last executing test programs: 5.001704517s ago: executing program 3: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote}, 0x80, 0x0}, 0x8000) sendmsg(r0, &(0x7f0000001300)={&(0x7f0000001000)=@generic={0xa, "78f96f211a3e2eb79eb278bb459f8b2626c3470afce587b7a11aa69452b2336554fafe14065da77e4b3f3a7afe1c33abba7d9222824ec0401497f26209ac9d2b70dab3ee4179ee94855128853950efa1531690352b84ad87f97b54f780fe91e0fd7ff7151a7df0d4be3c0a18542600efc3579f298c62c1e6c78ae189b3b9"}, 0x80, 0x0}, 0x0) 4.925514599s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x1, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) 4.81056565s ago: executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8919, &(0x7f0000000280)) 4.363320236s ago: executing program 3: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/132, 0x84}], 0x1, &(0x7f0000002900)=""/63, 0x3f}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) 4.327314104s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000085100000060000001810", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00000000000000180000000000000000000000000000009500000000000000a60a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000870a000000000000850000002d"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 4.16777626s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000680)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6}]}) 3.813909341s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x8, 0x3}, 0x1e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 3.221973231s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.698630805s ago: executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000004c0)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000004c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x5, 0x0, 0x8400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2002) 2.505824857s ago: executing program 0: perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x8f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="62b3596bc730"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0xc}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4080000000000006110800000000000a6000000000000009500000000000000b2080c0237fd0432ee3d2253d5b8f836620a1d04364d63825e41737ee7a84fbb0931154e88b200677095931dcc7609774d40559cce6de97748a78b933e5a604300d78bf41b56afc90b3092d09b43af92cbf60480128f679c062bf4322d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='jbd2_handle_extend\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 2.16735383s ago: executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1e006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.124298833s ago: executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8919, &(0x7f0000000280)) 2.123792495s ago: executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a40)=@generic={&(0x7f0000000840)='./file0\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8324}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000000)=""/94}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00', r6}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8001, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305839, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0x50, 0x117, 0x2, "abbd6e1bcc38cc821bf5713191d1a9a9a7e21122105477a311873b87f70887de13c43ee84a0c779c3f2cc59dbbf95b0c79411fd061d2c577f161d434f9ad"}, {0x10}, {0x10}], 0x70}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 1.901481245s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1.600421896s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x8, 0x3}, 0x1e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 1.490228389s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.417079083s ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d8000000180001004e81f782db4cb904021d087494ecd605e8fe55a10a000f020000142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d3279e29d88775730d16a468565aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51001d21e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97039200", 0xd8}], 0x1}, 0x0) 1.330863897s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.285239609s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.132005618s ago: executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0x80b, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) 1.047794222s ago: executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x61, 0x30, 0x30]}}, 0x0, 0x2a}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x35, 0x0, 0x0, 0x2, 0x301, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x200000}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) 989.185682ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 857.531192ms ago: executing program 0: socket$kcm(0x10, 0x0, 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0) 812.880501ms ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x3}, @volatile={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x41}, 0x20) 585.998287ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 376.417218ms ago: executing program 0: perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000001580)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/186, 0xba}], 0x1, 0x0, 0x38}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r3, &(0x7f0000001c80)}, 0x20) close(r2) 319.325719ms ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000019c0)="9257ef7814f0894f2b296cfd717bdb15b985ad41b78d6f84016e7f0d72ce3e5cca0ac618532d2f36345c8028e6045e736d834605386dd44d8d42b9f1683043a504fc72ceea3c88812f0df2aacb6c85f323584dc65af3959b10e904746449a87d517805de5d14c8f1bd3c1f939c73047c2d85cf0f324903ee6a6291e705e8bced91760b6be097ed260f556538da30373c472dee51fdcaf89589034c26f29d9ee05584b8dfa2dec4369ca751d1c11b96ba56d2e3cee4f874fbd216e8dba45cf10298be39671e9c01", 0xc7}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90724fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 100.355186ms ago: executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a40)=@generic={&(0x7f0000000840)='./file0\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8324}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000000)=""/94}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_mballoc_alloc\x00', r6}, 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8001, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305839, &(0x7f0000000040)) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0x50, 0x117, 0x2, "abbd6e1bcc38cc821bf5713191d1a9a9a7e21122105477a311873b87f70887de13c43ee84a0c779c3f2cc59dbbf95b0c79411fd061d2c577f161d434f9ad"}, {0x10}, {0x10}], 0x70}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 97.230331ms ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000100000001800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x44}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00') r3 = socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1e}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r4, &(0x7f0000003840)={&(0x7f0000000040)=@in={0x2, 0x4e23, @dev}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000000600000000000e0048000000000000002900000032"], 0x58}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="189404000300000000000000000000000000000000000004"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000002c40)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4000004) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18010084ffec850000007b0000008500001123000000955e758600c45972ba5c4cdc8be1887d861172d9b946be96dcfd9ec87eaf7b02eca01053d208a40d3aea97b113520d09606cb13e3028c84b1bc7a28cdaf354c70ef6523b65c39b177b971090aaaf03846a05ea2b1337f0856d176fa444c634ac7cd600"/130], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_es_lookup_extent_exit\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3}, 0x48) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f02000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='signal_generate\x00', r5}, 0x10) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. 