last executing test programs: 1m41.081074596s ago: executing program 1 (id=1590): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/75, 0x0, 0x4b, 0x1, 0x7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x651070}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x8, 0x0, 0x0, 0x3, 0x100, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968788", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\xc0)\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3f7, 0x0, 0x800, r2, 0x91a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x10000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x4, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x8, 0x7cf0, 0x7, 0x10, r4, 0x0, '\x00', r8, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) 1m40.459273567s ago: executing program 2 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x3, 0x80, 0x6, 0xfb, 0x3, 0xe, 0x0, 0x9, 0x80101, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0x393}, 0x100820, 0x1, 0x5, 0x0, 0xed6d, 0x5, 0x80, 0x0, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="e934cae8e6e95b980e78eee56b0000000f0000000018110020", @ANYRES16=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90440, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000003c0)=r5, 0x12) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cd, 0x300) socketpair(0x14, 0x6, 0x4, &(0x7f00000004c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b969590631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225da"], &(0x7f0000000000)='GPL\x00', 0x5, 0xed, &(0x7f0000000540)=""/237}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x4}, r5, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000040)={'netpci0\x00', @random="0e00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x7, 0x5, 0xe9, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x37, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x8100, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 1m38.116353508s ago: executing program 0 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121402, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400b5371b284ab09eda029d0000b703000000005a953deb0400008500000005000000bca900000000000035080100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbfa400000000000007040000f0ffffff74020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007f9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m24.078633401s ago: executing program 1 (id=1590): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/75, 0x0, 0x4b, 0x1, 0x7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x651070}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x8, 0x0, 0x0, 0x3, 0x100, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968788", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\xc0)\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3f7, 0x0, 0x800, r2, 0x91a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x10000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x4, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x8, 0x7cf0, 0x7, 0x10, r4, 0x0, '\x00', r8, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) 1m22.448129073s ago: executing program 2 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x3, 0x80, 0x6, 0xfb, 0x3, 0xe, 0x0, 0x9, 0x80101, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0x393}, 0x100820, 0x1, 0x5, 0x0, 0xed6d, 0x5, 0x80, 0x0, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="e934cae8e6e95b980e78eee56b0000000f0000000018110020", @ANYRES16=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90440, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000003c0)=r5, 0x12) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cd, 0x300) socketpair(0x14, 0x6, 0x4, &(0x7f00000004c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b969590631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225da"], &(0x7f0000000000)='GPL\x00', 0x5, 0xed, &(0x7f0000000540)=""/237}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x4}, r5, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000040)={'netpci0\x00', @random="0e00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x7, 0x5, 0xe9, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x37, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x8100, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 1m21.730808376s ago: executing program 0 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121402, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400b5371b284ab09eda029d0000b703000000005a953deb0400008500000005000000bca900000000000035080100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbfa400000000000007040000f0ffffff74020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007f9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m6.226919959s ago: executing program 1 (id=1590): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/75, 0x0, 0x4b, 0x1, 0x7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x651070}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x8, 0x0, 0x0, 0x3, 0x100, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968788", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\xc0)\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3f7, 0x0, 0x800, r2, 0x91a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x10000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x4, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x8, 0x7cf0, 0x7, 0x10, r4, 0x0, '\x00', r8, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) 1m3.744199882s ago: executing program 2 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x3, 0x80, 0x6, 0xfb, 0x3, 0xe, 0x0, 0x9, 0x80101, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0x393}, 0x100820, 0x1, 0x5, 0x0, 0xed6d, 0x5, 0x80, 0x0, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="e934cae8e6e95b980e78eee56b0000000f0000000018110020", @ANYRES16=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90440, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000003c0)=r5, 0x12) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cd, 0x300) socketpair(0x14, 0x6, 0x4, &(0x7f00000004c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xed, &(0x7f0000000540)=""/237}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x4}, r5, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000040)={'netpci0\x00', @random="0e00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x7, 0x5, 0xe9, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x37, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x8100, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 1m2.276905223s ago: executing program 0 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121402, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400b5371b284ab09eda029d0000b703000000005a953deb0400008500000005000000bca900000000000035080100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbfa400000000000007040000f0ffffff74020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007f9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 50.003570551s ago: executing program 1 (id=1590): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/75, 0x0, 0x4b, 0x1, 0x7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x651070}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x8, 0x0, 0x0, 0x3, 0x100, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968788", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\xc0)\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3f7, 0x0, 0x800, r2, 0x91a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x10000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x4, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x8, 0x7cf0, 0x7, 0x10, r4, 0x0, '\x00', r8, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) 47.675160452s ago: executing program 2 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x3, 0x80, 0x6, 0xfb, 0x3, 0xe, 0x0, 0x9, 0x80101, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0x393}, 0x100820, 0x1, 0x5, 0x0, 0xed6d, 0x5, 0x80, 0x0, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="e934cae8e6e95b980e78eee56b0000000f0000000018110020", @ANYRES16=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90440, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000003c0)=r5, 0x12) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cd, 0x300) socketpair(0x14, 0x6, 0x4, &(0x7f00000004c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xed, &(0x7f0000000540)=""/237}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x4}, r5, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000040)={'netpci0\x00', @random="0e00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x7, 0x5, 0xe9, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x37, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x8100, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 45.208712365s ago: executing program 0 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121402, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400b5371b284ab09eda029d0000b703000000005a953deb0400008500000005000000bca900000000000035080100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbfa400000000000007040000f0ffffff74020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007f9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 34.394404645s ago: executing program 1 (id=1590): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/75, 0x0, 0x4b, 0x1, 0x7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x651070}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x8, 0x0, 0x0, 0x3, 0x100, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968788", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\xc0)\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3f7, 0x0, 0x800, r2, 0x91a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x10000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x4, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x8, 0x7cf0, 0x7, 0x10, r4, 0x0, '\x00', r8, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) 32.38658204s ago: executing program 2 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x3, 0x80, 0x6, 0xfb, 0x3, 0xe, 0x0, 0x9, 0x80101, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0x393}, 0x100820, 0x1, 0x5, 0x0, 0xed6d, 0x5, 0x80, 0x0, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="e934cae8e6e95b980e78eee56b0000000f0000000018110020", @ANYRES16=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90440, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000003c0)=r5, 0x12) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cd, 0x300) socketpair(0x14, 0x6, 0x4, &(0x7f00000004c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xed, &(0x7f0000000540)=""/237}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x4}, r5, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000040)={'netpci0\x00', @random="0e00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x7, 0x5, 0xe9, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x37, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x8100, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 30.069704874s ago: executing program 0 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121402, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400b5371b284ab09eda029d0000b703000000005a953deb0400008500000005000000bca900000000000035080100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbfa400000000000007040000f0ffffff74020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007f9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 25.263896352s ago: executing program 4 (id=2033): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000240)=ANY=[], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x0, 0x1}, 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="450a0000000000006111a317807f2f009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000001c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x1000}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffeff, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r4) 24.390443721s ago: executing program 4 (id=2039): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xa, 0x8, 0x2}, 0x48) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x1ff, 0x4, 0x3, 0x2000, r0, 0x3, '\x00', 0x0, r0, 0x3, 0x4}, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0xa, [@empty, @local, @local, @empty, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) 24.152389678s ago: executing program 4 (id=2041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001d00)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, 0x4}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x7, @loopback}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff1b}, 0x20000001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x1b, 0x0, 0x4000}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x48) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13100000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x20ffffff}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 23.277469238s ago: executing program 4 (id=2045): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) 22.331098063s ago: executing program 4 (id=2047): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xef, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a0603000011230000ff000000000000000000ac1414aa3b2000c2"], 0xfe15) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000190059"], 0xfe33) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) 22.142144242s ago: executing program 4 (id=2048): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x14, 0x3, &(0x7f0000002200)=ANY=[@ANYBLOB="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", @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYBLOB="0000000004000000b705000008000000850000006a", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x0, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e7ff00060000000000000000bc0008002000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x1, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000001100)="b5e51407cb", 0x10001000, r3}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xef8}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="b7000000000000006111900000000000c600000000000000950000000000000040c12d5826cd85b1a3be79f4dc1d8a56ed29a326ac5dd6eb6dd6678c7433c8d11100f3a58fb1f9ff0cb93b0d2029c7746c1da3305d1d0a15d03b345e893d8fbd397218acc127ef66a7f5bb798bb1a272a3e6e32fe69e89822824b6d17b91ea2cfb0c37f4a53ed3c7d958576a65e7ddbcd40dde6147ef53b807c1d70f789bed8a5b65a1d9b05b9fe71bb64db5396935ade7d68effbedae5d62309314ccd8937d3919643d281"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x2, 0x4}, 0x48) 19.439636935s ago: executing program 1 (id=1590): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/75, 0x0, 0x4b, 0x1, 0x7}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x651070}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x8, 0x0, 0x0, 0x3, 0x100, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968788", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\xc0)\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x3f7, 0x0, 0x800, r2, 0x91a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x10000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0x200, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000340), &(0x7f00000005c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001340)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x4, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x8, 0x7cf0, 0x7, 0x10, r4, 0x0, '\x00', r8, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) 17.558674245s ago: executing program 2 (id=815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x3, 0x80, 0x6, 0xfb, 0x3, 0xe, 0x0, 0x9, 0x80101, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff8, 0x2, @perf_config_ext={0x393}, 0x100820, 0x1, 0x5, 0x0, 0xed6d, 0x5, 0x80, 0x0, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="e934cae8e6e95b980e78eee56b0000000f0000000018110020", @ANYRES16=r1, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90440, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r5 = getpid() write$cgroup_pid(r4, &(0x7f00000003c0)=r5, 0x12) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cd, 0x300) socketpair(0x14, 0x6, 0x4, &(0x7f00000004c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b969590631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225da"], &(0x7f0000000000)='GPL\x00', 0x5, 0xed, &(0x7f0000000540)=""/237}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x4}, r5, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000040)={'netpci0\x00', @random="0e00"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x7, 0x5, 0xe9, 0x8}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x37, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x8100, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) 14.409175357s