last executing test programs: 1m44.585132129s ago: executing program 3 (id=1806): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 1m24.446121206s ago: executing program 3 (id=1806): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 1m2.552907015s ago: executing program 3 (id=1806): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 46.834350692s ago: executing program 3 (id=1806): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 30.886582472s ago: executing program 3 (id=1806): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 12.831253462s ago: executing program 3 (id=1806): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="6127e29a10", 0x5}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 5.635162505s ago: executing program 1 (id=2645): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {0x0}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/88, 0x58}], 0xb}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 5.041845979s ago: executing program 1 (id=2653): socket$kcm(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002600), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x42) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x14130}], 0x1}, 0x0) 4.024239859s ago: executing program 1 (id=2658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"/1265], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff00800", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 11) 3.477663766s ago: executing program 1 (id=2661): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x21, 0x0, &(0x7f0000000600)="a8ed5f10da075812e82158443df6db9a306e54157382964aa44c788c5f0282ceb0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[@ANYBLOB='a'], 0x6a) 3.020197341s ago: executing program 1 (id=2664): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/144, 0x90}], 0x5, &(0x7f00000007c0)=""/80, 0x50}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000798af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x0, 0x1a, 0x0, 0xa}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmsg(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)=@x25={0x9, @remote}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000001300)=""/4096, 0x1000}, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.797059648s ago: executing program 2 (id=2665): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000400)=[{}, {}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000080)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001040)={&(0x7f0000000d00)=@abs={0x1}, 0x6e, 0x0}, 0x20008040) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 2.553481784s ago: executing program 1 (id=2668): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x1}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f", 0x2b}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0506617, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000009500000000000000197d6abae085097251947446d6a4092ae00103bde7eea13d5bb7380af8990a61509839a32125c3dee05ab4fd9116a25b0af90abeac9912777cabf0961a391534ea208ffe76612b12e4d17ce2366470ce4c94f032b48991814de2628b0300000059fe274eee2c6f4ecfc764c0e80f2aa5eacf7c649a9d1e39fdab62388dce989ccef9ae3122d51737d1c51a076f012e5be297591548104cba7d10e06efbf3"], &(0x7f0000001900)='syzkaller\x00', 0x578, 0x98, &(0x7f0000001940)=""/152, 0x41000, 0x0, '\x00', 0x0, 0x2e, r4, 0x8, &(0x7f0000001a00)={0x7}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0x10, 0x9}, 0x10, 0x8eee, r0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {0x0}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) 2.377596787s ago: executing program 2 (id=2669): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, 0x0}, 0x20) socket$kcm(0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095000000000000000700"], &(0x7f0000000000)='GPL\x00', 0x8, 0xed, &(0x7f00000006c0)=""/237}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000200000500000400000000000100000000000000000000000002"], 0x0, 0x3e, 0x0, 0xa}, 0x20) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x1000, 0x7575, 0x0, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0x23, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x20}, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4}, 0x10) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x2c00) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008130000b70300000000000085000000960000009aab3c9a96ed7d292b37e5ffbbfdc9b01b2191f6da882fc6044651181e847482a00eb3caba18d13d14d76907eabea3edfadd53895292efaa47df7408a0e1c39734e11ceef8acd1572116"], 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r5, @ANYRESHEX=r2, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x90) socket$kcm(0xa, 0x6, 0x0) 2.314753334s ago: executing program 4 (id=2670): perf_event_open(&(0x7f0000000a00)={0x1, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.196899867s ago: executing program 0 (id=2671): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = openat$cgroup_int(r1, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x27) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000710000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.996377225s ago: executing program 4 (id=2673): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 1.995451636s ago: executing program 2 (id=2674): socket$kcm(0x10, 0x0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086604, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x1f, &(0x7f0000000380), 0x98) recvmsg$kcm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000006c0)=""/223, 0xdf}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f0000000400)=""/62, 0x3e}], 0x3}, 0x2000) 1.886737857s ago: executing program 4 (id=2675): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x1e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="076370c549bec520006370750805"], 0x17) 1.872400509s ago: executing program 0 (id=2676): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x35, 0x3, 0x3}, {}, {}, {}, {0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x2, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x2, 0x1, 0x0, 0x8, 0x5}, @jmp={0x5, 0x1, 0x7, 0xb, 0x6, 0x20, 0x10}, @call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000480)='syzkaller\x00', 0x80000001, 0x1000, &(0x7f0000001240)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0xc, 0x2, 0x8001}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000c80), &(0x7f0000001080)=[{0x4, 0x5, 0x5, 0xb}], 0x10, 0x3f}, 0x90) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000020d91679ab6a43f4294e318800bfa100000000000007010000f8ffffffb7020000da950000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0xa, 0x0, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.677441325s ago: executing program 2 (id=2677): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/88, 0x58}], 0xa}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 1.432543299s ago: executing program 4 (id=2678): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/144, 0x90}], 0x5, &(0x7f00000007c0)=""/80, 0x50}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000798af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x0, 0x1a, 0x0, 0xa}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmsg(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)=@x25={0x9, @remote}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000001300)=""/4096, 0x1000}, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 893.980556ms ago: executing program 2 (id=2679): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000400)=[{}, {}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000080)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x7, 0x12) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001040)={&(0x7f0000000d00)=@abs={0x1}, 0x6e, 0x0}, 0x20008040) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 709.269649ms ago: executing program 4 (id=2680): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/144, 0x90}], 0x5, &(0x7f00000007c0)=""/80, 0x50}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000798af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x0, 0x1a, 0x0, 0xa}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmsg(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)=@x25={0x9, @remote}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000001300)=""/4096, 0x1000}, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 676.782372ms ago: executing program 0 (id=2681): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044942, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x0, 0x2, 0x6, 0x38}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 340.772906ms ago: executing program 2 (id=2682): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, 0xffffffffffffffff, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000}, @alu={0x4, 0x1, 0x8, 0x8, 0x0, 0x50}, @func], &(0x7f0000000280)='GPL\x00', 0x8, 0x18, &(0x7f0000000400)=""/24, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0xd, 0x7, 