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.912736][ T7865] delete_channel: no stack [ 158.922157][ T7865] delete_channel: no stack [ 158.926032][ T5153] Bluetooth: hci2: command tx timeout [ 158.952453][ T7858] netlink: 'syz.2.461': attribute type 21 has an invalid length. [ 158.974079][ T7858] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 159.013594][ T7862] FAULT_INJECTION: forcing a failure. [ 159.013594][ T7862] name failslab, interval 1, probability 0, space 0, times 0 [ 159.028919][ T7865] netlink: 763 bytes leftover after parsing attributes in process `syz.0.462'. [ 159.034951][ T7862] CPU: 1 UID: 0 PID: 7862 Comm: syz.1.463 Not tainted 6.12.0-rc4-syzkaller-ge626a13f6fbb #0 [ 159.047960][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.058043][ T7862] Call Trace: [ 159.061340][ T7862] [ 159.064293][ T7862] dump_stack_lvl+0x241/0x360 [ 159.069003][ T7862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.074227][ T7862] ? __pfx__printk+0x10/0x10 [ 159.078844][ T7862] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 159.084854][ T7862] ? __pfx___might_resched+0x10/0x10 [ 159.090174][ T7862] should_fail_ex+0x3b0/0x4e0 [ 159.094879][ T7862] should_failslab+0xac/0x100 [ 159.099578][ T7862] ? __alloc_skb+0x1c3/0x440 [ 159.104195][ T7862] kmem_cache_alloc_node_noprof+0x71/0x320 [ 159.110035][ T7862] __alloc_skb+0x1c3/0x440 [ 159.114478][ T7862] ? __pfx___mutex_lock+0x10/0x10 [ 159.119527][ T7862] ? kmem_cache_free+0x1a2/0x420 [ 159.124498][ T7862] ? __pfx___alloc_skb+0x10/0x10 [ 159.129469][ T7862] netlink_dump+0x2cd/0xd80 [ 159.134010][ T7862] ? __pfx_netlink_dump+0x10/0x10 [ 159.139075][ T7862] ? netlink_recvmsg+0x60a/0x11d0 [ 159.144122][ T7862] ? kmem_cache_free+0x1a2/0x420 [ 159.149088][ T7862] ? netlink_recvmsg+0x60a/0x11d0 [ 159.154140][ T7862] netlink_recvmsg+0x6bb/0x11d0 [ 159.159027][ T7862] ? __pfx_netlink_recvmsg+0x10/0x10 [ 159.164340][ T7862] ? __pfx_aa_sk_perm+0x10/0x10 [ 159.169216][ T7862] ? __pfx___might_resched+0x10/0x10 [ 159.174526][ T7862] ? iovec_from_user+0x61/0x240 [ 159.179404][ T7862] ? aa_sock_msg_perm+0x91/0x160 [ 159.184365][ T7862] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 159.189672][ T7862] ? __pfx_netlink_recvmsg+0x10/0x10 [ 159.194985][ T7862] sock_recvmsg+0x22f/0x280 [ 159.199526][ T7862] ____sys_recvmsg+0x1c6/0x480 [ 159.204325][ T7862] ? __pfx_____sys_recvmsg+0x10/0x10 [ 159.209660][ T7862] __sys_recvmsg+0x2e6/0x3d0 [ 159.214286][ T7862] ? __pfx___sys_recvmsg+0x10/0x10 [ 159.219425][ T7862] ? __mutex_unlock_slowpath+0x21d/0x750 [ 159.225101][ T7862] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 159.231281][ T7862] ? do_syscall_64+0xb6/0x230 [ 159.235992][ T7862] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.242349][ T7862] ? do_syscall_64+0x100/0x230 [ 159.247141][ T7862] ? do_syscall_64+0xb6/0x230 [ 159.251844][ T7862] do_syscall_64+0xf3/0x230 [ 159.256372][ T7862] ? clear_bhb_loop+0x35/0x90 [ 159.261073][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.266993][ T7862] RIP: 0033:0x7f3a73f7e719 [ 159.271430][ T7862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.291047][ T7862] RSP: 002b:00007f3a74d29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 159.299471][ T7862] RAX: ffffffffffffffda RBX: 00007f3a74135f80 RCX: 00007f3a73f7e719 [ 159.307437][ T7862] RDX: 0000000000000000 RSI: 0000000020000c00 RDI: 0000000000000003 [ 159.315399][ T7862] RBP: 00007f3a74d29090 R08: 0000000000000000 R09: 0000000000000000 [ 159.323367][ T7862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.331333][ T7862] R13: 0000000000000000 R14: 00007f3a74135f80 R15: 00007ffeb0b548f8 [ 159.339327][ T7862] [ 159.351564][ T7666] hsr_slave_0: entered promiscuous mode [ 159.393843][ T7666] hsr_slave_1: entered promiscuous mode [ 159.480043][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.509048][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.529501][ T7724] bridge_slave_0: entered allmulticast mode [ 159.547212][ T7724] bridge_slave_0: entered promiscuous mode [ 159.562872][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.572774][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.580416][ T7724] bridge_slave_1: entered allmulticast mode [ 159.589148][ T7724] bridge_slave_1: entered promiscuous mode [ 159.789581][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.841249][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.907899][ T7893] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.471'. [ 159.980863][ T11] bridge_slave_1: left allmulticast mode [ 160.004024][ T11] bridge_slave_1: left promiscuous mode [ 160.023955][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.050964][ T11] bridge_slave_0: left allmulticast mode [ 160.066493][ T11] bridge_slave_0: left promiscuous mode [ 160.078348][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.590136][ T7910] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 160.596781][ T7910] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 160.644600][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.663749][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.682637][ T11] bond0 (unregistering): Released all slaves [ 160.708555][ T7724] team0: Port device team_slave_0 added [ 160.732355][ T7902] netlink: 'syz.0.472': attribute type 33 has an invalid length. [ 160.865209][ T7909] netlink: 'syz.2.473': attribute type 3 has an invalid length. [ 160.889228][ T7909] netlink: 'syz.2.473': attribute type 153 has an invalid length. [ 160.913443][ T7909] netlink: 129204 bytes leftover after parsing attributes in process `syz.2.473'. [ 161.007096][ T7724] team0: Port device team_slave_1 added [ 161.087541][ T7914] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 161.095488][ T7914] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.474'. [ 161.253100][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.263748][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.315713][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.769554][ T7940] netlink: set zone limit has 8 unknown bytes [ 162.785446][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.793959][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.820451][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.918584][ T7943] netlink: set zone limit has 8 unknown bytes [ 163.344409][ T11] hsr_slave_0: left promiscuous mode [ 163.355198][ T11] hsr_slave_1: left promiscuous mode [ 163.373012][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.401540][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.438934][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.463572][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.545026][ T11] veth1_macvtap: left promiscuous mode [ 163.564125][ T11] veth0_macvtap: left promiscuous mode [ 163.574443][ T11] veth1_vlan: left promiscuous mode [ 163.592378][ T11] veth0_vlan: left promiscuous mode [ 164.101955][ T11] team0 (unregistering): Port device team_slave_1 removed [ 164.142791][ T11] team0 (unregistering): Port device team_slave_0 removed [ 164.502776][ T7724] hsr_slave_0: entered promiscuous mode [ 164.509899][ T7724] hsr_slave_1: entered promiscuous mode [ 164.522005][ T7724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.529951][ T7724] Cannot create hsr debugfs directory [ 164.535468][ T7959] netlink: 'syz.1.486': attribute type 2 has an invalid length. [ 164.550046][ T7962] netlink: 'syz.0.488': attribute type 3 has an invalid length. [ 164.558965][ T7962] netlink: 'syz.0.488': attribute type 153 has an invalid length. [ 164.568539][ T7962] netlink: 129204 bytes leftover after parsing attributes in process `syz.0.488'. [ 164.578612][ T7968] netlink: 2 bytes leftover after parsing attributes in process `syz.2.489'. [ 164.588215][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.612838][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.630827][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.651443][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.667916][ T7968] batadv_slave_1: entered promiscuous mode [ 165.002761][ T7666] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.041959][ T7978] netlink: set zone limit has 8 unknown bytes [ 165.052472][ T7666] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.208988][ T7666] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.222519][ T7666] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.240473][ T7983] netlink: 'syz.2.496': attribute type 3 has an invalid length. [ 165.248624][ T7983] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.496'. [ 165.421625][ T5153] Bluetooth: hci1: Malformed LE Event: 0x0d [ 165.587897][ T8006] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 165.589778][ T7998] netlink: 'syz.1.501': attribute type 3 has an invalid length. [ 165.594360][ T8006] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 165.617743][ T7998] netlink: 'syz.1.501': attribute type 153 has an invalid length. [ 165.677758][ T7998] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.501'. [ 165.738642][ T7666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.760337][ T7666] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.793282][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.800480][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.913133][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.920401][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.079610][ T8022] netlink: set zone limit has 8 unknown bytes [ 166.158387][ T8026] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.509'. [ 166.225225][ T7724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 166.274036][ T7724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.352852][ T8037] netlink: 11 bytes leftover after parsing attributes in process `syz.2.511'. [ 166.376671][ T8037] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 166.394444][ T7724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 166.415875][ T7724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.445421][ T8037] netlink: 'syz.2.511': attribute type 2 has an invalid length. [ 166.666502][ T8054] FAULT_INJECTION: forcing a failure. [ 166.666502][ T8054] name failslab, interval 1, probability 0, space 0, times 0 [ 166.677190][ T7666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.704566][ T8054] CPU: 0 UID: 0 PID: 8054 Comm: syz.2.515 Not tainted 6.12.0-rc4-syzkaller-ge626a13f6fbb #0 [ 166.714694][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.724773][ T8054] Call Trace: [ 166.728072][ T8054] [ 166.731023][ T8054] dump_stack_lvl+0x241/0x360 [ 166.735728][ T8054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.740979][ T8054] ? __pfx__printk+0x10/0x10 [ 166.745603][ T8054] ? ref_tracker_alloc+0x332/0x490 [ 166.750733][ T8054] should_fail_ex+0x3b0/0x4e0 [ 166.755417][ T8054] ? skb_clone+0x20c/0x390 [ 166.759835][ T8054] should_failslab+0xac/0x100 [ 166.764527][ T8054] ? skb_clone+0x20c/0x390 [ 166.768959][ T8054] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 166.774344][ T8054] skb_clone+0x20c/0x390 [ 166.778596][ T8054] __netlink_deliver_tap+0x3cc/0x7c0 [ 166.783898][ T8054] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.789099][ T8054] netlink_deliver_tap+0x19d/0x1b0 [ 166.794212][ T8054] netlink_unicast+0x7c4/0x990 [ 166.798983][ T8054] ? __pfx_netlink_unicast+0x10/0x10 [ 166.804269][ T8054] ? __virt_addr_valid+0x183/0x530 [ 166.809379][ T8054] ? __check_object_size+0x48e/0x900 [ 166.814670][ T8054] netlink_sendmsg+0x8e4/0xcb0 [ 166.819442][ T8054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.824727][ T8054] ? aa_sock_msg_perm+0x91/0x160 [ 166.829666][ T8054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.834944][ T8054] __sock_sendmsg+0x221/0x270 [ 166.839624][ T8054] ____sys_sendmsg+0x52a/0x7e0 [ 166.844396][ T8054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.849691][ T8054] __sys_sendmsg+0x292/0x380 [ 166.854290][ T8054] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.859413][ T8054] ? irqentry_enter+0x39/0x60 [ 166.864095][ T8054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.870447][ T8054] do_syscall_64+0xf3/0x230 [ 166.874951][ T8054] ? clear_bhb_loop+0x35/0x90 [ 166.879631][ T8054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.885521][ T8054] RIP: 0033:0x7f5a2457e719 [ 166.889935][ T8054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.909538][ T8054] RSP: 002b:00007f5a25356038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.917955][ T8054] RAX: ffffffffffffffda RBX: 00007f5a24735f80 RCX: 00007f5a2457e719 [ 166.925921][ T8054] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000d [ 166.933888][ T8054] RBP: 00007f5a25356090 R08: 0000000000000000 R09: 0000000000000000 [ 166.941853][ T8054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.949820][ T8054] R13: 0000000000000000 R14: 00007f5a24735f80 R15: 00007ffc58713808 [ 166.957809][ T8054] [ 167.013471][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.095157][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.133074][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.140270][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.220482][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.227655][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.369632][ T8072] netlink: 'syz.0.517': attribute