2024/06/04 05:18:42 fuzzer started 2024/06/04 05:18:43 dialing manager at 10.128.0.169:30014 [ 57.650097][ T5090] cgroup: Unknown subsys name 'net' [ 57.805398][ T5090] cgroup: Unknown subsys name 'rlimit' 2024/06/04 05:18:44 starting 5 executor processes [ 58.940131][ T5089] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.606368][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.614915][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.634665][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.642350][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.650122][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.660296][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.660413][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.668597][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.683069][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.684443][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.691653][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.699738][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.712056][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.712319][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.727636][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.731117][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.736788][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.742918][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.749639][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.764389][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.772931][ T5117] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.779388][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.786472][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.787653][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.803053][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.815346][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.816255][ T5124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.832758][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.842211][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.853549][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.273298][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 60.469431][ T5121] chnl_net:caif_netlink_parms(): no params data found [ 60.529087][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 60.550553][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 60.591725][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.599241][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.608905][ T5111] bridge_slave_0: entered allmulticast mode [ 60.615986][ T5111] bridge_slave_0: entered promiscuous mode [ 60.677082][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.684285][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.691429][ T5111] bridge_slave_1: entered allmulticast mode [ 60.698667][ T5111] bridge_slave_1: entered promiscuous mode [ 60.776762][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 60.795454][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.856537][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.890605][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.897953][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.905646][ T5121] bridge_slave_0: entered allmulticast mode [ 60.912843][ T5121] bridge_slave_0: entered promiscuous mode [ 60.919982][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.927396][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.934778][ T5110] bridge_slave_0: entered allmulticast mode [ 60.941477][ T5110] bridge_slave_0: entered promiscuous mode [ 60.982111][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.989543][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.997267][ T5121] bridge_slave_1: entered allmulticast mode [ 61.004667][ T5121] bridge_slave_1: entered promiscuous mode [ 61.011194][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.019081][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.026455][ T5110] bridge_slave_1: entered allmulticast mode [ 61.033335][ T5110] bridge_slave_1: entered promiscuous mode [ 61.050927][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.058128][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.068383][ T5123] bridge_slave_0: entered allmulticast mode [ 61.075322][ T5123] bridge_slave_0: entered promiscuous mode [ 61.111025][ T5111] team0: Port device team_slave_0 added [ 61.120548][ T5111] team0: Port device team_slave_1 added [ 61.126769][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.134865][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.142008][ T5123] bridge_slave_1: entered allmulticast mode [ 61.149002][ T5123] bridge_slave_1: entered promiscuous mode [ 61.230047][ T5121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.245677][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.260862][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.268347][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.295240][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.310533][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.324897][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.343919][ T5121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.367297][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.387885][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.395089][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.422546][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.461278][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.468594][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.476374][ T5112] bridge_slave_0: entered allmulticast mode [ 61.483325][ T5112] bridge_slave_0: entered promiscuous mode [ 61.519912][ T5110] team0: Port device team_slave_0 added [ 61.537144][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.544782][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.551939][ T5112] bridge_slave_1: entered allmulticast mode [ 61.559597][ T5112] bridge_slave_1: entered promiscuous mode [ 61.576933][ T5121] team0: Port device team_slave_0 added [ 61.585812][ T5121] team0: Port device team_slave_1 added [ 61.603331][ T5110] team0: Port device team_slave_1 added [ 61.624942][ T5123] team0: Port device team_slave_0 added [ 61.663830][ T5123] team0: Port device team_slave_1 added [ 61.672147][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.698072][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.705235][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.732199][ T5121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.744517][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.751494][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.778329][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.803408][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.837254][ T5121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.844293][ T5121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.859282][ T5120] Bluetooth: hci1: command tx timeout [ 61.870577][ T5121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.875919][ T53] Bluetooth: hci3: command tx timeout [ 61.892207][ T5124] Bluetooth: hci2: command tx