0x60}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='ext4_es_lookup_extent_enter\x00', r4}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000a00)={0x1, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb2321, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 277.188097ms ago: executing program 0 (id=2683): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7f}, 0x10}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) 224.178437ms ago: executing program 4 (id=2684): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000240), 0x20000000}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff1f, &(0x7f0000000080), 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000000000186800000c0000000000000003000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000f8ffffffbfa403000000000000000000f0ffffffb70200000800000018230000e8fa3d9167103e4623a26e0413b3a0797e004e1907cc2142594bff0006757a52db82d9eeab4c5009cfb92416208e447466e3e1b32c833a1876249b96e5e1dc5c11ff7c2fb954cb34f5c39ff3d9bc52ecddfdc200003bbfcac46809e4c7f8710c41fdddc33169b8f9", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7050000080000008500"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xd, 0x3a, 0xfffffff8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1b, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff87}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x1, 0x3, 0x2, 0x3, 0x6}, @jmp={0x5, 0x0, 0xd, 0xa, 0x7, 0x50, 0xffffffffffffffff}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000000cc0)=""/4088, 0x0, 0x28, '\x00', 0x0, 0x0, r3}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 137.202189ms ago: executing program 0 (id=2685): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ENABLE_STATS(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"/1265], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff00800", 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=2686): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x100) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000000)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x9c9\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xdf\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]WKC\xd8,%\xc6\x8d\xca+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev}}}], 0x20}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/38}, {&(0x7f0000000040)=""/18}], 0x20, 0x0, 0xfffffffffffffce1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xb3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x8, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$sock(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000680)="490454cc5bb6fff252cba0a2cb8d8779458274ba739d86b71e76849c92d7deb9f4afe04705b0e0ae29c2706048d6a26aedd58a0746daa3544be619bb33393c7f98b4efe93fecdf136b0d385f0b6bb5f2cc1650ea270495317b7002bd6741a071c17aa96e1324d48e84f2101e4dbace9a69af2555bd1934f12003ca9a1c7b65acda4bd19183ab05b711ab26b5dfe219e3be13c576d709bc005c98414e70dd916f9ca99e9e7b7900210e75eb587b", 0xad}, {&(0x7f00000003c0)="61376c4626295aaea4f4266b00c80f2d2491208378e493fb82e112e2ee9344", 0x1f}, {&(0x7f0000000940)}], 0x4}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) kernel console output (not intermixed with test programs): 0 length: 15 > 1 [ 417.283175][ T54] Bluetooth: hci8: hardware error 0x00 [ 417.674254][ T5112] Bluetooth: hci0: command tx timeout [ 418.531966][T12290] chnl_net:caif_netlink_parms(): no params data found [ 418.754199][T11752] hsr_slave_0: left promiscuous mode [ 418.778831][T12377] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.2058'. [ 418.827592][T11752] hsr_slave_1: left promiscuous mode [ 418.883875][T11752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.904143][T11752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.923703][T11752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.941698][T11752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.021513][T11752] veth1_macvtap: left promiscuous mode [ 419.046899][T11752] veth0_macvtap: left promiscuous mode [ 419.061271][T11752] veth1_vlan: left promiscuous mode [ 419.072969][T11752] veth0_vlan: left promiscuous mode [ 419.355183][ T54] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 419.757977][ T54] Bluetooth: hci0: command tx timeout [ 420.795709][T11752] team0 (unregistering): Port device team_slave_1 removed [ 420.874940][T11752] team0 (unregistering): Port device team_slave_0 removed [ 421.721319][T12381] syzkaller0: entered allmulticast mode [ 421.834659][ T54] Bluetooth: hci0: command tx timeout [ 422.117553][T12414] FAULT_INJECTION: forcing a failure. [ 422.117553][T12414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.131124][T12414] CPU: 0 PID: 12414 Comm: syz.4.2065 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 422.142017][T12414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 422.152108][T12414] Call Trace: [ 422.155414][T12414] [ 422.158366][T12414] dump_stack_lvl+0x241/0x360 [ 422.163081][T12414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.168311][T12414] ? __pfx__printk+0x10/0x10 [ 422.172962][T12414] ? snprintf+0xda/0x120 [ 422.177247][T12414] should_fail_ex+0x3b0/0x4e0 [ 422.181972][T12414] _copy_to_user+0x2f/0xb0 [ 422.186430][T12414] simple_read_from_buffer+0xca/0x150 [ 422.191854][T12414] proc_fail_nth_read+0x1e9/0x250 [ 422.196907][T12414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.202462][T12414] ? rw_verify_area+0x520/0x6b0 [ 422.207317][T12414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.212870][T12414] vfs_read+0x204/0xbc0 [ 422.217032][T12414] ? __pfx_lock_release+0x10/0x10 [ 422.222087][T12414] ? __pfx_vfs_read+0x10/0x10 [ 422.226881][T12414] ? __fget_files+0x29/0x470 [ 422.231490][T12414] ? __fget_files+0x3f6/0x470 [ 422.236193][T12414] ksys_read+0x1a0/0x2c0 [ 422.240457][T12414] ? __pfx_ksys_read+0x10/0x10 [ 422.245231][T12414] ? rcu_is_watching+0x15/0xb0 [ 422.250010][T12414] ? trace_sys_enter+0x1f/0xd0 [ 422.254782][T12414] do_syscall_64+0xf3/0x230 [ 422.259311][T12414] ? clear_bhb_loop+0x35/0x90 [ 422.264025][T12414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.269937][T12414] RIP: 0033:0x7fcf42b749fc [ 422.274362][T12414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 422.293979][T12414] RSP: 002b:00007fcf43949040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.302405][T12414] RAX: ffffffffffffffda RBX: 00007fcf42d05f60 RCX: 00007fcf42b749fc [ 422.310376][T12414] RDX: 000000000000000f RSI: 00007fcf439490b0 RDI: 0000000000000005 [ 422.318346][T12414] RBP: 00007fcf439490a0 R08: 0000000000000000 R09: 0000000000000000 [ 422.326316][T12414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.334285][T12414] R13: 000000000000000b R14: 00007fcf42d05f60 R15: 00007ffd819a5178 [ 422.342275][T12414] [ 422.400698][T12408] validate_nla: 9 callbacks suppressed [ 422.400722][T12408] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 422.433908][T12408] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2063'. [ 422.462828][T12408] bond0: entered promiscuous mode [ 422.478595][T12408] bond_slave_0: entered promiscuous mode [ 422.509491][T12408] bond_slave_1: entered promiscuous mode [ 422.537609][T12408] bridge0: port 3(bond0) entered blocking state [ 422.558334][T12408] bridge0: port 3(bond0) entered disabled state [ 422.565748][T12408] bond0: entered allmulticast mode [ 422.570918][T12408] bond_slave_0: entered allmulticast mode [ 422.583685][T12408] bond_slave_1: entered allmulticast mode [ 422.595476][T12408] bridge0: port 3(bond0) entered blocking state [ 422.601978][T12408] bridge0: port 3(bond0) entered forwarding state [ 422.620348][T12290] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.635686][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.649948][T12290] bridge_slave_0: entered allmulticast mode [ 422.664716][T12290] bridge_slave_0: entered promiscuous mode [ 422.683352][T12290] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.707821][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.724854][T12290] bridge_slave_1: entered allmulticast mode [ 422.756812][T12290] bridge_slave_1: entered promiscuous mode [ 423.065968][T12290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.106096][T12437] netlink: 'syz.2.2071': attribute type 3 has an invalid length. [ 423.107605][T12290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.140761][T12437] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 423.152674][T12441] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.2073'. [ 423.194853][T12437] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.2071'. [ 423.291519][T12290] team0: Port device team_slave_0 added [ 423.345318][T12290] team0: Port device team_slave_1 added [ 423.473321][T12460] netlink: 'syz.4.2077': attribute type 29 has an invalid length. [ 423.492533][T12290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.511604][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.618234][T12290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.668984][T12460] netlink: 'syz.4.2077': attribute type 29 has an