type 7 has an invalid length. [ 167.440889][ T8078] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 167.548051][ T8078] bond0: (slave bond_slave_0): Releasing backup interface [ 167.693059][ T8084] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 167.715379][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 167.801101][ T7666] veth0_vlan: entered promiscuous mode [ 167.814382][ T7666] veth1_vlan: entered promiscuous mode [ 167.844270][ T7666] veth0_macvtap: entered promiscuous mode [ 167.854629][ T7666] veth1_macvtap: entered promiscuous mode [ 167.870954][ T7666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.881485][ T7666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.891421][ T7666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.901391][ T8094] netlink: 'syz.2.521': attribute type 9 has an invalid length. [ 167.901969][ T7666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.919629][ T7666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.930887][ T7666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.942752][ T7666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.951382][ T8094] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.521'. [ 167.964427][ T7666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.976247][ T7666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.986197][ T7666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.005682][ T7666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.022756][ T7666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.035769][ T7666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.066814][ T7666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.140220][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.161526][ T7666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.182347][ T7666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.208631][ T7666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.226480][ T7666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.449033][ T7724] veth0_vlan: entered promiscuous mode [ 168.550843][ T7724] veth1_vlan: entered promiscuous mode [ 168.571796][ T8114] netlink: 2 bytes leftover after parsing attributes in process `syz.1.525'. [ 168.593893][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.621131][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.636126][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.659003][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.669022][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.680593][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.690995][ T8114] batadv_slave_1: entered promiscuous mode [ 168.712493][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.760241][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.853804][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.863266][ T7724] veth0_macvtap: entered promiscuous mode [ 168.889636][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.907466][ T7724] veth1_macvtap: entered promiscuous mode [ 168.922861][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.934593][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.945707][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.956652][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.967061][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.979793][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.989857][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.000727][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.013988][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.089136][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.135913][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.168545][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.203840][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.213801][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.235015][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.249792][ T7724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.263273][ T7724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.274923][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.362961][ T7724] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.377387][ T7724] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.390023][ T7724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.399479][ T7724] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.611555][ T8183] netlink: 'syz.0.534': attribute type 7 has an invalid length. [ 170.657444][ T6124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.666344][ T6124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.677270][ T8183] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 170.713805][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 170.739336][ T6124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.766202][ T6124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.892423][ T8196] netlink: 'syz.0.540': attribute type 3 has an invalid length. [ 170.900268][ T8196] netlink: 'syz.0.540': attribute type 153 has an invalid length. [ 170.921197][ T8196] netlink: 129204 bytes leftover after parsing attributes in process `syz.0.540'. [ 170.934874][ T8196] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.941977][ T8196] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 171.060046][ T2992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.075769][ T8200] netlink: set zone limit has 8 unknown bytes [ 171.239475][ T2992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.374248][ T2992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.437901][ T8204] netlink: 'syz.2.544': attribute type 10 has an invalid length. [ 171.455773][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.544'. [ 171.498198][ T8204] veth0_vlan: entered allmulticast mode [ 171.520610][ T8204] bridge0: port 3(veth0_vlan) entered blocking state [ 171.543107][ T8204] bridge0: port 3(veth0_vlan) entered disabled state [ 171.581242][ T8204] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 171.788017][ T2992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.906736][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.923206][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.938726][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.961866][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.970219][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.985010][ T2992] bridge_slave_1: left allmulticast mode [ 171.991030][ T2992] bridge_slave_1: left promiscuous mode [ 171.996973][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.004874][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.023558][ T2992] bridge_slave_0: left allmulticast mode [ 172.029727][ T2992] bridge_slave_0: left promiscuous mode [ 172.036604][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.322394][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.333766][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.345190][ T2992] bond0 (unregistering): Released all slaves [ 172.612007][ T8225] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.549'. [ 172.685976][ T8232] netlink: 'syz.1.550': attribute type 7 has an invalid length. [ 172.727242][ T8235] netlink: 'syz.1.550': attribute type 10 has an invalid length. [ 172.765037][ T8235] bond0: (slave bond_slave_0): Releasing backup interface [ 172.838521][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 173.042020][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.051866][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.060826][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.070401][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.081406][ T5153] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.084801][ T8248] netlink: set zone limit has 8 unknown bytes [ 173.097339][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.202233][ T8253] netlink: 'syz.1.555': attribute type 3 has an invalid length. [ 173.217136][ T8253] netlink: 'syz.1.555': attribute type 153 has an invalid length. [ 173.227970][ T8253] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.555'. [ 173.260612][ T8253] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.267111][ T8253] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.397558][ T8270] netlink: 'syz.2.558': attribute type 9 has an invalid length. [ 173.533358][ T2992] hsr_slave_0: left promiscuous mode [ 173.541568][ T2992] hsr_slave_1: left promiscuous mode [ 173.549941][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.569522][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.579208][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.595828][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.643948][ T2992] veth1_macvtap: left promiscuous mode [ 173.659169][ T2992] veth0_macvtap: left promiscuous mode [ 173.664943][ T2992] veth1_vlan: left promiscuous mode [ 173.671510][ T2992] veth0_vlan: left promiscuous mode [ 174.021565][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 174.036987][ T5153] Bluetooth: hci0: command tx timeout [ 174.063725][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 174.388871][ T8292] netlink: 'syz.2.559': attribute type 29 has an invalid length. [ 174.397617][ T8295] netlink: 188 bytes leftover after parsing attributes in process `syz.1.560'. [ 174.451250][ T8217] chnl_net:caif_netlink_parms(): no params data found [ 174.663015][ T8312] netlink: 'syz.0.563': attribute type 9 has an invalid length. [ 174.777596][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.822638][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.861294][ T8217] bridge_slave_0: entered allmulticast mode [ 174.869262][ T8217] bridge_slave_0: entered promiscuous mode [ 174.896527][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.917288][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.934745][ T8217] bridge_slave_1: entered allmulticast mode [ 174.956087][ T8217] bridge_slave_1: entered promiscuous mode [ 174.992375][ T8330] netlink: 'syz.0.566': attribute type 7 has an invalid length. [ 175.035649][ T8333] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 175.079157][ T8336] netlink: set zone limit has 8 unknown bytes [ 175.114321][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 175.128188][ T8339] delete_channel: no stack [ 175.132728][ T8339] delete_channel: no stack [ 175.155770][ T5153] Bluetooth: hci2: command tx timeout [ 175.193033][ T8217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.239777][ T8217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.258232][ T8341] FAULT_INJECTION: forcing a failure. [ 175.258232][ T8341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.282828][ T8341] CPU: 1 UID: 0 PID: 8341 Comm: syz.1.569 Not tainted 6.12.0-rc4-syzkaller-ge626a13f6fbb #0 [ 175.292959][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.303048][ T8341] Call Trace: [ 175.306349][ T8341] [ 175.309297][ T8341] dump_stack_lvl+0x241/0x360 [ 175.314003][ T8341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.319229][ T8341] ? __pfx__printk+0x10/0x10 [ 175.323861][ T8341] ? snprintf+0xda/0x120 [ 175.328144][ T8341] should_fail_ex+0x3b0/0x4e0 [ 175.332856][ T8341] _copy_to_user+0x2f/0xb0 [ 175.337306][ T8341] simple_read_from_buffer+0xca/0x150 [ 175.342710][ T8341] proc_fail_nth_read+0x1e9/0x250 [ 175.347766][ T8341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.353334][ T8341] ? rw_verify_area+0x55e/0x6f0 [ 175.358181][ T8341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.363733][ T8341] vfs_read+0x201/0xbc0 [ 175.367906][ T8341] ? __pfx_lock_release+0x10/0x10 [ 175.372966][ T8341] ? __pfx_vfs_read+0x10/0x10 [ 175.377675][ T8341] ? __fget_files+0x3f3/0x470 [ 175.382421][ T8341] ? fdget_pos+0x24e/0x320 [ 175.386938][ T8341] ksys_read+0x183/0x2b0 [ 175.391198][ T8341] ? __pfx_ksys_read+0x10/0x10 [ 175.395964][ T8341] ? do_syscall_64+0x100/0x230 [ 175.400736][ T8341] ? do_syscall_64+0xb6/0x230 [ 175.405416][ T8341] do_syscall_64+0xf3/0x230 [ 175.409936][ T8341] ? clear_bhb_loop+0x35/0x90 [ 175.414641][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.420539][ T8341] RIP: 0033:0x7f3a73f7d15c [ 175.424969][ T8341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 175.444581][ T8341] RSP: 002b:00007f3a74d29030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.453000][ T8341] RAX: ffffffffffffffda RBX: 00007f3a74135f80 RCX: 00007f3a73f7d15c [ 175.460971][ T8341] RDX: 000000000000000f RSI: 00007f3a74d290a0 RDI: 0000000000000006 [ 175.468951][ T8341] RBP: 00007f3a74d29090 R08: 0000000000000000 R09: 0000000000000000 [ 175.476929][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.484897][ T8341] R13: 0000000000000000 R14: 00007f3a74135f80 R15: 00007ffeb0b548f8 [ 175.492885][ T8341] [ 175.498060][ T8348] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 175.504450][ T8348] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 175.543668][ T8217] team0: Port device team_slave_0 added [ 175.554020][ T8217] team0: Port device team_slave_1 added [ 175.575851][ T8345] netlink: 'syz.0.571': attribute type 3 has an invalid length. [ 175.583615][ T8345] netlink: 129204 bytes leftover after parsing attributes in process `syz.0.571'. [ 176.115974][ T5153] Bluetooth: hci0: command tx timeout [ 177.235692][ T5153] Bluetooth: hci2: command tx timeout [ 178.195669][ T5153] Bluetooth: hci0: command tx timeout [ 178.715540][ T2992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.821492][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.833818][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.860194][ T8217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.898413][ T8378] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.575'. [ 178.960988][ T2992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.055201][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.072569][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.130183][ T8217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.159847][ T8389] netlink: 62523 bytes leftover after parsing attributes in process `syz.0.578'. [ 179.173147][ T8245] chnl_net:caif_netlink_parms(): no params data found [ 179.199393][ T2992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.230680][ T8217] hsr_slave_0: entered promiscuous mode [ 179.247998][ T8217] hsr_slave_1: entered promiscuous mode [ 179.294251][ T2992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.308424][ T8393] validate_nla: 1 callbacks suppressed [ 179.308441][ T8393] netlink: 'syz.0.579': attribute type 29 has an invalid length. [ 179.325797][ T5153] Bluetooth: hci2: command tx timeout [ 179.370364][ T8393] netlink: 'syz.0.579': attribute type 29 has an invalid length. [ 179.408484][ T8396] netlink: set zone limit has 8 unknown bytes [ 179.632405][ T8399] netlink: 'syz.0.581': attribute type 7 has an invalid length. [ 179.668008][ T8245] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.675152][ T8245] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.704057][ T8245] bridge_slave_0: entered allmulticast mode [ 179.720433][ T8245] bridge_slave_0: entered promiscuous mode [ 179.761284][ T8403] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 179.785106][ T8417] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 179.791640][ T8417] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 179.824533][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 179.841241][ T8413] netlink: 'syz.1.583': attribute type 3 has an invalid length. [ 179.849650][ T8413] netlink: 'syz.1.583': attribute type 153 has an invalid length. [ 179.857961][ T8413] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.583'. [ 179.867916][ T8245] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.885418][ T8245] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.903242][ T8245] bridge_slave_1: entered allmulticast mode [ 179.920981][ T8245] bridge_slave_1: entered promiscuous mode [ 180.105710][ T8245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.154523][ T2992] bridge_slave_1: left allmulticast mode [ 180.165690][ T2992] bridge_slave_1: left promiscuous mode [ 180.174042][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.285441][ T2992] bridge_slave_0: left allmulticast mode [ 180.296730][ T2992] bridge_slave_0: left promiscuous mode [ 180.302638][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.305857][ T5153] Bluetooth: hci0: command tx timeout [ 180.898892][ T8448] netlink: set zone limit has 8 unknown bytes [ 180.945635][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.957662][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.972505][ T2992] bond0 (unregistering): Released all slaves [ 180.986762][ T8245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.144132][ T8245] team0: Port device team_slave_0 added [ 181.153385][ T8450] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 181.162416][ T8450] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 181.178209][ T8450] team0: Device wlan1 is of different type [ 181.186407][ T8449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.226892][ T8245] team0: Port device team_slave_1 added [ 181.317117][ T8453] netlink: 'syz.1.595': attribute type 7 has an invalid length. [ 181.337975][ T8452] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 181.357587][ T8457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.364032][ T8457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.402735][ T5153] Bluetooth: hci2: command tx timeout [ 181.412454][ T8459] FAULT_INJECTION: forcing a failure. [ 181.412454][ T8459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.436554][ T8459] CPU: 1 UID: 0 PID: 8459 Comm: syz.0.597 Not tainted 6.12.0-rc4-syzkaller-ge626a13f6fbb #0 [ 181.446684][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.456780][ T8459] Call Trace: [ 181.460086][ T8459] [ 181.463051][ T8459] dump_stack_lvl+0x241/0x360 [ 181.467805][ T8459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.473054][ T8459] ? __pfx__printk+0x10/0x10 [ 181.477694][ T8459] ? snprintf+0xda/0x120 [ 181.481987][ T8459] should_fail_ex+0x3b0/0x4e0 [ 181.486715][ T8459] _copy_to_user+0x2f/0xb0 [ 181.491172][ T8459] simple_read_from_buffer+0xca/0x150 [ 181.496583][ T8459] proc_fail_nth_read+0x1e9/0x250 [ 181.501646][ T8459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.507242][ T8459] ? rw_verify_area+0x55e/0x6f0 [ 181.512136][ T8459] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.517722][ T8459] vfs_read+0x201/0xbc0 [ 181.521913][ T8459] ? __pfx_lock_release+0x10/0x10 [ 181.526990][ T8459] ? __pfx_vfs_read+0x10/0x10 [ 181.531712][ T8459] ? __fget_files+0x3f3/0x470 [ 181.536446][ T8459] ? fdget_pos+0x24e/0x320 [ 181.540907][ T8459] ksys_read+0x183/0x2b0 [ 181.545189][ T8459] ? __pfx_ksys_read+0x10/0x10 [ 181.549991][ T8459] ? do_syscall_64+0x100/0x230 [ 181.554800][ T8459] ? do_syscall_64+0xb6/0x230 [ 181.559519][ T8459] do_syscall_64+0xf3/0x230 [ 181.564058][ T8459] ? clear_bhb_loop+0x35/0x90 [ 181.568783][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.574710][ T8459] RIP: 0033:0x7fcbb937d15c [ 181.579168][ T8459] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 181.598808][ T8459] RSP: 002b:00007fcbba134030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.607263][ T8459] RAX: ffffffffffffffda RBX: 00007fcbb9535f80 RCX: 00007fcbb937d15c [ 181.615268][ T8459] RDX: 000000000000000f RSI: 00007fcbba1340a0 RDI: 0000000000000005 [ 181.623273][ T8459] RBP: 00007fcbba134090 R08: 0000000000000000 R09: 0000000000000000 [ 181.631273][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.639276][ T8459] R13: 0000000000000000 R14: 00007fcbb9535f80 R15: 00007ffdf6d248b8 [ 181.647310][ T8459] [ 181.664230][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.673291][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.700183][ T8245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.712996][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 181.722473][ T8456] netlink: 'syz.2.596': attribute type 3 has an invalid length. [ 181.730565][ T8456] netlink: 129204 bytes leftover after parsing attributes in process `syz.2.596'. [ 181.817873][ T8245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.825231][ T8245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.854998][ T8245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.928069][ T2992] hsr_slave_0: left promiscuous mode [ 181.939114][ T2992] hsr_slave_1: left promiscuous mode [ 181.954908][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.964237][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.978883][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.995812][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.038742][ T2992] veth1_macvtap: left promiscuous mode [ 182.044409][ T2992] veth0_macvtap: left promiscuous mode [ 182.050297][ T2992] veth1_vlan: left promiscuous mode [ 182.062210][ T2992] veth0_vlan: left promiscuous mode [ 182.530406][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 182.574083][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 183.070812][ T8478] syz.2.603 uses obsolete (PF_INET,SOCK_PACKET) [ 183.118653][ T8245] hsr_slave_0: entered promiscuous mode [ 183.145902][ T8245] hsr_slave_1: entered promiscuous mode [ 183.156608][ T8483] netlink: set zone limit has 8 unknown bytes [ 183.162778][ T8245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.181500][ T8245] Cannot create hsr debugfs directory [ 183.329260][ T8478] hsr_slave_0: left promiscuous mode [ 183.349712][ T8478] hsr_slave_1: left promiscuous mode [ 183.645094][ T8217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.780679][ T8217] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.826632][ T8217] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.839565][ T8217] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 184.059223][ T8515] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.613'. [ 184.268282][ T8245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.301077][ T8217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.317652][ T8217] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.329955][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.337142][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.451079][ T8245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.484540][ T8245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.538748][ T8245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.582667][ T8522] @ÿ: renamed from veth0_vlan (while UP) [ 184.606050][ T8526] validate_nla: 3 callbacks suppressed [ 184.606069][ T8526] netlink: 'syz.0.617': attribute type 7 has an invalid length. [ 184.632820][ T8525] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 184.645957][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.653116][ T8278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.711612][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.617'. [ 184.853522][ T8245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.868929][ T8245] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.901486][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.908658][ T8278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.913453][ T8533] netlink: set zone limit has 8 unknown bytes [ 184.937023][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.944154][ T8278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.969700][ T8217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.015721][ T8537] netlink: 'syz.1.622': attribute type 3 has an invalid length. [ 185.023552][ T8537] netlink: 'syz.1.622': attribute type 153 has an invalid length. [ 185.035939][ T8538] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 185.042365][ T8538] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 185.050780][ T8537] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.622'. [ 185.625153][ T8245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.690951][ T8217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.799260][ T8563] netlink: 'syz.2.626': attribute type 3 has an invalid length. [ 185.816582][ T8245] veth0_vlan: entered promiscuous mode [ 185.822299][ T8563] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.626'. [ 185.888463][ T8245] veth1_vlan: entered promiscuous mode [ 185.993884][ T8245] veth0_macvtap: entered promiscuous mode [ 186.045260][ T8245] veth1_macvtap: entered promiscuous mode [ 186.200250][ T8580] netlink: 'syz.2.631': attribute type 7 has an invalid length. [ 186.257029][ T8580] netlink: 'syz.2.631': attribute type 10 has an invalid length. [ 186.276749][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 186.282942][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 186.282969][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 186.330062][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.341965][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.352589][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.364020][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.377549][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.389191][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.420638][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.429428][ T8586] @ÿ: renamed from veth0_vlan (while UP) [ 186.476623][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 186.522847][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.555740][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.569828][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.580657][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.590901][ T8245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.601743][ T8245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.614611][ T8245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.633441][ T8245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.645372][ T8245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.665675][ T8245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.674425][ T8245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.831561][ T8217] veth0_vlan: entered promiscuous mode [ 186.890737][ T8603] netlink: set zone limit has 8 unknown bytes [ 187.007786][ T8217] veth1_vlan: entered promiscuous mode [ 187.049892][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.076770][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.130848][ T8613] netlink: 'syz.1.638': attribute type 3 has an invalid length. [ 187.164692][ T8613] netlink: 'syz.1.638': attribute type 153 has an invalid length. [ 187.173981][ T8613] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.638'. [ 