timeout [ 61.892945][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.905052][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.932143][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.943718][ T53] Bluetooth: hci0: command tx timeout [ 61.952564][ T53] Bluetooth: hci4: command tx timeout [ 61.976657][ T5111] hsr_slave_0: entered promiscuous mode [ 61.986572][ T5111] hsr_slave_1: entered promiscuous mode [ 62.026589][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.033643][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.059673][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.073281][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.080245][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.106997][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.122639][ T5112] team0: Port device team_slave_0 added [ 62.159720][ T5110] hsr_slave_0: entered promiscuous mode [ 62.166454][ T5110] hsr_slave_1: entered promiscuous mode [ 62.172890][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.180760][ T5110] Cannot create hsr debugfs directory [ 62.192076][ T5112] team0: Port device team_slave_1 added [ 62.245321][ T5121] hsr_slave_0: entered promiscuous mode [ 62.251568][ T5121] hsr_slave_1: entered promiscuous mode [ 62.259106][ T5121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.266771][ T5121] Cannot create hsr debugfs directory [ 62.312909][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.319895][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.346026][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.398630][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.407566][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.434327][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.466604][ T5123] hsr_slave_0: entered promiscuous mode [ 62.474382][ T5123] hsr_slave_1: entered promiscuous mode [ 62.480563][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.488397][ T5123] Cannot create hsr debugfs directory [ 62.627704][ T5112] hsr_slave_0: entered promiscuous mode [ 62.634171][ T5112] hsr_slave_1: entered promiscuous mode [ 62.640265][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.648514][ T5112] Cannot create hsr debugfs directory [ 62.911116][ T5111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.944511][ T5111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.964998][ T5111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.985160][ T5111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.030195][ T5110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.042317][ T5110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.068430][ T5110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.094636][ T5110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.137748][ T5121] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.149268][ T5121] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.177765][ T5121] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.203598][ T5121] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.274677][ T5123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.300593][ T5123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.312050][ T5123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.341744][ T5123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.441876][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.454427][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.479342][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.490134][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.513531][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.610924][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.627211][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.664902][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.684657][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.692064][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.735472][ T5121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.754180][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.761317][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.773346][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.780558][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.809716][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.816870][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.912982][ T5121] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.933090][ T53] Bluetooth: hci3: command tx timeout [ 63.934142][ T5124] Bluetooth: hci2: command tx timeout [ 63.944723][ T5120] Bluetooth: hci1: command tx timeout [ 63.957012][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.964146][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.981733][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.012822][ T5120] Bluetooth: hci4: command tx timeout [ 64.018265][ T5120] Bluetooth: hci0: command tx timeout [ 64.069327][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.099090][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.106280][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.138122][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.201380][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.222321][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.229818][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.279387][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.286722][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.325550][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.382310][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.389466][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.437815][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.445118][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.492093][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.627167][ T5123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.650859][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.727826][ T5121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.849900][ T5110] veth0_vlan: entered promiscuous mode [ 64.905351][ T5110] veth1_vlan: entered promiscuous mode [ 65.002434][ T5121] veth0_vlan: entered promiscuous mode [ 65.084300][ T5121] veth1_vlan: entered promiscuous mode [ 65.090626][ T5111] veth0_vlan: entered promiscuous mode [ 65.108785][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.138287][ T5111] veth1_vlan: entered promiscuous mode [ 65.148024][ T5110] veth0_macvtap: entered promiscuous mode [ 65.164627][ T5110] veth1_macvtap: entered promiscuous mode [ 65.206082][ T5121] veth0_macvtap: entered promiscuous mode [ 65.215345][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.225667][ T5121] veth1_macvtap: entered promiscuous mode [ 65.262047][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.294706][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.326691][ T5110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.336539][ T5110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.345371][ T5110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.354130][ T5110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.379278][ T5111] veth0_macvtap: entered promiscuous mode [ 65.386831][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.398617][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.410216][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.436398][ T5121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.447381][ T5121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.460565][ T5121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.484165][ T5111] veth1_macvtap: entered promiscuous mode [ 65.499942][ T5121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.510849][ T5121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.520698][ T5121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.531483][ T5121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.553220][ T5112] veth0_vlan: entered promiscuous mode [ 65.590428][ T5123] veth0_vlan: entered promiscuous mode [ 65.633413][ T5112] veth1_vlan: entered promiscuous mode [ 65.657107][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.668166][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.678886][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.689997][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.701522][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.756498][ T5123] veth1_vlan: entered promiscuous mode [ 65.775604][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.787631][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.798002][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.809733][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.820906][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.847864][ T5111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.857504][ T5111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.867484][ T5111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.877370][ T5111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.890011][ T2863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.898733][ T2863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.949604][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.957658][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.005384][ T5161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.014035][ T5124] Bluetooth: hci2: command tx timeout [ 66.015783][ T5120] Bluetooth: hci1: command tx timeout [ 66.025039][ T5124] Bluetooth: hci3: command tx timeout [ 66.034811][ T5161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.071755][ T5112] veth0_macvtap: entered promiscuous mode [ 66.090116][ T5112] veth1_macvtap: entered promiscuous mode [ 66.096953][ T5124] Bluetooth: hci0: command tx timeout [ 66.096964][ T5120] Bluetooth: hci4: command tx timeout [ 66.139331][ T5165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.167136][ T5165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.191225][ T5123] veth0_macvtap: entered promiscuous mode [ 66.218736][ T5123] veth1_macvtap: entered promiscuous mode [ 66.228989][ T2843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.254571][ T2843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.268990][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.294745][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.308279][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.319699][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.331255][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.342127][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.358652][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.376111][ T5194] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.402062][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.421248][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.443791][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.478605][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.508889][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.535543][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.549403][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.605916][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.616817][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.627677][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.645563][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.665903][ T5200] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.720773][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.735696][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.744050][ T5202] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.747204][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.771074][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.781092][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.793084][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.803373][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.814995][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.827497][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.851975][ T784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.887637][ T784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.928057][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.953411][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.954569][ T5208] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 66.966174][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.011713][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.026296][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.042695][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.053590][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.064849][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.079441][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.088327][ T5212] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 67.113707][ T5208] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 67.128806][ T5212] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.194897][ T5123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.222328][ C0] hrtimer: interrupt took 59589 ns [ 67.233200][ T5123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.248208][ T5123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.281596][ T5123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.344273][ T5210] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 67.414859][ T5208] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 67.479002][ T5210] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 67.499487][ T5218] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.510650][ T5218] openvswitch: netlink: Message has 3074 unknown bytes. [ 67.616267][ T5208] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 67.684599][ T2863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.727052][ T2863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.922472][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.952894][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.010819][ T2863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.035938][ T2863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.094046][ T5120] Bluetooth: hci3: command tx timeout [ 68.094060][ T5124] Bluetooth: hci2: command tx timeout [ 68.105156][ T5124] Bluetooth: hci1: command tx timeout [ 68.174196][ T5120] Bluetooth: hci0: command tx timeout [ 68.179665][ T5120] Bluetooth: hci4: command tx timeout [ 68.280225][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.333792][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.473240][ T5244] batadv0: entered promiscuous mode [ 68.625950][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.032595][ T5258] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 69.096697][ T5258] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 69.148227][ T5262] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 69.191578][ T5261] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.460984][ T5273] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.821388][ T5124] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 