ago: executing program 0 (id=810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121402, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400b5371b284ab09eda029d0000b703000000005a953deb0400008500000005000000bca900000000000035080100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf8700000000000007080000fffdffffbfa400000000000007040000f0ffffff74020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007f9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.397587123s ago: executing program 3 (id=2086): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES8=0x0], &(0x7f0000000340)='syzkaller\x00', 0x3f, 0x8a, &(0x7f0000000040)=""/138, 0x41000, 0x44, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf345}, 0x90) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) (async) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0xc, 0x1, 0x52, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup=r0, 0xffffffffffffffff, 0x19, 0x4, r2, @link_fd=r0, r3}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x7b) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3d7}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xa1, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000007c0)=ANY=[], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)="27846f29dda00563ef7e72dbe99ea3b3c9092161f209d9921db6a9f052053bf7ccbaf4bfd47de130ba57ae096b71ba20b930f1869a3e13d8526e77e53d520c8131b6388c1cd179e9aeffc2c7fb1ff0760e99818e396cce489021f453f8fb76a288b096e0f86740449141f37c141d322dfff74a43bd08076214b76082c342ff9ebe7907a48de7e378f14cd2db584e42affafb7677bfdafcbd51ec32c8e9ad5157a31822875d23594922e079e6fb53e9570a8c059f82", 0xb5}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.241226475s ago: executing program 3 (id=2087): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, @perf_bp={0x0}, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1}, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x12201, 0x0, 0x0, 0x0, 0x0, 0x1f49, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x2000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) write$cgroup_type(r0, &(0x7f0000000b40), 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000b70800b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a00)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x90) 0s ago: executing program 3 (id=2091): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x9}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) kernel console output (not intermixed with test programs): c 0x0c23 length: 249 > 4 [ 393.618160][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 393.625899][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.792157][T12683] netlink: 'syz.3.1828': attribute type 29 has an invalid length. [ 393.828770][T12647] hsr_slave_0: entered promiscuous mode [ 393.836422][T12647] hsr_slave_1: entered promiscuous mode [ 393.884172][T12682] netlink: 'syz.3.1828': attribute type 29 has an invalid length. [ 394.129569][ T5643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.225954][ T5220] Bluetooth: hci2: command tx timeout [ 394.301250][ T5643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.471733][ T5643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.527045][T12670] chnl_net:caif_netlink_parms(): no params data found [ 394.637965][ T5643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.849848][T12741] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1839'. [ 394.865790][T12670] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.872946][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.887988][T12670] bridge_slave_0: entered allmulticast mode [ 394.901184][T12670] bridge_slave_0: entered promiscuous mode [ 394.915481][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.922615][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.941821][T12670] bridge_slave_1: entered allmulticast mode [ 394.950295][T12670] bridge_slave_1: entered promiscuous mode [ 394.956479][ T5220] Bluetooth: hci0: command tx timeout [ 395.058326][T12670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.125408][T12670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.212557][ T5643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.230004][T12684] chnl_net:caif_netlink_parms(): no params data found [ 395.272462][T12670] team0: Port device team_slave_0 added [ 395.283522][T12670] team0: Port device team_slave_1 added [ 395.378846][ T5643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.466524][T12670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.473504][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.504968][T12670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.577016][ T5643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.600924][T12670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.608593][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.635662][T12670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.665338][ T5220] Bluetooth: hci3: command tx timeout [ 395.733317][ T5643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.781805][T12647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 395.801794][T12647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 395.866176][T12684] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.875527][T12684] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.882764][T12684] bridge_slave_0: entered allmulticast mode [ 395.890964][T12684] bridge_slave_0: entered promiscuous mode [ 395.912881][T12647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 395.923135][T12647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 395.950317][T12684] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.957965][T12684] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.968681][T12684] bridge_slave_1: entered allmulticast mode [ 395.981087][T12684] bridge_slave_1: entered promiscuous mode [ 395.983206][T12775] can: request_module (can-proto-0) failed. [ 396.028370][T12670] hsr_slave_0: entered promiscuous mode [ 396.035150][T12670] hsr_slave_1: entered promiscuous mode [ 396.041245][T12670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.048960][T12670] Cannot create hsr debugfs directory [ 396.084237][T12684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.100008][T12684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.213550][T12684] team0: Port device team_slave_0 added [ 396.221466][T12684] team0: Port device team_slave_1 added [ 396.296986][T12684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.305195][ T5220] Bluetooth: hci2: command tx timeout [ 396.310769][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.338133][T12684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.351372][T12684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.358419][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.385432][T12684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.404276][ T5643] bridge_slave_1: left allmulticast mode [ 396.410208][ T5643] bridge_slave_1: left promiscuous mode [ 396.416148][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.425569][ T5643] bridge_slave_0: left allmulticast mode [ 396.431843][ T5643] bridge_slave_0: left promiscuous mode [ 396.437862][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.451313][ T5643] bridge_slave_1: left allmulticast mode [ 396.457652][ T5643] bridge_slave_1: left promiscuous mode [ 396.463416][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.473164][ T5643] bridge_slave_0: left allmulticast mode [ 396.479434][ T5643] bridge_slave_0: left promiscuous mode [ 396.485175][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.003398][ T5643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.015759][ T5643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.026082][ T5220] Bluetooth: hci0: command tx timeout [ 397.035065][ T5643] bond0 (unregistering): Released all slaves [ 397.167834][ T5643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.180536][ T5643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.192295][ T5643] bond0 (unregistering): Released all slaves [ 397.392708][T12684] hsr_slave_0: entered promiscuous mode [ 397.400205][T12684] hsr_slave_1: entered promiscuous mode [ 397.406925][T12684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.414734][T12684] Cannot create hsr debugfs directory [ 397.427134][T12788] netlink: 'syz.4.1850': attribute type 10 has an invalid length. [ 397.744626][ T5220] Bluetooth: hci3: command tx timeout [ 398.028478][T12807] netlink: 'syz.4.1855': attribute type 21 has an invalid length. [ 398.384763][ T5220] Bluetooth: hci2: command tx timeout [ 398.390327][T12647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.492597][ T5643] hsr_slave_0: left promiscuous mode [ 398.502492][ T5643] hsr_slave_1: left promiscuous mode [ 398.534003][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.552074][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.571823][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.587899][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.610301][ T5643] hsr_slave_0: left promiscuous mode [ 398.645081][ T5643] hsr_slave_1: left promiscuous mode [ 398.655027][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.662521][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.678183][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.691174][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.748955][ T5643] veth1_macvtap: left promiscuous mode [ 398.762393][ T5643] veth0_macvtap: left promiscuous mode [ 398.768320][ T5643] veth1_vlan: left promiscuous mode [ 398.773679][ T5643] veth0_vlan: left promiscuous mode [ 398.789973][ T5643] veth1_macvtap: left promiscuous mode [ 398.795783][ T5643] veth0_macvtap: left promiscuous mode [ 398.801532][ T5643] veth1_vlan: left promiscuous mode [ 398.808029][ T5643] veth0_vlan: left promiscuous mode [ 399.105125][ T5220] Bluetooth: hci0: command tx timeout [ 399.674063][ T5643] team0 (unregistering): Port device team_slave_1 removed [ 399.709496][ T5643] team0 (unregistering): Port device team_slave_0 removed [ 399.824912][ T5220] Bluetooth: hci3: command tx timeout [ 400.343249][ T5643] team0 (unregistering): Port device team_slave_1 removed [ 400.387273][ T5643] team0 (unregistering): Port device team_slave_0 removed [ 400.468682][ T5220] Bluetooth: hci2: command tx timeout [ 400.755027][T12831] netlink: 'syz.4.1860': attribute type 19 has an invalid length. [ 400.841091][T12647] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.893856][T10947] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.901012][T10947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.953535][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.960746][T10954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.090959][T12670] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.102511][T12670] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.123006][T12847] netlink: 'syz.3.1866': attribute type 21 has an invalid length. [ 401.190400][T12670] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.241269][T12647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.261031][T12670] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.304762][T12854] netlink: 'syz.4.1867': attribute type 29 has an invalid length. [ 401.344246][T12863] netlink: 'syz.4.1867': attribute type 4 has an invalid length. [ 401.353893][T12855] netlink: 'syz.4.1867': attribute type 29 has an invalid length. [ 401.362645][T12863] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 401.385274][T12863] netlink: 178972 bytes leftover after parsing attributes in process `syz.4.1867'. [ 401.442867][T12866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1869'. [ 401.659955][T12647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.794242][T12871] netlink: set zone limit has 8 unknown bytes [ 401.904940][ T5220] Bluetooth: hci3: command tx timeout [ 401.908263][T12684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 405.057128][T12670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.092036][T12684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 405.141173][T12684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 405.168123][T12684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 405.183631][T12884] netlink: 133820 bytes leftover after parsing attributes in process `syz.3.1873'. [ 405.207095][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 405.217523][T12647] veth0_vlan: entered promiscuous mode [ 405.276331][T12670] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.382373][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.389541][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.407263][T12647] veth1_vlan: entered promiscuous mode [ 405.433250][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.440478][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.508564][T12647] veth0_macvtap: entered promiscuous mode [ 405.607247][T12647] veth1_macvtap: entered promiscuous mode [ 405.723086][T12670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.768574][T12647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.796766][T12897] can: request_module (can-proto-0) failed. [ 405.804770][T12647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.817115][T12647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.832091][T12647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.846282][T12647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.880230][T12647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.899151][T12647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.909063][T12647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.925681][T12647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.941524][T12647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.961930][T12647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.983731][T12647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.009232][T12647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.024704][T12647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.130557][T12684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.141516][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.230779][T12684] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.262351][T12553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.272108][T12553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.283786][T10949] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.291031][T10949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.348310][T10949] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.355497][T10949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.378712][T12553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.390524][T12553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.461716][T12670] veth0_vlan: entered promiscuous mode [ 406.532490][T12670] veth1_vlan: entered promiscuous mode [ 406.691903][T12670] veth0_macvtap: entered promiscuous mode [ 406.728977][T12670] veth1_macvtap: entered promiscuous mode [ 406.761603][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.804857][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.820153][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.830659][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.840887][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.851454][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.863938][T12670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.895211][T12912] veth0_vlan: left promiscuous mode [ 406.902638][T12912] veth0_vlan: entered promiscuous mode [ 406.917463][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.928746][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.940435][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.967577][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.978927][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.989735][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.010763][T12670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.056178][T12670] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.072220][T12917] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1881'. [ 407.080468][T12670] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.099291][T12670] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.113119][T12670] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.139387][T12684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.342078][T12684] veth0_vlan: entered promiscuous mode [ 407.388064][ T5643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.404600][ T5643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.259105][ T5658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.312215][T12684] veth1_vlan: entered promiscuous mode [ 408.354810][T12931] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.1885'. [ 