187.217679][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.245833][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.352416][ T8217] veth0_macvtap: entered promiscuous mode [ 187.384000][ T8217] veth1_macvtap: entered promiscuous mode [ 187.434550][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.465453][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.496461][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.521540][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.547708][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.571769][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.587589][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.602830][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.676764][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.695296][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.724574][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.741587][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.756193][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.766509][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.777458][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.787773][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.806275][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.843856][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.876774][ T8638] netlink: 'syz.1.642': attribute type 3 has an invalid length. [ 187.884476][ T8638] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.642'. [ 187.994689][ T8217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.007294][ T8217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.017357][ T8217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.026519][ T8217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.044562][ T8647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.643'. [ 188.211946][ T8265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.255972][ T8265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.452469][ T8281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.484583][ T8281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.726333][ T8278] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.779823][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.647'. [ 188.974357][ T8278] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.098026][ T8278] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.223615][ T8690] netlink: set zone limit has 8 unknown bytes [ 189.251297][ T8278] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.602035][ T8688] netlink: 129204 bytes leftover after parsing attributes in process `syz.2.652'. [ 189.855001][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.864453][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.881421][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.892246][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.906995][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.917158][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.924706][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.935642][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.943098][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.965705][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.976194][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.987190][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.042076][ T8278] bridge_slave_1: left allmulticast mode [ 190.059981][ T8278] bridge_slave_1: left promiscuous mode [ 190.091815][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.123704][ T8278] bridge_slave_0: left allmulticast mode [ 190.133643][ T8720] validate_nla: 6 callbacks suppressed [ 190.133680][ T8720] netlink: 'syz.1.657': attribute type 3 has an invalid length. [ 190.140661][ T8278] bridge_slave_0: left promiscuous mode [ 190.169014][ T8720] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.657'. [ 190.191805][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.119584][ T8278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.134690][ T8278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.152560][ T8278] bond0 (unregistering): Released all slaves [ 191.464288][ T8755] netlink: 'syz.1.661': attribute type 29 has an invalid length. [ 191.486187][ T8756] netlink: 'syz.2.662': attribute type 7 has an invalid length. [ 191.570862][ T8753] netlink: 'syz.2.662': attribute type 10 has an invalid length. [ 191.585433][ T8761] netlink: 'syz.1.661': attribute type 29 has an invalid length. [ 191.603236][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 191.665509][ T8278] hsr_slave_0: left promiscuous mode [ 191.740630][ T8278] hsr_slave_1: left promiscuous mode [ 191.761402][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.769805][ T8278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.781423][ T8771] netlink: set zone limit has 8 unknown bytes [ 191.788603][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.796347][ T8278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.818256][ T8278] veth1_macvtap: left promiscuous mode [ 191.823811][ T8278] veth0_macvtap: left promiscuous mode [ 191.829716][ T8278] veth1_vlan: left promiscuous mode [ 191.835244][ T8278] veth0_vlan: left promiscuous mode [ 191.956127][ T5850] Bluetooth: hci0: command tx timeout [ 192.036403][ T5850] Bluetooth: hci2: command tx timeout [ 192.619555][ T8794] netlink: 'syz.1.671': attribute type 3 has an invalid length. [ 192.628754][ T8794] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.671'. [ 192.679170][ T8278] team0 (unregistering): Port device team_slave_1 removed [ 192.713819][ T8278] team0 (unregistering): Port device team_slave_0 removed [ 193.062538][ T8785] netlink: 'syz.2.668': attribute type 3 has an invalid length. [ 193.080074][ T8785] netlink: 'syz.2.668': attribute type 153 has an invalid length. [ 193.105671][ T8785] netlink: 129204 bytes leftover after parsing attributes in process `syz.2.668'. [ 193.351002][ T8797] @ÿ: renamed from veth0_vlan (while UP) [ 193.471700][ T8710] chnl_net:caif_netlink_parms(): no params data found [ 193.651745][ T8711] chnl_net:caif_netlink_parms(): no params data found [ 193.733420][ T8823] netlink: set zone limit has 8 unknown bytes [ 193.784144][ T8824] netlink: 'syz.2.676': attribute type 7 has an invalid length. [ 193.821698][ T8821] netlink: 'syz.2.676': attribute type 10 has an invalid length. [ 193.835088][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.853614][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.870374][ T8710] bridge_slave_0: entered allmulticast mode [ 193.878195][ T8710] bridge_slave_0: entered promiscuous mode [ 193.908153][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.926949][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.934685][ T8710] bridge_slave_1: entered allmulticast mode [ 193.968176][ T8710] bridge_slave_1: entered promiscuous mode [ 194.036440][ T5850] Bluetooth: hci0: command tx timeout [ 194.051759][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 194.115659][ T5850] Bluetooth: hci2: command tx timeout [ 194.133867][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.201584][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.352687][ T8847] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.684'. [ 194.400706][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.408168][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.415461][ T8711] bridge_slave_0: entered allmulticast mode [ 194.424063][ T8711] bridge_slave_0: entered promiscuous mode [ 194.432320][ T8850] netlink: 830 bytes leftover after parsing attributes in process `syz.2.683'. [ 194.453009][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.459400][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.581061][ T8278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.631119][ T8859] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.637759][ T8859] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.710389][ T8710] team0: Port device team_slave_0 added [ 194.769773][ T8710] team0: Port device team_slave_1 added [ 194.837764][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.856418][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.872231][ T8711] bridge_slave_1: entered allmulticast mode [ 194.891786][ T8711] bridge_slave_1: entered promiscuous mode [ 195.383864][ T8853] validate_nla: 1 callbacks suppressed [ 195.383885][ T8853] netlink: 'syz.1.685': attribute type 3 has an invalid length. [ 195.398423][ T8853] netlink: 'syz.1.685': attribute type 153 has an invalid length. [ 195.407116][ T8853] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.685'. [ 195.446452][ T8278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.503044][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.534075][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.561288][ T8866] netlink: set zone limit has 8 unknown bytes [ 195.641666][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.649166][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.705931][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.788788][ T8278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.881215][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.899908][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.968575][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.012598][ T8879] netlink: 'syz.1.694': attribute type 7 has an invalid length. [ 196.043070][ T8278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.117517][ T5850] Bluetooth: hci0: command tx timeout [ 196.196621][ T5850] Bluetooth: hci2: command tx timeout [ 196.424883][ T8882] netlink: 'syz.1.694': attribute type 10 has an invalid length. [ 196.462297][ T8711] team0: Port device team_slave_0 added [ 196.478888][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 196.551343][ T8711] team0: Port device team_slave_1 added [ 196.882755][ T8901] syz.2.696 (8901) used greatest stack depth: 18464 bytes left [ 196.916488][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.938018][ T8904] netlink: 'syz.0.698': attribute type 3 has an invalid length. [ 196.955935][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.989005][ T8904] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.698'. [ 197.078111][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.148098][ T8900] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.697'. [ 197.199965][ T8710] hsr_slave_0: entered promiscuous mode [ 197.225212][ T8710] hsr_slave_1: entered promiscuous mode [ 197.285812][ T8710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.294105][ T8710] Cannot create hsr debugfs directory [ 197.335114][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.353625][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.383274][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.533466][ T8278] bridge_slave_1: left allmulticast mode [ 197.547422][ T8278] bridge_slave_1: left promiscuous mode [ 197.562374][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.623079][ T8278] bridge_slave_0: left allmulticast mode [ 197.629218][ T8278] bridge_slave_0: left promiscuous mode [ 197.635087][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.205953][ T5850] Bluetooth: hci0: command tx timeout [ 198.280860][ T5850] Bluetooth: hci2: command tx timeout [ 198.302102][ T8278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.313297][ T8278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.324028][ T8278] bond0 (unregistering): Released all slaves [ 198.354329][ T8922] netlink: 'syz.2.702': attribute type 3 has an invalid length. [ 198.363068][ T8922] netlink: 'syz.2.702': attribute type 153 has an invalid length. [ 198.383971][ T8922] netlink: 129204 bytes leftover after parsing attributes in process `syz.2.702'. [ 198.467087][ T8711] hsr_slave_0: entered promiscuous mode [ 198.491055][ T8711] hsr_slave_1: entered promiscuous mode [ 198.506388][ T8711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.514025][ T8711] Cannot create hsr debugfs directory [ 198.690531][ T8948] netlink: 'syz.0.707': attribute type 7 has an invalid length. [ 198.710318][ T8951] netlink: 'syz.0.707': attribute type 10 has an invalid length. [ 198.827375][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 198.969256][ T8954] netlink: 'syz.2.710': attribute type 29 has an invalid length. [ 199.084968][ T8278] hsr_slave_0: left promiscuous mode [ 199.449709][ T8278] hsr_slave_1: left promiscuous mode [ 199.458323][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.467554][ T8278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.475508][ T8278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.477831][ T8960] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.712'. [ 199.485438][ T8278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.510037][ T8278] veth1_macvtap: left promiscuous mode [ 199.519471][ T8278] veth0_macvtap: left promiscuous mode [ 199.525847][ T8278] veth1_vlan: left promiscuous mode [ 199.531160][ T8278] veth0_vlan: left promiscuous mode [ 200.111114][ T8278] team0 (unregistering): Port device team_slave_1 removed [ 200.156693][ T8278] team0 (unregistering): Port device team_slave_0 removed [ 201.352740][ T8994] validate_nla: 3 callbacks suppressed [ 201.352759][ T8994] netlink: 