70.028106][ T5298] netlink: 131996 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.225772][ T5304] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.390665][ T5309] netlink: 203452 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.417826][ T29] audit: type=1800 audit(1717478336.166:2): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 70.479403][ T29] audit: type=1804 audit(1717478336.166:3): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir627715853/syzkaller.POS7Y2/16/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 70.690132][ T5320] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.005346][ T29] audit: type=1800 audit(1717478336.746:4): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 71.087471][ T29] audit: type=1804 audit(1717478336.756:5): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir545046151/syzkaller.9r48DT/16/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 71.325113][ T5348] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.575512][ T5356] syz-executor.2[5356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.576954][ T5356] syz-executor.2[5356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.782149][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.805930][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.823483][ T5366] __nla_validate_parse: 1 callbacks suppressed [ 71.823503][ T5366] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.030396][ T5376] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.617331][ T5433] validate_nla: 22 callbacks suppressed [ 72.617350][ T5433] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 72.711853][ T5433] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.031672][ T5447] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.125869][ T4546] udevd[4546]: worker [5103] terminated by signal 33 (Unknown signal 33) [ 73.147765][ T4546] udevd[4546]: worker [5103] failed while handling '/devices/virtual/block/loop3' [ 73.410075][ T5456] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.453960][ T5456] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.777628][ T5471] Â: renamed from pim6reg1 [ 74.074040][ T5489] bridge0: port 3(hsr_slave_1) entered blocking state [ 74.099497][ T5489] bridge0: port 3(hsr_slave_1) entered disabled state [ 74.139663][ T5489] hsr_slave_1: entered allmulticast mode [ 74.180578][ T5489] hsr_slave_1: left allmulticast mode [ 74.276888][ T5496] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 74.302802][ T5496] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 74.523228][ T5505] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.908061][ T5514] Â: renamed from pim6reg1 [ 75.163833][ T5524] bridge0: port 3(hsr_slave_1) entered blocking state [ 75.170894][ T5524] bridge0: port 3(hsr_slave_1) entered disabled state [ 75.178461][ T5524] hsr_slave_1: entered allmulticast mode [ 75.190895][ T5524] hsr_slave_1: left allmulticast mode [ 75.212038][ T5530] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 75.245555][ T5530] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.422874][ T5537] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.586990][ T5543] syzkaller0: entered promiscuous mode [ 75.598696][ T5543] syzkaller0: entered allmulticast mode [ 76.067730][ T5560] Zero length message leads to an empty skb [ 76.098228][ T5560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.113121][ T5560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.134738][ T5560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.142216][ T5560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.753119][ T5576] syzkaller0: entered promiscuous mode [ 76.782970][ T5576] syzkaller0: entered allmulticast mode [ 76.826465][ T5585] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 76.851612][ T5585] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.906216][ T783] cfg80211: failed to load regulatory.db [ 76.957271][ T5590] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 76.993157][ T5590] __nla_validate_parse: 2 callbacks suppressed [ 76.993177][ T5590] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.376223][ T5604] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 77.543445][ T5609] netlink: 1057 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.871533][ T5619] bridge0: port 3(hsr_slave_1) entered blocking state [ 77.893347][ T5619] bridge0: port 3(hsr_slave_1) entered disabled state [ 77.942669][ T5619] hsr_slave_1: entered allmulticast mode [ 77.951369][ T5619] hsr_slave_1: left allmulticast mode [ 78.136296][ T5625] syzkaller0: entered promiscuous mode [ 78.158440][ T5625] syzkaller0: entered allmulticast mode [ 78.613754][ T5640] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 79.858952][ T5678] Driver unsupported XDP return value 0 on prog (id 121) dev N/A, expect packet loss! [ 81.269011][ T5724] netlink: 134312 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.316817][ T5720] syzkaller0: entered promiscuous mode [ 81.317501][ T5724] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 81.322317][ T5720] syzkaller0: entered allmulticast mode [ 81.346859][ T5724] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 82.487521][ T5737] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 82.522341][ T5737] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.647257][ T5743] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 82.679331][ T5743] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.717520][ T5749] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.457640][ T5773] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 83.528790][ T5773] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.018739][ T5782] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.425713][ T5791] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 84.446340][ T5791] netlink: 101600 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.818734][ T5843] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.865539][ T5839] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.711834][ T5124] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 86.735573][ T5857] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 86.793954][ T5857] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.811845][ T5839] syz-executor.1 (5839) used greatest stack depth: 18720 bytes left [ 87.155372][ T5875] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 87.171397][ T5875] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.558089][ T5124] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 88.006406][ T5899] »»»»»»: renamed from vlan1 (while UP) [ 88.486881][ T5124] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 88.993843][ T5950] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.093409][ T5947] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.329476][ T5124] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 89.472979][ T5976] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 89.509233][ T5976] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.770655][ T5992] netlink: 212912 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.804977][ T5992] openvswitch: netlink: IP tunnel dst address not specified [ 90.126366][ T6005] »»»»»»: renamed from vlan1 (while UP) [ 91.086241][ T6039] »»»»»»: renamed from vlan1 (while UP) [ 91.208867][ T6050] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 91.251528][ T6050] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.592568][ T6072] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 91.604178][ T6072] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.683993][ T6078] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.712813][ T6078] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.044823][ T6102] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.070975][ T6096] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.149750][ T6201] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 94.188292][ T6201] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.217962][ T6201] IPv6: Can't replace route, no match found [ 94.449417][ T6222] __nla_validate_parse: 4 callbacks suppressed [ 94.449437][ T6222] netlink: 3084 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.518575][ T6222] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.585976][ T6225] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.617886][ T6225] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.951170][ T6253] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 94.971815][ T6253] netlink: 210880 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.983190][ T6259] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.013939][ T6255] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.155725][ T6269] netlink: 3084 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.194465][ T6269] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.458543][ T6268] syzkaller0: entered promiscuous mode [ 95.477085][ T6268] syzkaller0: entered allmulticast mode [ 95.582239][ T6292] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.780315][ T6299] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 97.091905][ T6319] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 97.527492][ T6351] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 98.381737][ T6375] openvswitch: netlink: Key 0 has unexpected len 13 expected 0 [ 98.484124][ T6383] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 99.164642][ T6421] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 99.202144][ T6421] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.215011][ T6421] IPv6: Can't replace route, no match found [ 99.473387][ T6435] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 99.537505][ T6435] __nla_validate_parse: 15 callbacks suppressed [ 99.537528][ T6435] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.575498][ T6435] bridge_slave_0: left promiscuous mode [ 99.596153][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.173462][ T6455] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 100.181680][ T6455] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.497837][ T6462] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 100.526131][ T6463] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.575092][ T6462] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.595583][ T6463] openvswitch: netlink: Key 0 has unexpected len 13 expected 0 [ 102.077997][ T6531] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 102.090660][ T6531] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.215821][ T6534] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 102.944376][ T6553] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.965074][ T6553] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 102.984267][ T6553] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.002257][ T6553] batadv_slave_1: entered promiscuous mode [ 103.187667][ T6568] veth0_vlan: entered allmulticast mode [ 103.476487][ T6583] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.500345][ T6583] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 103.535507][ T6583] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.554706][ T6583] batadv_slave_1: entered promiscuous mode [ 103.737463][ T6598] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.841257][ T6603] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 104.074059][ T6618] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 104.259054][ T6628] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 105.197330][ T6679] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 105.236909][ T6679] __nla_validate_parse: 6 callbacks suppressed [ 105.236932][ T6679] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.376947][ T6681] syzkaller0: entered allmulticast mode [ 106.180627][ T6727] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.194241][ T6727] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 106.207531][ T6727] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.217277][ T6727] batadv_slave_1: entered promiscuous mode [ 107.667060][ T6805] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.760026][ T6805] debugfs: Directory 'ü!ô' with parent 'ieee80211' already present! [ 108.887626][ T6823] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 108.906156][ T6823] netlink: 14496 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.186079][ T6831] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 109.214900][ T6831] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 110.843295][ T6864] syzkaller0: entered allmulticast mode [ 111.005347][ T6873] syz-executor.2 (6873) used greatest stack depth: 18528 bytes left [ 111.069089][ T6885] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 111.077610][ T6885] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.521130][ T6902] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 111.531639][ T6902] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 111.561146][ T6902] netlink: 128512 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.759882][ T6914] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 111.781132][ T6914] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.906348][ T6924] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (65534) [ 112.757645][ T6949] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 112.770866][ T6949] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.777426][ T6946] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 112.811415][ T6946] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 114.042664][ T6983] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.070892][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.082772][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.090969][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.103854][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.113438][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.120916][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.150182][ T5405] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.242044][ T6987] Â: renamed from pim6reg1 [ 114.331596][ T5405] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.425354][ T7002] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 114.448650][ T5405] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.476314][ T7002] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 114.571795][ T5405] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.647476][ T7012] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.985478][ T6981] chnl_net:caif_netlink_parms(): no params data found [ 116.172643][ T5124] Bluetooth: hci0: command tx timeout [ 116.558259][ T5405] bridge_slave_1: left allmulticast mode [ 116.572942][ T5405] bridge_slave_1: left promiscuous mode [ 116.580190][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.642219][ T5405] bridge_slave_0: left allmulticast mode [ 116.658148][ T5405] bridge_slave_0: left promiscuous mode [ 116.677468][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.728219][ T7052] netlink: 16410 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.032030][ T5405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.045985][ T5405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.059206][ T5405] bond0 (unregistering): Released all slaves [ 118.112912][ T7050] »»»»»»: renamed from vlan1 (while UP) [ 118.248135][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.252915][ T5124] Bluetooth: hci0: command tx timeout [ 118.256019][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.283375][ T6981] bridge_slave_0: entered allmulticast mode [ 118.291349][ T6981] bridge_slave_0: entered promiscuous mode [ 118.314566][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.321774][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.330315][ T6981] bridge_slave_1: entered allmulticast mode [ 118.341108][ T6981] bridge_slave_1: entered promiscuous mode [ 118.379309][ T5124] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 118.429076][ T7076] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 118.521738][ T7076] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 118.541649][ T7081] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 118.598262][ T6981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.631801][ T7086] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 118.652483][ T7092] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.686048][ T6981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.696090][ T7076] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 118.840483][ T7102] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.845517][ T6981] team0: Port device team_slave_0 added [ 119.069332][ T6981] team0: Port device team_slave_1 added [ 119.259585][ T5405] hsr_slave_0: left promiscuous mode [ 119.269289][ T5405] hsr_slave_1: left promiscuous mode [ 119.276760][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.286217][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.299093][ T5405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.315591][ T5405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.361518][ T5405] veth1_macvtap: left promiscuous mode [ 119.367880][ T5405] veth0_macvtap: left promiscuous mode [ 119.379881][ T5405] veth1_vlan: left promiscuous mode [ 119.386926][ T5405] veth0_vlan: left promiscuous mode [ 120.165781][ T7129] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.257836][ T7134] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.309186][ T7138] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 120.333806][ T5124] Bluetooth: hci0: command tx timeout [ 120.351087][ T7138] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.688168][ T5405] team0 (unregistering): Port device team_slave_1 removed [ 120.721728][ T5405] team0 (unregistering): Port device team_slave_0 removed [ 121.298320][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.312023][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.366323][ T6981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.399140][ T6981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.411318][ T6981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.437529][ T6981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.598486][ T6981] hsr_slave_0: entered promiscuous mode [ 121.608873][ T6981] hsr_slave_1: entered promiscuous mode [ 121.628057][ T6981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.643955][ T6981] Cannot create hsr debugfs directory [ 122.026610][ T7184] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 122.047663][ T7184] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 122.205661][ T7197] batadv0: entered promiscuous mode [ 122.412700][ T5124] Bluetooth: hci0: command tx timeout [ 122.428709][ T7212] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 123.029605][ T6981] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.047332][ T6981] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.066972][ T6981] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.085768][ T6981] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.212844][ T6981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.278850][ T6981] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.319949][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.327158][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.364542][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.371738][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.456190][ T7239] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 123.909860][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.338989][ T6981] veth0_vlan: entered promiscuous mode [ 124.396643][ T6981] veth1_vlan: entered promiscuous mode [ 124.658982][ T6981] veth0_macvtap: entered promiscuous mode [ 124.746600][ T6981] veth1_macvtap: entered promiscuous mode [ 124.920014][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.989280][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.041313][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.085054][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.095044][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.107659][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.119577][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.133797][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.169054][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.261820][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.277655][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.287834][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.300568][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.320967][ T6981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.340426][ T7274] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 125.395882][ T6981] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.422462][ T6981] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.431218][ T6981] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.469863][ T6981] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.678659][ T7289] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 125.690150][ T7289] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.755467][ T5412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.768065][ T5412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.817870][ T7283] syzkaller0: entered allmulticast mode [ 125.926491][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.948068][ T7300] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 125.958739][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.552803][ T7311] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 126.563255][ T7311] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 126.581794][ T7311] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 126.625137][ T7311] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 126.680496][ T7311] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 126.838304][ T7315] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 126.866770][ T7315] netlink: 16098 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.363865][ T7311] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.469279][ T7339] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.570555][ T7334] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.609720][ T7336] syz-executor.3 (7336) used greatest stack depth: 18336 bytes left [ 128.138043][ T7365] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.496226][ T7375] validate_nla: 3 callbacks suppressed [ 128.496247][ T7375] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 128.511798][ T7375] netlink: 16098 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.851413][ T7392] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 128.862016][ T7392] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 128.888130][ T7392] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 128.929339][ T7392] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 128.948165][ T7392] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 128.970461][ T7392] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 128.992686][ T7392] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 129.159237][ T7409] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.528929][ T7434] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 129.556832][ T7434] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 130.262937][ T7438] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.668645][ T7485] netlink: 212916 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.860338][ T5124] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 132.111121][ T7525] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.214896][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.227550][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.440421][ T7571] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.478546][ T7573] netlink: 212916 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.529845][ T7575] validate_nla: 12 callbacks suppressed [ 133.529865][ T7575] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 133.544035][ T7575] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 133.552211][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.564461][ T29] audit: type=1804 audit(1717478399.306:6): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3670894253/syzkaller.xqYsiW/192/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 133.601287][ T29] audit: type=1800 audit(1717478399.346:7): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 133.624529][ T7577] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 133.646740][ T7577] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 133.682143][ T7577] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 133.697983][ T7577] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 133.749071][ T7577] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 133.759208][ T7577] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 133.784213][ T7577] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 134.924364][ T7609] netlink: 'syz-executor.0': attribute type 33 has an invalid length. [ 134.972734][ T7609] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.096712][ T7626] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.228614][ T7632] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.251700][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.299532][ T29] audit: type=1804 audit(1717478403.046:8): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3670894253/syzkaller.xqYsiW/196/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 137.380797][ T29] audit: type=1800 audit(1717478403.046:9): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 140.702595][ T7703] validate_nla: 1 callbacks suppressed [ 140.702615][ T7703] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 141.843886][ T7725] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 141.869918][ T7725] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 141.880629][ T7725] netlink: 88156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.980912][ T7724] [ 141.982241][ T7731] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 141.983273][ T7724] ============================================ [ 141.983282][ T7724] WARNING: possible recursive locking detected [ 141.983290][ T7724] 6.9.0-syzkaller-12147-g49df0019f367 #0 Not tainted [ 141.983300][ T7724] -------------------------------------------- [ 141.983305][ T7724] syz-executor.0/7724 is trying to acquire lock: [ 141.983315][ T7724] ffff888012341a20 (&stab->lock){+.-.}-{2:2}, at: sock_map_delete_elem+0x175/0x250 [ 141.993899][ T7731] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.997690][ T7724] [ 141.997690][ T7724] but task is already holding lock: [ 141.997702][ T7724] ffff88801fa69220 (&stab->lock){+.-.}-{2:2}, at: sock_map_delete_elem+0x175/0x250 [ 141.997757][ T7724] [ 141.997757][ T7724] other info that might help us debug this: [ 142.026770][ T7731] macvlan1: entered allmulticast mode [ 142.032301][ T7724] Possible unsafe locking scenario: [ 142.032301][ T7724] [ 142.032312][ T7724] CPU0 [ 142.032316][ T7724] ---- [ 142.032321][ T7724] lock(&stab->lock); [ 142.032337][ T7724] lock(&stab->lock); [ 142.032350][ T7724] [ 142.032350][ T7724] *** DEADLOCK *** [ 142.032350][ T7724] [ 142.032360][ T7724] May be due to missing lock nesting notation [ 142.032360][ T7724] [ 142.032366][ T7724] 4 locks held by syz-executor.0/7724: [ 142.032380][ T7724] #0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: map_delete_elem+0x388/0x5e0 2024/06/04 05:20:07 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 142.032426][ T7724] #1: ffff88801fa69220 (&stab->lock){+.-.}-{2:2}, at: sock_map_delete_elem+0x175/0x250 [ 142.047365][ T7731] veth1_vlan: entered allmulticast mode [ 142.049082][ T7724] #2: ffff88801f3042b0 (&psock->link_lock){+...}-{2:2}, at: sock_map_unref+0xcc/0x5e0 [ 142.049145][ T7724] #3: ffffffff8e333e60 [ 142.061747][ T7731] bridge0: port 3(macvlan1) entered blocking state [ 142.066452][ T7724] (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 142.066502][ T7724] [ 142.066502][ T7724] stack backtrace: [ 142.066523][ T7724] CPU: 1 PID: 7724 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-12147-g49df0019f367 #0 [ 142.066542][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 142.066557][ T7724] Call Trace: [ 142.066565][ T7724] [ 142.066573][ T7724] dump_stack_lvl+0x241/0x360 [ 142.066597][ T7724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.066622][ T7724] ? print_deadlock_bug+0x479/0x620 [ 142.066649][ T7724] validate_chain+0x15d3/0x5900 [ 142.066671][ T7724] ? __pfx_validate_chain+0x10/0x10 [ 142.066705][ T7724] ? __pfx_validate_chain+0x10/0x10 [ 142.074265][ T7731] bridge0: port 3(macvlan1) entered disabled state [ 142.079518][ T7724] ? mark_lock+0x9a/0x350 [ 142.079554][ T7724] ? __lock_acquire+0x1346/0x1fd0 [ 142.101654][ T7731] macvlan1: entered promiscuous mode [ 142.102437][ T7724] ? mark_lock+0x9a/0x350 [ 142.102467][ T7724] __lock_acquire+0x1346/0x1fd0 [ 142.102498][ T7724] lock_acquire+0x1ed/0x550 [ 142.102517][ T7724] ? sock_map_delete_elem+0x175/0x250 [ 142.102546][ T7724] ? __pfx_lock_acquire+0x10/0x10 [ 142.277571][ T7724] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 142.283492][ T7724] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.289851][ T7724] ? sock_map_delete_elem+0x175/0x250 [ 142.295273][ T7724] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 142.301094][ T7724] ? __bpf_ringbuf_reserve+0x37f/0x4f0 [ 142.306575][ T7724] ? sock_map_delete_elem+0x175/0x250 [ 142.311966][ T7724] _raw_spin_lock_bh+0x35/0x50 [ 142.316739][ T7724] ? sock_map_delete_elem+0x175/0x250 [ 142.322123][ T7724] sock_map_delete_elem+0x175/0x250 [ 142.327345][ T7724] ? __pfx_sock_map_delete_elem+0x10/0x10 [ 142.333085][ T7724] ? bpf_ringbuf_output+0x184/0x1e0 [ 142.338303][ T7724] ? bpf_trace_run2+0x1fc/0x540 [ 142.343179][ T7724] bpf_prog_bc20a984d57ef3f1+0x66/0x6a [ 142.348655][ T7724] bpf_trace_run2+0x47d/0x540 [ 142.353365][ T7724] ? __pfx_bpf_trace_run2+0x10/0x10 [ 142.358576][ T7724] ? do_raw_spin_lock+0x14f/0x370 [ 142.363615][ T7724] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 142.369429][ T7724] ? sock_map_unref+0x3ac/0x5e0 [ 142.374292][ T7724] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.379684][ T7724] ? sock_map_unr