invalid length. [ 423.706084][T12290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.762151][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.850299][T12290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.874881][T12462] netlink: 'syz.4.2077': attribute type 29 has an invalid length. [ 423.914162][ T5112] Bluetooth: hci0: command tx timeout [ 423.937620][T12465] netlink: 'syz.4.2077': attribute type 29 has an invalid length. [ 424.207083][T12478] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2081'. [ 424.226504][T12290] hsr_slave_0: entered promiscuous mode [ 424.233563][T12290] hsr_slave_1: entered promiscuous mode [ 424.242170][T12477] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2081'. [ 424.378684][T12486] netlink: 'syz.4.2084': attribute type 29 has an invalid length. [ 424.443990][T12486] netlink: 'syz.4.2084': attribute type 10 has an invalid length. [ 424.466261][T12489] netlink: 'syz.0.2085': attribute type 3 has an invalid length. [ 424.475665][T12489] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2085'. [ 424.516402][T12486] team0: Port device vlan0 added [ 424.540251][T12496] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2084'. [ 424.579112][T12491] macvtap0: entered allmulticast mode [ 424.585403][T12491] veth0_macvtap: entered allmulticast mode [ 424.592760][T12491] macvtap0: refused to change device tx_queue_len [ 425.101388][ T5112] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 425.102633][ T54] Bluetooth: hci1: hardware error 0x00 [ 425.895844][T12545] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.2100'. [ 426.178391][T12551] macvtap0: refused to change device tx_queue_len [ 426.267191][T12290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 426.316609][T12290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 426.388487][T12290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 426.438940][T12290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 426.848586][ T5112] Bluetooth: hci1: unexpected event 0x10 length: 15 > 1 [ 427.124673][T12567] syzkaller0: entered promiscuous mode [ 427.168588][T12567] syzkaller0: entered allmulticast mode [ 427.194294][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 427.200791][ T54] Bluetooth: hci1: hardware error 0x00 [ 427.331272][T12290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.630079][T12597] validate_nla: 6 callbacks suppressed [ 428.630119][T12597] netlink: 'syz.0.2112': attribute type 3 has an invalid length. [ 428.664048][T12597] netlink: 'syz.0.2112': attribute type 1 has an invalid length. [ 428.691093][T12597] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2112'. [ 429.276807][ T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 430.116452][T12608] syzkaller0: entered allmulticast mode [ 430.299453][T12290] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.407670][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.415007][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.478128][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.485451][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.659325][T12290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.762645][ T54] Bluetooth: hci7: unexpected event 0x10 length: 15 > 1 [ 430.765129][ T54] Bluetooth: hci7: hardware error 0x00 [ 430.975869][T12290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.993400][T12645] netlink: 'syz.1.2121': attribute type 3 has an invalid length. [ 431.012426][T12645] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2121'. [ 431.197427][T12290] veth0_vlan: entered promiscuous mode [ 431.235845][T12290] veth1_vlan: entered promiscuous mode [ 431.337807][T12290] veth0_macvtap: entered promiscuous mode [ 431.351175][T12290] veth1_macvtap: entered promiscuous mode [ 431.393210][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.410996][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.411788][T12658] netlink: 'syz.2.2125': attribute type 3 has an invalid length. [ 431.421923][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.441771][T12658] netlink: 'syz.2.2125': attribute type 1 has an invalid length. [ 431.457359][T12658] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.2125'. [ 431.471161][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.489186][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.508776][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.522654][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.542950][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.568456][T12290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.601410][T12660] netlink: 'syz.0.2126': attribute type 2 has an invalid length. [ 431.663030][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.686202][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.696552][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.711858][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.721798][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.732309][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.742684][T12290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.756619][T12290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.771496][T12290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.791556][T12637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.821005][T12290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.851190][T12290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.874226][T12290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.882985][T12290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.446598][T12688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.571338][T12682] syzkaller0: entered allmulticast mode [ 432.864626][ T5112] Bluetooth: hci6: unexpected event 0x10 length: 15 > 1 [ 432.865926][ T5100] Bluetooth: hci6: hardware error 0x00 [ 432.874949][ T54] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 432.897072][T11752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.920426][T11752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.973437][T11760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.981406][T11760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.231951][T12710] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 433.284335][T12710] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2136'. [ 433.316914][T12713] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.323964][T12713] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.354824][T12710] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 433.472728][T12724] netlink: 'syz.2.2138': attribute type 3 has an invalid length. [ 433.493496][T12724] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 433.517920][T12724] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.2138'. [ 433.718034][T12742] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2143'. [ 433.737610][T12742] netlink: zone id is out of range [ 433.742885][T12742] netlink: zone id is out of range [ 433.785680][T12742] netlink: zone id is out of range [ 433.804062][T12742] netlink: zone id is out of range [ 433.809381][T12742] netlink: zone id is out of range [ 433.824043][T12742] netlink: zone id is out of range [ 433.836539][T12742] netlink: zone id is out of range [ 434.126401][T12755] FAULT_INJECTION: forcing a failure. [ 434.126401][T12755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.177599][T12755] CPU: 1 PID: 12755 Comm: syz.0.2148 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 434.187554][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 434.197630][T12755] Call Trace: [ 434.200926][T12755] [ 434.203872][T12755] dump_stack_lvl+0x241/0x360 [ 434.208575][T12755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.213795][T12755] ? __pfx__printk+0x10/0x10 [ 434.218408][T12755] ? __pfx_lock_release+0x10/0x10 [ 434.223466][T12755] should_fail_ex+0x3b0/0x4e0 [ 434.228176][T12755] _copy_from_iter+0x1f6/0x1960 [ 434.233060][T12755] ? __virt_addr_valid+0x183/0x530 [ 434.238194][T12755] ? skb_set_owner_w+0x238/0x3e0 [ 434.243166][T12755] ? __pfx__copy_from_iter+0x10/0x10 [ 434.248643][T12755] ? __pfx__copy_from_iter+0x10/0x10 [ 434.253956][T12755] ? page_copy_sane+0x154/0x260 [ 434.260391][T12755] copy_page_from_iter+0x7a/0x100 [ 434.265449][T12755] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 434.271300][T12755] tun_get_user+0xec3/0x4720 [ 434.275932][T12755] ? __lock_acquire+0x1346/0x1fd0 [ 434.280991][T12755] ? __pfx_tun_get_user+0x10/0x10 [ 434.286054][T12755] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 434.291536][T12755] ? tun_get+0x1e/0x2f0 [ 434.295716][T12755] ? __pfx_lock_release+0x10/0x10 [ 434.300947][T12755] ? tun_get+0x1e/0x2f0 [ 434.305119][T12755] ? tun_get+0x27d/0x2f0 [ 434.309390][T12755] tun_chr_write_iter+0x113/0x1f0 [ 434.314438][T12755] vfs_write+0xa72/0xc90 [ 434.318709][T12755] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 434.324275][T12755] ? __pfx_vfs_write+0x10/0x10 [ 