'syz.1.719': attribute type 3 has an invalid length. [ 201.374081][ T8994] netlink: 'syz.1.719': attribute type 153 has an invalid length. [ 201.400745][ T8994] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.719'. [ 201.417977][ T8994] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.424411][ T8994] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.456021][ T8999] netlink: 'syz.2.721': attribute type 7 has an invalid length. [ 201.516148][ T8999] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 201.580959][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 201.723320][ T8710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.743508][ T8710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.888795][ T8710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.914212][ T9009] netlink: 'syz.1.724': attribute type 3 has an invalid length. [ 201.942757][ T9009] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.724'. [ 201.958837][ T8710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.471706][ T8710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.516037][ T8711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.560683][ T8711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.612505][ T8711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.671122][ T8710] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.711725][ T8711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.761818][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.768988][ T8275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.837693][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.854481][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.885206][ T8711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.895714][ T8711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.924535][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.931745][ T8265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.962394][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.969560][ T8265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.992879][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.000187][ T8265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.063999][ T9050] netlink: 'syz.2.734': attribute type 3 has an invalid length. [ 203.093879][ T9050] netlink: 'syz.2.734': attribute type 153 has an invalid length. [ 203.116544][ T9050] netlink: 129204 bytes leftover after parsing attributes in process `syz.2.734'. [ 203.152612][ T9054] netlink: 'syz.0.735': attribute type 7 has an invalid length. [ 203.192438][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.215964][ T9054] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 203.263609][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 203.342157][ T8711] veth0_vlan: entered promiscuous mode [ 203.393507][ T8711] veth1_vlan: entered promiscuous mode [ 203.501299][ T8711] veth0_macvtap: entered promiscuous mode [ 203.546461][ T8711] veth1_macvtap: entered promiscuous mode [ 203.621607][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.632244][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.642271][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.652843][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.662813][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.673339][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.684675][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.694922][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.705748][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.716095][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.727149][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.737273][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.747958][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.761800][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.801831][ T8711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.811916][ T8711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.835632][ T8711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.844386][ T8711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.902921][ T9075] netlink: 67 bytes leftover after parsing attributes in process `syz.2.739'. [ 203.945963][ T9075] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.964416][ T9075] IPv6: Can't replace route, no match found [ 204.022350][ T8710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.368863][ T8265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.407367][ T8265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.529776][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.568007][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.769349][ T9109] netlink: 'syz.1.747': attribute type 3 has an invalid length. [ 204.790737][ T9109] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.747'. [ 204.817054][ T9109] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 204.823481][ T9109] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 205.541907][ T8710] veth0_vlan: entered promiscuous mode [ 205.620167][ T8710] veth1_vlan: entered promiscuous mode [ 205.717461][ T8710] veth0_macvtap: entered promiscuous mode [ 205.728054][ T8710] veth1_macvtap: entered promiscuous mode [ 205.774218][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.795753][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.836061][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.852086][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.882342][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.893976][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.916804][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.931724][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.943474][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.985419][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.006385][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.025650][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.062774][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.084795][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.111994][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.123562][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.137044][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.163276][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.513360][ T8275] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.601941][ T8710] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.629344][ T8710] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.653916][ T8710] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.684863][ T8710] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.699283][ T9170] FAULT_INJECTION: forcing a failure. [ 206.699283][ T9170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.712694][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.2.759 Not tainted 6.12.0-rc4-syzkaller-ge626a13f6fbb #0 [ 206.722807][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.732886][ T9170] Call Trace: [ 206.736196][ T9170] [ 206.739153][ T9170] dump_stack_lvl+0x241/0x360 [ 206.743875][ T9170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.749114][ T9170] ? __pfx__printk+0x10/0x10 [ 206.753748][ T9170] ? shmem_get_folio_gfp+0x166f/0x20a0 [ 206.759267][ T9170] should_fail_ex+0x3b0/0x4e0 [ 206.763988][ T9170] copy_page_from_iter_atomic+0x251/0x1f20 [ 206.769879][ T9170] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 206.776153][ T9170] ? shmem_write_begin+0x214/0x460 [ 206.781304][ T9170] ? __pfx_shmem_write_begin+0x10/0x10 [ 206.786828][ T9170] generic_perform_write+0x45d/0x6d0 [ 206.792181][ T9170] ? __pfx_generic_perform_write+0x10/0x10 [ 206.798027][ T9170] ? mnt_put_write_access_file+0xbf/0x100 [ 206.803780][ T9170] ? file_update_time+0x3be/0x430 [ 206.808852][ T9170] shmem_file_write_iter+0xf9/0x120 [ 206.814087][ T9170] vfs_write+0xa6d/0xc90 [ 206.818374][ T9170] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 206.824214][ T9170] ? __pfx_vfs_write+0x10/0x10 [ 206.829057][ T9170] ? fdget_pos+0x24e/0x320 [ 206.833509][ T9170] ksys_write+0x183/0x2b0 [ 206.837880][ T9170] ? __pfx_ksys_write+0x10/0x10 [ 206.842765][ T9170] ? do_syscall_64+0x100/0x230 [ 206.847567][ T9170] ? do_syscall_64+0xb6/0x230 [ 206.852284][ T9170] do_syscall_64+0xf3/0x230 [ 206.856820][ T9170] ? clear_bhb_loop+0x35/0x90 [ 206.861532][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.867454][ T9170] RIP: 0033:0x7f5a2457e719 [ 206.871902][ T9170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.891531][ T9170] RSP: 002b:00007f5a25356038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.899978][ T9170] RAX: ffffffffffffffda RBX: 00007f5a24735f80 RCX: 00007f5a2457e719 [ 206.907973][ T9170] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 000000000000000a [ 206.915969][ T9170] RBP: 00007f5a25356090 R08: 0000000000000000 R09: 0000000000000000 [ 206.923963][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.931953][ T9170] R13: 0000000000000000 R14: 00007f5a24735f80 R15: 00007ffc58713808 [ 206.939998][ T9170] [ 207.145140][ T8281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.177752][ T8281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.192810][ T8275] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.261440][ T8275] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.282395][ T8265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.300883][ T8265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.348397][ T8275] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.499647][ T8275] bridge_slave_1: left allmulticast mode [ 207.505348][ T8275] bridge_slave_1: left promiscuous mode [ 207.512094][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.522687][ T8275] bridge_slave_0: left allmulticast mode [ 207.535103][ T8275] bridge_slave_0: left promiscuous mode [ 207.540957][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.903187][ T9202] netlink: set zone limit has 8 unknown bytes [ 207.936200][ T9203] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 207.942682][ T9203] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.973674][ T9204] raw_sendmsg: syz.2.762 forgot to set AF_INET. Fix it! [ 208.188901][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.243159][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.265866][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.274753][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.283664][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.293780][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.594795][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.627166][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.644954][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.669238][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.682215][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.690086][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.759902][ T8275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.776464][ T8275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.788502][ T8275] bond0 (unregistering): Released all slaves [ 208.801399][ T9199] validate_nla: 1 callbacks suppressed [ 208.801414][ T9199] netlink: 'syz.1.761': attribute type 3 has an invalid length. [ 208.815017][ T9199] netlink: 'syz.1.761': attribute type 153 has an invalid length. [ 208.823312][ T9199] netlink: 129204 bytes leftover after parsing attributes in process `syz.1.761'. [ 208.851865][ T9214] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.763'. [ 209.009486][ T9227] netlink: 149412 bytes leftover after parsing attributes in process `syz.1.767'. [ 209.569627][ T9256] netlink: set zone limit has 8 unknown bytes [ 209.586935][ T8275] hsr_slave_0: left promiscuous mode [ 209.593064][ T8275] hsr_slave_1: left promiscuous mode [ 209.599530][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.607275][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.617375][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.624879][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.698309][ T8275] veth1_macvtap: left promiscuous mode [ 209.703959][ T8275] veth0_macvtap: left promiscuous mode [ 209.709997][ T8275] veth1_vlan: left promiscuous mode [ 209.715404][ T8275] veth0_vlan: left promiscuous mode [ 209.744932][ T9261] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 209.753727][ T9261] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.775'. [ 209.763574][ T9261] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 210.301791][ T8275] team0 (unregistering): Port device team_slave_1 removed [ 210.368327][ T5844] Bluetooth: hci0: command tx timeout [ 210.402451][ T8275] team0 (unregistering): Port device team_slave_0 removed [ 210.758945][ T5844] Bluetooth: hci2: command tx timeout [ 211.354532][ T9268] netlink: 'syz.2.777': attribute type 3 has an invalid length. [ 211.365897][ T9268] netlink: 'syz.2.777': attribute type 153 has an invalid length. [ 211.375704][ T9268] netlink: 129204 bytes leftover after parsing attributes in process `syz.2.777'. [ 211.780584][ T9207] chnl_net:caif_netlink_parms(): no params data found [ 211.848280][ T9288] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 211.895538][ T9291] netlink: 