408.373964][T12931] netlink: 'syz.4.1885': attribute type 1 has an invalid length. [ 408.400339][ T5658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.411215][T12931] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1885'. [ 408.534228][ T5658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.585701][ T5666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.610584][ T5666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.725997][T12684] veth0_macvtap: entered promiscuous mode [ 408.756317][T12684] veth1_macvtap: entered promiscuous mode [ 408.839761][ T5658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.877190][T12951] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1889'. [ 408.887026][T12952] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1889'. [ 408.893434][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.912608][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.913943][T12953] FAULT_INJECTION: forcing a failure. [ 408.913943][T12953] name failslab, interval 1, probability 0, space 0, times 0 [ 408.921991][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.943468][T12951] batman_adv: batadv0: adding TT local entry 4a:c8:86:29:00:00 to non-existent VLAN 2358 [ 408.944221][T12953] CPU: 1 PID: 12953 Comm: syz.4.1890 Not tainted 6.10.0-syzkaller-04559-g7d30b8aa4fc3 #0 [ 408.963410][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 408.970745][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.973460][T12953] Call Trace: [ 408.973475][T12953] [ 408.973485][T12953] dump_stack_lvl+0x241/0x360 [ 408.981543][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 408.983680][T12953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.983713][T12953] ? __pfx__printk+0x10/0x10 [ 408.987235][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.991283][T12953] ? __pfx___might_resched+0x10/0x10 [ 408.991320][T12953] should_fail_ex+0x3b0/0x4e0 [ 408.991346][T12953] ? bpf_test_init+0xe1/0x180 [ 409.029616][T12953] should_failslab+0x9/0x20 [ 409.034136][T12953] __kmalloc_noprof+0xd8/0x400 [ 409.038902][T12953] bpf_test_init+0xe1/0x180 [ 409.043406][T12953] bpf_prog_test_run_skb+0x2bb/0x1820 [ 409.048786][T12953] ? __pfx_lock_release+0x10/0x10 [ 409.053849][T12953] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 409.059664][T12953] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 409.065464][T12953] bpf_prog_test_run+0x33a/0x3b0 [ 409.070402][T12953] __sys_bpf+0x48d/0x810 [ 409.074635][T12953] ? __pfx___sys_bpf+0x10/0x10 [ 409.079383][T12953] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 409.085373][T12953] __x64_sys_bpf+0x7c/0x90 [ 409.089783][T12953] do_syscall_64+0xf3/0x230 [ 409.094282][T12953] ? clear_bhb_loop+0x35/0x90 [ 409.098963][T12953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.104873][T12953] RIP: 0033:0x7f1188d77299 [ 409.109276][T12953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.128884][T12953] RSP: 002b:00007f1189bd3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.137317][T12953] RAX: ffffffffffffffda RBX: 00007f1188f06058 RCX: 00007f1188d77299 [ 409.145296][T12953] RDX: 0000000000000048 RSI: 0000000020000080 RDI: 000000000000000a [ 409.153290][T12953] RBP: 00007f1189bd30a0 R08: 0000000000000000 R09: 0000000000000000 [ 409.161267][T12953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.169229][T12953] R13: 000000000000006e R14: 00007f1188f06058 R15: 00007ffd9c495f78 [ 409.177208][T12953] [ 409.262900][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.281810][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.293049][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.306568][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.316770][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.332641][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.390945][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.404184][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.457133][T12684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.518112][T12960] netlink: 'syz.4.1891': attribute type 21 has an invalid length. [ 409.548364][T12960] IPv6: Can't replace route, no match found [ 409.592787][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.612949][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.624219][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.635233][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.646936][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.657643][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.668193][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.678737][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.692362][T12684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.712173][T12684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.725957][T12684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.739088][T12684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.765560][T12684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.236829][ T5658] bridge_slave_1: left allmulticast mode [ 410.248108][ T5658] bridge_slave_1: left promiscuous mode [ 410.255533][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.266770][ T5658] bridge_slave_0: left allmulticast mode [ 410.272428][ T5658] bridge_slave_0: left promiscuous mode [ 410.279278][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.597612][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.610578][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.621285][ T5658] bond0 (unregistering): Released all slaves [ 410.704972][ T5650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.722745][ T5650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.730649][T12553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.744450][T12553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.782155][T12954] chnl_net:caif_netlink_parms(): no params data found [ 410.976707][T12954] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.983865][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.992480][T12954] bridge_slave_0: entered allmulticast mode [ 410.999963][T12954] bridge_slave_0: entered promiscuous mode [ 411.008507][T12954] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.015748][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.022909][T12954] bridge_slave_1: entered allmulticast mode [ 411.030495][ T5220] Bluetooth: hci0: command tx timeout [ 411.032772][T12954] bridge_slave_1: entered promiscuous mode [ 411.076422][ T5658] hsr_slave_0: left promiscuous mode [ 411.082310][ T5658] hsr_slave_1: left promiscuous mode [ 411.092803][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.101462][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.114468][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.121904][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.147469][ T5658] veth1_macvtap: left promiscuous mode [ 411.153081][ T5658] veth0_macvtap: left promiscuous mode [ 411.159062][ T5658] veth1_vlan: left promiscuous mode [ 411.164544][ T5658] veth0_vlan: left promiscuous mode [ 411.599953][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.616223][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.624315][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.633527][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.647774][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 411.662451][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.762497][ T5658] team0 (unregistering): Port device team_slave_1 removed [ 411.800362][ T5658] team0 (unregistering): Port device team_slave_0 removed [ 412.148326][T12954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.168004][T12954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.226705][T12954] team0: Port device team_slave_0 added [ 412.235887][T12954] team0: Port device team_slave_1 added [ 412.300962][T12954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.316898][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.343205][T12954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.358913][T12954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.367569][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.393756][T12954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.475632][T12954] hsr_slave_0: entered promiscuous mode [ 412.481909][T12954] hsr_slave_1: entered promiscuous mode [ 412.810815][T12983] chnl_net:caif_netlink_parms(): no params data found [ 412.919666][T12996] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1899'. [ 412.943607][ T5220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.953618][ T5220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.962450][ T5220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.972127][ T5220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.983820][T12994] netlink: 'syz.3.1898': attribute type 21 has an invalid length. [ 412.986088][ T5220] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 412.999726][ T5220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.108347][ T5220] Bluetooth: hci0: command tx timeout [ 413.124908][ T5658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.228297][ T5658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.246500][T12983] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.253804][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.261570][T12983] bridge_slave_0: entered allmulticast mode [ 413.273332][T12983] bridge_slave_0: entered promiscuous mode [ 413.309620][T12983] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.318648][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.329817][T12983] bridge_slave_1: entered allmulticast mode [ 413.337326][T12983] bridge_slave_1: entered promiscuous mode [ 413.372858][ T5658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.418293][T13005] netlink: 'syz.4.1901': attribute type 10 has an invalid length. [ 413.427284][T13005] macvlan0: entered promiscuous mode [ 413.433986][T13005] macvlan0: entered allmulticast mode [ 413.447301][T13005] veth1_vlan: entered allmulticast mode [ 413.480746][T13005] : (slave macvlan0): Enslaving as an active interface with an up link [ 413.518596][T12983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.578331][ T5658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.610262][T12983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.757579][ T5220] Bluetooth: hci2: command tx timeout [ 413.783277][T12954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.813218][T12983] team0: Port device team_slave_0 added [ 413.853596][T12983] team0: Port device team_slave_1 added [ 413.936635][T12954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 414.028685][T12983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.042045][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.081271][T12983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.100427][T12954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 414.118515][T12983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.125778][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.162949][T12983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.182052][T12954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 414.484272][T12983] hsr_slave_0: entered promiscuous mode [ 414.493165][T12983] hsr_slave_1: entered promiscuous mode [ 414.515025][T12983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.522718][T12983] Cannot create hsr debugfs directory [ 414.678052][ T5658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.724938][T12997] chnl_net:caif_netlink_parms(): no params data found [ 414.777351][ T5658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.907281][ T5658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.025755][ T5220] Bluetooth: hci3: command tx timeout [ 415.042840][ T5658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.141998][T12954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.166248][T12997] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.183285][T12997] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.193324][ T5220] Bluetooth: hci0: command tx timeout [ 415.209340][T12997] bridge_slave_0: entered allmulticast mode [ 415.221356][T12997] bridge_slave_0: entered promiscuous mode [ 415.259116][T12997] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.277323][T12997] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.304746][T12997] bridge_slave_1: entered allmulticast mode [ 415.328233][T12997] bridge_slave_1: entered promiscuous mode [ 415.465688][T12997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.524979][T12997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.611164][T13041] netlink: 'syz.4.1912': attribute type 21 has an invalid length. [ 415.635725][T12954] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.703987][T12997] team0: Port device team_slave_0 added [ 415.741857][T13047] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 415.795033][T12997] team0: Port device team_slave_1 added [ 415.825683][ T5220] Bluetooth: hci2: command tx timeout [ 415.859528][T13049] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 416.488209][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.495432][ T5655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.505724][T13045] netlink: 'syz.3.1913': attribute type 29 has an invalid length. [ 416.540972][ T5658] bridge_slave_1: left allmulticast mode [ 416.558932][ T5658] bridge_slave_1: left promiscuous mode [ 416.565161][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.590255][ T5658] bridge_slave_0: left allmulticast mode [ 416.597238][ T5658] bridge_slave_0: left promiscuous mode [ 416.607550][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.618910][ T5658] bridge_slave_1: left allmulticast mode [ 416.625955][ T5658] bridge_slave_1: left promiscuous mode [ 416.631789][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.640869][ T5658] bridge_slave_0: left allmulticast mode [ 416.647000][ T5658] bridge_slave_0: left promiscuous mode [ 416.652734][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.104674][ T5220] Bluetooth: hci3: command tx timeout [ 417.194174][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.206898][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.219543][ T5658] bond0 (unregistering): Released all slaves [ 417.265443][ T5220] Bluetooth: hci0: command tx timeout [ 417.312071][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.323954][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.336156][ T5658] bond0 (unregistering): Released all slaves [ 417.363860][T12997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.373081][T12997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.411859][T12997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.427496][T12997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.445154][T12997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.494701][T12997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.555311][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.562422][T10953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.789573][T12997] hsr_slave_0: entered promiscuous mode [ 417.800370][T12997] hsr_slave_1: entered promiscuous mode [ 417.813772][T12997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.834816][T12997] Cannot create hsr debugfs directory [ 417.906631][ T5220] Bluetooth: hci2: command tx timeout [ 418.420907][T12983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.437942][T12983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.495566][ T5658] hsr_slave_0: left promiscuous mode [ 418.509504][ T5658] hsr_slave_1: left promiscuous mode [ 418.527062][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.540197][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.550508][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.558116][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.574743][ T5658] hsr_slave_0: left promiscuous mode [ 418.581157][ T5658] hsr_slave_1: left promiscuous mode [ 418.587892][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.598385][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.613351][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.621556][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.662658][ T5658] veth1_macvtap: left promiscuous mode [ 418.668417][ T5658] veth0_macvtap: left promiscuous mode [ 418.674196][ T5658] veth1_vlan: left promiscuous mode [ 418.679827][ T5658] veth0_vlan: left promiscuous mode [ 418.696750][ T5658] veth1_macvtap: left promiscuous mode [ 418.703027][ T5658] veth0_macvtap: left promiscuous mode [ 418.709464][ T5658] veth1_vlan: left promiscuous mode [ 418.715740][ T5658] veth0_vlan: left promiscuous mode [ 418.980170][T13106] netlink: 'syz.3.1927': attribute type 3 has an invalid