434.329513][T12755] ksys_write+0x1a0/0x2c0 [ 434.333870][T12755] ? __pfx_ksys_write+0x10/0x10 [ 434.338761][T12755] ? do_syscall_64+0x100/0x230 [ 434.343551][T12755] ? do_syscall_64+0xb6/0x230 [ 434.348249][T12755] do_syscall_64+0xf3/0x230 [ 434.352790][T12755] ? clear_bhb_loop+0x35/0x90 [ 434.357489][T12755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.363400][T12755] RIP: 0033:0x7fcadf375f19 [ 434.367833][T12755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.387457][T12755] RSP: 002b:00007fcae00bb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.395897][T12755] RAX: ffffffffffffffda RBX: 00007fcadf505f60 RCX: 00007fcadf375f19 [ 434.403889][T12755] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 434.411875][T12755] RBP: 00007fcae00bb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 434.419871][T12755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.427853][T12755] R13: 000000000000000b R14: 00007fcadf505f60 R15: 00007fffab4e4658 [ 434.435849][T12755] [ 434.669821][T11758] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.952766][T11758] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.039275][ T5100] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 435.056644][T11758] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.167333][T12795] FAULT_INJECTION: forcing a failure. [ 435.167333][T12795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.221756][T12795] CPU: 0 PID: 12795 Comm: syz.0.2150 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 435.231708][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 435.241792][T12795] Call Trace: [ 435.245178][T12795] [ 435.248113][T12795] dump_stack_lvl+0x241/0x360 [ 435.252804][T12795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.258013][T12795] ? __pfx__printk+0x10/0x10 [ 435.262615][T12795] ? __pfx_lock_release+0x10/0x10 [ 435.267743][T12795] should_fail_ex+0x3b0/0x4e0 [ 435.272437][T12795] _copy_from_iter+0x1f6/0x1960 [ 435.277307][T12795] ? __virt_addr_valid+0x183/0x530 [ 435.282442][T12795] ? skb_set_owner_w+0x238/0x3e0 [ 435.287403][T12795] ? __pfx__copy_from_iter+0x10/0x10 [ 435.292711][T12795] ? __pfx__copy_from_iter+0x10/0x10 [ 435.298019][T12795] ? page_copy_sane+0x154/0x260 [ 435.302885][T12795] copy_page_from_iter+0x7a/0x100 [ 435.307923][T12795] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 435.313846][T12795] tun_get_user+0xec3/0x4720 [ 435.318464][T12795] ? __lock_acquire+0x1346/0x1fd0 [ 435.323503][T12795] ? __pfx_tun_get_user+0x10/0x10 [ 435.328554][T12795] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 435.334109][T12795] ? tun_get+0x1e/0x2f0 [ 435.338286][T12795] ? __pfx_lock_release+0x10/0x10 [ 435.343328][T12795] ? tun_get+0x1e/0x2f0 [ 435.347575][T12795] ? tun_get+0x27d/0x2f0 [ 435.352087][T12795] tun_chr_write_iter+0x113/0x1f0 [ 435.357129][T12795] vfs_write+0xa72/0xc90 [ 435.361388][T12795] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 435.366939][T12795] ? __pfx_vfs_write+0x10/0x10 [ 435.371731][T12795] ksys_write+0x1a0/0x2c0 [ 435.376073][T12795] ? __pfx_ksys_write+0x10/0x10 [ 435.380931][T12795] ? do_syscall_64+0x100/0x230 [ 435.385706][T12795] ? do_syscall_64+0xb6/0x230 [ 435.390395][T12795] do_syscall_64+0xf3/0x230 [ 435.394908][T12795] ? clear_bhb_loop+0x35/0x90 [ 435.399595][T12795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.405493][T12795] RIP: 0033:0x7fcadf375f19 [ 435.410868][T12795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.430474][T12795] RSP: 002b:00007fcae00bb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.438893][T12795] RAX: ffffffffffffffda RBX: 00007fcadf505f60 RCX: 00007fcadf375f19 [ 435.446880][T12795] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 435.454853][T12795] RBP: 00007fcae00bb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 435.462828][T12795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.470798][T12795] R13: 000000000000000b R14: 00007fcadf505f60 R15: 00007fffab4e4658 [ 435.478792][T12795] [ 435.515872][T12794] netlink: 'syz.4.2153': attribute type 3 has an invalid length. [ 435.526880][T12794] netlink: 'syz.4.2153': attribute type 1 has an invalid length. [ 435.535248][T12794] netlink: 130160 bytes leftover after parsing attributes in process `syz.4.2153'. [ 435.537020][T11758] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.824767][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.846125][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.856044][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.874541][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.884566][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 435.892125][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.096754][T11758] bridge_slave_1: left allmulticast mode [ 436.124211][T11758] bridge_slave_1: left promiscuous mode [ 436.160990][T11758] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.287654][T11758] bridge_slave_0: left allmulticast mode [ 436.309452][T11758] bridge_slave_0: left promiscuous mode [ 436.336336][T11758] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.380096][T12827] netlink: 'syz.2.2160': attribute type 3 has an invalid length. [ 436.425792][T12827] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2160'. [ 437.005145][T12818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.452905][T11758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.469612][T11758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.486802][T11758] bond0 (unregistering): Released all slaves [ 437.905049][T12854] netlink: 'syz.1.2166': attribute type 3 has an invalid length. [ 437.929580][T12854] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2166'. [ 437.995901][ T5100] Bluetooth: hci0: command tx timeout [ 438.659500][T11758] hsr_slave_0: left promiscuous mode [ 438.697175][T11758] hsr_slave_1: left promiscuous mode [ 438.756949][T11758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.777306][T11758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.797861][T11758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.806545][T11758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.865492][T11758] veth1_macvtap: left promiscuous mode [ 438.874939][T12893] syz.1.2172: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 438.885310][T11758] veth0_macvtap: left promiscuous mode [ 438.902584][T11758] veth1_vlan: left promiscuous mode [ 438.915304][T11758] veth0_vlan: left promiscuous mode [ 438.949719][T12893] CPU: 1 PID: 12893 Comm: syz.1.2172 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 438.959611][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 438.969730][T12893] Call Trace: [ 438.973065][T12893] [ 438.976049][T12893] dump_stack_lvl+0x241/0x360 [ 438.980804][T12893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.986074][T12893] ? __pfx__printk+0x10/0x10 [ 438.990752][T12893] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 438.997234][T12893] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 439.003819][T12893] warn_alloc+0x278/0x410 [ 439.008211][T12893] ? stack_depot_save_flags+0x29/0x830 [ 439.013732][T12893] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 439.019866][T12893] ? __pfx_warn_alloc+0x10/0x10 [ 439.024789][T12893] ? kasan_save_track+0x3f/0x80 [ 439.030227][T12893] ? __kasan_kmalloc+0x98/0xb0 [ 439.035065][T12893] ? xsk_setsockopt+0x598/0x950 [ 439.039987][T12893] ? do_sock_setsockopt+0x3af/0x720 [ 439.045245][T12893] ? __sys_setsockopt+0x1ae/0x250 [ 439.050327][T12893] ? __x64_sys_setsockopt+0xb5/0xd0 [ 439.055600][T12893] ? do_syscall_64+0xf3/0x230 [ 439.060329][T12893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.066524][T12893] __vmalloc_node_range_noprof+0x130/0x1460 [ 439.072608][T12893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 439.079020][T12893] ? __kasan_kmalloc+0x98/0xb0 [ 439.083844][T12893] ? xskq_create+0x54/0x170 [ 439.088403][T12893] vmalloc_user_noprof+0x74/0x80 [ 439.093376][T12893] ? xskq_create+0xb6/0x170 [ 439.097898][T12893] xskq_create+0xb6/0x170 [ 439.102253][T12893] xsk_init_queue+0xa1/0x100 [ 439.106882][T12893] xsk_setsockopt+0x598/0x950 [ 439.111600][T12893] ? __pfx_xsk_setsockopt+0x10/0x10 [ 439.116833][T12893] ? __pfx_lock_acquire+0x10/0x10 [ 439.121877][T12893] ? aa_sock_opt_perm+0x79/0x120 [ 439.126852][T12893] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 439.132414][T12893] ? security_socket_setsockopt+0x87/0xb0 [ 439.138156][T12893] ? __pfx_xsk_setsockopt+0x10/0x10 [ 439.143374][T12893] do_sock_setsockopt+0x3af/0x720 [ 439.148442][T12893] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 439.154014][T12893] ? __fget_files+0x29/0x470 [ 439.158652][T12893] ? __fget_files+0x3f6/0x470 [ 439.163385][T12893] __sys_setsockopt+0x1ae/0x250 [ 439.168283][T12893] __x64_sys_setsockopt+0xb5/0xd0 [ 439.173342][T12893] do_syscall_64+0xf3/0x230 [ 439.177880][T12893] ? clear_bhb_loop+0x35/0x90 [ 439.182607][T12893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.188531][T12893] RIP: 0033:0x7f5779775f19 [ 