'syz.2.782': attribute type 21 has an invalid length. [ 211.948565][ T9218] chnl_net:caif_netlink_parms(): no params data found [ 212.074588][ T9304] netlink: set zone limit has 8 unknown bytes [ 212.443997][ T5844] Bluetooth: hci0: command tx timeout [ 212.476694][ T9324] netlink: 'syz.0.788': attribute type 9 has an invalid length. [ 212.563962][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.571832][ T9324] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.788'. [ 212.586957][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.594242][ T9207] bridge_slave_0: entered allmulticast mode [ 212.601934][ T9207] bridge_slave_0: entered promiscuous mode [ 212.696031][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.709694][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.719900][ T9207] bridge_slave_1: entered allmulticast mode [ 212.732387][ T9207] bridge_slave_1: entered promiscuous mode [ 212.781356][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.790137][ T9328] netlink: 'syz.0.788': attribute type 9 has an invalid length. [ 212.805295][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.826172][ T9218] bridge_slave_0: entered allmulticast mode [ 212.830100][ T9328] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.788'. [ 212.845908][ T5844] Bluetooth: hci2: command tx timeout [ 212.866865][ T9218] bridge_slave_0: entered promiscuous mode [ 212.967432][ T8275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.031018][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.047280][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.056319][ T9218] bridge_slave_1: entered allmulticast mode [ 213.086804][ T9218] bridge_slave_1: entered promiscuous mode [ 213.160985][ T8275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.238684][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.250803][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.303031][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.314911][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.428627][ T8275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.131174][ T8275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.154262][ T9218] team0: Port device team_slave_0 added [ 214.170104][ T9218] team0: Port device team_slave_1 added [ 214.199315][ T9207] team0: Port device team_slave_0 added [ 214.209155][ T9207] team0: Port device team_slave_1 added [ 214.215193][ T9370] batman_adv: batadv0: Removing interface: team0 [ 214.224811][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.235646][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.251815][ T9370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.262445][ T9370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.322637][ T9371] netlink: 'syz.1.798': attribute type 21 has an invalid length. [ 214.516106][ T5844] Bluetooth: hci0: command tx timeout [ 214.571528][ T5844] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 214.712753][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.725899][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.768051][ T9218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.790989][ T9380] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 214.802320][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.811323][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.839024][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.855192][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.862848][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.892325][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.916540][ T5844] Bluetooth: hci2: command tx timeout [ 214.943987][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.952782][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.981911][ T9218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.994829][ T9384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.803'. [ 215.519389][ T9207] hsr_slave_0: entered promiscuous mode [ 215.527830][ T9207] hsr_slave_1: entered promiscuous mode [ 215.633831][ T8275] bridge_slave_1: left allmulticast mode [ 215.665772][ T8275] bridge_slave_1: left promiscuous mode [ 215.671577][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.688179][ T8275] bridge_slave_0: left allmulticast mode [ 215.704077][ T8275] bridge_slave_0: left promiscuous mode [ 215.712161][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.407847][ T8275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.426390][ T8275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.449880][ T8275] bond0 (unregistering): Released all slaves [ 216.486528][ T9218] hsr_slave_0: entered promiscuous mode [ 216.493556][ T9218] hsr_slave_1: entered promiscuous mode [ 216.501081][ T9218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.508837][ T9218] Cannot create hsr debugfs directory [ 216.563241][ T9422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.810'. [ 216.606151][ T5844] Bluetooth: hci0: command tx timeout [ 216.734351][ T9429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.746515][ T9429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.956142][ T9429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.984977][ T9429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.006170][ T5844] Bluetooth: hci2: command tx timeout [ 217.805244][ T9429] bridge0: port 3(batadv0) entered disabled state [ 217.843869][ T9429] batadv0 (unregistering): left allmulticast mode [ 217.851454][ T9429] batadv0 (unregistering): left promiscuous mode [ 217.859020][ T9429] bridge0: port 3(batadv0) entered disabled state [ 217.965777][ T5844] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 218.260284][ T8275] hsr_slave_0: left promiscuous mode [ 218.267588][ T8275] hsr_slave_1: left promiscuous mode [ 218.279204][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.288417][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.297752][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.305349][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.333782][ T8275] veth1_macvtap: left promiscuous mode [ 218.344282][ T8275] veth0_macvtap: left promiscuous mode [ 218.365385][ T8275] veth1_vlan: left promiscuous mode [ 218.390078][ T8275] veth0_vlan: left promiscuous mode [ 218.990303][ T8275] team0 (unregistering): Port device team_slave_1 removed [ 219.032489][ T8275] team0 (unregistering): Port device team_slave_0 removed [ 220.795324][ T9218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.823896][ T9218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.051279][ T9218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.094193][ T9218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.397303][ T9218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.430630][ T9218] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.471003][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.478285][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.502269][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.509479][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.622444][ T9526] batman_adv: batadv0: Removing interface: team0 [ 221.630254][ T9526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.640961][ T9526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.649336][ T9526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.657505][ T9526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.670662][ T9526] bridge0: port 3(batadv0) entered disabled state [ 221.689300][ T9526] batadv0 (unregistering): left allmulticast mode [ 221.696814][ T9526] batadv0 (unregistering): left promiscuous mode [ 221.703466][ T9526] bridge0: port 3(batadv0) entered disabled state [ 221.741136][ T9207] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.763772][ T9207] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.788287][ T9207] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.803680][ T9207] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.062992][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.176133][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.229461][ T9218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.282402][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.289595][ T8275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.361767][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.368994][ T8275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.882808][ T9218] veth0_vlan: entered promiscuous mode [ 222.926432][ T9218] veth1_vlan: entered promiscuous mode [ 222.964416][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.001331][ T9218] veth0_macvtap: entered promiscuous mode [ 223.033821][ T9218] veth1_macvtap: entered promiscuous mode [ 223.105342][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.131873][ T9207] veth0_vlan: entered promiscuous mode [ 223.152989][ T9218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.188434][ T9218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.207552][ T9218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.226041][ T9218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.238126][ T9218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.258351][ T9207] veth1_vlan: entered promiscuous mode [ 224.209130][ T9207] veth0_macvtap: entered promiscuous mode [ 224.251053][ T9207] veth1_macvtap: entered promiscuous mode [ 224.339298][ T8265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.376342][ T8265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.448200][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.461521][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.524697][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.562952][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.571258][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.588590][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.618398][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.659981][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.709122][ T9620] netlink: 763 bytes leftover after parsing attributes in process `syz.0.849'. [ 224.765017][ T9207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.797780][ T9207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.817012][ T9207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.827489][ T9207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.135898][ T9632] netlink: 'syz.2.850': attribute type 10 has an invalid length. [ 225.232310][ T9632] team0: Port device macvlan0 added [ 225.363580][ T8281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.390319][ T9642] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 225.399813][ T9642] netlink: 2 bytes leftover after parsing attributes in process `syz.1.853'. [ 225.412153][ T9642] team0: entered promiscuous mode [ 225.421918][ T9642] team_slave_0: entered promiscuous mode [ 225.430589][ T9642] team_slave_1: entered promiscuous mode [ 225.438123][ T9642] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.446627][ T9642] bridge0: port 3(team0) entered blocking state [ 225.453134][ T9642] bridge0: port 3(team0) entered disabled state [ 225.460515][ T9642] team0: entered allmulticast mode [ 225.465928][ T9642] team_slave_0: entered allmulticast mode [ 225.471716][ T9642] team_slave_1: entered allmulticast mode [ 225.479910][ T9642] bridge0: port 3(team0) entered blocking state [ 225.486566][ T9642] bridge0: port 3(team0) entered forwarding state [ 225.519350][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 225.589164][ T8281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.616648][ T9646] netlink: 'syz.0.854': attribute type 4 has an invalid length. [ 225.624351][ T9646] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.854'. [ 225.629026][ T8275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.644234][ T9647] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.854'. [ 225.644760][ T8275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.683513][ T8275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.692483][ T8275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.718901][ T8281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.078473][ T8281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.495287][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.506297][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.519026][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.534200][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.548774][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 226.556621][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.982977][ T9660] chnl_net:caif_netlink_parms(): no params data found [ 227.611838][ T8281] bridge_slave_1: left allmulticast mode [ 227.657606][ T8281] bridge_slave_1: left promiscuous mode [ 227.693661][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.804885][ T8281] bridge_slave_0: left allmulticast mode [ 227.826741][ T8281] bridge_slave_0: left promiscuous mode [ 227.832578][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.874152][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.896973][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.910331][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.921526][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.930178][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 