last executing test programs: 2m14.789082102s ago: executing program 3 (id=123): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000c6c00b0071105d000000000066000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m49.09856564s ago: executing program 3 (id=123): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000c6c00b0071105d000000000066000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m11.699984573s ago: executing program 3 (id=123): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000c6c00b0071105d000000000066000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 49.426508018s ago: executing program 3 (id=123): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000c6c00b0071105d000000000066000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 27.520548595s ago: executing program 3 (id=123): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000c6c00b0071105d000000000066000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.490829987s ago: executing program 4 (id=1030): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x6, 0x0, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010080) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="98000000180081064e81f782db4cb9040a1d0800067c7c09e8fe0ba10a0004000200142603600e1208001e00400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d06a4683f5aeb4edbb57a5025ccca9e00360db798e84e6217fb45d77158afbb", 0x98}], 0x1}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x6, 0x98a, 0xe689, 0x110, 0x1, 0x4, '\x00', r2, r4, 0x5, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x18) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 8.464588761s ago: executing program 3 (id=123): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000c6c00b0071105d000000000066000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.871997309s ago: executing program 4 (id=1035): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x101801, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000340)=r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x5460, 0x20000000) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x5460, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000001b0000000000000000090000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000001b0000000000000000090000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r5}, &(0x7f0000002480), &(0x7f00000024c0)=r4, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x2102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) (async) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000063110c00000000008510000002000000850000000500000095000000000000009500000000000000751fd66f49df44f022c8ec3e778c9de9660d299b82ceed3db453d147130e33fc87a33f506b3790b6fa3e0ba2b494b1beccc779102879d0d863c9fe574c5aed64c7d8f5be973b493b3f9a2731d91d8f0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, &(0x7f0000000680)="17ff417c26e5df25421820587d49be4916bacc0c2c30884fa19f96ce4dd979c29ffeea8a1fe5c5adabfbf3e7a06a862b469a06ea396ac7a51e03c19f0687d09430586152ba5b57a06e83558bd51869ef2c53cb85dcfd8abd93fd182fbfdba0226aef45e9b9a7f5824266a81380f401b2cdfd6821afd5e21f0318a9ab6676592a69ade0f2378115e60f6082cb7ef8a340ed51389035e3af4d32fb4b80a6c8878811edc070075c77a80d941a6f765c89bc5db7bf2314ce", &(0x7f00000003c0)=""/13}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x17, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @jmp={0x5, 0x1, 0x2, 0x6, 0x9, 0xc, 0xfffffffffffffffc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x4, 0xa, 0x9, 0x0, 0x9}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r3], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r7}, 0x10) socketpair(0x1f, 0xa, 0x0, 0x0) (async) socketpair(0x1f, 0xa, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r9}, 0x10) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) 6.298415187s ago: executing program 2 (id=1039): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@union={0x4, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x61]}}, &(0x7f00000006c0)=""/72, 0x43, 0x48, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x5}], &(0x7f0000000200)='GPL\x00', 0xe53, 0x50, &(0x7f0000000240)=""/80, 0x60680, 0x5a, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.080769472s ago: executing program 1 (id=1040): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x48, &(0x7f0000000900), 0x4) (async) r3 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000200), 0x4) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) socketpair(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async) recvmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/15, 0xf}], 0x1, &(0x7f0000000000)=""/24, 0x18}, 0x100) (async) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) gettid() 5.557445652s ago: executing program 2 (id=1041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3d, 0x0, 0xfc}, {0x6}]}) 4.99994143s ago: executing program 1 (id=1042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x11, 0x2, 0x0) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba5, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000004687d00000000000000000850000002c000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f00000008c0)=@in6={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x37, 0x0, 0x0, 0x900}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001000810f0000005e140402000000000e0003000a00030002800000121f00"/46, 0x2e}], 0x1}, 0x0) 4.676664206s ago: executing program 0 (id=1043): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socket$kcm(0x18, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000) (async) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.464892928s ago: executing program 0 (id=1044): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7, 0x1, 0x70, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x2e, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x10040, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="62202a3a2a207200b37c8d3bb1b831311f24e1ae48f66d7606c16d292a695a1a0ee4271d8133c69db102e085231b03f022444d3e73a2673ab95a8acf1097ce772128bf8a390450d05c924af019f39e4b0b57be19417befe02ca081d7620066f4222a589a1946de25c8a39dab118a6d6764b622d46f5164e8bcc3e2c0893f2cc012c4c994d9219bee023dc6531604a6ff9cda1751e8d0b070632ccc91e941754d31782d038b3aeb46214e1efc974028d15121acfd6a6c32ae9693e2dd11738f9e"], 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a3, &(0x7f0000000080)) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x19) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd8cbb6f069a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f90698aa2d9c57276322b82e8976f5a4d98066", 0x90}, {&(0x7f00000003c0)="95", 0x1}, {&(0x7f0000000b00)="8dda9bf6738d7915", 0x8}], 0x3}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) close(r5) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001540)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003b000001", 0x2c}, {&(0x7f0000000200)="a97fcd", 0x3}], 0x2}, 0x20000884) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000340)=""/118, 0x76, 0x0, &(0x7f00000003c0)=""/178, 0xb2}}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.97789812s ago: executing program 4 (id=1045): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='contention_end\x00'}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) getpid() (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000186000000000000400000000000000009500"/40], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETOFFLOAD(r3, 0x541b, 0x20000000) 3.876874385s ago: executing program 1 (id=1046): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3.858607404s ago: executing program 0 (id=1047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x41, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4000000000, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x30) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3.770782855s ago: executing program 1 (id=1048): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0ccb7907081175f37538e486dd"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$kcm(0x29, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000023c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0172fd6461202f"], 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x20e) 3.504731977s ago: executing program 2 (id=1049): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)}, 0x40fd) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0045878, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x214a, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000003000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0x8, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x30, 0x61]}}, &(0x7f0000000280)=""/50, 0x29, 0x32, 0x0, 0x8, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x15, 0x4, 0x7, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x54a4634e5bb55b6f) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400", 0x2}], 0x1}, 0x0) close(r3) 3.094539337s ago: executing program 2 (id=1050): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001ec0)={&(0x7f00000009c0), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000b00)=""/163, 0xa3}, {&(0x7f0000000bc0)=""/188, 0xbc}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)=""/57, 0x39}], 0x5, &(0x7f0000001d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x120) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000be3a000000000000", @ANYRES32=r4, @ANYBLOB="00000000000000000000001d0d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c80)) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xa6, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x9, 0x1, 0x0, r8}]}, &(0x7f0000000200)='GPL\x00', 0x101, 0xfe, &(0x7f0000000240)=""/254, 0x41000, 0x2a, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000007c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000800)=[r3, r5, r2], &(0x7f0000000840)=[{0x5, 0x1, 0x9, 0x7}, {0x3, 0x5, 0xf, 0x6}, {0x2, 0x3, 0x0, 0xe}, {0x2, 0x2, 0x4, 0x6}], 0x10, 0xfffffffa, @void, @value}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) 3.011488108s ago: executing program 4 (id=1051): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000005000000d5ace221b947f0e00000000000eeca19472beae51dcc508fe165ef9f0000000000000000000000834865741ad6d8cdbcca957a08e5f3087ab4d1323bda01a807c4195d682e70e846f6cc423a5825e9d4820bd7a12a75aac5f32dc07ee50749cd2c16101652462b7a90b08ecc2510bda70500fda6ab12aac5351a6020bd5b9e6ca238bdadb427f13ec2e2eb0f6e4c3ad542867da277297139ac95a9ba2d730946d6a5a35a8dd00380a9f3c70c5c5338328b840a39560d0ffe35611b9b5c29e058f785967f79203ee0f6630c046f838d09dce2292e36bad009bf585ab15e118ea1d4e89bd54ee9315422b6a7efeb50db9561d0fbfb617d117343901c5dc2bda6d5526fc0727cf80b7af0d0d8dc5864a482683c3714a1abfc2f47e9217fc294f0cc7ef0dccb4f8dd7b4aeee62cf69e24c"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x1008, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1a00000004000000000000000163d3f3e7034a45880112dafefa5ac39fb99d58a12b87709dad7c9aafe188ab0398b15dfffc4a066931581effcc381e752a555b3b0869e2a675ddea755d1f1c8d50c244926980f70f36b73dca9585a2d1df4d4eb1228967d6910218d1e24fcddbee3392975f19f70a1f8dcf297a83492e99e5d9caf46ce77878fe7b93634f80f38459c1947a55c979fbe7d67451d4a020f9c7eede95b23bd427bf3c6112", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_clone(0x100, &(0x7f00000006c0)="3fd118f364cd769161920202fec42527663a1526d24d93681f77ea80b6aa756079b5320a8aa37fef3a79d69140b8e2a32349fed266a4f42e47899db102423d7ce15baee7dcf6dc19ae8dca02cb52c3369eafa4ba137d8384b61246f9fc03356d9df2578c21aaa115f25c8a069652", 0x6e, &(0x7f00000001c0), &(0x7f0000000740), &(0x7f0000000780)="afaa279d197a6e38d7dbeeef030b2307f3911b3dae68cc7a6912f33c20b81b980b4c7be203a0f078625522832a5fdfb8885002d907a0a5af1001eb5ab269030be08cbe67215524c402d78d80658f919817abbcc69bde74753d9f3f61ef7ff4ca8695811ae1cd318771142ada98b934121100dc2e2a1c142f5f") perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x8901, 0x1000000000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8937, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3, 0x404, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x7a0, 0x4000006e54, 0x100001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80008}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x429}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x1d, &(0x7f0000000080)=""/29, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/260, 0x104}, {&(0x7f00000009c0)=""/240, 0xf0}], 0x2}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2.892798889s ago: executing program 0 (id=1052): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x7000000) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000540), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x8, 0x7fffffff, 0x8, 0x1ce8, 0xffffffffffffffff, 0x3, '\x00', r3, r2, 0x4, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000072000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b0af8ff00000000bfa100000000000017010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.854871048s ago: executing program 2 (id=1053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x5, &(0x7f00000004c0)=[{0x15, 0x0, 0x3}, {}, {}, {}, {0x6}]}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) close(0xffffffffffffffff) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000000200)='fsi_slave_init\x00', r2}, 0x18) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000002c0)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="21000000030000000a0000000500000098070004", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000000000000100"/28], 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000006000000000000000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYRES16=r2], 0xffffff20) (async) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x29, 0x0, 0x0) 1.084059065s ago: executing program 4 (id=1054): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xc, &(0x7f0000000880)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r3], 0xfe33) 1.004652492s ago: executing program 0 (id=1055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, 0x0, 0x40010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000064000000bca3000000000000240300001afeffff720af0fff80200ff71a4f0ff000000001f030000000000002e040200000000002604fdffffff000a6114080e000000001d430000000000007a0a00fe003d001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa035f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6d46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16fe8ddf44572a3996e7f653da18ec0ae564162a27afea62d84f3a10076443d601009393bf52d2105bd901128c7e0ec82701c8204a09eeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081dad507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39b21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6e78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b2045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98812106dec28eaeb883418f5624e93aca9e560efa826e5d0c4bd26ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ffc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2540d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d5ef903a554d651186a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a687b8bd9259bc31b6b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700e89a56fe8e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f692192571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09d28c853c28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5cd2baf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a896192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b37463f000000a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12b92d7ae633d44086b3f03b20d54abc46271a30f1240fc52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434000000000000000000000000000000000021000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73943df80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c2f63453c7e228919b7500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b512e34182084a3a3b2beb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a316572e92d44ca450b1457c64baeaf8d23f30097126ef7586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd630780d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddffff070000d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23541320d8579c5ab42bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267c451ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de01fdee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d00000000caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af620000232ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe88100000000000003568bbc2f89596ceacbcbd1c76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0044f57d15e37e34fc5915499b88ae780a7bae4df603bd3c72808cf300440b1b63615b454a161d5fc1d1308f39b3aff5c03eef2e63a013f8a5bf4da6aa1b7d5ec55e8c7a0405fe718e42d4d613f992a0cbc16cb251386acae02f665544c9c02adae5839f1e00006e42fc051a0cb8685667c2edf4522f0f2a8eb7c7b56063a959c4b881e3dbff3c911435e84bc57f36afb8ff78168719dc5ed47eb309f8a12db461beffd0d091a132330579c9afac1a4ad2794987927eb61ad82a61a144d33283eaeda4836a684a6e2716d83e60f5e0e1ab6376960224dc96c839a1fef49475cc0e3053eeb4aebd0e1696f20d458f1aac2d2d871221d3a2d0e1790584ba14b9145a3f81298ae7871f0191a740a8e53b0b6f152dc4d8f28eaa2a5acadd2313f55287aa6ea469b90575839cd763b4703e87fbd6bd134c2cb62996c5d28e73df35744f19143c0b57a26d692dd9a5cf3ab615e432e38b0cbbcced5c39a73fc8e50e6590605cc0b7db1dbca3ea6fbcdff0e18fdeeb5360642d77171433e78bd9300fd171fc83700f0e92b116e7846719eecd94331354b35b9aac42b34fac350decfe5c2eac926f0a007cb6e3bda3effb84b4607468aaad19dcf0d54e5f4ed4ade1fca17d39be192a10516fb34eb6cde71136bb2b4ce1306c17744fefc2b884bdfebad173147780d8b0129f194a60ed6935400000000000000000000000000000000000000000000000000000000000004c8653a0befb2c2795c52e0efae157f1bb138dc7f7d566c964ecfaf388bd173e0174bc5a49d0595de6e1cb51ead265b156412045a00f396d3e180a71897028714e8730d44895d12589a2e0d8d7e4e6f03633ef0f714edad8a2515ac4886efe8c5e006ef4638a4c52577e7d04c2ca9b714aaabde444490ff17d8baad3e65a716a16492b9a887613426ef82e371f531f18d48a4dee61380595792dc07194a4184a76e1e5d1cb39e58f391af74825f4893f063ac0c722bd6e162b8e7ac7a0f7eb13b5267335fd87e13dda7aa19157a0a1a1c2905358c8fc2cd066ea0680b013109f06c293eb1867fbf919fa12364f5ca680bc96cc326e5d757305595bc124b824897524cdcf000000000000"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x6, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x0, 