439.192974][T12893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.212607][T12893] RSP: 002b:00007f577a52f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 439.221050][T12893] RAX: ffffffffffffffda RBX: 00007f5779905f60 RCX: 00007f5779775f19 [ 439.229035][T12893] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 439.237020][T12893] RBP: 00007f57797e4e68 R08: 0000000000000004 R09: 0000000000000000 [ 439.245006][T12893] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 439.252989][T12893] R13: 000000000000000b R14: 00007f5779905f60 R15: 00007ffe981fd988 [ 439.261050][T12893] [ 439.304339][T12893] Mem-Info: [ 439.307537][T12893] active_anon:6524 inactive_anon:0 isolated_anon:0 [ 439.307537][T12893] active_file:21558 inactive_file:38317 isolated_file:0 [ 439.307537][T12893] unevictable:768 dirty:230 writeback:0 [ 439.307537][T12893] slab_reclaimable:8972 slab_unreclaimable:97485 [ 439.307537][T12893] mapped:14224 shmem:1275 pagetables:741 [ 439.307537][T12893] sec_pagetables:0 bounce:0 [ 439.307537][T12893] kernel_misc_reclaimable:0 [ 439.307537][T12893] free:1383826 free_pcp:460 free_cma:0 [ 439.359740][T12893] Node 0 active_anon:25964kB inactive_anon:0kB active_file:86232kB inactive_file:153184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56892kB dirty:944kB writeback:0kB shmem:3568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10764kB pagetables:2976kB sec_pagetables:0kB all_unreclaimable? no [ 439.446632][T12893] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 439.515896][T12893] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.613146][T12893] lowmem_reserve[]: 0 2571 2571 0 0 [ 439.654260][T12893] Node 0 DMA32 free:1571700kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:26116kB inactive_anon:0kB active_file:86232kB inactive_file:152872kB unevictable:1536kB writepending:940kB present:3129332kB managed:2659840kB mlocked:0kB bounce:0kB free_pcp:1156kB local_pcp:712kB free_cma:0kB [ 439.721748][T12893] lowmem_reserve[]: 0 0 0 0 0 [ 439.733787][T12893] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.808847][T12893] lowmem_reserve[]: 0 0 0 0 0 [ 439.831940][T12893] Node 1 Normal free:3947848kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.862937][T12893] lowmem_reserve[]: 0 0 0 0 0 [ 439.868496][T12893] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 439.882872][T12893] Node 0 DMA32: 16*4kB (ME) 569*8kB (UME) 1651*16kB (UME) 1311*32kB (UME) 1041*64kB (UME) 485*128kB (UME) 186*256kB (UM) 66*512kB (UME) 21*1024kB (UM) 5*2048kB (UME) 307*4096kB (M) = 1572312kB [ 439.911600][T12893] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 439.925250][T12893] Node 1 Normal: 0*4kB 9*8kB (UM) 12*16kB (UM) 6*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 4*512kB (UM) 0*1024kB 3*2048kB (U) 961*4096kB (M) = 3947848kB [ 439.941826][T12893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.951982][T12893] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.961555][T12893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.971414][T12893] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.999546][T12893] 61151 total pagecache pages [ 440.017210][T12893] 0 pages in swap cache [ 440.027307][T12893] Free swap = 124996kB [ 440.039883][T12893] Total swap = 124996kB [ 440.049160][T12893] 2097051 pages RAM [ 440.053209][T12893] 0 pages HighMem/MovableOnly [ 440.060015][T12893] 400881 pages reserved [ 440.067233][T12893] 0 pages cma reserved [ 440.074009][ T5100] Bluetooth: hci0: command tx timeout [ 440.353138][T11758] team0 (unregistering): Port device team_slave_1 removed [ 440.388816][T11758] team0 (unregistering): Port device team_slave_0 removed [ 440.398307][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.405250][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.823459][T12807] chnl_net:caif_netlink_parms(): no params data found [ 441.047989][T12923] netlink: 'syz.1.2178': attribute type 3 has an invalid length. [ 441.056305][T12923] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2178'. [ 441.373700][T12807] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.389141][T12807] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.425374][T12807] bridge_slave_0: entered allmulticast mode [ 441.440493][T12807] bridge_slave_0: entered promiscuous mode [ 441.457354][T12942] netlink: 'syz.1.2183': attribute type 10 has an invalid length. [ 442.156663][ T5100] Bluetooth: hci0: command tx timeout [ 443.098596][T12942] macvlan0: entered promiscuous mode [ 443.110723][T12942] macvlan0: entered allmulticast mode [ 443.117608][T12942] veth1_vlan: entered allmulticast mode [ 443.125080][T12942] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 443.135676][T12807] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.142875][T12807] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.150780][T12807] bridge_slave_1: entered allmulticast mode [ 443.158635][T12807] bridge_slave_1: entered promiscuous mode [ 443.281830][T12807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.340376][T12807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.383331][T12965] netlink: 'syz.2.2189': attribute type 9 has an invalid length. [ 443.410918][T12965] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2189'. [ 443.631833][T12974] netlink: 'syz.1.2187': attribute type 2 has an invalid length. [ 443.700588][T12807] team0: Port device team_slave_0 added [ 443.865935][T12807] team0: Port device team_slave_1 added [ 443.942387][T12970] netlink: 'syz.2.2189': attribute type 9 has an invalid length. [ 443.981305][T12970] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2189'. [ 444.022384][T12970] FAULT_INJECTION: forcing a failure. [ 444.022384][T12970] name failslab, interval 1, probability 0, space 0, times 0 [ 444.037518][T12970] CPU: 0 PID: 12970 Comm: syz.2.2189 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 444.047358][T12970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 444.057430][T12970] Call Trace: [ 444.060725][T12970] [ 444.063769][T12970] dump_stack_lvl+0x241/0x360 [ 444.068471][T12970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.073691][T12970] ? __pfx__printk+0x10/0x10 [ 444.078315][T12970] should_fail_ex+0x3b0/0x4e0 [ 444.083014][T12970] ? __alloc_skb+0x1c3/0x440 [ 444.087625][T12970] should_failslab+0x9/0x20 [ 444.092145][T12970] kmem_cache_alloc_node_noprof+0x71/0x320 [ 444.097980][T12970] __alloc_skb+0x1c3/0x440 [ 444.102430][T12970] ? __pfx___alloc_skb+0x10/0x10 [ 444.107389][T12970] ? print_irqtrace_events+0x170/0x220 [ 444.112884][T12970] mac80211_hwsim_del_radio+0xad/0x4c0 [ 444.118369][T12970] ? __local_bh_enable_ip+0x168/0x200 [ 444.123835][T12970] ? hwsim_del_radio_nl+0x518/0x600 [ 444.129058][T12970] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 444.135161][T12970] hwsim_del_radio_nl+0x5bd/0x600 [ 444.140218][T12970] genl_rcv_msg+0xb14/0xec0 [ 444.144745][T12970] ? mark_lock+0x9a/0x350 [ 444.149104][T12970] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.154183][T12970] ? __pfx_lock_acquire+0x10/0x10 [ 444.159228][T12970] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 444.164796][T12970] ? __pfx___might_resched+0x10/0x10 [ 444.170122][T12970] netlink_rcv_skb+0x1e3/0x430 [ 444.174916][T12970] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.179968][T12970] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.185295][T12970] ? __netlink_deliver_tap+0x77e/0x7c0 [ 444.190792][T12970] genl_rcv+0x28/0x40 [ 444.194005][T12978] netlink: 'syz.0.2191': attribute type 29 has an invalid length. [ 444.194779][T12970] netlink_unicast+0x7f0/0x990 [ 444.203557][T12807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.207407][T12970] ? __pfx_netlink_unicast+0x10/0x10 [ 444.207430][T12970] ? __virt_addr_valid+0x183/0x530 [ 444.207458][T12970] ? __check_object_size+0x49c/0x900 [ 444.207478][T12970] ? bpf_lsm_netlink_send+0x9/0x10 [ 444.214789][T12807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.219658][T12970] netlink_sendmsg+0x8e4/0xcb0 [ 444.234715][ T5100] Bluetooth: hci0: command tx timeout [ 444.235123][T12970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.270965][T12807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.271066][T12970] ? __import_iovec+0x536/0x820 [ 444.289040][T12807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.291634][T12970] ? aa_sock_msg_perm+0x91/0x160 [ 444.291667][T12970] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 444.301127][T12807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.303501][T12970] ? security_socket_sendmsg+0x87/0xb0 [ 444.303529][T12970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.303548][T12970] __sock_sendmsg+0x221/0x270 [ 444.303573][T12970] ____sys_sendmsg+0x525/0x7d0 [ 444.308970][T12807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.334789][T12970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.334846][T12970] __sys_sendmsg+0x2b0/0x3a0 [ 444.334871][T12970] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.334893][T12970] ? vfs_write+0x7c4/0xc90 [ 444.334943][T12970] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 444.334965][T12970] ? do_syscall_64+0xb6/0x230 [ 444.334994][T12970] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.335016][T12970] ? do_syscall_64+0x100/0x230 [ 444.335038][T12970] ? do_syscall_64+0xb6/0x230 [ 444.335059][T12970] do_syscall_64+0xf3/0x230 [ 444.335078][T12970] ? clear_bhb_loop+0x35/0x90 [ 444.346507][T12984] netlink: 'syz.4.2192': attribute type 29 has an invalid length. [ 444.350453][T12970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.435154][T12970] RIP: 0033:0x7f728ed75f19 [ 444.439562][T12970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.459162][T12970] RSP: 002b:00007f728fa65048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.467574][T12970] RAX: ffffffffffffffda RBX: 00007f728ef06038 RCX: 00007f728ed75f19 [ 444.475543][T12970] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 444.483593][T12970] RBP: 00007f728fa650a0 R08: 0000000000000000 R09: 0000000000000000 [ 444.491553][T12970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.499525][T12970] R13: 000000000000006e R14: 00007f728ef06038 R15: 00007ffef4def6e8 [ 444.507527][T12970] [ 444.550836][T12987] netlink: 'syz.4.2192': attribute type 29 has an invalid length. [ 444.560587][T12981] netlink: 'syz.0.2191': attribute type 29 has an invalid length. [ 444.603293][T12984] netlink: 'syz.4.2192': attribute type 29 has an invalid length. [ 444.628022][T12807] hsr_slave_0: entered promiscuous mode [ 444.638435][T12807] hsr_slave_1: entered promiscuous mode [ 444.815473][T12994] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2193'. [ 445.466778][T13006] syzkaller0: entered promiscuous mode [ 445.485415][T13006] syzkaller0: entered allmulticast mode [ 447.663320][T13024] lo: entered allmulticast mode [ 447.669856][T13028] Y4`Ҙ: renamed from lo [ 447.720720][T13036] validate_nla: 8 callbacks suppressed [ 447.720740][T13036] netlink: 'syz.0.2204': attribute type 29 has an invalid length. [ 447.903532][T13052] netlink: 'syz.0.2208': attribute type 3 has an invalid length. [ 447.919081][T13052] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2208'. [ 447.976584][T13055] netlink: 'syz.2.2206': attribute type 29 has an invalid length. [ 448.010162][T13057] netlink: 'syz.2.2206': attribute type 29 has an invalid length. [ 448.032189][T13055] netlink: 'syz.2.2206': attribute type 29 has an invalid length. [ 448.071924][T13055] netlink: 'syz.2.2206': attribute type 29 has an invalid length. [ 448.144560][T13056] netlink: 'syz.4.2205': attribute type 2 has an invalid length. [ 448.188377][T13055] netlink: 'syz.2.2206': attribute type 29 has an invalid length. [ 448.207378][T13055] netlink: 'syz.2.2206': attribute type 29 has an invalid length. [ 448.377561][T12807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 448.453741][T12807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.491063][T12807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 448.520630][T12807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 448.774626][T12807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.965009][T13095] netlink: 'syz.2.2218': attribute type 29 has an invalid length. [ 448.991918][T12807] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.012909][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.020144][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.077284][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.084477][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.262391][T13106] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2221'. [ 449.271345][T13105] net_ratelimit: 238 callbacks suppressed [ 449.271409][T13105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.420085][T13113] FAULT_INJECTION: forcing a failure. [ 449.420085][T13113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.469032][T13113] CPU: 0 PID: 13113 Comm: syz.4.2222 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 449.478894][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 449.488972][T13113] Call Trace: [ 449.492278][T13113] [ 449.495226][T13113] dump_stack_lvl+0x241/0x360 [ 449.500018][T13113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.505238][T13113] ? __pfx__printk+0x10/0x10 [ 449.509876][T13113] ? __pfx_lock_release+0x10/0x10 [ 449.514911][T13113] should_fail_ex+0x3b0/0x4e0 [ 449.519595][T13113] _copy_from_iter+0x1f6/0x1960 [ 449.524452][T13113] ? __virt_addr_valid+0x183/0x530 [ 449.529648][T13113] ? skb_set_owner_w+0x238/0x3e0 [ 449.534587][T13113] ? __pfx__copy_from_iter+0x10/0x10 [ 449.539867][T13113] ? __pfx__copy_from_iter+0x10/0x10 [ 449.545150][T13113] ? page_copy_sane+0x154/0x260 [ 449.549995][T13113] copy_page_from_iter+0x7a/0x100 [ 449.555102][T13113] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 449.560915][T13113] tun_get_user+0xec3/0x4720 [ 449.565514][T13113] ? __lock_acquire+0x1346/0x1fd0 [ 449.570973][T13113] ? __pfx_tun_get_user+0x10/0x10 [ 449.576093][T13113] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 449.581548][T13113] ? tun_get+0x1e/0x2f0 [ 449.585699][T13113] ? __pfx_lock_release+0x10/0x10 [ 449.590727][T13113] ? tun_get+0x1e/0x2f0 [ 449.594875][T13113] ? tun_get+0x27d/0x2f0 [ 449.599112][T13113] tun_chr_write_iter+0x113/0x1f0 [ 449.604133][T13113] vfs_write+0xa72/0xc90 [ 449.608381][T13113] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 449.613921][T13113] ? __pfx_vfs_write+0x10/0x10 [ 449.618713][T13113] ksys_write+0x1a0/0x2c0 [ 449.623052][T13113] ? __pfx_ksys_write+0x10/0x10 [ 449.627903][T13113] ? do_syscall_64+0x100/0x230 [ 449.632682][T13113] ? do_syscall_64+0xb6/0x230 [ 449.637367][T13113] do_syscall_64+0xf3/0x230 [ 449.641869][T13113] ? clear_bhb_loop+0x35/0x90 [ 449.646561][T13113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.652460][T13113] RIP: 0033:0x7fcf42b75f19 [ 449.656877][T13113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.676483][T13113] RSP: 002b:00007fcf43949048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.684901][T13113] RAX: ffffffffffffffda RBX: 00007fcf42d05f60 RCX: 00007fcf42b75f19 [ 449.692863][T13113] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 449.700824][T13113] RBP: 00007fcf439490a0 R08: 0000000000000000 R09: 0000000000000000 [ 449.708873][T13113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.716834][T13113] R13: 000000000000000b R14: 00007fcf42d05f60 R15: 00007ffd819a5178 [ 449.724815][T13113] [ 449.849633][T12807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.306341][T12807] veth0_vlan: entered promiscuous mode [ 450.352387][T12807] veth1_vlan: entered promiscuous mode [ 450.528010][T12807] veth0_macvtap: entered promiscuous mode [ 450.604197][T12807] veth1_macvtap: entered promiscuous mode [ 450.636072][T13138] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2227'. [ 450.734937][T12807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.770746][T12807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.813969][T12807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.826184][T12807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.836123][T12807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.848947][T12807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.858934][T12807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.876144][T12807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.887986][T12807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.902841][T12807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.914499][T12807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.924405][T12807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.935034][T12807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.945485][T12807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.957469][T12807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.970524][T12807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.985086][T12807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.001106][T12807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.067895][T12807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.082501][T12807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.092917][T12807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.102096][T12807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.510368][T13172] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2234'. [ 451.541799][ T2824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.594609][ T2824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.686172][T13174] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2235'. [ 451.754677][T11749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.762549][T11749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.898144][T13184] netlink: 'syz.1.2236': attribute type 11 has an invalid length. [ 451.960871][T13184] netlink: 10873 bytes leftover after parsing attributes in process `syz.1.2236'. [ 