length. [ 418.988449][T13106] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1927'. [ 419.187719][ T5220] Bluetooth: hci3: command tx timeout [ 419.431684][ T5658] team0 (unregistering): Port device team_slave_1 removed [ 419.473117][ T5658] team0 (unregistering): Port device team_slave_0 removed [ 419.984793][ T5220] Bluetooth: hci2: command tx timeout [ 420.184335][ T5658] team0 (unregistering): Port device team_slave_1 removed [ 420.225307][ T5658] team0 (unregistering): Port device team_slave_0 removed [ 420.578301][T12983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 420.594601][T12983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 420.722424][T12954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.276692][ T5220] Bluetooth: hci3: command tx timeout [ 421.947290][T12954] veth0_vlan: entered promiscuous mode [ 421.973257][T12954] veth1_vlan: entered promiscuous mode [ 422.031174][T12983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.090639][T12983] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.129988][T12954] veth0_macvtap: entered promiscuous mode [ 422.177263][T10954] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.184641][T10954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.232294][T12954] veth1_macvtap: entered promiscuous mode [ 422.241918][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.249116][T10954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.309400][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.324796][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.334872][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.346097][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.357804][T12954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.431845][T12997] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.521145][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.537111][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.553227][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.570268][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.582625][T12954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.604901][T12997] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.656719][T12954] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.693263][T12954] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.709815][T12954] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.720251][T12954] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.751970][T12997] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 422.779321][T12997] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 422.998361][ T5650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.014949][ T5650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.089799][T12550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.123212][T12550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.190088][T12997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.225983][T13162] netlink: 'syz.3.1940': attribute type 39 has an invalid length. [ 423.268350][T13165] netlink: 'syz.4.1941': attribute type 1 has an invalid length. [ 423.278832][T13162] veth0_macvtap: left promiscuous mode [ 423.287450][T13165] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1941'. [ 423.365028][T13159] netlink: 'syz.4.1941': attribute type 10 has an invalid length. [ 423.459851][T12983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.483457][T12997] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.515194][T13170] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1943'. [ 423.557993][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.565264][T10953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.673379][ T5666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.698598][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.705741][T10950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.815148][ T5666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.860472][T12983] veth0_vlan: entered promiscuous mode [ 423.879802][T12983] veth1_vlan: entered promiscuous mode [ 423.911693][ T5666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.971195][T12983] veth0_macvtap: entered promiscuous mode [ 423.986780][T12983] veth1_macvtap: entered promiscuous mode [ 424.017436][T12983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.033755][T12983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.044953][T12983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.057019][T12983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.067007][T12983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.078359][T12983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.089856][T12983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.108453][T12983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.119388][T12983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.129406][T12983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.139855][T12983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.150293][T12983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.160788][T12983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.171807][T12983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.186330][T12983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.195754][T12983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.204749][T12983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.213484][T12983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.240870][ T5666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.290137][T12997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.364528][T12550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.372382][T12550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.380374][T12997] veth0_vlan: entered promiscuous mode [ 424.412519][T12997] veth1_vlan: entered promiscuous mode [ 424.435088][T12550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.443030][T12550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.517282][T12997] veth0_macvtap: entered promiscuous mode [ 424.577036][T12997] veth1_macvtap: entered promiscuous mode [ 424.663470][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.694455][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.715795][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.764493][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.785830][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.807413][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.834740][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.865576][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.899235][T12997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.998180][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.011152][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.030525][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.040534][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.049153][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.057418][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 425.065198][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.076388][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.091522][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.102723][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.113125][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.123758][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.133917][T12997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.144880][T12997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.162074][T12997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.357721][T12997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.367049][T12997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.375988][T12997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.384800][T12997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.400983][T13200] @ÿ: renamed from veth0_vlan (while UP) [ 425.501605][ T5666] bridge_slave_1: left allmulticast mode [ 425.513268][ T5666] bridge_slave_1: left promiscuous mode [ 425.524186][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.541106][ T5666] bridge_slave_0: left allmulticast mode [ 425.546854][ T5666] bridge_slave_0: left promiscuous mode [ 425.552537][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.183829][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.198580][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.209830][ T5666] bond0 (unregistering): Released all slaves [ 426.381068][ T5658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.404645][ T5658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.433471][ T5639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.442219][ T5639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.598680][T13194] chnl_net:caif_netlink_parms(): no params data found [ 426.649124][ T5666] hsr_slave_0: left promiscuous mode [ 426.657830][ T5666] hsr_slave_1: left promiscuous mode [ 426.663691][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.671407][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.679244][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.687629][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.705538][ T5666] veth1_macvtap: left promiscuous mode [ 426.711059][ T5666] veth0_macvtap: left promiscuous mode [ 426.717984][ T5666] veth1_vlan: left promiscuous mode [ 426.723273][ T5666] veth0_vlan: left promiscuous mode [ 427.107314][ T5227] Bluetooth: hci0: command tx timeout [ 427.122945][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 427.159240][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 427.550947][T13194] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.581925][T13194] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.614872][T13194] bridge_slave_0: entered allmulticast mode [ 427.639277][T13194] bridge_slave_0: entered promiscuous mode [ 427.674867][T13194] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.698083][T13194] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.716561][T13194] bridge_slave_1: entered allmulticast mode [ 427.746233][T13194] bridge_slave_1: entered promiscuous mode [ 427.879183][T13194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.931246][T13194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.108048][T13194] team0: Port device team_slave_0 added [ 428.118097][ T5220] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.133155][ T5220] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.141665][ T5220] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.157132][ T5220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.165340][ T5220] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 428.168698][T13194] team0: Port device team_slave_1 added [ 428.179789][ T5220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.315768][T13194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.322757][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.355567][T13194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.426637][T13194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.443118][T13194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.502640][T13257] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 428.504458][T13194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.531222][T13257] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1962'. [ 428.543721][T13257] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 428.709594][T13194] hsr_slave_0: entered promiscuous mode [ 428.717504][T13194] hsr_slave_1: entered promiscuous mode [ 428.771332][ T5666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.866445][ T5666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.956870][ T5666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.054242][ T5666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.073325][T13252] chnl_net:caif_netlink_parms(): no params data found [ 429.142740][T13252] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.150075][T13252] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.157593][T13252] bridge_slave_0: entered allmulticast mode [ 429.164301][T13252] bridge_slave_0: entered promiscuous mode [ 429.172444][T13252] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.179734][T13252] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.188501][ T5227] Bluetooth: hci0: command tx timeout [ 429.190975][T13252] bridge_slave_1: entered allmulticast mode [ 429.204291][T13252] bridge_slave_1: entered promiscuous mode [ 429.255476][T13252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.268166][T13252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.330623][ T5666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.356568][T13252] team0: Port device team_slave_0 added [ 429.367139][T13252] team0: Port device team_slave_1 added [ 429.427916][ T5666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.454279][T13252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.461465][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.487634][T13252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.523428][ T5666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.538762][T13252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.545999][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.572067][T13252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.614253][T13194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 429.625213][T13194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 429.647324][ T5666] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.670089][T13194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 429.691078][T13194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 429.707806][T13252] hsr_slave_0: entered promiscuous mode [ 429.716978][T13252] hsr_slave_1: entered promiscuous mode [ 429.723061][T13252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.731648][T13252] Cannot create hsr debugfs directory [ 429.867837][ T5666] bridge_slave_1: left allmulticast mode [ 429.873491][ T5666] bridge_slave_1: left promiscuous mode [ 429.879359][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.889358][ T5666] bridge_slave_0: left allmulticast mode [ 429.895428][ T5666] bridge_slave_0: left promiscuous mode [ 429.902710][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.913729][ T5666] bridge_slave_1: left allmulticast mode [ 429.919914][ T5666] bridge_slave_1: left promiscuous mode [ 429.926150][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.937342][ T5666] bridge_slave_0: left allmulticast mode [ 429.943009][ T5666] bridge_slave_0: left promiscuous mode [ 429.948920][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.257006][ T5227] Bluetooth: hci2: command tx timeout [ 430.601729][ T5220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.612845][ T5220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.621855][ T5220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.640534][ T5220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.648680][ T5220] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 430.658069][ T5220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.917971][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.931660][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.942706][ T5666] bond0 (unregistering): Released all slaves [ 431.047333][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.060754][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.072786][ T5666] bond0 (unregistering): Released all slaves [ 431.267626][ T5220] Bluetooth: hci0: command tx timeout [ 431.409933][T13282] delete_channel: no stack [ 431.467651][T13194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.567528][T13194] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.665113][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.672287][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.702248][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.709450][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.956286][T13295] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1973'. [ 432.017566][T13252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.065545][T13252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.092876][T13274] chnl_net:caif_netlink_parms(): no params data found [ 432.131055][ T5666] hsr_slave_0: left promiscuous mode [ 432.159196][ T5666] hsr_slave_1: left promiscuous mode [ 432.168019][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.182531][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.190911][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.205693][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.233811][ T5666] hsr_slave_0: left promiscuous mode [ 432.245537][ T5666] hsr_slave_1: left promiscuous mode [ 432.259178][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.278386][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.302704][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.311003][ T5220] Bluetooth: hci2: command tx timeout [ 432.327343][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.471927][ T5666] veth1_macvtap: left promiscuous mode [ 432.494615][ T5666] veth0_macvtap: left promiscuous mode [ 432.517320][ T5666] veth1_vlan: left promiscuous mode [ 432.529391][ T5666] veth0_vlan: left promiscuous mode [ 432.553245][ T5666] veth1_macvtap: left promiscuous mode [ 432.573106][ T5666] veth0_macvtap: left promiscuous mode [ 432.591260][ T5666] veth1_vlan: left promiscuous mode [ 432.617086][ T5666] veth0_vlan: left promiscuous mode [ 432.705393][ T5220] Bluetooth: hci3: command tx timeout [ 433.355582][ T5220] Bluetooth: hci0: command tx timeout [ 433.901174][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 433.972805][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 434.384709][ T5220] Bluetooth: hci2: command tx timeout [ 434.784636][ T5220] Bluetooth: hci3: command tx timeout [ 435.174164][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 435.211484][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 435.559236][T13252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 435.569919][T13252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 435.807189][T13330] netlink: 'syz.4.1982': attribute type 29 has an invalid length. [ 435.817994][T13335] netlink: 'syz.4.1982': attribute type 29 has an invalid length. [ 435.838883][T13274] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.853284][T13274] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.874890][T13274] bridge_slave_0: entered allmulticast mode [ 435.882327][T13274] bridge_slave_0: entered promiscuous mode [ 435.955870][T13330] netlink: 'syz.4.1982': attribute type 29 has an invalid length. [ 435.981397][T13274] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.999235][T13274] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.009174][T13274] bridge_slave_1: entered allmulticast mode [ 436.017438][T13274] bridge_slave_1: entered promiscuous mode [ 436.026341][T13340] netlink: 'syz.4.1982': attribute type 29 has an invalid length. [ 436.071104][T13335] netlink: 'syz.4.1982': attribute type 29 has an invalid length. [ 436.090759][T13274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.119232][T13274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.142573][T13330] netlink: 'syz.4.1982': attribute type 29 has an invalid length. [ 436.152681][T13330] netlink: 'syz.4.1982': attribute type 11 has an invalid length. [ 436.159055][T13335] netlink: 'syz.4.1982': attribute type 19 has an invalid length. [ 436.161259][T13330] netlink: 203156 bytes leftover after parsing attributes in process `syz.4.1982'. [ 436.229531][T13274] team0: Port device team_slave_0 added [ 436.249421][T13194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.277962][T13274] team0: Port device team_slave_1 added [ 436.363620][T13274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.382779][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.436910][T13274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.465382][ T5220] Bluetooth: hci2: command tx timeout [ 436.470186][T13274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.484733][T13274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.545077][T13274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.782909][T13194] veth0_vlan: entered promiscuous mode [ 436.843889][T13274] hsr_slave_0: entered promiscuous mode [ 436.856148][T13274] hsr_slave_1: entered promiscuous mode [ 436.862621][T13274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.870383][ T5220] Bluetooth: hci3: command tx timeout [ 436.876569][T13274] Cannot create hsr debugfs directory [ 436.968805][T13194] veth1_vlan: entered promiscuous mode [ 436.987702][T13252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.061602][T13252] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.121630][T10954] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.128868][T10954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.141435][T10954] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.148674][T10954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.250657][T13194] veth0_macvtap: entered promiscuous mode [ 437.285364][T13194] veth1_macvtap: entered promiscuous mode [ 437.337881][T13252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.360789][T13194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.386874][T13194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.397492][T13194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.408501][T13194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.420454][T13194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.438280][T13194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.467914][T13194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.482178][T13194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.499114][T13194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.511104][T13194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.641550][T13194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.676323][T13194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.694504][T13194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.703252][T13194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.752265][T13373] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.1993'. [ 437.859073][T13252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.894712][T12550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.923101][T12550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.003707][ T5650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.041165][ T5650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.302012][T13252] veth0_vlan: entered promiscuous mode [ 438.326080][T13274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.393776][T13391] FAULT_INJECTION: forcing a failure. [ 438.393776][T13391] name failslab, interval 1, probability 0, space 0, times 0 [ 438.411472][T13391] CPU: 1 PID: 13391 Comm: syz.3.1999 Not tainted 6.10.0-syzkaller-04559-g7d30b8aa4fc3 #0 [ 438.421350][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 438.431437][T13391] Call Trace: [ 438.434725][T13391] [ 438.437658][T13391] dump_stack_lvl+0x241/0x360 [ 438.442355][T13391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.447592][T13391] ? __pfx__printk+0x10/0x10 [ 438.452216][T13391] ? __pfx___might_resched+0x10/0x10 [ 438.457536][T13391] should_fail_ex+0x3b0/0x4e0 [ 438.462257][T13391] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 438.468551][T13391] should_failslab+0x9/0x20 [ 438.473098][T13391] __kmalloc_noprof+0xd8/0x400 [ 438.477940][T13391] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 438.484058][T13391] genl_rcv_msg+0x802/0xec0 [ 438.488575][T13391] ? mark_lock+0x9a/0x350 [ 438.492946][T13391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.498054][T13391] ? __pfx_lock_acquire+0x10/0x10 [ 438.503095][T13391] ? __pfx_ovs_meter_cmd_del+0x10/0x10 [ 438.508578][T13391] ? __pfx___might_resched+0x10/0x10 [ 438.513907][T13391] netlink_rcv_skb+0x1e3/0x430 [ 438.518701][T13391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.523750][T13391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.529092][T13391] ? __netlink_deliver_tap+0x77e/0x7c0 [ 438.535407][T13391] genl_rcv+0x28/0x40 [ 438.539417][T13391] netlink_unicast+0x7f0/0x990 [ 438.544233][T13391] ? __pfx_netlink_unicast+0x10/0x10 [ 438.549542][T13391] ? __virt_addr_valid+0x183/0x530 [ 438.554686][T13391] ? __check_object_size+0x49c/0x900 [ 438.559992][T13391] ? bpf_lsm_netlink_send+0x9/0x10 [ 438.565137][T13391] netlink_sendmsg+0x8e4/0xcb0 [ 438.570038][T13391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.575344][T13391] ? __import_iovec+0x536/0x820 [ 438.580208][T13391] ? aa_sock_msg_perm+0x91/0x160 [ 438.585171][T13391] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 438.590469][T13391] ? security_socket_sendmsg+0x87/0xb0 [ 438.595947][T13391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.601246][T13391] __sock_sendmsg+0x221/0x270 [ 438.605953][T13391] ____sys_sendmsg+0x525/0x7d0 [ 438.610766][T13391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.616113][T13391] __sys_sendmsg+0x2b0/0x3a0 [ 438.620813][T13391] ? __pfx___sys_sendmsg+0x10/0x10 [ 438.625938][T13391] ? vfs_write+0x7c4/0xc90 [ 438.630484][T13391] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 438.636855][T13391] ? do_syscall_64+0x100/0x230 [ 438.641661][T13391] ? do_syscall_64+0xb6/0x230 [ 438.646376][T13391] do_syscall_64+0xf3/0x230 [ 438.650911][T13391] ? clear_bhb_loop+0x35/0x90 [ 438.655612][T13391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.661531][T13391] RIP: 0033:0x7f1e2db77299 [ 438.665965][T13391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.685585][T13391] RSP: 002b:00007f1e2e993048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.694023][T13391] RAX: ffffffffffffffda RBX: 00007f1e2dd05f80 RCX: 00007f1e2db77299 [ 438.702007][T13391] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 438.709990][T13391] RBP: 00007f1e2e9930a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.717971][T13391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.725955][T13391] R13: 000000000000000b R14: 00007f1e2dd05f80 R15: 00007ffd1db4f988 [ 438.733982][T13391] [ 438.784027][T13274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.805982][T13274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.824114][T13274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.882874][T13252] veth1_vlan: entered promiscuous mode [ 438.947770][ T5220] Bluetooth: hci3: command tx timeout [ 439.003670][T13252] veth0_macvtap: entered promiscuous mode [ 439.020007][T13252] veth1_macvtap: entered promiscuous mode [ 439.066286][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.078278][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.089934][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.100639][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.112546][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.123261][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.136838][T13252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.160484][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.175494][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.211959][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.244716][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.261425][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.272908][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.286590][T13252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.347903][ T5658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.393199][T13252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.407380][T13252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.416235][T13252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.429488][T13252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.540452][T13274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.544529][T12550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.560152][T12550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.591371][T12550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.600709][T12550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.602868][T13274] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.627104][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.634234][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.672022][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.679218][ T5647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.771881][ T5658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.799706][T13274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.941090][ T5658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.963265][T13274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.009053][T13274] veth0_vlan: entered promiscuous mode [ 440.021238][T13274] veth1_vlan: entered promiscuous mode [ 440.052622][T13274] veth0_macvtap: entered promiscuous mode [ 440.061818][T13274] veth1_macvtap: entered promiscuous mode [ 440.085252][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.096272][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.106132][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.116809][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.127904][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.140788][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.176684][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.194607][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.207229][T13274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.228190][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.240948][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.255572][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.270992][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.287755][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.308927][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.323779][T13274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.342020][T13274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.356120][T13274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.392671][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.399963][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.434210][ T5658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.462602][T13417] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 440.503507][T13417] team0: Device hsr_slave_0 failed to register rx_handler [ 440.557300][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.570455][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.583934][T13274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.595500][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.605148][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.608332][T13274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.620430][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 440.621710][T13274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.632877][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 440.637368][T13274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.900073][ T5658] bridge_slave_1: left allmulticast mode [ 440.908449][ T5658] bridge_slave_1: left promiscuous mode [ 440.914275][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.931892][ T5658] bridge_slave_0: left allmulticast mode [ 440.937865][ T5658] bridge_slave_0: left promiscuous mode [ 440.944109][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.257071][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.270952][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.285659][ T5658] bond0 (unregistering): Released all slaves [ 441.333907][ T5650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.364141][ T5650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.517019][ T5639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.525139][ T5639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.607900][T13423] chnl_net:caif_netlink_parms(): no params data found [ 441.689004][ T5658] hsr_slave_0: left promiscuous mode [ 441.697711][ T5658] hsr_slave_1: left promiscuous mode [ 441.703513][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.711739][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.719821][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.727701][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.749036][ T5658] veth1_macvtap: left promiscuous mode [ 441.754716][ T5658] veth0_macvtap: left promiscuous mode [ 441.760277][ T5658] veth1_vlan: left promiscuous mode [ 441.765658][ T5658] veth0_vlan: left promiscuous mode [ 442.146964][ T5658] team0 (unregistering): Port device team_slave_1 removed [ 442.185976][ T5658] team0 (unregistering): Port device team_slave_0 removed [ 442.562312][T13423] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.570104][T13423] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.577382][T13423] bridge_slave_0: entered allmulticast mode [ 442.584222][T13423] bridge_slave_0: entered promiscuous mode [ 442.593375][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.600652][T13423] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.608970][T13423] bridge_slave_1: entered allmulticast mode [ 442.616926][T13423] bridge_slave_1: entered promiscuous mode [ 442.658925][T13423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.679177][T13423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.704823][ T5220] Bluetooth: hci0: command tx timeout [ 442.750300][T13423] team0: Port device team_slave_0 added [ 442.771679][T13423] team0: Port device team_slave_1 added [ 442.800963][T13423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.808717][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.838884][T13423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.852191][T13423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.865898][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.892100][T13423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.941632][T13423] hsr_slave_0: entered promiscuous mode [ 442.960424][T13423] hsr_slave_1: entered promiscuous mode [ 443.209532][ T5658] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.353565][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.363512][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.372230][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.385006][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 443.395530][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 443.405095][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.439581][ T5658] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.577768][ T5658] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.740965][ T5658] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.882805][ T5658] bridge_slave_1: left allmulticast mode [ 443.888723][ T5658] bridge_slave_1: left promiscuous mode [ 443.896526][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.906013][ T5658] bridge_slave_0: left allmulticast mode [ 443.911655][ T5658] bridge_slave_0: left promiscuous mode [ 443.922413][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.234658][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.246470][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.258996][ T5658] bond0 (unregistering): Released all slaves [ 444.271281][T13456] chnl_net:caif_netlink_parms(): no params data found [ 444.411904][T13456] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.419799][T13456] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.427400][T13456] bridge_slave_0: entered allmulticast mode [ 444.434164][T13456] bridge_slave_0: entered promiscuous mode [ 444.451980][T13456] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.459792][T13456] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.467448][T13456] bridge_slave_1: entered allmulticast mode [ 444.474176][T13456] bridge_slave_1: entered promiscuous mode [ 444.535130][T13423] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.548277][T13456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.561025][T13456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.570569][T13423] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.603192][T13423] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.616366][ T5658] hsr_slave_0: left promiscuous mode [ 444.622152][ T5658] hsr_slave_1: left promiscuous mode [ 444.628452][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.636232][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.644025][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.652847][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.670869][ T5658] veth1_macvtap: left promiscuous mode [ 444.676808][ T5658] veth0_macvtap: left promiscuous mode [ 444.682492][ T5658] veth1_vlan: left promiscuous mode [ 444.688736][ T5658] veth0_vlan: left promiscuous mode [ 444.788386][ T5220] Bluetooth: hci0: command tx timeout [ 445.057227][ T5658] team0 (unregistering): Port device team_slave_1 removed [ 445.091815][ T5658] team0 (unregistering): Port device team_slave_0 removed [ 445.514588][ T5220] Bluetooth: hci2: command tx timeout [ 445.852644][ T5227] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.863674][ T5227] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.873011][ T5227] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.885530][ T5227] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.900192][ T5227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 445.907903][ T5227] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 446.159252][T13456] team0: Port device team_slave_0 added [ 446.175697][T13423] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 446.436448][T13456] team0: Port device team_slave_1 added [ 446.505460][T13456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.512435][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.543104][T13456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.579318][T13456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.595167][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.639358][T13456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.864847][ T5220] Bluetooth: hci0: command tx timeout [ 446.875299][T13456] hsr_slave_0: entered promiscuous mode [ 446.885099][T13456] hsr_slave_1: entered promiscuous mode [ 446.896432][T13456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.904145][T13456] Cannot create hsr debugfs directory [ 446.981550][T13517] netlink: 'syz.4.2027': attribute type 21 has an invalid length. [ 447.099886][T13520] netlink: 'syz.3.2029': attribute type 4 has an invalid length. [ 447.110889][T13520] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2029'. [ 447.365319][ T5658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.461606][T13490] chnl_net:caif_netlink_parms(): no params data found [ 447.538403][ T5658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.595191][ T5220] Bluetooth: hci2: command tx timeout [ 447.616056][T13423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.710682][ T5658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.813887][T13423] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.869794][ T5658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.950314][T10954] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.957647][T10954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.994874][ T5220] Bluetooth: hci3: command tx timeout [ 448.041263][T13490] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.059975][T13490] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.071712][T13490] bridge_slave_0: entered allmulticast mode [ 448.082075][T13490] bridge_slave_0: entered promiscuous mode [ 448.114012][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.121370][T10948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.168593][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.181904][T13490] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.209809][T13490] bridge_slave_1: entered allmulticast mode [ 448.227197][T13490] bridge_slave_1: entered promiscuous mode [ 448.350853][T13490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.412934][ T5658] bridge_slave_1: left allmulticast mode [ 448.419978][ T5658] bridge_slave_1: left promiscuous mode [ 448.425972][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.437046][T13544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2033'. [ 448.437629][ T5658] bridge_slave_0: left allmulticast mode [ 448.452235][ T5658] bridge_slave_0: left promiscuous mode [ 448.458193][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.821647][T13552] netlink: 'syz.3.2037': attribute type 1 has an invalid length. [ 448.835104][T13552] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2037'. [ 448.959175][ T5220] Bluetooth: hci0: command tx timeout [ 449.012130][ T5658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.029880][ T5658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.040336][ T5658] bond0 (unregistering): Released all slaves [ 449.055206][T13490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.099602][T13490] team0: Port device team_slave_0 added [ 449.148997][T13490] team0: Port device team_slave_1 added [ 449.274986][T13490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.282039][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.309270][T13490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.324526][T13490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.331504][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.359167][T13490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.494756][T13456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.507803][T13456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.531095][T13456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.550776][T13456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.572393][T13490] hsr_slave_0: entered promiscuous mode [ 449.590152][T13490] hsr_slave_1: entered promiscuous mode [ 449.599098][T13490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.611384][T13490] Cannot create hsr debugfs directory [ 449.665346][ T5220] Bluetooth: hci2: command tx timeout [ 449.702434][T13423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.707057][T13572] netlink: 180144 bytes leftover after parsing attributes in process `syz.3.2043'. [ 449.722540][T13572] openvswitch: netlink: Key type 41 is out of range max 32 [ 449.743540][T13572] netlink: 'syz.3.2043': attribute type 28 has an invalid length. [ 449.752074][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 449.801825][ T5658] hsr_slave_0: left promiscuous mode [ 449.813145][ T5658] hsr_slave_1: left promiscuous mode [ 449.823561][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.832374][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.843169][ T5658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.850757][ T5658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.870575][ T5658] veth1_macvtap: left promiscuous mode [ 449.876176][ T5658] veth0_macvtap: left promiscuous mode [ 449.882388][ T5658] veth1_vlan: left promiscuous mode [ 449.889057][ T5658] veth0_vlan: left promiscuous mode [ 450.069060][ T5220] Bluetooth: hci3: command tx timeout [ 450.387842][ T5658] team0 (unregistering): Port device team_slave_1 removed [ 450.446397][ T5658] team0 (unregistering): Port device team_slave_0 removed [ 451.593304][T13423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.629624][T13596] netlink: 'syz.4.2048': attribute type 2 has an invalid length. [ 451.657037][T13596] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2048'. [ 451.745772][ T5220] Bluetooth: hci2: command tx timeout [ 451.793536][T13456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.868046][T13456] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.913847][T13423] veth0_vlan: entered promiscuous mode [ 451.943997][T10949] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.951232][T10949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.981416][T13423] veth1_vlan: entered promiscuous mode [ 452.016224][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.023397][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.144889][ T5220] Bluetooth: hci3: command tx timeout [ 452.206412][T13490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 452.258545][T13490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 452.288102][T13490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 452.323025][T13490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 452.394680][T13423] veth0_macvtap: entered promiscuous mode [ 452.447988][T13423] veth1_macvtap: entered promiscuous mode [ 452.492807][T13608] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2053'. [ 452.564313][T13423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.590312][T13423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.610538][T13423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.634656][T13423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.649571][T13423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.689705][T13423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.712500][T13423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.722591][T13423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.734232][T13423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.750496][T13423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.769494][T13614] netlink: 'syz.3.2054': attribute type 29 has an invalid length. [ 452.778300][T13615] netlink: 'syz.3.2054': attribute type 29 has an invalid length. [ 452.799660][T13616] netlink: 'syz.3.2054': attribute type 29 has an invalid length. [ 452.811457][T13423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.825441][T13423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.834181][T13423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.843071][T13423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.887419][T13456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.963984][T13490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.061153][T13490] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.081485][T13456] veth0_vlan: entered promiscuous mode [ 453.099292][ T5666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.114256][ T5666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.128623][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.135824][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.183438][T10949] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.190665][T10949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.252458][T13620] netlink: 'syz.3.2056': attribute type 10 has an invalid length. [ 453.280670][T13620] batman_adv: batadv0: Adding interface: team0 [ 453.311213][T13620] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 453.323890][T13456] veth1_vlan: entered promiscuous mode [ 453.356716][T13621] netlink: 'syz.3.2056': attribute type 10 has an invalid length. [ 453.367660][T13621] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2056'. [ 453.381977][T13621] team0: entered promiscuous mode [ 453.391659][T13621] team_slave_0: entered promiscuous mode [ 453.401244][T13621] team_slave_1: entered promiscuous mode [ 453.412820][T13621] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.420310][T13621] batman_adv: batadv0: Interface activated: team0 [ 453.435884][T13621] batman_adv: batadv0: Interface deactivated: team0 [ 453.442650][T13621] batman_adv: batadv0: Removing interface: team0 [ 453.451026][T13621] bridge0: port 3(team0) entered blocking state [ 453.457746][T13621] bridge0: port 3(team0) entered disabled state [ 453.464178][T13621] team0: entered allmulticast mode [ 453.469812][T13621] team_slave_0: entered allmulticast mode [ 453.476247][T13621] team_slave_1: entered allmulticast mode [ 453.493573][T12550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.511813][T12550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.652441][T13456] veth0_macvtap: entered promiscuous mode [ 453.687318][T13456] veth1_macvtap: entered promiscuous mode [ 453.901140][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.933252][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.953862][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.974751][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.004754][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.025985][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.057694][T13456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.241701][ T5220] Bluetooth: hci3: command tx timeout [ 454.560731][ T5666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.647024][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.663863][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.674013][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.685412][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.696729][T13456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.707240][T13456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.725846][T13456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.762130][ T5666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.780104][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.811555][T13456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.823285][T13456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.832701][T13456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.847053][T13456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.898200][ T5666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.008504][ T5666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.066893][T13490] veth0_vlan: entered promiscuous mode [ 455.100200][T13490] veth1_vlan: entered promiscuous mode [ 455.121229][ T5658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.143665][ T5658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.197732][T12548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.222238][T13490] veth0_macvtap: entered promiscuous mode [ 455.232102][T12548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.258214][T13490] veth1_macvtap: entered promiscuous mode [ 