227.941498][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.121402][ T9709] delete_channel: no stack [ 228.468278][ T8281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.481753][ T8281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.494207][ T8281] bond0 (unregistering): Released all slaves [ 228.569667][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.862'. [ 228.599621][ T9716] netlink: 'syz.2.867': attribute type 3 has an invalid length. [ 228.609150][ T5850] Bluetooth: hci0: command tx timeout [ 228.616913][ T9716] netlink: 'syz.2.867': attribute type 153 has an invalid length. [ 228.632592][ T9716] netlink: 129204 bytes leftover after parsing attributes in process `syz.2.867'. [ 228.934906][ T9725] netlink: 'syz.0.870': attribute type 3 has an invalid length. [ 228.942943][ T9725] netlink: 'syz.0.870': attribute type 153 has an invalid length. [ 228.951157][ T9725] netlink: 129204 bytes leftover after parsing attributes in process `syz.0.870'. [ 228.962914][ T9722] netlink: 'syz.1.868': attribute type 10 has an invalid length. [ 229.057353][ T9722] bridge0: port 3(team0) entered disabled state [ 229.080448][ T9722] team0: left allmulticast mode [ 229.086186][ T9722] team_slave_0: left allmulticast mode [ 229.096428][ T9722] team_slave_1: left allmulticast mode [ 229.105856][ T9722] team0: left promiscuous mode [ 229.114034][ T9722] team_slave_0: left promiscuous mode [ 229.132757][ T9722] team_slave_1: left promiscuous mode [ 229.141619][ T9722] bridge0: port 3(team0) entered disabled state [ 229.200495][ T9734] FAULT_INJECTION: forcing a failure. [ 229.200495][ T9734] name failslab, interval 1, probability 0, space 0, times 0 [ 229.218935][ T9734] CPU: 1 UID: 0 PID: 9734 Comm: syz.0.872 Not tainted 6.12.0-rc4-syzkaller-ge626a13f6fbb #0 [ 229.229078][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.239158][ T9734] Call Trace: [ 229.241242][ T9722] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.242440][ T9734] [ 229.242455][ T9734] dump_stack_lvl+0x241/0x360 [ 229.242489][ T9734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.242513][ T9734] ? __pfx__printk+0x10/0x10 [ 229.258131][ T9722] bond0: (slave team0): Enslaving as an active interface with an up link [ 229.261914][ T9734] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 229.261952][ T9734] ? __pfx___might_resched+0x10/0x10 [ 229.261985][ T9734] should_fail_ex+0x3b0/0x4e0 [ 229.262013][ T9734] should_failslab+0xac/0x100 [ 229.262044][ T9734] ? __alloc_skb+0x1c3/0x440 [ 229.262066][ T9734] kmem_cache_alloc_node_noprof+0x71/0x320 [ 229.306136][ T9734] __alloc_skb+0x1c3/0x440 [ 229.310594][ T9734] ? __pfx___alloc_skb+0x10/0x10 [ 229.315553][ T9734] ? netlink_autobind+0xd6/0x2f0 [ 229.320506][ T9734] ? netlink_autobind+0x2b0/0x2f0 [ 229.325555][ T9734] netlink_sendmsg+0x638/0xcb0 [ 229.330353][ T9734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.335662][ T9734] ? aa_sock_msg_perm+0x91/0x160 [ 229.340637][ T9734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.345969][ T9734] __sock_sendmsg+0x221/0x270 [ 229.350700][ T9734] ____sys_sendmsg+0x52a/0x7e0 [ 229.355506][ T9734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.360832][ T9734] __sys_sendmsg+0x292/0x380 [ 229.365445][ T9734] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.370599][ T9734] ? __pfx_vfs_write+0x10/0x10 [ 229.375415][ T9734] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.381767][ T9734] ? do_syscall_64+0x100/0x230 [ 229.386554][ T9734] ? do_syscall_64+0xb6/0x230 [ 229.391253][ T9734] do_syscall_64+0xf3/0x230 [ 229.395775][ T9734] ? clear_bhb_loop+0x35/0x90 [ 229.400484][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.406398][ T9734] RIP: 0033:0x7fcbb937e719 [ 229.410829][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.430460][ T9734] RSP: 002b:00007fcbba134038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.438900][ T9734] RAX: ffffffffffffffda RBX: 00007fcbb9535f80 RCX: 00007fcbb937e719 [ 229.446918][ T9734] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 229.454924][ T9734] RBP: 00007fcbba134090 R08: 0000000000000000 R09: 0000000000000000 [ 229.462923][ T9734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.470920][ T9734] R13: 0000000000000000 R14: 00007fcbb9535f80 R15: 00007ffdf6d248b8 [ 229.478961][ T9734] [ 229.569351][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.576934][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.584473][ T9660] bridge_slave_0: entered allmulticast mode [ 229.597817][ T9660] bridge_slave_0: entered promiscuous mode [ 229.611096][ T9722] syz.1.868 (9722) used greatest stack depth: 18144 bytes left [ 229.623347][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.636482][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.643795][ T9660] bridge_slave_1: entered allmulticast mode [ 229.653868][ T9660] bridge_slave_1: entered promiscuous mode [ 230.036454][ T5850] Bluetooth: hci2: command tx timeout [ 230.063915][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.721111][ T5850] Bluetooth: hci0: command tx timeout [ 230.864509][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.259106][ T8281] hsr_slave_0: left promiscuous mode [ 231.279137][ T8281] hsr_slave_1: left promiscuous mode [ 231.299311][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.327540][ T8281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.349714][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.360645][ T8281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.412999][ T8281] veth1_macvtap: left promiscuous mode [ 231.432181][ T8281] veth0_macvtap: left promiscuous mode [ 231.438356][ T8281] veth1_vlan: left promiscuous mode [ 231.443832][ T8281] veth0_vlan: left promiscuous mode [ 231.569029][ T9785] delete_channel: no stack [ 232.080115][ T8281] team0 (unregistering): Port device team_slave_1 removed [ 232.117633][ T5850] Bluetooth: hci2: command tx timeout [ 232.133316][ T8281] team0 (unregistering): Port device team_slave_0 removed [ 232.594939][ T9782] netlink: 'syz.1.881': attribute type 21 has an invalid length. [ 232.610994][ T9789] netlink: 'syz.0.885': attribute type 21 has an invalid length. [ 232.631843][ T9789] netlink: 'syz.0.885': attribute type 15 has an invalid length. [ 232.642847][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 232.687667][ T9660] team0: Port device team_slave_0 added [ 232.707956][ T9660] team0: Port device team_slave_1 added [ 232.756382][ T5850] Bluetooth: hci0: command tx timeout [ 232.809492][ T9699] chnl_net:caif_netlink_parms(): no params data found [ 233.356310][ T9813] netlink: 'syz.2.892': attribute type 3 has an invalid length. [ 233.368996][ T9813] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.892'. [ 233.995318][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.005234][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.035168][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.050049][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.057460][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.084120][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.196297][ T5850] Bluetooth: hci2: command tx timeout [ 234.316044][ T9821] delete_channel: no stack [ 234.343438][ T9660] hsr_slave_0: entered promiscuous mode [ 234.383494][ T9660] hsr_slave_1: entered promiscuous mode [ 234.393914][ T9660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.418043][ T9660] Cannot create hsr debugfs directory [ 234.451334][ T9820] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 234.514694][ T9820] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 234.535475][ T9829] netlink: 'syz.1.896': attribute type 21 has an invalid length. [ 234.545831][ T9829] netlink: 160 bytes leftover after parsing attributes in process `syz.1.896'. [ 234.605205][ T9822] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 234.638961][ T9820] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 234.656703][ C0] [ 234.659090][ C0] ====================================================== [ 234.666125][ C0] WARNING: possible circular locking dependency detected [ 234.673137][ C0] 6.12.0-rc4-syzkaller-ge626a13f6fbb #0 Not tainted [ 234.679711][ C0] ------------------------------------------------------ [ 234.686716][ C0] kworker/u8:34/8282 is trying to acquire lock: [ 234.692942][ C0] ffff8880b8629430 (krc.lock){-.-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790 [ 234.701562][ C0] [ 234.701562][ C0] but task is already holding lock: [ 234.708919][ C0] ffff8880b862c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x670/0xd50 [ 234.718836][ C0] [ 234.718836][ C0] which lock already depends on the new lock. [ 234.718836][ C0] [ 234.729230][ C0] [ 234.729230][ C0] the existing dependency chain (in reverse order) is: [ 234.738242][ C0] [ 234.738242][ C0] -> #1 (hrtimer_bases.lock){-.-.}-{2:2}: [ 234.746145][ C0] lock_acquire+0x1ed/0x550 [ 234.751171][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 234.756971][ C0] hrtimer_start_range_ns+0x109/0xca0 [ 234.762857][ C0] kvfree_call_rcu+0x5e6/0x790 [ 234.768139][ C0] pwq_release_workfn+0x664/0x800 [ 234.773679][ C0] kthread_worker_fn+0x500/0xb70 [ 234.779140][ C0] kthread+0x2f0/0x390 [ 234.783719][ C0] ret_from_fork+0x4b/0x80 [ 234.788657][ C0] ret_from_fork_asm+0x1a/0x30 [ 234.793938][ C0] [ 234.793938][ C0] -> #0 (krc.lock){-.-.}-{2:2}: [ 234.800969][ C0] validate_chain+0x18ef/0x5920 [ 234.806338][ C0] __lock_acquire+0x1384/0x2050 [ 234.811717][ C0] lock_acquire+0x1ed/0x550 [ 234.816739][ C0] _raw_spin_lock+0x2e/0x40 [ 234.821755][ C0] kvfree_call_rcu+0x18a/0x790 [ 234.827033][ C0] trie_delete_elem+0x546/0x6a0 [ 234.832403][ C0] bpf_prog_2c29ac5cdc6b1842+0x43/0x47 [ 234.838371][ C0] bpf_trace_run2+0x2ec/0x540 [ 234.843566][ C0] enqueue_hrtimer+0x35a/0x3c0 [ 234.848844][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 234.854555][ C0] hrtimer_interrupt+0x396/0x990 [ 234.860003][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 234.866500][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 234.872646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.879142][ C0] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 234.885375][ C0] __free_pages_ok+0x51d/0xc80 [ 234.890658][ C0] __folio_put+0x2c7/0x440 [ 234.895585][ C0] free_large_kmalloc+0x105/0x1c0 [ 234.901129][ C0] kfree+0x21c/0x440 [ 234.905535][ C0] trie_free+0xd6/0x150 [ 234.910210][ C0] bpf_map_free_deferred+0xe4/0x100 [ 234.915925][ C0] process_scheduled_works+0xa63/0x1850 [ 234.921981][ C0] worker_thread+0x870/0xd30 [ 234.927074][ C0] kthread+0x2f0/0x390 [ 234.931642][ C0] ret_from_fork+0x4b/0x80 [ 234.936560][ C0] ret_from_fork_asm+0x1a/0x30 [ 234.941825][ C0] [ 234.941825][ C0] other info that might help us debug this: [ 234.941825][ C0] [ 234.952032][ C0] Possible unsafe locking scenario: [ 234.952032][ C0] [ 234.959460][ C0] CPU0 CPU1 [ 234.964800][ C0] ---- ---- [ 234.970144][ C0] lock(hrtimer_bases.lock); [ 234.974803][ C0] lock(krc.lock); [ 234.981110][ C0] lock(hrtimer_bases.lock); [ 234.988288][ C0] lock(krc.lock); [ 234.992077][ C0] [ 234.992077][ C0] *** DEADLOCK *** [ 234.992077][ C0] [ 235.000201][ C0] 4 locks held by kworker/u8:34/8282: [ 235.005550][ C0] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 235.017207][ C0] #1: ffffc900037ffd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 235.028857][ C0] #2: ffff8880b862c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x670/0xd50 [ 235.039185][ C0] #3: ffffffff8e937e20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 235.048578][ C0] [ 235.048578][ C0] stack backtrace: [ 235.054463][ C0] CPU: 0 UID: 0 PID: 8282 Comm: kworker/u8:34 Not tainted 6.12.0-rc4-syzkaller-ge626a13f6fbb #0 [ 235.064860][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 235.074901][ C0] Workqueue: events_unbound bpf_map_free_deferred [ 235.081303][ C0] Call Trace: [ 235.084567][ C0] [ 235.087396][ C0] dump_stack_lvl+0x241/0x360 [ 235.092085][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.097280][ C0] ? __pfx__printk+0x10/0x10 [ 235.101859][ C0] print_circular_bug+0x13a/0x1b0 [ 235.106867][ C0] check_noncircular+0x36a/0x4a0 [ 235.111789][ C0] ? __pfx_check_noncircular+0x10/0x10 [ 235.117228][ C0] ? lockdep_lock+0x123/0x2b0 [ 235.121887][ C0] ? get_stack_info_noinstr+0x1a/0x130 [ 235.127328][ C0] ? __bfs+0x368/0x6f0 [ 235.131378][ C0] validate_chain+0x18ef/0x5920 [ 235.136213][ C0] ? __pfx___bfs+0x10/0x10 [ 235.140609][ C0] ? mark_lock_irq+0x8e1/0xc20 [ 235.145353][ C0] ? __pfx_validate_chain+0x10/0x10 [ 235.150538][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 235.155891][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.161073][ C0] ? lockdep_unlock+0x16a/0x300 [ 235.165905][ C0] ? __pfx_lockdep_unlock+0x10/0x10 [ 235.171090][ C0] ? stack_trace_save+0x118/0x1d0 [ 235.176100][ C0] ? mark_lock+0x9a/0x360 [ 235.180410][ C0] __lock_acquire+0x1384/0x2050 [ 235.185246][ C0] lock_acquire+0x1ed/0x550 [ 235.189733][ C0] ? kvfree_call_rcu+0x18a/0x790 [ 235.194653][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 235.199660][ C0] ? __phys_addr+0xba/0x170 [ 235.204166][ C0] _raw_spin_lock+0x2e/0x40 [ 235.208672][ C0] ? kvfree_call_rcu+0x18a/0x790 [ 235.213615][ C0] kvfree_call_rcu+0x18a/0x790 [ 