451.992522][T13182] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2235'. [ 452.833169][T13209] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2243'. [ 452.901029][T13213] validate_nla: 15 callbacks suppressed [ 452.901109][T13213] netlink: 'syz.4.2244': attribute type 29 has an invalid length. [ 452.975941][T13213] netlink: 'syz.4.2244': attribute type 3 has an invalid length. [ 452.998616][T13213] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2244'. [ 453.047864][T13221] netlink: 'syz.2.2247': attribute type 3 has an invalid length. [ 453.067593][T13221] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2247'. [ 453.156919][T13225] netlink: 'syz.1.2246': attribute type 2 has an invalid length. [ 455.093555][T13238] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2250'. [ 455.160118][T13242] netlink: 'syz.1.2252': attribute type 4 has an invalid length. [ 455.508149][T13260] netlink: 'syz.0.2256': attribute type 3 has an invalid length. [ 455.554911][T13260] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2256'. [ 455.735422][T13258] netlink: 'syz.2.2257': attribute type 1 has an invalid length. [ 456.235633][T13267] netlink: 'syz.0.2259': attribute type 3 has an invalid length. [ 456.254628][T13267] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2259'. [ 456.288441][T13270] netlink: 'syz.2.2260': attribute type 29 has an invalid length. [ 456.447662][T13270] netlink: 'syz.2.2260': attribute type 29 has an invalid length. [ 456.596918][T11749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.207488][T11749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.313032][T11749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.430161][T13320] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2263'. [ 457.442746][T11749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.530701][T13322] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2262'. [ 458.003481][T13337] validate_nla: 4 callbacks suppressed [ 458.003503][T13337] netlink: 'syz.0.2269': attribute type 3 has an invalid length. [ 458.041844][T13337] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2269'. [ 458.051997][T11749] bridge_slave_1: left allmulticast mode [ 458.082639][T11749] bridge_slave_1: left promiscuous mode [ 458.104430][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.136649][T11749] bridge_slave_0: left allmulticast mode [ 458.142348][T11749] bridge_slave_0: left promiscuous mode [ 458.175480][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.356173][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.374546][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.384151][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.397225][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.409869][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 458.417912][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.489133][T13351] netlink: 'syz.4.2272': attribute type 3 has an invalid length. [ 458.519132][T13351] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2272'. [ 459.020139][T11749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.031998][T11749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.048480][T11749] bond0 (unregistering): Released all slaves [ 459.059032][T13343] netlink: 'syz.2.2270': attribute type 1 has an invalid length. [ 459.365725][T13376] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2277'. [ 459.440806][T13368] netlink: 'syz.0.2274': attribute type 29 has an invalid length. [ 459.526720][T13371] netlink: 'syz.0.2274': attribute type 29 has an invalid length. [ 459.560587][T13377] netlink: 'syz.0.2274': attribute type 29 has an invalid length. [ 459.671817][T13385] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2278'. [ 459.716690][T13382] netlink: 'syz.0.2274': attribute type 29 has an invalid length. [ 459.782842][T13368] netlink: 'syz.0.2274': attribute type 29 has an invalid length. [ 459.815102][T13371] netlink: 'syz.0.2274': attribute type 29 has an invalid length. [ 459.913174][T11749] hsr_slave_0: left promiscuous mode [ 459.922153][T11749] hsr_slave_1: left promiscuous mode [ 459.943262][T11749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.988516][T11749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.011935][T11749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.040166][T11749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.053354][T13412] netlink: 'syz.4.2284': attribute type 3 has an invalid length. [ 460.061967][T13412] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2284'. [ 460.110917][T11749] veth1_macvtap: left promiscuous mode [ 460.125041][T11749] veth0_macvtap: left promiscuous mode [ 460.137506][T11749] veth1_vlan: left promiscuous mode [ 460.151553][T11749] veth0_vlan: left promiscuous mode [ 460.205983][T13417] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2286'. [ 460.474099][ T54] Bluetooth: hci0: command tx timeout [ 460.623275][T11749] team0 (unregistering): Port device team_slave_1 removed [ 460.667168][T11749] team0 (unregistering): Port device team_slave_0 removed [ 461.020892][T13406] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2282'. [ 461.283159][T13350] chnl_net:caif_netlink_parms(): no params data found [ 461.680197][T13350] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.687603][T13350] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.696422][T13350] bridge_slave_0: entered allmulticast mode [ 461.707158][T13350] bridge_slave_0: entered promiscuous mode [ 461.757307][T13350] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.794089][T13350] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.822092][T13350] bridge_slave_1: entered allmulticast mode [ 461.849569][T13350] bridge_slave_1: entered promiscuous mode [ 461.858242][T13462] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.2294'. [ 461.898757][T13462] netlink: zone id is out of range [ 461.926233][T13453] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2292'. [ 461.941714][T13462] netlink: zone id is out of range [ 461.951879][T13462] netlink: zone id is out of range [ 461.972001][T13462] netlink: zone id is out of range [ 461.989776][T13462] netlink: zone id is out of range [ 462.002648][T13462] netlink: zone id is out of range [ 462.011955][T13462] netlink: zone id is out of range [ 462.032053][T13462] netlink: zone id is out of range [ 462.054754][T13350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.067357][T13462] netlink: zone id is out of range [ 462.086261][T13462] netlink: zone id is out of range [ 462.110014][T13350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.289692][T13350] team0: Port device team_slave_0 added [ 462.334153][T13350] team0: Port device team_slave_1 added [ 462.384167][T13350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.435486][T13350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.483044][T13478] syz.4.2298: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 462.537248][T13480] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2299'. [ 462.557309][ T54] Bluetooth: hci0: command tx timeout [ 462.564435][T13478] CPU: 0 PID: 13478 Comm: syz.4.2298 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 462.574306][T13478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 462.584411][T13478] Call Trace: [ 462.587731][T13478] [ 462.590685][T13478] dump_stack_lvl+0x241/0x360 [ 462.595416][T13478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.600644][T13478] ? __pfx__printk+0x10/0x10 [ 462.605272][T13478] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 462.611713][T13478] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 462.618246][T13478] warn_alloc+0x278/0x410 [ 462.622598][T13478] ? stack_depot_save_flags+0x29/0x830 [ 462.628083][T13478] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 462.634193][T13478] ? __pfx_warn_alloc+0x10/0x10 [ 462.639086][T13478] ? kasan_save_track+0x3f/0x80 [ 462.643965][T13478] ? __kasan_kmalloc+0x98/0xb0 [ 462.648784][T13478] ? xsk_setsockopt+0x598/0x950 [ 462.653652][T13478] ? do_sock_setsockopt+0x3af/0x720 [ 462.658865][T13478] ? __sys_setsockopt+0x1ae/0x250 [ 462.664081][T13478] ? __x64_sys_setsockopt+0xb5/0xd0 [ 462.669295][T13478] ? do_syscall_64+0xf3/0x230 [ 462.673992][T13478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.680108][T13478] __vmalloc_node_range_noprof+0x130/0x1460 [ 462.686112][T13478] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 462.692473][T13478] ? __kasan_kmalloc+0x98/0xb0 [ 462.697345][T13478] ? xskq_create+0x54/0x170 [ 462.701873][T13478] vmalloc_user_noprof+0x74/0x80 [ 462.706830][T13478] ? xskq_create+0xb6/0x170 [ 462.711351][T13478] xskq_create+0xb6/0x170 [ 462.715705][T13478] xsk_init_queue+0xa1/0x100 [ 462.720415][T13478] xsk_setsockopt+0x598/0x950 [ 462.725127][T13478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 462.730359][T13478] ? __pfx_lock_acquire+0x10/0x10 [ 462.735410][T13478] ? aa_sock_opt_perm+0x79/0x120 [ 462.740375][T13478] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 