0x4, 0x6, 0x0, 0x2, 0x10130, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x1e80, 0xc, 0x7, 0x5, 0xbe6, 0x9da, 0x3, 0x0, 0x7fffffff, 0x0, 0xe0}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.003258717s ago: executing program 1 (id=1056): socket$kcm(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032f00fe08000e40000200875a65969ff57b05ff0200000000000000000001ffaaaaaa"], 0xfdef) socketpair(0x28, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)}, 0x4004000) 845.387465ms ago: executing program 2 (id=1057): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2480, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630700fc04082f00db5b686158bbcfe8875a060305000023000000000000000000000000ac1414aa3a2008"], 0xfdef) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="0000000100850000170600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r7}, 0x10) write$cgroup_type(r5, &(0x7f0000000140), 0x9) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)}], 0x1}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000200000000e7ffffff00200085000000870000001801000020696c2500d3bc000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800ddffb70300000000000085000000170000009500000000000000edc91d60cf333c94f810b3519c4fa6ba"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) (async) r9 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000005580)={0x0, 0x0, 0x0}, 0x40400d4) (async) socket$kcm(0xa, 0x0, 0x11) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r10, 0x40047451, 0x500000000000000) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00873769a27483dcfa859fb8087447d64f59ee412323e33f6fd4543ffffffffff505d7a84e2d99942d0f6d37a3e3e958977d1d6019d0142a326904f28c214303ffec12cce03b8cf0c1f457d670760565c855c0bfe70f571b94531fe6b4c9a2466f9c1138ca89ce815ba730efadce8598af132e8cf478bce78f7ae02a5be35dd4fc847dfb22d625034a17e5d38761c5f998f91659c715f0bb80061a214df35124867f305470924d321b00bfbcc8b891b2fcf2f65802e4624c6c1a0be7b3e9182ade4da4b734aa0e9ab465cdfb30dd83e4a5b5e6d72b92681d754426629bef8989f742c712733cdcef65db"]) 76.980447ms ago: executing program 4 (id=1058): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.603997ms ago: executing program 1 (id=1059): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711275000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f00000003c0)="53f21bf5fc559753b3a262a1ee0c58464987462349f68fcfda7e92d06140cc99b4d6a07b8b06f5908036ccb58864f547b447959fe2d9", &(0x7f0000000480)=""/100, &(0x7f0000000500)="758cd96ec11ed07bdff3cdec118a028223e84aade3cf2fbda68469cece446363f2f47f2e532b6270cd78e5f1801c11dd4a071af16ceee2baf2f0c1601c8d4e316ea69826b10bd0616638d67a973dab94004c4535eda303ea093ff35e750b0e8231ce9efdce4728e7c4cbf8035205a0a93255c55c025faaeba255810ce8d9c71ddb19003503140b3e6a67f22320582de0a3968f6c88ad2811ec790322fc", &(0x7f00000005c0)="de977a98dadd3f293fffec5d3b90b49e8c86f721993ed81a9ac7290e8d21e8dbf6c61eb9b6211cd12c6e345d55ca455599363ed61cdfc865157d210c3a97ed930b1d58e902449f4d4a8bc042c6d695d1492d9b74ee5e5e676842e47d119dfd5f67506a", 0x1, r1}, 0x38) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb929"], 0xfdef) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="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", 0x127}], 0x1, 0x0, 0x0, 0x7400}, 0x20042004) 0s ago: executing program 0 (id=1060): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x5, 0x17, 0x7, 0x10, 0x0, 0xffffffffffffff4c, 0x40060, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc37bc01a8eb19d88, @perf_bp={&(0x7f0000000780), 0x4}, 0x20, 0x7, 0x8001, 0x0, 0x8, 0xe362, 0x0, 0x0, 0x0, 0x0, 0xd7}, 0x0, 0x3, r2, 0x9) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000001000000000000000ad944ee000000000084006b0dad0b2b07"], 0x28}, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff40000000"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r4, 0x20, &(0x7f0000000440)={&(0x7f00000003c0)=""/27, 0x1b, 0x0, &(0x7f0000000400)=""/38, 0x26}}, 0x10) mkdir(0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000380)=@raw=[@ldst={0x3, 0x2, 0x2, 0x2, 0x4, 0x4, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x1, 0x0, 0x9, 0x1, 0x10}, @call={0x85, 0x0, 0x0, 0xb8}, @generic={0x3, 0x0, 0xe, 0x0, 0x80000000}], 0x0, 0x101, 0xa5, &(0x7f0000000500)=""/165, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x3, 0x5, 0x10, 0xa}, {0x5, 0x5, 0xd}, {0x3, 0x3, 0x1, 0xb}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x9, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x8d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r8 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000200)=0x7fff) (async) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x74}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) kernel console output (not intermixed with test programs): 1074025677 [ 252.984531][ T7756] pim6reg0: linktype set to 1 [ 252.994913][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.012563][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.039611][ T7629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.131474][ T7629] hsr_slave_0: entered promiscuous mode [ 253.141880][ T7629] hsr_slave_1: entered promiscuous mode [ 254.654735][ T7790] netlink: 'syz.0.609': attribute type 21 has an invalid length. [ 255.920053][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.926411][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.071249][ T7807] netlink: 'syz.4.615': attribute type 10 has an invalid length. [ 256.115558][ T7807] bond0: (slave bond_slave_0): Releasing backup interface [ 256.154115][ T7814] netlink: 10 bytes leftover after parsing attributes in process `syz.1.618'. [ 256.229149][ T7629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.264945][ T7629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.325011][ T7629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.341768][ T7819] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.621'. [ 256.378784][ T7629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.446497][ T7823] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 256.469704][ T7823] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.620'. [ 256.661130][ T7629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.713034][ T7629] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.733705][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.740943][ T5491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.817919][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.825175][ T5487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.888650][ T7837] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.627'. [ 256.903098][ T7832] netlink: 152 bytes leftover after parsing attributes in process `syz.4.626'. [ 256.946542][ T7837] netlink: 'syz.1.627': attribute type 3 has an invalid length. [ 257.064333][ T7842] netlink: 10 bytes leftover after parsing attributes in process `syz.2.628'. [ 259.693330][ T7629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.853052][ T5492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.924658][ T7629] veth0_vlan: entered promiscuous mode [ 259.960924][ T5492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.991834][ T7629] veth1_vlan: entered promiscuous mode [ 260.062224][ T5492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.159477][ T7629] veth0_macvtap: entered promiscuous mode [ 260.231855][ T5492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.271255][ T7629] veth1_macvtap: entered promiscuous mode [ 260.366658][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.399317][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.414566][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.446519][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.481890][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.501352][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.511890][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.524674][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.539503][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.547279][ T7872] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 260.556654][ T7872] bridge_slave_1: left allmulticast mode [ 260.584018][ T7872] bridge_slave_1: left promiscuous mode [ 260.594710][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.699212][ T7872] bridge_slave_0: left allmulticast mode [ 260.728533][ T7872] bridge_slave_0: left promiscuous mode [ 260.750905][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.760027][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.769657][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.787571][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.801859][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.822855][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 260.832176][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.076145][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.113699][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.186963][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.269927][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.298966][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.326827][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.349394][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.366524][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.429915][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.487423][ T7629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.514596][ T7629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.537394][ T7629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.554966][ T7629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.908692][ T5492] bridge_slave_1: left allmulticast mode [ 261.914399][ T5492] bridge_slave_1: left promiscuous mode [ 261.920282][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.932725][ T5492] bridge_slave_0: left allmulticast mode [ 261.942941][ T5492] bridge_slave_0: left promiscuous mode [ 261.958578][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.654714][ T5492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.679268][ T5492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.701755][ T5492] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 262.721777][ T5492] bond0 (unregistering): Released all slaves [ 262.863793][ T7901] team0: Port device team_slave_0 removed [ 262.904483][ T7901] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 262.933138][ T5244] Bluetooth: hci2: command tx timeout [ 263.448296][ T5486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.473384][ T5486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.609672][ T5492] hsr_slave_0: left promiscuous mode [ 263.634080][ T5492] hsr_slave_1: left promiscuous mode [ 263.653398][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.661800][ T5492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.692820][ T5492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.709991][ T5492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.767140][ T5492] veth1_macvtap: left allmulticast mode [ 263.775769][ T5492] veth1_macvtap: left promiscuous mode [ 263.799510][ T5492] veth0_macvtap: left promiscuous mode [ 263.805239][ T5492] veth1_vlan: left promiscuous mode [ 263.825509][ T5492] veth0_vlan: left promiscuous mode [ 264.805075][ T5492] team0 (unregistering): Port device team_slave_1 removed [ 264.866807][ T5492] team0 (unregistering): Port device team_slave_0 removed [ 265.022469][ T5244] Bluetooth: hci2: command tx timeout [ 265.356604][ T7920] netlink: 'syz.2.652': attribute type 12 has an invalid length. [ 265.368664][ T7920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.652'. [ 265.389955][ T7933] netlink: 'syz.4.655': attribute type 3 has an invalid length. [ 265.407902][ T7933] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.655'. [ 265.476550][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.517268][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.734824][ T7877] chnl_net:caif_netlink_parms(): no params data found [ 266.076154][ T7947] netlink: 830 bytes leftover after parsing attributes in process `syz.0.659'. [ 266.371968][ T7952] netlink: 'syz.0.659': attribute type 21 has an invalid length. [ 266.387808][ T7952] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 267.048878][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.056144][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.097749][ T7877] bridge_slave_0: entered allmulticast mode [ 267.105411][ T7877] bridge_slave_0: entered promiscuous mode [ 267.113832][ T5244] Bluetooth: hci2: command tx timeout [ 267.148103][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.155261][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.217845][ T7877] bridge_slave_1: entered allmulticast mode [ 267.225318][ T7877] bridge_slave_1: entered promiscuous mode [ 267.317425][ T7877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.339758][ T7877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.397839][ T5489] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.449408][ T7877] team0: Port device team_slave_0 added [ 267.462848][ T7877] team0: Port device team_slave_1 added [ 267.486603][ T5489] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.528335][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.535322][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.561966][ T7877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.599997][ T5489] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.613635][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.624428][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.651052][ T7877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.711150][ T5489] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.734097][ T7877] hsr_slave_0: entered promiscuous mode [ 267.743268][ T7877] hsr_slave_1: entered promiscuous mode [ 267.749954][ T7877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.757825][ T7877] Cannot create hsr debugfs directory [ 267.908270][ T5489] bridge_slave_1: left allmulticast mode [ 267.913963][ T5489] bridge_slave_1: left promiscuous mode [ 267.924640][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.934179][ T5489] bridge_slave_0: left allmulticast mode [ 267.940487][ T5489] bridge_slave_0: left promiscuous mode [ 267.946231][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.138573][ T7969] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.666'. [ 268.332162][ T7969] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.666'. [ 269.167502][ T5244] Bluetooth: hci2: command tx timeout [ 269.271709][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.281646][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.292829][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.302552][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.311667][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.321276][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.495886][ T5489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.508688][ T5489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.519845][ T5489] bond0 (unregistering): Released all slaves [ 269.543158][ T7974] netlink: 'syz.0.664': attribute type 21 has an invalid length. [ 269.551416][ T7974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.664'. [ 269.561439][ T7973] netlink: 'syz.0.664': attribute type 21 has an invalid length. [ 269.570338][ T7973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.664'. [ 269.593731][ T7983] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 269.650051][ T7989] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 269.688229][ T7992] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 269.717150][ T7992] netlink: 128 bytes leftover after parsing attributes in process `syz.0.670'. [ 270.272092][ T5489] hsr_slave_0: left promiscuous mode [ 270.356847][ T5489] hsr_slave_1: left promiscuous mode [ 270.393000][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.409226][ T5489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.439423][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.528800][ T5489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.965905][ T5489] veth1_macvtap: left promiscuous mode [ 270.974752][ T5489] veth0_macvtap: left promiscuous mode [ 270.985633][ T5489] veth1_vlan: left promiscuous mode [ 270.995377][ T5489] veth0_vlan: left promiscuous mode [ 271.407174][ T5244] Bluetooth: hci0: command tx timeout [ 271.969271][ T5489] team0 (unregistering): Port device team_slave_1 removed [ 272.023971][ T5489] team0 (unregistering): Port device team_slave_0 removed [ 272.527098][ T8012] netlink: 'syz.2.675': attribute type 10 has an invalid length. [ 272.538568][ T8012] geneve0: entered promiscuous mode [ 272.569514][ T8012] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 272.820097][ T8023] netlink: 'syz.0.678': attribute type 16 has an invalid length. [ 272.903063][ T8023] netlink: 164 bytes leftover after parsing attributes in process `syz.0.678'. [ 273.501980][ T7877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.509128][ T5244] Bluetooth: hci0: command tx timeout [ 273.619981][ T7877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.672707][ T7877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.711274][ T7984] chnl_net:caif_netlink_parms(): no params data found [ 273.792406][ T7877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.904148][ T8033] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.911431][ T8033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.930105][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.937400][ T8032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.232784][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.263769][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.278543][ T7984] bridge_slave_0: entered allmulticast mode [ 274.297813][ T7984] bridge_slave_0: entered promiscuous mode [ 274.416595][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.457617][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.479626][ T7984] bridge_slave_1: entered allmulticast mode [ 274.495687][ T7984] bridge_slave_1: entered promiscuous mode [ 274.655698][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.675211][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.859478][ T7984] team0: Port device team_slave_0 added [ 274.908587][ T7877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.915627][ T8060] netlink: 'syz.2.687': attribute type 29 has an invalid length. [ 274.926227][ T8063] netlink: 'syz.2.687': attribute type 29 has an invalid length. [ 274.951289][ T7984] team0: Port device team_slave_1 added [ 275.060247][ T8060] netlink: 'syz.2.687': attribute type 29 has an invalid length. [ 275.085490][ T8063] netlink: 'syz.2.687': attribute type 29 has an invalid length. [ 275.149684][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.168106][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.226693][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.257073][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.264159][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.301369][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.318629][ T8069] netlink: 35083 bytes leftover after parsing attributes in process `syz.4.689'. [ 275.389224][ T7877] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.541565][ T5491] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.548944][ T5491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.573668][ T5244] Bluetooth: hci0: command tx timeout [ 275.622645][ T8079] netlink: 'syz.2.691': attribute type 3 has an invalid length. [ 275.637607][ T8079] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.691'. [ 275.672048][ T7984] hsr_slave_0: entered promiscuous mode [ 275.686001][ T7984] hsr_slave_1: entered promiscuous mode [ 275.701322][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.708623][ T5486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.035687][ T8079] : renamed from bond0 (while UP) [ 276.286551][ T8093] netlink: 'syz.0.694': attribute type 3 has an invalid length. [ 276.297598][ T8093] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.694'. [ 277.066108][ T7877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.155369][ T8128] netlink: 'syz.2.703': attribute type 3 has an invalid length. [ 277.187485][ T8128] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.703'. [ 277.684828][ T5237] Bluetooth: hci0: command tx timeout [ 277.853777][ T8141] netlink: 'syz.0.705': attribute type 10 has an invalid length. [ 277.880437][ T7877] veth0_vlan: entered promiscuous mode [ 278.004905][ T7877] veth1_vlan: entered promiscuous mode [ 278.572370][ T7984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.603661][ T8148] netlink: 830 bytes leftover after parsing attributes in process `syz.4.707'. [ 278.623284][ T7984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.652689][ T7984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.700745][ T7984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.735460][ T7877] veth0_macvtap: entered promiscuous mode [ 278.755882][ T7877] veth1_macvtap: entered promiscuous mode [ 278.837733][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.862073][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.890481][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.914964][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.950715][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.979552][ T5237] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 279.016982][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.059299][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.118954][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.161258][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.187118][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.206978][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.226821][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.238124][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.290465][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.331911][ T7877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.363111][ T7877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.389013][ T7877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.405834][ T7877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.493797][ T8165] FAULT_INJECTION: forcing a failure. [ 279.493797][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 279.506836][ T8165] CPU: 1 UID: 0 PID: 8165 Comm: syz.0.712 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 279.517452][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 279.527551][ T8165] Call Trace: [ 279.530862][ T8165] [ 279.533814][ T8165] dump_stack_lvl+0x241/0x360 [ 279.538544][ T8165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.543790][ T8165] ? __pfx__printk+0x10/0x10 [ 279.548433][ T8165] ? __lock_acquire+0x137a/0x2040 [ 279.553599][ T8165] should_fail_ex+0x3b0/0x4e0 [ 279.558325][ T8165] should_failslab+0xac/0x100 [ 279.563061][ T8165] ? __alloc_skb+0x1c3/0x440 [ 279.567698][ T8165] kmem_cache_alloc_node_noprof+0x71/0x320 [ 279.573555][ T8165] __alloc_skb+0x1c3/0x440 [ 279.578018][ T8165] ? __pfx_lock_acquire+0x10/0x10 [ 279.583098][ T8165] ? __pfx___alloc_skb+0x10/0x10 [ 279.588173][ T8165] ? kasan_save_track+0x51/0x80 [ 279.593069][ T8165] ? kasan_save_free_info+0x40/0x50 [ 279.598320][ T8165] ? __kasan_slab_free+0x37/0x60 [ 279.603305][ T8165] ? tipc_node_xmit+0x1e0/0xfa0 [ 279.608212][ T8165] tipc_msg_create+0x47/0x540 [ 279.612953][ T8165] tipc_group_create_event+0x12e/0xa60 [ 279.618501][ T8165] tipc_sk_proto_rcv+0x24c/0x19a0 [ 279.623569][ T8165] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.629688][ T8165] ? __pfx_validate_chain+0x10/0x10 [ 279.634937][ T8165] ? __pfx_tipc_sk_proto_rcv+0x10/0x10 [ 279.640439][ T8165] ? mark_lock+0x70/0x350 [ 279.644844][ T8165] tipc_sk_filter_rcv+0x36a8/0x3950 [ 279.650099][ T8165] ? __lock_acquire+0x137a/0x2040 [ 279.655188][ T8165] ? mark_lock+0x9a/0x350 [ 279.659577][ T8165] ? __lock_acquire+0x137a/0x2040 [ 279.664681][ T8165] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.670717][ T8165] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.677318][ T8165] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 279.682907][ T8165] ? lockdep_hardirqs_on+0x99/0x150 [ 279.688166][ T8165] tipc_sk_rcv+0x8b3/0x1d20 [ 279.692700][ T8165] ? __lock_acquire+0x137a/0x2040 [ 279.697804][ T8165] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 279.702874][ T8165] ? __asan_memset+0x23/0x50 [ 279.707509][ T8165] ? lockdep_init_map_type+0xa1/0x910 [ 279.712956][ T8165] ? __raw_spin_lock_init+0x45/0x100 [ 279.718295][ T8165] tipc_node_xmit+0x1e0/0xfa0 [ 279.723016][ T8165] ? stack_depot_save_flags+0x29/0x830 [ 279.728524][ T8165] ? __pfx_tipc_node_xmit+0x10/0x10 [ 279.733864][ T8165] ? kasan_save_free_info+0x40/0x50 [ 279.739107][ T8165] ? poison_slab_object+0xe0/0x150 [ 279.744346][ T8165] ? __kasan_slab_free+0x37/0x60 [ 279.749324][ T8165] ? kfree+0x149/0x360 [ 279.753419][ T8165] ? tipc_group_delete+0x365/0x430 [ 279.758568][ T8165] ? tipc_sk_leave+0x1c1/0x710 [ 279.763484][ T8165] ? tipc_release+0x1d8/0x1870 [ 279.768286][ T8165] ? sock_close+0xbc/0x240 [ 279.772740][ T8165] ? __fput+0x24a/0x8a0 [ 279.776930][ T8165] ? __x64_sys_close+0x7f/0x110 [ 279.781824][ T8165] ? do_syscall_64+0xf3/0x230 [ 279.786543][ T8165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.792688][ T8165] tipc_node_distr_xmit+0x30d/0x450 [ 279.797956][ T8165] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 279.803728][ T8165] ? kfree+0x149/0x360 [ 279.807830][ T8165] tipc_group_delete+0x392/0x430 [ 279.812798][ T8165] ? lockdep_hardirqs_on+0x99/0x150 [ 279.818019][ T8165] ? __pfx_tipc_group_delete+0x10/0x10 [ 279.823503][ T8165] ? __tipc_shutdown+0x12a3/0x1680 [ 279.828632][ T8165] ? tipc_group_self+0x26/0x1c0 [ 279.833507][ T8165] tipc_sk_leave+0x1c1/0x710 [ 279.838119][ T8165] ? __pfx_tipc_sk_leave+0x10/0x10 [ 279.843238][ T8165] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 279.848985][ T8165] tipc_release+0x1d8/0x1870 [ 279.853594][ T8165] ? __pfx_tipc_release+0x10/0x10 [ 279.858627][ T8165] ? down_write+0x18c/0x220 [ 279.863145][ T8165] ? __pfx_down_write+0x10/0x10 [ 279.868026][ T8165] ? file_close_fd+0x67/0x80 [ 279.872626][ T8165] ? do_raw_spin_lock+0x14f/0x370 [ 279.877666][ T8165] sock_close+0xbc/0x240 [ 279.881921][ T8165] ? __pfx_sock_close+0x10/0x10 [ 279.886782][ T8165] __fput+0x24a/0x8a0 [ 279.890789][ T8165] __x64_sys_close+0x7f/0x110 [ 279.895498][ T8165] do_syscall_64+0xf3/0x230 [ 279.900034][ T8165] ? clear_bhb_loop+0x35/0x90 [ 279.904746][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.910671][ T8165] RIP: 0033:0x7fb262d7def9 [ 279.915100][ T8165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.934715][ T8165] RSP: 002b:00007fb263afc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 279.943146][ T8165] RAX: ffffffffffffffda RBX: 00007fb262f35f80 RCX: 00007fb262d7def9 [ 279.951129][ T8165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 279.959112][ T8165] RBP: 00007fb263afc090 R08: 0000000000000000 R09: 0000000000000000 [ 279.967097][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.975082][ T8165] R13: 0000000000000000 R14: 00007fb262f35f80 R15: 00007fff0be47078 [ 279.983094][ T8165] [ 280.067625][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.154303][ T5486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.169883][ T5486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.201376][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.261729][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.268973][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.304373][ T5491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.329959][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.337208][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.345211][ T5491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.434070][ T8181] netlink: 201400 bytes leftover after parsing attributes in process `syz.4.718'. [ 280.720125][ T8191] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 280.748775][ T8190] netlink: 735 bytes leftover after parsing attributes in process `syz.1.635'. [ 280.790998][ T8196] netlink: 'syz.0.722': attribute type 4 has an invalid length. [ 280.837323][ T8196] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.722'. [ 280.879780][ T8197] netlink: 'syz.0.722': attribute type 4 has an invalid length. [ 280.897113][ T8197] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.722'. [ 280.938325][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.140467][ T7984] veth0_vlan: entered promiscuous mode [ 281.200040][ T7984] veth1_vlan: entered promiscuous mode [ 281.269143][ T7984] veth0_macvtap: entered promiscuous mode [ 281.291029][ T8208] FAULT_INJECTION: forcing a failure. [ 281.291029][ T8208] name failslab, interval 1, probability 0, space 0, times 0 [ 281.303854][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.4.726 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 281.314483][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 281.324579][ T8208] Call Trace: [ 281.327886][ T8208] [ 281.330841][ T8208] dump_stack_lvl+0x241/0x360 [ 281.335559][ T8208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.340808][ T8208] ? __pfx__printk+0x10/0x10 [ 281.345438][ T8208] ? __lock_acquire+0x137a/0x2040 [ 281.350511][ T8208] should_fail_ex+0x3b0/0x4e0 [ 281.355231][ T8208] should_failslab+0xac/0x100 [ 281.359940][ T8208] ? __alloc_skb+0x1c3/0x440 [ 281.364568][ T8208] kmem_cache_alloc_node_noprof+0x71/0x320 [ 281.370450][ T8208] __alloc_skb+0x1c3/0x440 [ 281.374912][ T8208] ? __pfx_lock_acquire+0x10/0x10 [ 281.379996][ T8208] ? __pfx___alloc_skb+0x10/0x10 [ 281.384971][ T8208] ? kasan_save_track+0x51/0x80 [ 281.389959][ T8208] ? kasan_save_free_info+0x40/0x50 [ 281.395213][ T8208] ? __kasan_slab_free+0x37/0x60 [ 281.400200][ T8208] ? tipc_node_xmit+0x1e0/0xfa0 [ 281.405104][ T8208] tipc_msg_create+0x47/0x540 [ 281.409842][ T8208] tipc_group_create_event+0x12e/0xa60 [ 281.415375][ T8208] tipc_sk_proto_rcv+0x24c/0x19a0 [ 281.420454][ T8208] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.426486][ T8208] ? __pfx_validate_chain+0x10/0x10 [ 281.431735][ T8208] ? __pfx_tipc_sk_proto_rcv+0x10/0x10 [ 281.437249][ T8208] ? mark_lock+0x70/0x350 [ 281.441645][ T8208] tipc_sk_filter_rcv+0x36a8/0x3950 [ 281.446883][ T8208] ? __lock_acquire+0x137a/0x2040 [ 281.451967][ T8208] ? mark_lock+0x9a/0x350 [ 281.456351][ T8208] ? __lock_acquire+0x137a/0x2040 [ 281.461443][ T8208] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.467470][ T8208] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.473837][ T8208] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 281.479437][ T8208] ? lockdep_hardirqs_on+0x99/0x150 [ 281.484705][ T8208] tipc_sk_rcv+0x8b3/0x1d20 [ 281.489251][ T8208] ? __lock_acquire+0x137a/0x2040 [ 281.494359][ T8208] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 281.499340][ T8208] ? __asan_memset+0x23/0x50 [ 281.503969][ T8208] ? lockdep_init_map_type+0xa1/0x910 [ 281.509407][ T8208] ? __raw_spin_lock_init+0x45/0x100 [ 281.514738][ T8208] tipc_node_xmit+0x1e0/0xfa0 [ 281.519465][ T8208] ? stack_depot_save_flags+0x29/0x830 [ 281.524963][ T8208] ? __pfx_tipc_node_xmit+0x10/0x10 [ 281.530202][ T8208] ? kasan_save_free_info+0x40/0x50 [ 281.535433][ T8208] ? poison_slab_object+0xe0/0x150 [ 281.540583][ T8208] ? __kasan_slab_free+0x37/0x60 [ 281.545560][ T8208] ? kfree+0x149/0x360 [ 281.549664][ T8208] ? tipc_group_delete+0x365/0x430 [ 281.554823][ T8208] ? tipc_sk_leave+0x1c1/0x710 [ 281.559727][ T8208] ? tipc_release+0x1d8/0x1870 [ 281.564543][ T8208] ? sock_close+0xbc/0x240 [ 281.568986][ T8208] ? __fput+0x24a/0x8a0 [ 281.573185][ T8208] ? __x64_sys_close+0x7f/0x110 [ 281.578072][ T8208] ? do_syscall_64+0xf3/0x230 [ 281.582793][ T8208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.588930][ T8208] tipc_node_distr_xmit+0x30d/0x450 [ 281.594195][ T8208] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 281.599952][ T8208] ? kfree+0x149/0x360 [ 281.604054][ T8208] tipc_group_delete+0x392/0x430 [ 281.609018][ T8208] ? lockdep_hardirqs_on+0x99/0x150 [ 281.614238][ T8208] ? __pfx_tipc_group_delete+0x10/0x10 [ 281.619741][ T8208] ? __tipc_shutdown+0x12a3/0x1680 [ 281.624890][ T8208] ? tipc_group_self+0x26/0x1c0 [ 281.629763][ T8208] tipc_sk_leave+0x1c1/0x710 [ 281.634374][ T8208] ? __pfx_tipc_sk_leave+0x10/0x10 [ 281.639497][ T8208] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 281.645234][ T8208] tipc_release+0x1d8/0x1870 [ 281.649843][ T8208] ? __pfx_tipc_release+0x10/0x10 [ 281.654873][ T8208] ? down_write+0x18c/0x220 [ 281.659392][ T8208] ? __pfx_down_write+0x10/0x10 [ 281.664259][ T8208] ? file_close_fd+0x67/0x80 [ 281.668858][ T8208] ? do_raw_spin_lock+0x14f/0x370 [ 281.673894][ T8208] sock_close+0xbc/0x240 [ 281.678145][ T8208] ? __pfx_sock_close+0x10/0x10 [ 281.683006][ T8208] __fput+0x24a/0x8a0 [ 281.687006][ T8208] __x64_sys_close+0x7f/0x110 [ 281.691701][ T8208] do_syscall_64+0xf3/0x230 [ 281.696219][ T8208] ? clear_bhb_loop+0x35/0x90 [ 281.700912][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.706820][ T8208] RIP: 0033:0x7f2e9437def9 [ 281.711244][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.730864][ T8208] RSP: 002b:00007f2e950cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 281.739303][ T8208] RAX: ffffffffffffffda RBX: 00007f2e94535f80 RCX: 00007f2e9437def9 [ 281.747281][ T8208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 281.755256][ T8208] RBP: 00007f2e950cc090 R08: 0000000000000000 R09: 0000000000000000 [ 281.763234][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.771214][ T8208] R13: 0000000000000000 R14: 00007f2e94535f80 R15: 00007ffe448ab8f8 [ 281.779209][ T8208] [ 281.834067][ T8214] netlink: 'syz.0.728': attribute type 12 has an invalid length. [ 281.862049][ T8214] netlink: 'syz.0.728': attribute type 11 has an invalid length. [ 281.863983][ T7984] veth1_macvtap: entered promiscuous mode [ 281.897157][ T8214] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.728'. [ 281.923609][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.958702][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.977023][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.997390][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.016054][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.057063][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.087102][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.111413][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.173391][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.256408][ T8225] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.732'. [ 282.312504][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.362458][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.377640][ T8230] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 282.405052][ T8230] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.732'. [ 282.415584][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.458942][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.482405][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.506114][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.527361][ T7984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.552963][ T7984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.589332][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.762371][ T7984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.784424][ T7984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.813944][ T7984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.836687][ T7984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.287187][ T8257] netlink: 'syz.2.739': attribute type 13 has an invalid length. [ 285.317042][ T8257] netlink: 152 bytes leftover after parsing attributes in process `syz.2.739'. [ 285.501296][ T8263] netlink: 'syz.0.741': attribute type 5 has an invalid length. [ 285.537080][ T8263] netlink: 'syz.0.741': attribute type 15 has an invalid length. [ 285.551608][ T8267] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.741'. [ 285.605259][ T8265] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.741'. [ 285.878785][ T5488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.886667][ T5488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.994403][ T5489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.005227][ T5489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.170432][ T8279] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 286.197107][ T8279] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.746'. [ 286.240090][ T8281] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 286.245722][ T8281] dvmrp1: linktype set to 769 [ 286.438311][ T8286] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.748'. [ 287.332145][ T5487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.060307][ T5487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.260461][ T5487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.459509][ T5487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.917064][ T5487] bridge_slave_1: left allmulticast mode [ 288.922770][ T5487] bridge_slave_1: left promiscuous mode [ 289.017257][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.061172][ T5487] bridge_slave_0: left allmulticast mode [ 289.066873][ T5487] bridge_slave_0: left promiscuous mode [ 289.123882][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.597552][ T5487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.707736][ T5487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.840526][ T5487] bond0 (unregistering): Released all slaves [ 293.882797][ T5487] hsr_slave_0: left promiscuous mode [ 293.953227][ T5487] hsr_slave_1: left promiscuous mode [ 293.997123][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.058417][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.142805][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.176989][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.370507][ T5487] veth1_macvtap: left promiscuous mode [ 294.376119][ T5487] veth0_macvtap: left promiscuous mode [ 294.475019][ T5487] veth1_vlan: left promiscuous mode [ 294.507080][ T5487] veth0_vlan: left promiscuous mode [ 299.077851][ T5487] team0 (unregistering): Port device team_slave_1 removed [ 299.465470][ T5487] team0 (unregistering): Port device team_slave_0 removed [ 304.048706][ T5240] Bluetooth: hci5: command 0x0406 tx timeout [ 304.054886][ T5240] Bluetooth: hci6: command 0x0406 tx timeout [ 304.064247][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 304.619837][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.637134][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.645585][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.657869][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.667352][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 304.675180][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.763780][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.798248][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.806421][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.817043][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.824898][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 304.833142][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.996400][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.023607][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.032452][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.042248][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.055462][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 305.062993][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.133746][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.148366][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.164707][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.187971][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.197874][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 305.210379][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.729748][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.751408][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.763350][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.768771][ T5487] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.778087][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.790125][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 305.799133][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.963467][ T5487] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.087641][ T5487] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.116001][ T8322] chnl_net:caif_netlink_parms(): no params data found [ 306.200477][ T5487] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.226067][ T8320] chnl_net:caif_netlink_parms(): no params data found [ 306.255607][ T8316] chnl_net:caif_netlink_parms(): no params data found [ 306.359122][ T8318] chnl_net:caif_netlink_parms(): no params data found [ 306.547763][ T8322] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.554974][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.570874][ T8322] bridge_slave_0: entered allmulticast mode [ 306.589665][ T8322] bridge_slave_0: entered promiscuous mode [ 306.601628][ T8322] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.609384][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.616562][ T8322] bridge_slave_1: entered allmulticast mode [ 306.624611][ T8322] bridge_slave_1: entered promiscuous mode [ 306.766349][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.773814][ T5244] Bluetooth: hci0: command tx timeout [ 306.784040][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.792039][ T8316] bridge_slave_0: entered allmulticast mode [ 306.806517][ T8316] bridge_slave_0: entered promiscuous mode [ 306.838538][ T8322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.855214][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.865628][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.875988][ T8320] bridge_slave_0: entered allmulticast mode [ 306.883311][ T8320] bridge_slave_0: entered promiscuous mode [ 306.930650][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.937927][ T5244] Bluetooth: hci3: command tx timeout [ 306.947075][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.954454][ T8316] bridge_slave_1: entered allmulticast mode [ 306.968013][ T8316] bridge_slave_1: entered promiscuous mode [ 306.996434][ T5487] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.022717][ T8322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.045588][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.056707][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.064064][ T8320] bridge_slave_1: entered allmulticast mode [ 307.072656][ T8320] bridge_slave_1: entered promiscuous mode [ 307.090654][ T5244] Bluetooth: hci1: command tx timeout [ 307.124924][ T8318] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.133671][ T8318] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.140945][ T8318] bridge_slave_0: entered allmulticast mode [ 307.148592][ T8318] bridge_slave_0: entered promiscuous mode [ 307.209821][ T8322] team0: Port device team_slave_0 added [ 307.239047][ T5487] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.257388][ T5244] Bluetooth: hci2: command tx timeout [ 307.266250][ T8320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.275675][ T8318] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.283908][ T8318] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.291429][ T8318] bridge_slave_1: entered allmulticast mode [ 307.299106][ T8318] bridge_slave_1: entered promiscuous mode [ 307.314260][ T8316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.331730][ T8316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.344200][ T8322] team0: Port device team_slave_1 added [ 307.354235][ T8320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.396312][ T5487] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.538553][ T5487] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.570646][ T8318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.599340][ T8322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.606340][ T8322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.633965][ T8322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.650746][ T8320] team0: Port device team_slave_0 added [ 307.688242][ T8318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.718888][ T8316] team0: Port device team_slave_0 added [ 307.732135][ T8316] team0: Port device team_slave_1 added [ 307.745975][ T8322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.753407][ T8322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.779591][ T8322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.803514][ T8320] team0: Port device team_slave_1 added [ 307.852226][ T8318] team0: Port device team_slave_0 added [ 307.887905][ T5244] Bluetooth: hci4: command tx timeout [ 307.930725][ T8318] team0: Port device team_slave_1 added [ 307.964729][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.971963][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.998626][ T8316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.031773][ T8322] hsr_slave_0: entered promiscuous mode [ 308.040839][ T8322] hsr_slave_1: entered promiscuous mode [ 308.065650][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.074281][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.109530][ T8320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.126111][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.141747][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.167804][ T8318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.180233][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.191992][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.218494][ T8316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.236382][ T8320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.245090][ T8320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.271192][ T8320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.289600][ T8318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.296567][ T8318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.322989][ T8318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.344534][ T8330] chnl_net:caif_netlink_parms(): no params data found [ 308.491698][ T8316] hsr_slave_0: entered promiscuous mode [ 308.498335][ T8316] hsr_slave_1: entered promiscuous mode [ 308.504742][ T8316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.512404][ T8316] Cannot create hsr debugfs directory [ 308.525381][ T8318] hsr_slave_0: entered promiscuous mode [ 308.533207][ T8318] hsr_slave_1: entered promiscuous mode [ 308.543314][ T8318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.555503][ T8318] Cannot create hsr debugfs directory [ 308.707663][ T8320] hsr_slave_0: entered promiscuous mode [ 308.714198][ T8320] hsr_slave_1: entered promiscuous mode [ 308.723120][ T8320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.731220][ T8320] Cannot create hsr debugfs directory [ 308.847082][ T5244] Bluetooth: hci0: command tx timeout [ 308.860735][ T5487] bridge_slave_1: left allmulticast mode [ 308.866429][ T5487] bridge_slave_1: left promiscuous mode [ 308.877186][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.889007][ T5487] bridge_slave_0: left allmulticast mode [ 308.894723][ T5487] bridge_slave_0: left promiscuous mode [ 308.901732][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.915707][ T5487] bridge_slave_1: left allmulticast mode [ 308.922625][ T5487] bridge_slave_1: left promiscuous mode [ 308.930710][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.944032][ T5487] bridge_slave_0: left allmulticast mode [ 308.950224][ T5487] bridge_slave_0: left promiscuous mode [ 308.957501][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.011227][ T5244] Bluetooth: hci3: command tx timeout [ 309.172760][ T5244] Bluetooth: hci1: command tx timeout [ 309.327239][ T5244] Bluetooth: hci2: command tx timeout [ 309.765817][ T5487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.786052][ T5487] bond0 (unregistering): Released all slaves [ 309.910896][ T5487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.925798][ T5487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.937519][ T5487] bond0 (unregistering): Released all slaves [ 309.967216][ T5244] Bluetooth: hci4: command tx timeout [ 310.155760][ T8330] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.163241][ T8330] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.170575][ T8330] bridge_slave_0: entered allmulticast mode [ 310.190547][ T8330] bridge_slave_0: entered promiscuous mode [ 310.199171][ T8330] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.206347][ T8330] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.214431][ T8330] bridge_slave_1: entered allmulticast mode [ 310.225860][ T8330] bridge_slave_1: entered promiscuous mode [ 310.468931][ T8330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.562728][ T8330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.737957][ T8330] team0: Port device team_slave_0 added [ 310.817915][ T8330] team0: Port device team_slave_1 added [ 310.881597][ T8330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.889413][ T8330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.917810][ T8330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.928733][ T5244] Bluetooth: hci0: command tx timeout [ 310.934779][ T8330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.942126][ T8330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.975362][ T8330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.043598][ T8316] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.073071][ T5487] hsr_slave_0: left promiscuous mode [ 311.079406][ T5487] hsr_slave_1: left promiscuous mode [ 311.085431][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.092850][ T5244] Bluetooth: hci3: command tx timeout [ 311.104753][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.114235][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.130165][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.144972][ T5487] hsr_slave_0: left promiscuous mode [ 311.151238][ T5487] hsr_slave_1: left promiscuous mode [ 311.157451][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.164877][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.185618][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.193368][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.232972][ T5487] veth1_macvtap: left promiscuous mode [ 311.238610][ T5487] veth0_macvtap: left promiscuous mode [ 311.244206][ T5487] veth1_vlan: left promiscuous mode [ 311.247494][ T5244] Bluetooth: hci1: command tx timeout [ 311.249880][ T5487] veth0_vlan: left promiscuous mode [ 311.261416][ T5487] veth1_macvtap: left promiscuous mode [ 311.267068][ T5487] veth0_macvtap: left promiscuous mode [ 311.272676][ T5487] veth1_vlan: left promiscuous mode [ 311.278091][ T5487] veth0_vlan: left promiscuous mode [ 311.407356][ T5244] Bluetooth: hci2: command tx timeout [ 311.911549][ T5487] team0 (unregistering): Port device team_slave_1 removed [ 312.050338][ T5244] Bluetooth: hci4: command tx timeout [ 312.803802][ T5487] team0 (unregistering): Port device team_slave_1 removed [ 312.855046][ T5487] team0 (unregistering): Port device team_slave_0 removed [ 313.007612][ T5244] Bluetooth: hci0: command tx timeout [ 313.171550][ T5244] Bluetooth: hci3: command tx timeout [ 313.331684][ T5244] Bluetooth: hci1: command tx timeout [ 313.426677][ T8316] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.483053][ T8330] hsr_slave_0: entered promiscuous mode [ 313.489097][ T5244] Bluetooth: hci2: command tx timeout [ 313.508216][ T8330] hsr_slave_1: entered promiscuous mode [ 313.514390][ T8330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.527657][ T8330] Cannot create hsr debugfs directory [ 313.555802][ T8316] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.646185][ T8316] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.938540][ T8316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.949466][ T8316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.959483][ T8316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.973708][ T8316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.127314][ T5244] Bluetooth: hci4: command tx timeout [ 314.142924][ T8316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.185297][ T8316] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.202084][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.209307][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.233949][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.241108][ T5486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.422195][ T8318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.442265][ T8320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.462707][ T8320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.473998][ T8320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.503869][ T8320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.557709][ T8318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.645749][ T8318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.692856][ T8316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.735537][ T8318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.805522][ T8320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.885231][ T8320] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.916489][ T8316] veth0_vlan: entered promiscuous mode [ 314.975630][ T8322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.990915][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.998260][ T5486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.028796][ T8316] veth1_vlan: entered promiscuous mode [ 315.038384][ T8322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.050037][ T8322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.066278][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.073458][ T5486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.100117][ T8322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.312448][ T8316] veth0_macvtap: entered promiscuous mode [ 315.324465][ T8316] veth1_macvtap: entered promiscuous mode [ 315.396360][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.440622][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.460468][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.473883][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.485858][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.544053][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.555360][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.565561][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.577327][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.589175][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.622178][ T8316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.632199][ T8316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.641894][ T8316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.654581][ T8316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.694365][ T8322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.771826][ T8320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.792560][ T8330] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.802753][ T8330] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.831411][ T8322] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.870382][ T8330] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.917288][ T8330] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.931734][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.939002][ T5486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.985039][ T8318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 316.002434][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.009605][ T5486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.036813][ T8318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 316.081497][ T8318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.096275][ T8318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.174235][ T8320] veth0_vlan: entered promiscuous mode [ 316.206288][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.213281][ T8320] veth1_vlan: entered promiscuous mode [ 316.227140][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.313158][ T5486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.327528][ T5486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.511394][ T8320] veth0_macvtap: entered promiscuous mode [ 316.543652][ T8330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.580087][ T8320] veth1_macvtap: entered promiscuous mode [ 316.670485][ T8330] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.712686][ T5493] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.719913][ T5493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.745153][ T8320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.757290][ T8320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.772633][ T8320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.784596][ T8320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.797437][ T8320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.812655][ T8320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.825097][ T8320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.882684][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.889948][ T5487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.902276][ T8320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.915774][ T8320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.933129][ T8320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.944570][ T8320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.959795][ T8320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.974087][ T8320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.985468][ T8320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.010967][ T8318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.050736][ T8320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.065961][ T8320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.075362][ T8320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.087524][ T8320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.123201][ T8322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.221499][ T8318] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.302554][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.309790][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.343504][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.351411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.356992][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.358586][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.410944][ T5487] bridge_slave_1: left allmulticast mode [ 317.416656][ T5487] bridge_slave_1: left promiscuous mode [ 317.437739][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.462345][ T5487] bridge_slave_0: left allmulticast mode [ 317.468466][ T5487] bridge_slave_0: left promiscuous mode [ 317.474275][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.836141][ T5487]  (unregistering): (slave geneve0): Releasing backup interface [ 318.040397][ T5487]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.060751][ T5487]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.074972][ T5487]  (unregistering): Released all slaves [ 318.421510][ T5489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.456154][ T5489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.655500][ T5487] hsr_slave_0: left promiscuous mode [ 318.662557][ T5487] hsr_slave_1: left promiscuous mode [ 318.679531][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.703496][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.712318][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.728262][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.751674][ T5487] veth1_macvtap: left promiscuous mode [ 318.760913][ T5487] veth0_macvtap: left promiscuous mode [ 318.766534][ T5487] veth1_vlan: left promiscuous mode [ 318.773518][ T5487] veth0_vlan: left promiscuous mode [ 319.550441][ T5487] team0 (unregistering): Port device team_slave_1 removed [ 319.627513][ T5487] team0 (unregistering): Port device team_slave_0 removed [ 320.304777][ T5486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.336971][ T5486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.426067][ T8330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.494657][ T8322] veth0_vlan: entered promiscuous mode [ 320.554219][ T8322] veth1_vlan: entered promiscuous mode [ 320.842603][ T8330] veth0_vlan: entered promiscuous mode [ 320.863651][ T8322] veth0_macvtap: entered promiscuous mode [ 320.901763][ T8318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.934341][ T8322] veth1_macvtap: entered promiscuous mode [ 320.952946][ T8410] netlink: 'syz.1.769': attribute type 3 has an invalid length. [ 320.967328][ T8410] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.769'. [ 320.995529][ T8330] veth1_vlan: entered promiscuous mode [ 321.028968][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.051500][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.062196][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.073199][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.083553][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.096014][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.109654][ T8322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.164994][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.181398][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.191900][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.202921][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.213432][ T8322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.225788][ T8322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.238357][ T8322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.311234][ T8322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.332447][ T8322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.343352][ T8322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.353604][ T8322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.413841][ T8330] veth0_macvtap: entered promiscuous mode [ 321.478556][ T8330] veth1_macvtap: entered promiscuous mode [ 321.519596][ T8318] veth0_vlan: entered promiscuous mode [ 321.618048][ T5486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.625910][ T5486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.655295][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.681541][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.701831][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.712897][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.733297][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.744986][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.757225][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.768284][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.781050][ T8330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.794788][ T5488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.804123][ T5488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.819219][ T8414] bridge0: port 3(veth0_to_bond) entered blocking state [ 321.833946][ T8414] bridge0: port 3(veth0_to_bond) entered disabled state [ 321.843236][ T8414] veth0_to_bond: entered allmulticast mode [ 321.880190][ T8414] veth0_to_bond: entered promiscuous mode [ 321.893326][ T8414] bridge0: port 3(veth0_to_bond) entered blocking state [ 321.900937][ T8414] bridge0: port 3(veth0_to_bond) entered forwarding state [ 321.930878][ T8318] veth1_vlan: entered promiscuous mode [ 321.942325][ T8418] syz.1.770 (8418) used obsolete PPPIOCDETACH ioctl [ 321.955502][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.974880][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.986478][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.997773][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.008132][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.018997][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.030663][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.041709][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.055433][ T8330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.072017][ T8330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.082758][ T8330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.102652][ T8330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.112110][ T8330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.273825][ T8318] veth0_macvtap: entered promiscuous mode [ 322.413089][ T8318] veth1_macvtap: entered promiscuous mode [ 322.440871][ T8424] bridge0: port 4(hsr0) entered blocking state [ 322.456086][ T8424] bridge0: port 4(hsr0) entered disabled state [ 322.463358][ T8424] hsr0: entered allmulticast mode [ 322.503047][ T8424] hsr_slave_0: entered allmulticast mode [ 322.517514][ T8424] hsr_slave_1: entered allmulticast mode [ 322.530128][ T8424] hsr0: entered promiscuous mode [ 322.535905][ T8424] bridge0: port 4(hsr0) entered blocking state [ 322.542435][ T8424] bridge0: port 4(hsr0) entered forwarding state [ 322.571018][ T5491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.605359][ T5491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.906535][ T8435] netlink: 'syz.2.776': attribute type 3 has an invalid length. [ 322.926596][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.975388][ T8435] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.776'. [ 322.991382][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.021595][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.057000][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.088067][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.124576][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.156480][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.200444][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.227842][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.255482][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.281102][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.333965][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.344860][ T5491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.356949][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.367068][ T5491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.374633][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.385224][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.406430][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.422255][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.432787][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.446744][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.456746][ T8318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.467374][ T8318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.479234][ T8318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.525793][ T8318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.547759][ T8318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.556586][ T8318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.565535][ T8318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.001305][ T5491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.028168][ T5491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.167802][ T5487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.264766][ T5487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.467820][ T8466] syzkaller0: entered promiscuous mode [ 324.476242][ T8466] syzkaller0: entered allmulticast mode [ 327.684217][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.692440][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.704871][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.731469][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.748224][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 327.763096][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.508686][ T5487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.059461][ T8491] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.787'. [ 329.512260][ T5487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.553225][ T8501] netlink: 'syz.4.789': attribute type 3 has an invalid length. [ 329.565570][ T8501] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.789'. [ 329.770876][ T5487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.807790][ T5244] Bluetooth: hci4: command tx timeout [ 330.062615][ T5487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.546551][ T8524] netlink: 13183 bytes leftover after parsing attributes in process `syz.4.796'. [ 330.789360][ T8528] netlink: 'syz.0.798': attribute type 21 has an invalid length. [ 330.818381][ T8528] netlink: 120 bytes leftover after parsing attributes in process `syz.0.798'. [ 330.956990][ T8484] chnl_net:caif_netlink_parms(): no params data found [ 330.986740][ T5487] bridge_slave_1: left allmulticast mode [ 330.996929][ T5487] bridge_slave_1: left promiscuous mode [ 331.002729][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.104783][ T5487] bridge_slave_0: left allmulticast mode [ 331.123223][ T5487] bridge_slave_0: left promiscuous mode [ 331.147196][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.830720][ T8561] netlink: 'syz.1.809': attribute type 3 has an invalid length. [ 331.853115][ T8561] netlink: 'syz.1.809': attribute type 153 has an invalid length. [ 331.889301][ T5244] Bluetooth: hci4: command tx timeout [ 331.894212][ T8561] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.809'. [ 332.244885][ T5487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.265703][ T5487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.281104][ T5487] bond0 (unregistering): Released all slaves [ 332.308251][ T8544] netlink: 'syz.0.802': attribute type 29 has an invalid length. [ 332.639217][ T8584] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 332.790384][ T8584] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.815'. [ 332.909871][ T8583] netlink: 'syz.1.816': attribute type 16 has an invalid length. [ 332.965224][ T8583] netlink: 'syz.1.816': attribute type 3 has an invalid length. [ 333.119869][ T8583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.816'. [ 333.222326][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.250940][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.278697][ T8484] bridge_slave_0: entered allmulticast mode [ 333.325830][ T8484] bridge_slave_0: entered promiscuous mode [ 333.396281][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.448391][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.478911][ T8484] bridge_slave_1: entered allmulticast mode [ 333.497234][ T8484] bridge_slave_1: entered promiscuous mode [ 333.588990][ T8595] netlink: 168 bytes leftover after parsing attributes in process `syz.0.820'. [ 333.817500][ T8484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.862467][ T8484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.968353][ T5244] Bluetooth: hci4: command tx timeout [ 333.994649][ T5487] hsr_slave_0: left promiscuous mode [ 334.028168][ T5487] hsr_slave_1: left promiscuous mode [ 334.063032][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.079590][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.083086][ T8609] netlink: 'syz.4.824': attribute type 3 has an invalid length. [ 334.099205][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.106641][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.128270][ T8609] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.824'. [ 334.176360][ T5487] veth1_macvtap: left promiscuous mode [ 334.186371][ T5487] veth0_macvtap: left promiscuous mode [ 334.199062][ T5487] veth1_vlan: left promiscuous mode [ 334.204550][ T5487] veth0_vlan: left promiscuous mode [ 335.313877][ T5487] team0 (unregistering): Port device team_slave_1 removed [ 335.366665][ T5487] team0 (unregistering): Port device team_slave_0 removed [ 336.047126][ T5244] Bluetooth: hci4: command tx timeout [ 336.173636][ T8484] team0: Port device team_slave_0 added [ 336.221342][ T8484] team0: Port device team_slave_1 added [ 336.246317][ T8615] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.825'. [ 336.576226][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.615367][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.669931][ T8484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.747132][ T8484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.764792][ T8484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.835667][ T8484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.938523][ T8643] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.834'. [ 337.241536][ T8484] hsr_slave_0: entered promiscuous mode [ 337.273220][ T8484] hsr_slave_1: entered promiscuous mode [ 337.372986][ T8484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.401901][ T8484] Cannot create hsr debugfs directory [ 337.740959][ T8656] mac80211_hwsim hwsim41 : renamed from wlan0 (while UP) [ 338.624702][ T5487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.642518][ T5487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.657382][ T5487] bond0 (unregistering): Released all slaves [ 338.704243][ T8694] netlink: 'syz.1.848': attribute type 33 has an invalid length. [ 338.728093][ T8694] netlink: 36 bytes leftover after parsing attributes in process `syz.1.848'. [ 338.739595][ T8694] batadv0: entered promiscuous mode [ 338.744925][ T8694] batadv0: entered allmulticast mode [ 338.760989][ T8694] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 338.941562][ T8699] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 338.984938][ T8699] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.850'. [ 339.010150][ T8699] nbd: couldn't find a device at index 64 [ 339.536742][ T8711] netlink: 132 bytes leftover after parsing attributes in process `syz.4.854'. [ 339.552389][ T8716] netlink: 'syz.4.854': attribute type 10 has an invalid length. [ 339.595157][ T8716] team0: Cannot enslave team device to itself [ 339.845966][ T8725] netlink: 'syz.2.858': attribute type 3 has an invalid length. [ 339.897045][ T8725] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 339.904750][ T8725] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.858'. [ 340.069422][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.110204][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.119414][ T5487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.135562][ T5487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.139657][ T8736] netlink: 'syz.2.861': attribute type 6 has an invalid length. [ 340.167051][ T8736] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.861'. [ 340.204066][ T5487] veth1_macvtap: left promiscuous mode [ 340.216709][ T5487] veth0_macvtap: left promiscuous mode [ 340.232593][ T5487] veth1_vlan: left promiscuous mode [ 340.245063][ T5487] veth0_vlan: left promiscuous mode [ 341.406289][ T5487] team0 (unregistering): Port device team_slave_1 removed [ 341.494220][ T5487] team0 (unregistering): Port device team_slave_0 removed [ 342.091713][ T8728] netlink: 'syz.1.859': attribute type 29 has an invalid length. [ 342.115677][ T8739] ;: renamed from ip6tnl0 (while UP) [ 342.267848][ T8484] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.333991][ T8484] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.389389][ T8484] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.422715][ T8754] netlink: 'syz.0.867': attribute type 10 has an invalid length. [ 342.434028][ T8754] netlink: 55 bytes leftover after parsing attributes in process `syz.0.867'. [ 342.459211][ T8754] team0: Port device virt_wifi0 added [ 342.465852][ T8484] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.613298][ T8761] netlink: 'syz.2.870': attribute type 1 has an invalid length. [ 342.632757][ T8761] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.870'. [ 342.805260][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.895584][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.939987][ T5485] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.947275][ T5485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.003715][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.011071][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.075358][ T8770] Q6\bY4: renamed from lo (while UP) [ 343.657793][ T8786] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 343.709532][ T8786] vlan0: entered allmulticast mode [ 343.752849][ T8786] veth0_vlan: entered allmulticast mode [ 343.784069][ T8786] team0: Port device vlan0 added [ 343.799087][ T8778] netlink: 'syz.0.875': attribute type 10 has an invalid length. [ 343.961021][ T8778] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.001688][ T8778] bond0: (slave team0): Enslaving as an active interface with an up link [ 344.074395][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.195654][ T8484] veth0_vlan: entered promiscuous mode [ 344.228805][ T8484] veth1_vlan: entered promiscuous mode [ 344.345859][ T8484] veth0_macvtap: entered promiscuous mode [ 344.381038][ T8484] veth1_macvtap: entered promiscuous mode [ 344.435579][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.464590][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.489684][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.514740][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.531816][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.542445][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.555903][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.575407][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.594980][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.640776][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.658634][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.674227][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.685199][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.700978][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.717583][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.736925][ T8484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.754827][ T8484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.766712][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.833769][ T8484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.861385][ T8484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.882886][ T8484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.920492][ T8484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.197091][ T8814] netlink: 180 bytes leftover after parsing attributes in process `syz.0.883'. [ 345.209745][ T5487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.242292][ T5487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.297062][ T5487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.309347][ T5487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.330679][ T8814] netlink: 'syz.0.883': attribute type 10 has an invalid length. [ 345.350470][ T8814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.883'. [ 345.464139][ T8814] team0: Port device virt_wifi0 removed [ 345.503722][ T8814] batman_adv: batadv0: Adding interface: virt_wifi0 [ 345.514404][ T8814] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.557197][ T8814] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 346.374440][ T8845] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.893'. [ 346.397948][ T8845] netlink: 1 bytes leftover after parsing attributes in process `syz.2.893'. [ 347.130160][ T8882] netlink: 'syz.1.907': attribute type 10 has an invalid length. [ 347.203122][ T8882] team0: Cannot enslave team device to itself [ 347.322452][ T8888] : renamed from bond0 (while UP) [ 347.870761][ T8909] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.912'. [ 347.898082][ T8909] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.912'. [ 348.311686][ T5488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.027183][ T5488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.099985][ T5488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.187201][ T5488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.298438][ T5488] bridge_slave_1: left allmulticast mode [ 349.311975][ T5488] bridge_slave_1: left promiscuous mode [ 349.319425][ T5488] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.332222][ T5488] bridge_slave_0: left allmulticast mode [ 349.338131][ T5488] bridge_slave_0: left promiscuous mode [ 349.343919][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.275402][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 350.291912][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 350.300850][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 350.310560][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 350.320962][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 350.330312][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.876186][ T5488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.909563][ T5488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.949369][ T5488] bond0 (unregistering): Released all slaves [ 351.033581][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 351.066780][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 351.141157][ T8986] FAULT_INJECTION: forcing a failure. [ 351.141157][ T8986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.172605][ T8986] CPU: 1 UID: 0 PID: 8986 Comm: syz.2.932 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 351.183345][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 351.193438][ T8986] Call Trace: [ 351.196747][ T8986] [ 351.199707][ T8986] dump_stack_lvl+0x241/0x360 [ 351.204434][ T8986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.209677][ T8986] ? __pfx__printk+0x10/0x10 [ 351.214321][ T8986] should_fail_ex+0x3b0/0x4e0 [ 351.219042][ T8986] _copy_from_user+0x2f/0xe0 [ 351.223683][ T8986] move_addr_to_kernel+0x82/0x150 [ 351.228749][ T8986] copy_msghdr_from_user+0x43e/0x680 [ 351.234057][ T8986] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 351.239898][ T8986] __sys_sendmsg+0x23d/0x3a0 [ 351.244516][ T8986] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.249653][ T8986] ? vfs_write+0x7c4/0xc90 [ 351.254136][ T8986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.260488][ T8986] ? do_syscall_64+0x100/0x230 [ 351.265270][ T8986] ? do_syscall_64+0xb6/0x230 [ 351.269985][ T8986] do_syscall_64+0xf3/0x230 [ 351.274504][ T8986] ? clear_bhb_loop+0x35/0x90 [ 351.279241][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.285150][ T8986] RIP: 0033:0x7f4bdbb7def9 [ 351.289596][ T8986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.309215][ T8986] RSP: 002b:00007f4bdc96c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.317662][ T8986] RAX: ffffffffffffffda RBX: 00007f4bdbd35f80 RCX: 00007f4bdbb7def9 [ 351.325744][ T8986] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000003 [ 351.333744][ T8986] RBP: 00007f4bdc96c090 R08: 0000000000000000 R09: 0000000000000000 [ 351.341725][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.349708][ T8986] R13: 0000000000000000 R14: 00007f4bdbd35f80 R15: 00007fff57b07518 [ 351.357713][ T8986] [ 351.672023][ T8992] netlink: 'syz.2.934': attribute type 13 has an invalid length. [ 351.701737][ T8992] macvtap0: entered allmulticast mode [ 351.707670][ T8992] veth0_macvtap: entered allmulticast mode [ 351.756405][ T8992] macvtap0: refused to change device tx_queue_len [ 352.019660][ T8963] chnl_net:caif_netlink_parms(): no params data found [ 352.205675][ T9013] netlink: 'syz.2.940': attribute type 29 has an invalid length. [ 352.367300][ T55] Bluetooth: hci4: command tx timeout [ 352.383110][ T5488] hsr_slave_0: left promiscuous mode [ 352.439325][ T5488] hsr_slave_1: left promiscuous mode [ 352.524521][ T5488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.534471][ T5488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.545978][ T5488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.554684][ T9031] FAULT_INJECTION: forcing a failure. [ 352.554684][ T9031] name failslab, interval 1, probability 0, space 0, times 0 [ 352.568842][ T5488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.597123][ T9031] CPU: 0 UID: 0 PID: 9031 Comm: syz.2.944 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 352.607785][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.617874][ T9031] Call Trace: [ 352.621184][ T9031] [ 352.624139][ T9031] dump_stack_lvl+0x241/0x360 [ 352.628854][ T9031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.634089][ T9031] ? __pfx__printk+0x10/0x10 [ 352.638716][ T9031] ? __kmalloc_noprof+0xb0/0x400 [ 352.643691][ T9031] ? __pfx___might_resched+0x10/0x10 [ 352.649021][ T9031] should_fail_ex+0x3b0/0x4e0 [ 352.653833][ T9031] ? sock_kmalloc+0xd7/0x160 [ 352.658465][ T9031] should_failslab+0xac/0x100 [ 352.663264][ T9031] ? sock_kmalloc+0xd7/0x160 [ 352.667898][ T9031] __kmalloc_noprof+0xd8/0x400 [ 352.672695][ T9031] ? __might_fault+0xaa/0x120 [ 352.677458][ T9031] sock_kmalloc+0xd7/0x160 [ 352.681929][ T9031] ____sys_sendmsg+0x216/0x7d0 [ 352.687024][ T9031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.692364][ T9031] __sys_sendmsg+0x2b0/0x3a0 [ 352.697002][ T9031] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.702155][ T9031] ? vfs_write+0x7c4/0xc90 [ 352.706652][ T9031] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 352.712857][ T9031] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.719227][ T9031] ? do_syscall_64+0x100/0x230 [ 352.724034][ T9031] ? do_syscall_64+0xb6/0x230 [ 352.728754][ T9031] do_syscall_64+0xf3/0x230 [ 352.733300][ T9031] ? clear_bhb_loop+0x35/0x90 [ 352.738037][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.743978][ T9031] RIP: 0033:0x7f4bdbb7def9 [ 352.748429][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.768074][ T9031] RSP: 002b:00007f4bdc96c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.776531][ T9031] RAX: ffffffffffffffda RBX: 00007f4bdbd35f80 RCX: 00007f4bdbb7def9 [ 352.784545][ T9031] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000003 [ 352.792556][ T9031] RBP: 00007f4bdc96c090 R08: 0000000000000000 R09: 0000000000000000 [ 352.800570][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.808588][ T9031] R13: 0000000000000000 R14: 00007f4bdbd35f80 R15: 00007fff57b07518 [ 352.816624][ T9031] [ 352.832605][ T5488] veth1_macvtap: left promiscuous mode [ 352.841583][ T5488] veth0_macvtap: left promiscuous mode [ 352.847466][ T5488] veth1_vlan: left promiscuous mode [ 352.852853][ T5488] veth0_vlan: left promiscuous mode [ 354.462167][ T55] Bluetooth: hci4: command tx timeout [ 355.373131][ T5488] team0 (unregistering): Port device team_slave_1 removed [ 355.488232][ T5488] team0 (unregistering): Port device team_slave_0 removed [ 356.527117][ T55] Bluetooth: hci4: command tx timeout [ 356.646926][ T9073] netlink: 56411 bytes leftover after parsing attributes in process `syz.4.952'. [ 356.692276][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.709983][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.731492][ T8963] bridge_slave_0: entered allmulticast mode [ 356.760294][ T8963] bridge_slave_0: entered promiscuous mode [ 356.774684][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.793812][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.804009][ T8963] bridge_slave_1: entered allmulticast mode [ 356.827605][ T8963] bridge_slave_1: entered promiscuous mode [ 357.012739][ T9084] FAULT_INJECTION: forcing a failure. [ 357.012739][ T9084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.041179][ T8963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.070012][ T9084] CPU: 0 UID: 0 PID: 9084 Comm: syz.0.955 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 357.080654][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 357.090754][ T9084] Call Trace: [ 357.094069][ T9084] [ 357.097035][ T9084] dump_stack_lvl+0x241/0x360 [ 357.101749][ T9084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.106986][ T9084] ? __pfx__printk+0x10/0x10 [ 357.111616][ T9084] ? __pfx_lock_release+0x10/0x10 [ 357.116699][ T9084] should_fail_ex+0x3b0/0x4e0 [ 357.121419][ T9084] _copy_from_user+0x2f/0xe0 [ 357.126038][ T9084] ____sys_sendmsg+0x2e4/0x7d0 [ 357.130825][ T9084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.136137][ T9084] __sys_sendmsg+0x2b0/0x3a0 [ 357.140756][ T9084] ? __pfx___sys_sendmsg+0x10/0x10 [ 357.145877][ T9084] ? vfs_write+0x7c4/0xc90 [ 357.150329][ T9084] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 357.157025][ T9084] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.163379][ T9084] ? do_syscall_64+0x100/0x230 [ 357.168164][ T9084] ? do_syscall_64+0xb6/0x230 [ 357.172857][ T9084] do_syscall_64+0xf3/0x230 [ 357.177376][ T9084] ? clear_bhb_loop+0x35/0x90 [ 357.182074][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.187996][ T9084] RIP: 0033:0x7f015e77def9 [ 357.192413][ T9084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.212035][ T9084] RSP: 002b:00007f015f524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.220507][ T9084] RAX: ffffffffffffffda RBX: 00007f015e935f80 RCX: 00007f015e77def9 [ 357.228509][ T9084] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000003 [ 357.236505][ T9084] RBP: 00007f015f524090 R08: 0000000000000000 R09: 0000000000000000 [ 357.244500][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.252482][ T9084] R13: 0000000000000000 R14: 00007f015e935f80 R15: 00007ffec1676d18 [ 357.260505][ T9084] [ 357.291293][ T8963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.384432][ T9082] netlink: 132 bytes leftover after parsing attributes in process `syz.4.956'. [ 357.419341][ T9089] netlink: 'syz.4.956': attribute type 10 has an invalid length. [ 357.532975][ T9089] : (slave dummy0): Enslaving as an active interface with an up link [ 357.674547][ T8963] team0: Port device team_slave_0 added [ 357.745553][ T8963] team0: Port device team_slave_1 added [ 357.769419][ T9099] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.962'. [ 357.789924][ T9100] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.962'. [ 357.829727][ T9105] netlink: 152 bytes leftover after parsing attributes in process `syz.1.961'. [ 358.016158][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.026986][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.177124][ T8963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.251788][ T9112] netlink: 'syz.0.963': attribute type 28 has an invalid length. [ 358.272812][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 358.348387][ T8963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.355385][ T8963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.435794][ T8963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.495287][ T9130] IPv6: Can't replace route, no match found [ 358.502163][ T9129] FAULT_INJECTION: forcing a failure. [ 358.502163][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 358.531842][ T9129] CPU: 0 UID: 0 PID: 9129 Comm: syz.4.968 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 358.542490][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 358.552598][ T9129] Call Trace: [ 358.555901][ T9129] [ 358.558857][ T9129] dump_stack_lvl+0x241/0x360 [ 358.563598][ T9129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.569543][ T9129] ? __pfx__printk+0x10/0x10 [ 358.574185][ T9129] ? __kmalloc_noprof+0xb0/0x400 [ 358.579169][ T9129] ? __pfx___might_resched+0x10/0x10 [ 358.584499][ T9129] should_fail_ex+0x3b0/0x4e0 [ 358.589217][ T9129] ? ip_options_get+0x9c/0x570 [ 358.594032][ T9129] should_failslab+0xac/0x100 [ 358.598743][ T9129] ? ip_options_get+0x9c/0x570 [ 358.603520][ T9129] __kmalloc_noprof+0xd8/0x400 [ 358.608310][ T9129] ip_options_get+0x9c/0x570 [ 358.612918][ T9129] ? perf_trace_lock+0x136/0x490 [ 358.617883][ T9129] ? __lock_acquire+0x137a/0x2040 [ 358.622926][ T9129] ? __pfx_ip_options_get+0x10/0x10 [ 358.628140][ T9129] ? mark_lock+0x9a/0x350 [ 358.632482][ T9129] ? mark_lock+0x9a/0x350 [ 358.636818][ T9129] ip_cmsg_send+0x4cf/0xa80 [ 358.641344][ T9129] udp_sendmsg+0xcbc/0x2a60 [ 358.645872][ T9129] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 358.651451][ T9129] ? __pfx_udp_sendmsg+0x10/0x10 [ 358.656400][ T9129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.662743][ T9129] ? __local_bh_enable_ip+0x168/0x200 [ 358.668142][ T9129] ? inet_sendmsg+0x16b/0x390 [ 358.672830][ T9129] ? do_raw_spin_unlock+0x13c/0x8b0 [ 358.678038][ T9129] ? inet_sendmsg+0x2ba/0x390 [ 358.682724][ T9129] __sock_sendmsg+0x1a6/0x270 [ 358.687416][ T9129] ____sys_sendmsg+0x525/0x7d0 [ 358.692197][ T9129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.697519][ T9129] __sys_sendmsg+0x2b0/0x3a0 [ 358.702143][ T9129] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.707265][ T9129] ? vfs_write+0x7c4/0xc90 [ 358.711718][ T9129] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 358.717889][ T9129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.724232][ T9129] ? do_syscall_64+0x100/0x230 [ 358.729008][ T9129] ? do_syscall_64+0xb6/0x230 [ 358.733687][ T9129] do_syscall_64+0xf3/0x230 [ 358.738194][ T9129] ? clear_bhb_loop+0x35/0x90 [ 358.742905][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.748805][ T9129] RIP: 0033:0x7f6f0797def9 [ 358.753238][ T9129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.772844][ T9129] RSP: 002b:00007f6f087e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.781265][ T9129] RAX: ffffffffffffffda RBX: 00007f6f07b35f80 RCX: 00007f6f0797def9 [ 358.789246][ T9129] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000003 [ 358.797221][ T9129] RBP: 00007f6f087e4090 R08: 0000000000000000 R09: 0000000000000000 [ 358.805293][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.813266][ T9129] R13: 0000000000000000 R14: 00007f6f07b35f80 R15: 00007fff78133778 [ 358.821257][ T9129] [ 358.830147][ T55] Bluetooth: hci4: command tx timeout [ 359.089049][ T9137] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.972'. [ 359.211627][ T8963] hsr_slave_0: entered promiscuous mode [ 359.280967][ T8963] hsr_slave_1: entered promiscuous mode [ 359.318869][ T8963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.326481][ T8963] Cannot create hsr debugfs directory [ 359.496698][ T9147] netlink: 'syz.0.976': attribute type 3 has an invalid length. [ 359.531069][ T9147] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.976'. [ 360.198508][ T9171] FAULT_INJECTION: forcing a failure. [ 360.198508][ T9171] name failslab, interval 1, probability 0, space 0, times 0 [ 360.224972][ T9171] CPU: 1 UID: 0 PID: 9171 Comm: syz.4.982 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 360.235668][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 360.245764][ T9171] Call Trace: [ 360.249069][ T9171] [ 360.252028][ T9171] dump_stack_lvl+0x241/0x360 [ 360.256747][ T9171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.262010][ T9171] ? __pfx__printk+0x10/0x10 [ 360.266658][ T9171] should_fail_ex+0x3b0/0x4e0 [ 360.271373][ T9171] ? dst_alloc+0x12b/0x190 [ 360.275843][ T9171] should_failslab+0xac/0x100 [ 360.280574][ T9171] ? dst_alloc+0x12b/0x190 [ 360.285051][ T9171] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 360.290491][ T9171] dst_alloc+0x12b/0x190 [ 360.294867][ T9171] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 360.300983][ T9171] ip_route_output_key_hash+0x193/0x2b0 [ 360.306546][ T9171] ? ip_route_output_key_hash+0xdf/0x2b0 [ 360.312205][ T9171] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 360.318384][ T9171] ? ip_cmsg_send+0x9cd/0xa80 [ 360.323085][ T9171] ip_route_output_flow+0x29/0x140 [ 360.328220][ T9171] udp_sendmsg+0x174a/0x2a60 [ 360.332854][ T9171] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 360.338409][ T9171] ? __pfx_udp_sendmsg+0x10/0x10 [ 360.343370][ T9171] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.349734][ T9171] ? __local_bh_enable_ip+0x168/0x200 [ 360.355137][ T9171] ? inet_sendmsg+0x16b/0x390 [ 360.359850][ T9171] ? do_raw_spin_unlock+0x13c/0x8b0 [ 360.365085][ T9171] ? inet_sendmsg+0x2ba/0x390 [ 360.369784][ T9171] __sock_sendmsg+0x1a6/0x270 [ 360.374481][ T9171] ____sys_sendmsg+0x525/0x7d0 [ 360.379280][ T9171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.384600][ T9171] __sys_sendmsg+0x2b0/0x3a0 [ 360.389260][ T9171] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.394389][ T9171] ? vfs_write+0x7c4/0xc90 [ 360.398878][ T9171] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.405224][ T9171] ? do_syscall_64+0x100/0x230 [ 360.410019][ T9171] ? do_syscall_64+0xb6/0x230 [ 360.414732][ T9171] do_syscall_64+0xf3/0x230 [ 360.419267][ T9171] ? clear_bhb_loop+0x35/0x90 [ 360.423968][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.429871][ T9171] RIP: 0033:0x7f6f0797def9 [ 360.434293][ T9171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.454096][ T9171] RSP: 002b:00007f6f087e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.462558][ T9171] RAX: ffffffffffffffda RBX: 00007f6f07b35f80 RCX: 00007f6f0797def9 [ 360.470728][ T9171] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000003 [ 360.478720][ T9171] RBP: 00007f6f087e4090 R08: 0000000000000000 R09: 0000000000000000 [ 360.486693][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.494849][ T9171] R13: 0000000000000000 R14: 00007f6f07b35f80 R15: 00007fff78133778 [ 360.502869][ T9171] [ 361.377240][ T9203] netlink: 'syz.1.989': attribute type 10 has an invalid length. [ 361.405170][ T9203] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 361.538674][ T8963] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.559783][ T8963] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.594532][ T8963] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.629111][ T8963] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.836441][ T8963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.875411][ T8963] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.890768][ T9220] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 361.912053][ T5485] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.919325][ T5485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.956062][ T5485] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.963327][ T5485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.616159][ T9243] netlink: 'syz.1.1000': attribute type 10 has an invalid length. [ 362.654061][ T9243] hsr_slave_0: left promiscuous mode [ 362.672737][ T9243] hsr_slave_1: left promiscuous mode [ 362.734047][ T9247] netlink: 'syz.0.1001': attribute type 3 has an invalid length. [ 362.752233][ T9247] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1001'. [ 362.854166][ T9246] netlink: 'syz.1.1000': attribute type 2 has an invalid length. [ 362.874729][ T8963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.025174][ T8963] veth0_vlan: entered promiscuous mode [ 363.076245][ T8963] veth1_vlan: entered promiscuous mode [ 363.117398][ T9252] netlink: 'syz.1.1003': attribute type 25 has an invalid length. [ 363.203351][ T9252] netlink: 212848 bytes leftover after parsing attributes in process `syz.1.1003'. [ 363.251605][ T9260] FAULT_INJECTION: forcing a failure. [ 363.251605][ T9260] name failslab, interval 1, probability 0, space 0, times 0 [ 363.266638][ T9260] CPU: 0 UID: 0 PID: 9260 Comm: syz.4.1006 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 363.277353][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 363.280675][ T8963] veth0_macvtap: entered promiscuous mode [ 363.287411][ T9260] Call Trace: [ 363.287424][ T9260] [ 363.287434][ T9260] dump_stack_lvl+0x241/0x360 [ 363.287471][ T9260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.305493][ T9252] openvswitch: netlink: ufid size 84 bytes exceeds the range (1, 16) [ 363.309225][ T9260] ? __pfx__printk+0x10/0x10 [ 363.309259][ T9260] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 363.327446][ T9260] ? __pfx___might_resched+0x10/0x10 [ 363.332777][ T9260] ? rt_set_nexthop+0x664/0xa50 [ 363.337659][ T9260] should_fail_ex+0x3b0/0x4e0 [ 363.342373][ T9260] should_failslab+0xac/0x100 [ 363.347176][ T9260] ? ip_setup_cork+0x53f/0x8b0 [ 363.352076][ T9260] __kmalloc_cache_noprof+0x6c/0x2c0 [ 363.357412][ T9260] ? __pfx_lock_release+0x10/0x10 [ 363.362658][ T9260] ip_setup_cork+0x53f/0x8b0 [ 363.367299][ T9260] ip_make_skb+0x138/0x420 [ 363.371760][ T9260] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 363.377318][ T9260] ? __pfx_ip_make_skb+0x10/0x10 [ 363.382283][ T9260] udp_sendmsg+0x1bef/0x2a60 [ 363.386927][ T9260] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 363.392483][ T9260] ? __pfx_udp_sendmsg+0x10/0x10 [ 363.397464][ T9260] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.403898][ T9260] ? __local_bh_enable_ip+0x168/0x200 [ 363.409291][ T9260] ? inet_sendmsg+0x16b/0x390 [ 363.413974][ T9260] ? do_raw_spin_unlock+0x13c/0x8b0 [ 363.419192][ T9260] ? inet_sendmsg+0x2ba/0x390 [ 363.423882][ T9260] __sock_sendmsg+0x1a6/0x270 [ 363.428572][ T9260] ____sys_sendmsg+0x525/0x7d0 [ 363.433364][ T9260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.438679][ T9260] __sys_sendmsg+0x2b0/0x3a0 [ 363.443278][ T9260] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.448398][ T9260] ? vfs_write+0x7c4/0xc90 [ 363.452856][ T9260] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 363.459027][ T9260] ? do_syscall_64+0xb6/0x230 [ 363.463719][ T9260] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.470061][ T9260] ? do_syscall_64+0x100/0x230 [ 363.474852][ T9260] ? do_syscall_64+0xb6/0x230 [ 363.479537][ T9260] do_syscall_64+0xf3/0x230 [ 363.484042][ T9260] ? clear_bhb_loop+0x35/0x90 [ 363.488731][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.494630][ T9260] RIP: 0033:0x7f6f0797def9 [ 363.499076][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.518691][ T9260] RSP: 002b:00007f6f087e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.527121][ T9260] RAX: ffffffffffffffda RBX: 00007f6f07b35f80 RCX: 00007f6f0797def9 [ 363.535178][ T9260] RDX: 0000000000000000 RSI: 0000000020007940 RDI: 0000000000000003 [ 363.543151][ T9260] RBP: 00007f6f087e4090 R08: 0000000000000000 R09: 0000000000000000 [ 363.551130][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.559110][ T9260] R13: 0000000000000000 R14: 00007f6f07b35f80 R15: 00007fff78133778 [ 363.567194][ T9260] [ 363.588294][ T9252] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 363.650237][ T8963] veth1_macvtap: entered promiscuous mode [ 363.674350][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.686783][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.704107][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.725932][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.736525][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.758936][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.773826][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.798463][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.853599][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.009509][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.011272][ T9267] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.1008'. [ 364.058147][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.074214][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.085042][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.095188][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.105778][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.115660][ T8963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.127840][ T8963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.182932][ T8963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.289401][ T8963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.357077][ T8963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.366621][ T8963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.384907][ T8963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.914438][ T9280] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 364.923110][ T9280] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1011'. [ 364.986307][ T5488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.028359][ T5488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.079748][ T5460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.097245][ T5460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.121596][ T9289] tun0: tun_chr_ioctl cmd 1074812118 [ 365.375817][ T9298] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 365.405151][ T9298] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1018'. [ 365.444604][ T9298] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 365.536745][ T9308] netlink: 'syz.0.1020': attribute type 39 has an invalid length. [ 365.572031][ T9308] veth0_macvtap: left promiscuous mode [ 365.807676][ T9321] netlink: 'syz.1.1023': attribute type 21 has an invalid length. [ 365.829475][ T9321] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1023'. [ 366.782934][ T9324] delete_channel: no stack [ 367.383330][ T5485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.469970][ T9349] netlink: 'syz.4.1030': attribute type 4 has an invalid length. [ 367.507013][ T9349] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1030'. [ 367.850651][ T5485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.950880][ T5485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.104605][ T5485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.359489][ T5485] bridge_slave_1: left allmulticast mode [ 368.365195][ T5485] bridge_slave_1: left promiscuous mode [ 368.387158][ T5485] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.419063][ T5485] bridge_slave_0: left allmulticast mode [ 368.424770][ T5485] bridge_slave_0: left promiscuous mode [ 368.455750][ T5485] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.726785][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.797278][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.805752][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.826540][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.835183][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 369.842878][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.295005][ T5485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.327526][ T5485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.350051][ T5485] bond0 (unregistering): Released all slaves [ 371.510772][ T9388] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1042'. [ 371.722383][ T9411] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1047'. [ 371.887207][ T55] Bluetooth: hci4: command tx timeout [ 372.073432][ T9411] pim6reg1: entered promiscuous mode [ 372.087244][ T9411] pim6reg1: entered allmulticast mode [ 372.595406][ T5485] hsr_slave_0: left promiscuous mode [ 372.634856][ T5485] hsr_slave_1: left promiscuous mode [ 372.711517][ T5485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.730524][ T5485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.919076][ T9437] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1051'. [ 372.929853][ T9437] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 373.157528][ T5485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.171778][ T5485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.229432][ T5485] veth1_macvtap: left promiscuous mode [ 373.235215][ T5485] veth0_macvtap: left promiscuous mode [ 373.246251][ T5485] veth1_vlan: left promiscuous mode [ 373.254443][ T5485] veth0_vlan: left promiscuous mode [ 373.824355][ T5485] team0 (unregistering): Port device team_slave_1 removed [ 373.872160][ T5485] team0 (unregistering): Port device team_slave_0 removed [ 373.967205][ T55] Bluetooth: hci4: command tx timeout [ 374.315989][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.330642][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.343650][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.355345][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.365230][ T9431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.375925][ T9431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.569415][ T9447] netlink: 'syz.0.1055': attribute type 13 has an invalid length. [ 374.679910][ T9447] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1055'. [ 374.868770][ T9452] netlink: 13691 bytes leftover after parsing attributes in process `syz.4.1054'. [ 375.547487][ T9462] ================================================================== [ 375.555604][ T9462] BUG: KASAN: slab-out-of-bounds in btf_datasec_check_meta+0x2c9/0x9a0 [ 375.563883][ T9462] Read of size 1 at addr ffff88806416f6a7 by task syz.4.1058/9462 [ 375.571756][ T9462] [ 375.574172][ T9462] CPU: 0 UID: 0 PID: 9462 Comm: syz.4.1058 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 375.584852][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 375.594921][ T9462] Call Trace: [ 375.598202][ T9462] [ 375.601140][ T9462] dump_stack_lvl+0x241/0x360 [ 375.605835][ T9462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.611049][ T9462] ? __pfx__printk+0x10/0x10 [ 375.615651][ T9462] ? _printk+0xd5/0x120 [ 375.619811][ T9462] ? __virt_addr_valid+0x183/0x530 [ 375.624927][ T9462] ? __virt_addr_valid+0x183/0x530 [ 375.630041][ T9462] print_report+0x169/0x550 [ 375.634571][ T9462] ? __virt_addr_valid+0x183/0x530 [ 375.639690][ T9462] ? __virt_addr_valid+0x183/0x530 [ 375.644809][ T9462] ? __virt_addr_valid+0x45f/0x530 [ 375.649925][ T9462] ? __phys_addr+0xba/0x170 [ 375.654436][ T9462] ? btf_datasec_check_meta+0x2c9/0x9a0 [ 375.659993][ T9462] kasan_report+0x143/0x180 [ 375.664688][ T9462] ? btf_datasec_check_meta+0x2c9/0x9a0 [ 375.670250][ T9462] btf_datasec_check_meta+0x2c9/0x9a0 [ 375.675637][ T9462] btf_parse_type_sec+0x4d5/0x2620 [ 375.680757][ T9462] ? __pfx___might_resched+0x10/0x10 [ 375.686054][ T9462] ? btf_check_sec_info+0x379/0x4f0 [ 375.691260][ T9462] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 375.696815][ T9462] ? __asan_memcpy+0x40/0x70 [ 375.701421][ T9462] ? btf_parse_str_sec+0x21f/0x2b0 [ 375.706540][ T9462] btf_new_fd+0x43f/0xd30 [ 375.710880][ T9462] ? __pfx_btf_new_fd+0x10/0x10 [ 375.715744][ T9462] ? bpf_btf_load+0xcf/0x1a0 [ 375.720343][ T9462] __sys_bpf+0x6ef/0x810 [ 375.724603][ T9462] ? __pfx___sys_bpf+0x10/0x10 [ 375.729391][ T9462] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 375.735388][ T9462] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 375.741726][ T9462] ? exc_page_fault+0x590/0x8c0 [ 375.746586][ T9462] __x64_sys_bpf+0x7c/0x90 [ 375.751030][ T9462] do_syscall_64+0xf3/0x230 [ 375.755541][ T9462] ? clear_bhb_loop+0x35/0x90 [ 375.760231][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.766311][ T9462] RIP: 0033:0x7f6f0797def9 [ 375.770815][ T9462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.790520][ T9462] RSP: 002b:00007f6f087e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.798937][ T9462] RAX: ffffffffffffffda RBX: 00007f6f07b35f80 RCX: 00007f6f0797def9 [ 375.806910][ T9462] RDX: 0000000000000028 RSI: 0000000020000200 RDI: 0000000000000012 [ 375.814889][ T9462] RBP: 00007f6f079f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 375.822859][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.830832][ T9462] R13: 0000000000000001 R14: 00007f6f07b35f80 R15: 00007fff78133778 [ 375.838818][ T9462] [ 375.841837][ T9462] [ 375.844175][ T9462] Allocated by task 9462: [ 375.848496][ T9462] kasan_save_track+0x3f/0x80 [ 375.853187][ T9462] __kasan_kmalloc+0x98/0xb0 [ 375.857782][ T9462] __kmalloc_node_noprof+0x22a/0x440 [ 375.863062][ T9462] __kvmalloc_node_noprof+0x72/0x190 [ 375.868351][ T9462] btf_new_fd+0x265/0xd30 [ 375.872683][ T9462] __sys_bpf+0x6ef/0x810 [ 375.876925][ T9462] __x64_sys_bpf+0x7c/0x90 [ 375.881345][ T9462] do_syscall_64+0xf3/0x230 [ 375.885852][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.891773][ T9462] [ 375.894100][ T9462] The buggy address belongs to the object at ffff88806416f680 [ 375.894100][ T9462] which belongs to the cache kmalloc-64 of size 64 [ 375.907986][ T9462] The buggy address is located 0 bytes to the right of [ 375.907986][ T9462] allocated 39-byte region [ffff88806416f680, ffff88806416f6a7) [ 375.922408][ T9462] [ 375.924737][ T9462] The buggy address belongs to the physical page: [ 375.931162][ T9462] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6416f [ 375.939926][ T9462] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 375.947470][ T9462] page_type: 0xfdffffff(slab) [ 375.952146][ T9462] raw: 00fff00000000000 ffff88801ac418c0 0000000000000000 dead000000000001 [ 375.960736][ T9462] raw: 0000000000000000 0000000080200020 00000001fdffffff 0000000000000000 [ 375.969316][ T9462] page dumped because: kasan: bad access detected [ 375.975730][ T9462] page_owner tracks the page as allocated [ 375.981443][ T9462] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6166, tgid 6166 (syz-executor), ts 132984129455, free_ts 132962428067 [ 376.000832][ T9462] post_alloc_hook+0x1f3/0x230 [ 376.005611][ T9462] get_page_from_freelist+0x2e4c/0x2f10 [ 376.011167][ T9462] __alloc_pages_noprof+0x256/0x6c0 [ 376.016377][ T9462] alloc_slab_page+0x5f/0x120 [ 376.021062][ T9462] allocate_slab+0x5a/0x2f0 [ 376.025572][ T9462] ___slab_alloc+0xcd1/0x14b0 [ 376.030257][ T9462] __slab_alloc+0x58/0xa0 [ 376.034586][ T9462] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 376.041003][ T9462] kmemdup_noprof+0x2a/0x60 [ 376.045513][ T9462] mpls_dev_sysctl_register+0xd1/0x280 [ 376.050975][ T9462] mpls_dev_notify+0x33f/0x7a0 [ 376.055746][ T9462] notifier_call_chain+0x19f/0x3e0 [ 376.060952][ T9462] register_netdevice+0x167f/0x1b00 [ 376.066162][ T9462] xfrmi_newlink+0x5bd/0x830 [ 376.070758][ T9462] rtnl_newlink+0x1591/0x20a0 [ 376.075448][ T9462] rtnetlink_rcv_msg+0x73f/0xcf0 [ 376.080397][ T9462] page last free pid 6347 tgid 6347 stack trace: [ 376.086732][ T9462] free_unref_folios+0x103a/0x1b00 [ 376.091858][ T9462] folios_put_refs+0x76e/0x860 [ 376.096623][ T9462] free_pages_and_swap_cache+0x2ea/0x690 [ 376.102277][ T9462] tlb_flush_mmu+0x3a3/0x680 [ 376.106878][ T9462] tlb_finish_mmu+0xd4/0x200 [ 376.111492][ T9462] exit_mmap+0x44f/0xc80 [ 376.115749][ T9462] __mmput+0x115/0x390 [ 376.119827][ T9462] exec_mmap+0x680/0x710 [ 376.124071][ T9462] begin_new_exec+0x12c6/0x2050 [ 376.128933][ T9462] load_elf_binary+0x969/0x2680 [ 376.133783][ T9462] bprm_execve+0xaf8/0x1770 [ 376.138286][ T9462] do_execveat_common+0x55f/0x6f0 [ 376.143319][ T9462] __x64_sys_execve+0x92/0xb0 [ 376.148003][ T9462] do_syscall_64+0xf3/0x230 [ 376.152519][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.158421][ T9462] [ 376.160830][ T9462] Memory state around the buggy address: [ 376.166457][ T9462] ffff88806416f580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 376.174523][ T9462] ffff88806416f600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 376.182597][ T9462] >ffff88806416f680: 00 00 00 00 07 fc fc fc fc fc fc fc fc fc fc fc [ 376.190653][ T9462] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 376.195755][ T9462] ffff88806416f700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 376.203807][ T9462] ffff88806416f780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 376.211857][ T9462] ================================================================== [ 376.260373][ T55] Bluetooth: hci4: command tx timeout [ 376.333850][ T9470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1059'. [ 376.362482][ T9382] chnl_net:caif_netlink_parms(): no params data found [ 376.396968][ T9462] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 376.404236][ T9462] CPU: 1 UID: 0 PID: 9462 Comm: syz.4.1058 Not tainted 6.11.0-rc4-syzkaller-00326-g5277d130947b #0 [ 376.414940][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 376.425035][ T9462] Call Trace: [ 376.428343][ T9462] [ 376.431302][ T9462] dump_stack_lvl+0x241/0x360 [ 376.436010][ T9462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.441250][ T9462] ? __pfx__printk+0x10/0x10 [ 376.445869][ T9462] ? preempt_schedule+0xe1/0xf0 [ 376.450746][ T9462] ? vscnprintf+0x5d/0x90 [ 376.455109][ T9462] panic+0x349/0x860 [ 376.459021][ T9462] ? check_panic_on_warn+0x21/0xb0 [ 376.464159][ T9462] ? __pfx_panic+0x10/0x10 [ 376.468584][ T9462] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 376.474571][ T9462] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 376.480907][ T9462] ? print_report+0x502/0x550 [ 376.485602][ T9462] check_panic_on_warn+0x86/0xb0 [ 376.490550][ T9462] ? btf_datasec_check_meta+0x2c9/0x9a0 [ 376.496102][ T9462] end_report+0x77/0x160 [ 376.500353][ T9462] kasan_report+0x154/0x180 [ 376.504869][ T9462] ? btf_datasec_check_meta+0x2c9/0x9a0 [ 376.510425][ T9462] btf_datasec_check_meta+0x2c9/0x9a0 [ 376.515810][ T9462] btf_parse_type_sec+0x4d5/0x2620 [ 376.520932][ T9462] ? __pfx___might_resched+0x10/0x10 [ 376.526240][ T9462] ? btf_check_sec_info+0x379/0x4f0 [ 376.531452][ T9462] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 376.537012][ T9462] ? __asan_memcpy+0x40/0x70 [ 376.541619][ T9462] ? btf_parse_str_sec+0x21f/0x2b0 [ 376.546748][ T9462] btf_new_fd+0x43f/0xd30 [ 376.551101][ T9462] ? __pfx_btf_new_fd+0x10/0x10 [ 376.555967][ T9462] ? bpf_btf_load+0xcf/0x1a0 [ 376.560570][ T9462] __sys_bpf+0x6ef/0x810 [ 376.564826][ T9462] ? __pfx___sys_bpf+0x10/0x10 [ 376.569609][ T9462] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 376.576041][ T9462] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.582430][ T9462] ? exc_page_fault+0x590/0x8c0 [ 376.587288][ T9462] __x64_sys_bpf+0x7c/0x90 [ 376.591729][ T9462] do_syscall_64+0xf3/0x230 [ 376.596239][ T9462] ? clear_bhb_loop+0x35/0x90 [ 376.600953][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.607028][ T9462] RIP: 0033:0x7f6f0797def9 [ 376.611442][ T9462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.631053][ T9462] RSP: 002b:00007f6f087e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.639475][ T9462] RAX: ffffffffffffffda RBX: 00007f6f07b35f80 RCX: 00007f6f0797def9 [ 376.647457][ T9462] RDX: 0000000000000028 RSI: 0000000020000200 RDI: 0000000000000012 [ 376.655431][ T9462] RBP: 00007f6f079f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 376.663404][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.671391][ T9462] R13: 0000000000000001 R14: 00007f6f07b35f80 R15: 00007fff78133778 [ 376.679374][ T9462] [ 376.682707][ T9462] Kernel Offset: disabled [ 376.687030][ T9462] Rebooting in 86400 seconds..