235.218394][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 235.224284][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 235.229576][ C0] ? longest_prefix_match+0x330/0x650 [ 235.234970][ C0] trie_delete_elem+0x546/0x6a0 [ 235.239853][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 235.244686][ C0] bpf_prog_2c29ac5cdc6b1842+0x43/0x47 [ 235.250124][ C0] bpf_trace_run2+0x2ec/0x540 [ 235.254898][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 235.260117][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 235.265223][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 235.270770][ C0] enqueue_hrtimer+0x35a/0x3c0 [ 235.275548][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 235.280762][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 235.286741][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 235.292536][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 235.298627][ C0] hrtimer_interrupt+0x396/0x990 [ 235.303583][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 235.309585][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 235.315213][ C0] [ 235.318148][ C0] [ 235.321077][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.327047][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 235.333535][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 9e f6 2d f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 93 78 92 f5 65 8b 05 a4 22 33 74 85 c0 74 43 48 c7 04 24 0e 36 [ 235.353730][ C0] RSP: 0018:ffffc900037ff8c0 EFLAGS: 00000206 [ 235.359780][ C0] RAX: a0b46edab3eaca00 RBX: 1ffff920006fff1c RCX: ffffffff8170be0a [ 235.367753][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0acb40 RDI: 0000000000000001 [ 235.375718][ C0] RBP: ffffc900037ff958 R08: ffffffff942ca89f R09: 1ffffffff2859513 [ 235.383693][ C0] R10: dffffc0000000000 R11: fffffbfff2859514 R12: dffffc0000000000 [ 235.391644][ C0] R13: 1ffff920006fff18 R14: ffffc900037ff8e0 R15: 0000000000000246 [ 235.399603][ C0] ? mark_lock+0x9a/0x360 [ 235.403940][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 235.410267][ C0] ? split_large_buddy+0xdc/0x270 [ 235.415274][ C0] __free_pages_ok+0x51d/0xc80 [ 235.420025][ C0] __folio_put+0x2c7/0x440 [ 235.424424][ C0] ? __pfx___folio_put+0x10/0x10 [ 235.429340][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.435648][ C0] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 235.441204][ C0] ? free_large_kmalloc+0xd1/0x1c0 [ 235.446297][ C0] free_large_kmalloc+0x105/0x1c0 [ 235.451304][ C0] ? trie_free+0xd6/0x150 [ 235.455616][ C0] kfree+0x21c/0x440 [ 235.459499][ C0] trie_free+0xd6/0x150 [ 235.463656][ C0] bpf_map_free_deferred+0xe4/0x100 [ 235.468837][ C0] ? process_scheduled_works+0x976/0x1850 [ 235.474542][ C0] process_scheduled_works+0xa63/0x1850 [ 235.480077][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.486040][ C0] ? assign_work+0x364/0x3d0 [ 235.490657][ C0] worker_thread+0x870/0xd30 [ 235.495252][ C0] ? __kthread_parkme+0x169/0x1d0 [ 235.500287][ C0] ? __pfx_worker_thread+0x10/0x10 [ 235.505382][ C0] kthread+0x2f0/0x390 [ 235.509430][ C0] ? __pfx_worker_thread+0x10/0x10 [ 235.514541][ C0] ? __pfx_kthread+0x10/0x10 [ 235.519110][ C0] ret_from_fork+0x4b/0x80 [ 235.523510][ C0] ? __pfx_kthread+0x10/0x10 [ 235.528079][ C0] ret_from_fork_asm+0x1a/0x30 [ 235.532846][ C0] [ 235.555328][ T5850] Bluetooth: hci0: command tx timeout [ 235.569244][ T9699] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.576511][ T9699] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.593608][ T9699] bridge_slave_0: entered allmulticast mode [ 235.600507][ T9699] bridge_slave_0: entered promiscuous mode [ 235.629609][ T9699] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.637084][ T9699] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.644370][ T9699] bridge_slave_1: entered allmulticast mode [ 235.654671][ T9699] bridge_slave_1: entered promiscuous mode [ 235.708513][ T9699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.721150][ T9699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.739724][ T8281] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.779555][ T9699] team0: Port device team_slave_0 added [ 235.789918][ T9699] team0: Port device team_slave_1 added [ 235.807375][ T8281] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.853549][ T9699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.860725][ T9699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.889559][ T9699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.903156][ T9699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.910848][ T9699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.937378][ T9699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.951012][ T8281] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.993843][ T9699] hsr_slave_0: entered promiscuous mode [ 236.001197][ T9699] hsr_slave_1: entered promiscuous mode [ 236.009650][ T9699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.017362][ T9699] Cannot create hsr debugfs directory [ 236.032893][ T8281] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.143706][ T8281] bridge_slave_1: left allmulticast mode [ 236.164508][ T8281] bridge_slave_1: left promiscuous mode [ 236.170910][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.179507][ T8281] bridge_slave_0: left allmulticast mode [ 236.185181][ T8281] bridge_slave_0: left promiscuous mode [ 236.191082][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.270869][ T8281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.279503][ T5850] Bluetooth: hci2: command tx timeout [ 236.289148][ T8281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.299120][ T8281] bond0 (unregistering): Released all slaves [ 236.551218][ T8281] hsr_slave_0: left promiscuous mode [ 236.564205][ T8281] hsr_slave_1: left promiscuous mode [ 236.570560][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.582275][ T8281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.590433][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.598399][ T8281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.608660][ T8281] veth1_macvtap: left promiscuous mode [ 236.614222][ T8281] veth0_macvtap: left promiscuous mode [ 236.620175][ T8281] veth1_vlan: left promiscuous mode [ 236.625485][ T8281] veth0_vlan: left promiscuous mode [ 236.790510][ T8281] team0 (unregistering): Port device team_slave_1 removed [ 236.804353][ T8281] team0 (unregistering): Port device team_slave_0 removed [ 236.963352][ T9699] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.982651][ T9699] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.001416][ T9699] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.032137][ T9699] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.070611][ T9660] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.087191][ T9660] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.105432][ T9660] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.115036][ T9660] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.198124][ T9699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.222666][ T9699] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.234750][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.241918][ T8282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.261870][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.271116][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.278273][ T8282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.300178][ T9660] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.311620][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.318794][ T8278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.334662][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.341854][ T8282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.460037][ T9699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.477007][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.501212][ T9699] veth0_vlan: entered promiscuous mode [ 237.515149][ T9699] veth1_vlan: entered promiscuous mode [ 237.551590][ T9699] veth0_macvtap: entered promiscuous mode [ 237.563862][ T9699] veth1_macvtap: entered promiscuous mode [ 237.580825][ T9699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.593114][ T9699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.603300][ T9699] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.613029][ T9699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.622455][ T9699] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.632107][ T9699] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.663403][ T9699] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 237.689120][ T9699] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 237.697285][ T8282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.705202][ T8282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.717391][ T9660] veth0_vlan: entered promiscuous mode [ 237.732490][ T8281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.741505][ T8281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.750538][ T9660] veth1_vlan: entered promiscuous mode [ 237.770728][ T9660] veth0_macvtap: entered promiscuous mode [ 237.784993][ T9660] veth1_macvtap: entered promiscuous mode [ 237.818440][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.828936][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.839745][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.850374][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.860974][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.872239][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.882825][ T9660] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.891974][ T9660] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.900760][ T9660] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.909652][ T9660] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.935197][ T9660] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 237.952904][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.954181][ T9660] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 237.967636][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.987182][ T8278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.995079][ T8278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.674802][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.452779][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.520710][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.581088][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.688770][ T12] bridge_slave_1: left allmulticast mode [ 241.694452][ T12] bridge_slave_1: left promiscuous mode [ 241.708967][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.717983][ T12] bridge_slave_0: left allmulticast mode [ 241.723669][ T12] bridge_slave_0: left promiscuous mode [ 241.730678][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.841847][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.852901][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.863244][ T12] bond0 (unregistering): Released all slaves [ 242.046428][ T12] hsr_slave_0: left promiscuous mode [ 242.068146][ T12] hsr_slave_1: left promiscuous mode [ 242.074081][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.095767][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.103742][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.114090][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.124061][ T12] veth1_macvtap: left promiscuous mode [ 242.130546][ T12] veth0_macvtap: left promiscuous mode [ 242.136277][ T12] veth1_vlan: left promiscuous mode [ 242.141552][ T12] veth0_vlan: left promiscuous mode [ 242.272642][ T12] team0 (unregistering): Port device team_slave_1 removed [ 242.293551][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.702207][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.764487][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.841664][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.921046][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.038408][ T12] bridge_slave_1: left allmulticast mode [ 243.044111][ T12] bridge_slave_1: left promiscuous mode [ 243.055855][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.067750][ T12] bridge_slave_0: left allmulticast mode [ 243.075873][ T12] bridge_slave_0: left promiscuous mode [ 243.081590][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.200818][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.227657][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.247002][ T12] bond0 (unregistering): Released all slaves [ 243.449664][ T12] hsr_slave_0: left promiscuous mode [ 243.466472][ T12] hsr_slave_1: left promiscuous mode [ 243.477415][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.484868][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.516241][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.523698][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.549911][ T12] veth1_macvtap: left promiscuous mode [ 243.555478][ T12] veth0_macvtap: left promiscuous mode [ 243.575825][ T12] veth1_vlan: left promiscuous mode [ 243.581148][ T12] veth0_vlan: left promiscuous mode [ 243.727321][ T12] team0 (unregistering): Port device team_slave_1 removed [ 243.743933][ T12] team0 (unregistering): Port device team_slave_0 removed