455.291051][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.302699][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.319275][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.330022][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.347747][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.362588][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.372688][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.389709][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.401904][T13490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.439049][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.460752][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.492171][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.515204][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.550876][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.574516][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.614961][T13490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.641352][T13490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.666841][T13490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.839104][T13490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.868599][T13490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.890002][T13490] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.900582][T13490] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.900933][ T5227] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 455.922578][ T5227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 455.923287][ T5666] bridge_slave_1: left allmulticast mode [ 455.947203][ T5227] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 455.959676][ T5666] bridge_slave_1: left promiscuous mode [ 455.967918][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.010728][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.019018][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 456.028140][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 456.068207][ T5666] bridge_slave_0: left allmulticast mode [ 456.083453][ T5666] bridge_slave_0: left promiscuous mode [ 456.099571][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.697050][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.723636][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.740409][ T5666] bond0 (unregistering): Released all slaves [ 457.030169][T12550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.060012][T12550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.136715][ T5658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.156412][ T5658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.243304][ T5666] hsr_slave_0: left promiscuous mode [ 457.274009][ T5666] hsr_slave_1: left promiscuous mode [ 457.290304][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.304166][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.331789][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.344604][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.383731][ T5666] veth1_macvtap: left promiscuous mode [ 457.391813][ T5666] veth0_macvtap: left promiscuous mode [ 457.397603][ T5666] veth1_vlan: left promiscuous mode [ 457.402935][ T5666] veth0_vlan: left promiscuous mode [ 458.075351][ T5220] Bluetooth: hci0: command tx timeout [ 458.236844][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 458.252708][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 458.264771][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 458.288473][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 458.297202][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 458.306480][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 458.325649][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 458.433600][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 459.003825][T13660] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2063'. [ 459.293272][T13642] chnl_net:caif_netlink_parms(): no params data found [ 460.144840][ T5227] Bluetooth: hci0: command tx timeout [ 460.291934][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.299243][T13642] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.307408][T13642] bridge_slave_0: entered allmulticast mode [ 460.315807][T13642] bridge_slave_0: entered promiscuous mode [ 460.343303][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.350746][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.359218][T13642] bridge_slave_1: entered allmulticast mode [ 460.367348][T13642] bridge_slave_1: entered promiscuous mode [ 460.384482][ T5227] Bluetooth: hci2: command tx timeout [ 460.428965][T13642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.457562][T13642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.472033][T13652] chnl_net:caif_netlink_parms(): no params data found [ 460.552575][T13642] team0: Port device team_slave_0 added [ 460.568668][T13642] team0: Port device team_slave_1 added [ 460.666715][T13642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.673688][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.699926][T13642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.713947][T13642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.728187][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.764183][T13642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.920617][ T5666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.988934][T13652] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.010501][T13652] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.020788][T13652] bridge_slave_0: entered allmulticast mode [ 461.031812][T13652] bridge_slave_0: entered promiscuous mode [ 461.073270][T13642] hsr_slave_0: entered promiscuous mode [ 461.086611][T13642] hsr_slave_1: entered promiscuous mode [ 461.158955][ T5666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.197684][T13652] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.221350][T13652] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.236335][T13652] bridge_slave_1: entered allmulticast mode [ 461.255294][T13652] bridge_slave_1: entered promiscuous mode [ 461.419681][ T5666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.479329][T13652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.530153][ T5220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.542727][ T5220] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.551310][ T5220] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.560811][ T5220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.570921][T13681] netlink: 'syz.3.2066': attribute type 3 has an invalid length. [ 461.578950][T13681] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2066'. [ 461.595574][ T5220] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 461.609743][ T5220] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 461.649746][ T5666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.679831][T13652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.859373][T13652] team0: Port device team_slave_0 added [ 461.942664][T13652] team0: Port device team_slave_1 added [ 462.167127][ T5220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 462.180790][ T5220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 462.189556][ T5220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 462.204681][ T5220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 462.215352][ T5220] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 462.223929][ T5220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 462.231234][ T5222] Bluetooth: hci0: command tx timeout [ 462.232343][T13652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.292245][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.325322][T13652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.369102][T13652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.378282][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.404666][T13652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.464460][ T5227] Bluetooth: hci2: command tx timeout [ 462.531446][ T5666] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.613692][ T5666] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.790662][ T5666] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.911390][T13652] hsr_slave_0: entered promiscuous mode [ 462.942504][T13652] hsr_slave_1: entered promiscuous mode [ 462.954176][T13652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.968935][T13652] Cannot create hsr debugfs directory [ 463.016608][ T5666] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.270148][T13683] chnl_net:caif_netlink_parms(): no params data found [ 463.664605][ T5227] Bluetooth: hci3: command tx timeout [ 463.867542][T13695] chnl_net:caif_netlink_parms(): no params data found [ 463.997819][ T5666] bridge_slave_1: left allmulticast mode [ 464.013924][ T5666] bridge_slave_1: left promiscuous mode [ 464.025495][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.054316][ T5666] bridge_slave_0: left allmulticast mode [ 464.060207][ T5666] bridge_slave_0: left promiscuous mode [ 464.105071][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.126365][ T5666] bridge_slave_1: left allmulticast mode [ 464.132048][ T5666] bridge_slave_1: left promiscuous mode [ 464.148122][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.170295][ T5666] bridge_slave_0: left allmulticast mode [ 464.182015][ T5666] bridge_slave_0: left promiscuous mode [ 464.192574][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.305123][ T5227] Bluetooth: hci5: command tx timeout [ 464.306181][ T5220] Bluetooth: hci0: command tx timeout [ 464.547316][ T5220] Bluetooth: hci2: command tx timeout [ 465.155224][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.172891][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.195534][ T5666] bond0 (unregistering): Released all slaves [ 465.355433][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.371095][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.382868][ T5666] bond0 (unregistering): Released all slaves [ 465.433431][T13723] lo: entered allmulticast mode [ 465.464535][T13724] lo: entered promiscuous mode [ 465.469355][T13724] lo: left allmulticast mode [ 465.678240][T13729] sctp: [Deprecated]: syz.3.2077 (pid 13729) Use of int in max_burst socket option deprecated. [ 465.678240][T13729] Use struct sctp_assoc_value instead [ 465.695867][T13642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 465.711134][T13642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 465.744599][ T5220] Bluetooth: hci3: command tx timeout [ 465.789236][T13683] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.804962][T13683] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.814041][T13683] bridge_slave_0: entered allmulticast mode [ 465.830086][T13683] bridge_slave_0: entered promiscuous mode [ 465.889897][T13642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.003122][T13683] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.016791][T13683] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.036901][T13683] bridge_slave_1: entered allmulticast mode [ 466.054078][T13683] bridge_slave_1: entered promiscuous mode [ 466.097505][T13642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.213150][T13683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.332222][T13683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.375895][T13695] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.384262][T13695] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.391871][ T5227] Bluetooth: hci5: command tx timeout [ 466.398572][T13695] bridge_slave_0: entered allmulticast mode [ 466.407377][T13695] bridge_slave_0: entered promiscuous mode [ 466.458875][T13683] team0: Port device team_slave_0 added [ 466.467758][T13695] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.478241][T13695] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.486420][T13695] bridge_slave_1: entered allmulticast mode [ 466.493779][T13695] bridge_slave_1: entered promiscuous mode [ 466.556012][T13683] team0: Port device team_slave_1 added [ 466.619634][T13695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.631148][ T5227] Bluetooth: hci2: command tx timeout [ 466.661053][T13683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.692653][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.729870][T13683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.747424][T13695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.809007][T13683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.823339][T13683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.858059][T13683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.909188][T13695] team0: Port device team_slave_0 added [ 466.951653][ T5666] hsr_slave_0: left promiscuous mode [ 466.976191][ T5666] hsr_slave_1: left promiscuous mode [ 466.993451][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.033286][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.041693][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.051876][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.063481][ T5666] hsr_slave_0: left promiscuous mode [ 467.070116][ T5666] hsr_slave_1: left promiscuous mode [ 467.078309][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.086032][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.095431][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.103436][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.166743][ T5666] veth1_macvtap: left promiscuous mode [ 467.172311][ T5666] veth0_macvtap: left promiscuous mode [ 467.189077][ T5666] veth1_vlan: left promiscuous mode [ 467.202658][ T5666] veth0_vlan: left promiscuous mode [ 467.213204][ T5666] veth1_macvtap: left promiscuous mode [ 467.225104][ T5666] veth0_macvtap: left promiscuous mode [ 467.231010][ T5666] veth1_vlan: left promiscuous mode [ 467.246103][ T5666] veth0_vlan: left promiscuous mode [ 467.834475][ T5227] Bluetooth: hci3: command tx timeout [ 468.081913][ T5227] Bluetooth: hci4: command 0x0406 tx timeout [ 468.204511][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 468.250646][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 468.464555][ T5220] Bluetooth: hci5: command tx timeout [ 469.387528][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 469.432336][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 469.907891][ T5220] Bluetooth: hci3: command tx timeout [ 470.166545][T13695] team0: Port device team_slave_1 added [ 470.287931][T13695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.303156][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.330449][T13695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.400649][T13683] hsr_slave_0: entered promiscuous mode [ 470.422908][T13683] hsr_slave_1: entered promiscuous mode [ 470.436875][T13683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.456933][T13683] Cannot create hsr debugfs directory [ 470.520202][T13695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.544817][ T5220] Bluetooth: hci5: command tx timeout [ 470.552563][T13695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.637128][T13695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.888189][T13695] hsr_slave_0: entered promiscuous mode [ 470.934943][T13695] hsr_slave_1: entered promiscuous mode [ 470.954594][T13695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.962298][T13695] Cannot create hsr debugfs directory [ 471.016197][T13652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 471.098940][T13652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 471.144851][T13652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 471.240417][T13642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.256303][T13652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 471.566160][T13642] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.663259][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.670562][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.733936][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.741147][ T5647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.839650][T13642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.854448][T13642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.971991][T13695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.096001][T13652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.167556][T13695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.276415][T13695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.323318][T13652] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.377032][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.384168][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.397024][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.404178][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.436862][T13695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.475700][T13642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.485256][T13767] lo: left promiscuous mode [ 472.489804][T13767] lo: entered allmulticast mode [ 472.528241][T13768] lo: entered promiscuous mode [ 472.533048][T13768] lo: left allmulticast mode [ 472.750096][T13642] veth0_vlan: entered promiscuous mode [ 472.794232][T13683] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 472.843498][T13683] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 472.871966][T13642] veth1_vlan: entered promiscuous mode [ 472.887640][T13683] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 472.905538][T13683] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 473.077858][T13642] veth0_macvtap: entered promiscuous mode [ 473.078906][T13780] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 473.102858][T13652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.120432][T13780] netlink: 103528 bytes leftover after parsing attributes in process `syz.3.2089'. [ 473.124220][T13695] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.168562][T13642] veth1_macvtap: entered promiscuous mode [ 473.196990][T13695] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.209687][T13695] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.221968][T13695] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.311974][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.342693][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.353792][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.365054][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.376657][T13642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.437353][T13652] veth0_vlan: entered promiscuous mode [ 473.457203][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.469672][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.479704][T13642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.491426][T13642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.503166][T13642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.547589][T13642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.563754][T13642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.573601][T13642] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.591848][T13642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.609750][T13652] veth1_vlan: entered promiscuous mode [ 473.668000][T13683] [ 473.670371][T13683] ====================================================== [ 473.677390][T13683] WARNING: possible circular locking dependency detected [ 473.684404][T13683] 6.10.0-syzkaller-04559-g7d30b8aa4fc3 #0 Not tainted [ 473.691161][T13683] ------------------------------------------------------ [ 473.698169][T13683] syz-executor/13683 is trying to acquire lock: [ 473.704404][T13683] ffff8880b9338798 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 473.714787][T13683] [ 473.714787][T13683] but task is already holding lock: [ 473.722143][T13683] ffff8880b933e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 473.731600][T13683] [ 473.731600][T13683] which lock already depends on the new lock. [ 473.731600][T13683] [ 473.741983][T13683] [ 473.741983][T13683] the existing dependency chain (in reverse order) is: [ 473.750971][T13683] [ 473.750971][T13683] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 473.758246][T13683] lock_acquire+0x1ed/0x550 [ 473.763270][T13683] _raw_spin_lock_nested+0x31/0x40 [ 473.768910][T13683] raw_spin_rq_lock_nested+0x2a/0x140 [ 473.774797][T13683] task_fork_fair+0x61/0x1e0 [ 473.779898][T13683] sched_cgroup_fork+0x37c/0x410 [ 473.785423][T13683] copy_process+0x2217/0x3dc0 [ 473.790601][T13683] kernel_clone+0x226/0x8f0 [ 473.795612][T13683] user_mode_thread+0x132/0x1a0 [ 473.800968][T13683] rest_init+0x23/0x300 [ 473.805623][T13683] start_kernel+0x47a/0x500 [ 473.810626][T13683] x86_64_start_reservations+0x2a/0x30 [ 473.816587][T13683] x86_64_start_kernel+0x99/0xa0 [ 473.822113][T13683] common_startup_64+0x13e/0x147 [ 473.827551][T13683] [ 473.827551][T13683] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 473.834824][T13683] lock_acquire+0x1ed/0x550 [ 473.839827][T13683] _raw_spin_lock_irqsave+0xd5/0x120 [ 473.845614][T13683] try_to_wake_up+0xb0/0x1470 [ 473.850795][T13683] rcu_read_unlock_special+0x3db/0x550 [ 473.856750][T13683] __rcu_read_unlock+0xa1/0x110 [ 473.862452][T13683] __mmap_lock_do_trace_start_locking+0x1f2/0x620 [ 473.869372][T13683] vm_mmap_pgoff+0x37a/0x3d0 [ 473.874549][T13683] ksys_mmap_pgoff+0x4f1/0x720 [ 473.879813][T13683] do_syscall_64+0xf3/0x230 [ 473.884819][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.891216][T13683] [ 473.891216][T13683] -> #0 (lock#10){+.+.}-{2:2}: [ 473.898160][T13683] validate_chain+0x18e0/0x5900 [ 473.903539][T13683] __lock_acquire+0x1346/0x1fd0 [ 473.908899][T13683] lock_acquire+0x1ed/0x550 [ 473.913901][T13683] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 473.920993][T13683] stack_map_get_build_id_offset+0x9af/0x9d0 [ 473.927476][T13683] __bpf_get_stack+0x4ad/0x5a0 [ 473.932744][T13683] bpf_get_stack_raw_tp+0x1a3/0x240 [ 473.938443][T13683] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 473.944403][T13683] bpf_trace_run2+0x2ec/0x540 [ 473.949576][T13683] trace_tlb_flush+0x118/0x140 [ 473.954843][T13683] switch_mm_irqs_off+0x7cb/0xae0 [ 473.960376][T13683] __schedule+0x1079/0x4a60 [ 473.965379][T13683] schedule+0x14b/0x320 [ 473.970034][T13683] schedule_preempt_disabled+0x13/0x30 [ 473.975991][T13683] __mutex_lock+0x6a4/0xd70 [ 473.981009][T13683] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 473.986451][T13683] netlink_rcv_skb+0x1e3/0x430 [ 473.991717][T13683] netlink_unicast+0x7f0/0x990 [ 473.996982][T13683] netlink_sendmsg+0x8e4/0xcb0 [ 474.002245][T13683] __sock_sendmsg+0x221/0x270 [ 474.007424][T13683] __sys_sendto+0x3a4/0x4f0 [ 474.012428][T13683] __x64_sys_sendto+0xde/0x100 [ 474.017689][T13683] do_syscall_64+0xf3/0x230 [ 474.022699][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.029099][T13683] [ 474.029099][T13683] other info that might help us debug this: [ 474.029099][T13683] [ 474.039305][T13683] Chain exists of: [ 474.039305][T13683] lock#10 --> &p->pi_lock --> &rq->__lock [ 474.039305][T13683] [ 474.050961][T13683] Possible unsafe locking scenario: [ 474.050961][T13683] [ 474.058387][T13683] CPU0 CPU1 [ 474.063730][T13683] ---- ---- [ 474.069072][T13683] lock(&rq->__lock); [ 474.073128][T13683] lock(&p->pi_lock); [ 474.079696][T13683] lock(&rq->__lock); [ 474.086273][T13683] lock(lock#10); [ 474.089976][T13683] [ 474.089976][T13683] *** DEADLOCK *** [ 474.089976][T13683] [ 474.098185][T13683] 4 locks held by syz-executor/13683: [ 474.103530][T13683] #0: ffffffff8fa6b348 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 474.112913][T13683] #1: ffff8880b933e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 474.122805][T13683] #2: ffffffff8e735fe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 474.132174][T13683] #3: ffff88807cfe6098 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x237/0x9d0 [ 474.143024][T13683] [ 474.143024][T13683] stack backtrace: [ 474.148891][T13683] CPU: 1 PID: 13683 Comm: syz-executor Not tainted 6.10.0-syzkaller-04559-g7d30b8aa4fc3 #0 [ 474.158844][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 474.168880][T13683] Call Trace: [ 474.172140][T13683] [ 474.175055][T13683] dump_stack_lvl+0x241/0x360 [ 474.179737][T13683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.184922][T13683] ? print_circular_bug+0x130/0x1a0 [ 474.190109][T13683] check_noncircular+0x36a/0x4a0 [ 474.195033][T13683] ? __pfx_check_noncircular+0x10/0x10 [ 474.200480][T13683] ? lockdep_lock+0x123/0x2b0 [ 474.205150][T13683] validate_chain+0x18e0/0x5900 [ 474.209988][T13683] ? __lock_acquire+0x1346/0x1fd0 [ 474.215016][T13683] ? __pfx_validate_chain+0x10/0x10 [ 474.220217][T13683] ? validate_chain+0x11e/0x5900 [ 474.225151][T13683] ? mark_lock+0x9a/0x350 [ 474.229486][T13683] ? mark_lock+0x9a/0x350 [ 474.233906][T13683] __lock_acquire+0x1346/0x1fd0 [ 474.238754][T13683] lock_acquire+0x1ed/0x550 [ 474.243243][T13683] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 474.250002][T13683] ? __pfx_lock_acquire+0x10/0x10 [ 474.255013][T13683] ? validate_chain+0x11e/0x5900 [ 474.259933][T13683] ? __pfx_validate_chain+0x10/0x10 [ 474.265115][T13683] ? exc_int3+0xe/0x80 [ 474.269169][T13683] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 474.275918][T13683] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 474.282488][T13683] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 474.289236][T13683] stack_map_get_build_id_offset+0x9af/0x9d0 [ 474.295206][T13683] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 474.301697][T13683] __bpf_get_stack+0x4ad/0x5a0 [ 474.306446][T13683] ? __pfx___bpf_get_stack+0x10/0x10 [ 474.311716][T13683] ? __pfx___cant_migrate+0x10/0x10 [ 474.316894][T13683] bpf_get_stack_raw_tp+0x1a3/0x240 [ 474.322078][T13683] ? bpf_trace_run2+0x1fc/0x540 [ 474.326909][T13683] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 474.332345][T13683] bpf_trace_run2+0x2ec/0x540 [ 474.337010][T13683] ? __pfx_bpf_trace_run2+0x10/0x10 [ 474.342187][T13683] ? __perf_event_task_sched_out+0x2bb/0x28a0 [ 474.348234][T13683] trace_tlb_flush+0x118/0x140 [ 474.352989][T13683] switch_mm_irqs_off+0x7cb/0xae0 [ 474.358004][T13683] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 474.363536][T13683] __schedule+0x1079/0x4a60 [ 474.368030][T13683] ? __pfx___schedule+0x10/0x10 [ 474.372860][T13683] ? __pfx_lock_release+0x10/0x10 [ 474.377867][T13683] ? __mutex_trylock_common+0x92/0x2e0 [ 474.383309][T13683] ? schedule+0x90/0x320 [ 474.387536][T13683] schedule+0x14b/0x320 [ 474.391677][T13683] schedule_preempt_disabled+0x13/0x30 [ 474.397150][T13683] __mutex_lock+0x6a4/0xd70 [ 474.401639][T13683] ? __mutex_lock+0x527/0xd70 [ 474.406301][T13683] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 474.411399][T13683] ? __pfx___mutex_lock+0x10/0x10 [ 474.416410][T13683] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 474.421331][T13683] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 474.426425][T13683] ? __lock_acquire+0x1346/0x1fd0 [ 474.431431][T13683] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.436907][T13683] netlink_rcv_skb+0x1e3/0x430 [ 474.441743][T13683] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.447186][T13683] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.452463][T13683] ? netlink_deliver_tap+0x2e/0x1b0 [ 474.457639][T13683] netlink_unicast+0x7f0/0x990 [ 474.462387][T13683] ? __pfx_netlink_unicast+0x10/0x10 [ 474.467654][T13683] ? __virt_addr_valid+0x183/0x530 [ 474.472765][T13683] ? __check_object_size+0x49c/0x900 [ 474.478028][T13683] ? bpf_lsm_netlink_send+0x9/0x10 [ 474.483124][T13683] netlink_sendmsg+0x8e4/0xcb0 [ 474.487876][T13683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.493141][T13683] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.499107][T13683] ? aa_sock_msg_perm+0x91/0x160 [ 474.504027][T13683] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 474.509377][T13683] ? security_socket_sendmsg+0x87/0xb0 [ 474.514823][T13683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.520090][T13683] __sock_sendmsg+0x221/0x270 [ 474.524755][T13683] __sys_sendto+0x3a4/0x4f0 [ 474.529240][T13683] ? __pfx___sys_sendto+0x10/0x10 [ 474.534253][T13683] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.540216][T13683] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 474.546530][T13683] __x64_sys_sendto+0xde/0x100 [ 474.551278][T13683] do_syscall_64+0xf3/0x230 [ 474.555771][T13683] ? clear_bhb_loop+0x35/0x90 [ 474.560429][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.566306][T13683] RIP: 0033:0x7f56aad7902c [ 474.570699][T13683] Code: Unable to access opcode bytes at 0x7f56aad79002. [ 474.577693][T13683] RSP: 002b:00007fff21c43c00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 474.586087][T13683] RAX: ffffffffffffffda RBX: 00007f56aba34620 RCX: 00007f56aad7902c [ 474.594040][T13683] RDX: 000000000000002c RSI: 00007f56aba34670 RDI: 0000000000000003 [ 474.601992][T13683] RBP: 0000000000000000 R08: 00007fff21c43c54 R09: 000000000000000c [ 474.609945][T13683] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 474.617901][T13683] R13: 0000000000000000 R14: 00007f56aba34670 R15: 0000000000000000 [ 474.625862][T13683] [ 474.649822][T13683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.873488][ T5666] bridge_slave_1: left allmulticast mode [ 475.881262][ T5666] bridge_slave_1: left promiscuous mode [ 475.889028][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.899520][ T5666] bridge_slave_0: left allmulticast mode [ 475.906194][ T5666] bridge_slave_0: left promiscuous mode [ 475.911923][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.044708][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.057161][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.067849][ T5666] bond0 (unregistering): Released all slaves [ 476.266286][ T5666] hsr_slave_0: left promiscuous mode [ 476.272026][ T5666] hsr_slave_1: left promiscuous mode [ 476.279992][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.288188][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.461200][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 476.493434][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 477.191474][ T5666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.270897][ T5666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.353256][ T5666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.413188][ T5666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.738699][ T5666] bridge_slave_1: left allmulticast mode [ 477.750578][ T5666] bridge_slave_1: left promiscuous mode [ 477.756947][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.767426][ T5666] bridge_slave_0: left allmulticast mode [ 477.773083][ T5666] bridge_slave_0: left promiscuous mode [ 477.779276][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.790281][ T5666] bridge_slave_1: left allmulticast mode [ 477.796533][ T5666] bridge_slave_1: left promiscuous mode [ 477.802254][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.815609][ T5666] bridge_slave_0: left allmulticast mode [ 477.821282][ T5666] bridge_slave_0: left promiscuous mode [ 477.827297][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.839038][ T5666] bridge_slave_1: left allmulticast mode [ 477.844846][ T5666] bridge_slave_1: left promiscuous mode [ 477.850556][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.859049][ T5666] bridge_slave_0: left allmulticast mode [ 477.864747][ T5666] bridge_slave_0: left promiscuous mode [ 477.870439][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.280366][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.292376][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.302490][ T5666] bond0 (unregistering): Released all slaves [ 478.318669][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.332619][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.345819][ T5666] bond0 (unregistering): Released all slaves [ 478.362189][ T5666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.372538][ T5666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.388465][ T5666] bond0 (unregistering): Released all slaves [ 478.608498][ T5666] hsr_slave_0: left promiscuous mode [ 478.614498][ T5666] hsr_slave_1: left promiscuous mode [ 478.621970][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.629672][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.642145][ T5666] hsr_slave_0: left promiscuous mode [ 478.648102][ T5666] hsr_slave_1: left promiscuous mode [ 478.654106][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.663468][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.673275][ T5666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.682470][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.693263][ T5666] hsr_slave_0: left promiscuous mode [ 478.701493][ T5666] hsr_slave_1: left promiscuous mode [ 478.708440][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.717806][ T5666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.730045][ T5666] veth1_vlan: left promiscuous mode [ 478.737386][ T5666] veth0_vlan: left promiscuous mode [ 478.743226][ T5666] veth1_macvtap: left promiscuous mode [ 478.749030][ T5666] veth0_macvtap: left promiscuous mode [ 478.756295][ T5666] veth1_vlan: left promiscuous mode [ 478.761716][ T5666] veth0_vlan: left promiscuous mode [ 479.079687][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 479.113294][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 479.398809][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 479.436954][ T5666] team0 (unregistering): Port device team_slave_0 removed [ 479.753656][ T5666] team0 (unregistering): Port device team_slave_1 removed [ 479.778034][ T5666] team0 (unregistering): Port device team_slave_0 removed