462.745936][T13478] ? security_socket_setsockopt+0x87/0xb0 [ 462.751851][T13478] ? __pfx_xsk_setsockopt+0x10/0x10 [ 462.757070][T13478] do_sock_setsockopt+0x3af/0x720 [ 462.762221][T13478] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 462.767876][T13478] ? __fget_files+0x29/0x470 [ 462.772496][T13478] ? __fget_files+0x3f6/0x470 [ 462.777230][T13478] __sys_setsockopt+0x1ae/0x250 [ 462.782126][T13478] __x64_sys_setsockopt+0xb5/0xd0 [ 462.787180][T13478] do_syscall_64+0xf3/0x230 [ 462.791714][T13478] ? clear_bhb_loop+0x35/0x90 [ 462.796428][T13478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.802513][T13478] RIP: 0033:0x7fcf42b75f19 [ 462.806948][T13478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.826585][T13478] RSP: 002b:00007fcf43949048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 462.835034][T13478] RAX: ffffffffffffffda RBX: 00007fcf42d05f60 RCX: 00007fcf42b75f19 [ 462.843025][T13478] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 462.851021][T13478] RBP: 00007fcf42be4e68 R08: 0000000000000004 R09: 0000000000000000 [ 462.859009][T13478] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 462.867003][T13478] R13: 000000000000000b R14: 00007fcf42d05f60 R15: 00007ffd819a5178 [ 462.875041][T13478] [ 462.914472][T13478] Mem-Info: [ 462.916971][T13350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.917905][T13478] active_anon:6472 inactive_anon:0 isolated_anon:0 [ 462.917905][T13478] active_file:21558 inactive_file:38327 isolated_file:0 [ 462.917905][T13478] unevictable:768 dirty:155 writeback:0 [ 462.917905][T13478] slab_reclaimable:8987 slab_unreclaimable:95717 [ 462.917905][T13478] mapped:13642 shmem:1242 pagetables:709 [ 462.917905][T13478] sec_pagetables:0 bounce:0 [ 462.917905][T13478] kernel_misc_reclaimable:0 [ 462.917905][T13478] free:1386011 free_pcp:398 free_cma:0 [ 463.000543][T13350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.027914][T13350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.054247][T13478] Node 0 active_anon:25888kB inactive_anon:0kB active_file:86232kB inactive_file:153224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:54568kB dirty:616kB writeback:0kB shmem:3432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10532kB pagetables:2936kB sec_pagetables:0kB all_unreclaimable? no [ 463.054473][T13478] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 463.054531][T13478] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.054598][T13478] lowmem_reserve[]: 0 2571 2571 0 0 [ 463.054736][T13478] Node 0 DMA32 free:1581628kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:25840kB inactive_anon:0kB active_file:86232kB inactive_file:152912kB unevictable:1536kB writepending:612kB present:3129332kB managed:2659840kB mlocked:0kB bounce:0kB free_pcp:1392kB local_pcp:500kB free_cma:0kB [ 463.054807][T13478] lowmem_reserve[]: 0 0 0 0 0 [ 463.054886][T13478] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.054952][T13478] lowmem_reserve[]: 0 0 0 0 0 [ 463.055030][T13478] Node 1 Normal free:3947848kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.055099][T13478] lowmem_reserve[]: 0 0 0 0 0 [ 463.055177][T13478] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 463.055412][T13478] Node 0 DMA32: 28*4kB (UME) [ 463.137695][T13350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.158633][T13478] 576*8kB (UME) 1599*16kB (UME) 1250*32kB (UME) 1123*64kB (UME) 527*128kB (UME) 191*256kB (UM) 66*512kB (UME) 21*1024kB (UM) 5*2048kB (UME) 307*4096kB (M) = 1581536kB [ 463.402184][T13478] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 463.450881][T13478] Node 1 Normal: 0*4kB 9*8kB (UM) 12*16kB (UM) 6*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 4*512kB (UM) 0*1024kB 3*2048kB (U) 961*4096kB (M) = 3947848kB [ 463.492287][T13478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 463.526979][T13478] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 463.565851][T13478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 463.580663][T13350] hsr_slave_0: entered promiscuous mode [ 463.595863][T13478] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 463.613628][T13350] hsr_slave_1: entered promiscuous mode [ 463.630024][T13478] 61128 total pagecache pages [ 463.638102][T13478] 0 pages in swap cache [ 463.648864][T13478] Free swap = 124996kB [ 463.658993][T13478] Total swap = 124996kB [ 463.669235][T13478] 2097051 pages RAM [ 463.673086][T13478] 0 pages HighMem/MovableOnly [ 463.709753][T13478] 400881 pages reserved [ 463.714194][T13478] 0 pages cma reserved [ 464.055885][T13491] delete_channel: no stack [ 464.332997][T13519] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2308'. [ 464.640219][ T54] Bluetooth: hci0: command tx timeout [ 464.874290][T13533] validate_nla: 4 callbacks suppressed [ 464.874311][T13533] netlink: 'syz.2.2311': attribute type 10 has an invalid length. [ 465.185922][T13540] netlink: 'syz.0.2313': attribute type 3 has an invalid length. [ 465.196054][T13540] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2313'. [ 465.564526][T13561] FAULT_INJECTION: forcing a failure. [ 465.564526][T13561] name failslab, interval 1, probability 0, space 0, times 0 [ 465.603942][T13561] CPU: 0 PID: 13561 Comm: syz.0.2320 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 465.613802][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 465.623874][T13561] Call Trace: [ 465.627175][T13561] [ 465.630125][T13561] dump_stack_lvl+0x241/0x360 [ 465.634833][T13561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.640049][T13561] ? __pfx__printk+0x10/0x10 [ 465.644679][T13561] ? __pfx___might_resched+0x10/0x10 [ 465.649993][T13561] should_fail_ex+0x3b0/0x4e0 [ 465.654866][T13561] should_failslab+0x9/0x20 [ 465.659366][T13561] kmalloc_node_trace_noprof+0x74/0x300 [ 465.664904][T13561] ? page_pool_create_percpu+0x77/0x7c0 [ 465.670464][T13561] page_pool_create_percpu+0x77/0x7c0 [ 465.675920][T13561] bpf_test_run_xdp_live+0x2cd/0x2110 [ 465.681285][T13561] ? bpf_dispatcher_change_prog+0xd88/0xf10 [ 465.687178][T13561] ? __pfx_lock_release+0x10/0x10 [ 465.692198][T13561] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 465.697479][T13561] ? __mutex_unlock_slowpath+0x21d/0x750 [ 465.703115][T13561] ? __pfx_autoremove_wake_function+0x10/0x10 [ 465.709180][T13561] ? __mutex_unlock_slowpath+0x21d/0x750 [ 465.714815][T13561] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 465.720611][T13561] ? synchronize_rcu+0x11b/0x360 [ 465.725545][T13561] ? __pfx_synchronize_rcu+0x10/0x10 [ 465.730837][T13561] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 465.737072][T13561] ? 0xffffffffa000085c [ 465.741230][T13561] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 465.747130][T13561] ? _copy_from_user+0xa6/0xe0 [ 465.751895][T13561] ? bpf_test_init+0x15a/0x180 [ 465.756654][T13561] ? xdp_convert_md_to_buff+0x5b/0x330 [ 465.762105][T13561] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 465.767471][T13561] ? __pfx_lock_release+0x10/0x10 [ 465.772498][T13561] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 465.778296][T13561] ? __fget_files+0x29/0x470 [ 465.782885][T13561] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 465.788685][T13561] bpf_prog_test_run+0x33a/0x3b0 [ 465.794055][T13561] __sys_bpf+0x48d/0x810 [ 465.798291][T13561] ? __pfx___sys_bpf+0x10/0x10 [ 465.803054][T13561] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.809030][T13561] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.815361][T13561] ? do_syscall_64+0x100/0x230 [ 465.820125][T13561] __x64_sys_bpf+0x7c/0x90 [ 465.824546][T13561] do_syscall_64+0xf3/0x230 [ 465.829040][T13561] ? clear_bhb_loop+0x35/0x90 [ 465.833713][T13561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.839599][T13561] RIP: 0033:0x7fcadf375f19 [ 465.844009][T13561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.863691][T13561] RSP: 002b:00007fcae00bb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.872100][T13561] RAX: ffffffffffffffda RBX: 00007fcadf505f60 RCX: 00007fcadf375f19 [ 465.880063][T13561] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 465.888026][T13561] RBP: 00007fcae00bb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 465.895985][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.904043][T13561] R13: 000000000000000b R14: 00007fcadf505f60 R15: 00007fffab4e4658 [ 465.912203][T13561] [ 465.927492][T13350] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.933243][T13569] netlink: 'syz.4.2321': attribute type 3 has an invalid length. [ 465.947011][T13350] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.962453][T13569] netlink: 'syz.4.2321': attribute type 4 has an invalid length. [ 465.965217][T13350] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 466.000143][T13569] netlink: 'syz.4.2321': attribute type 7 has an invalid length. [ 466.033693][T13567] netlink: 'syz.1.2322': attribute type 29 has an invalid length. [ 466.047370][T13569] netlink: 'syz.4.2321': attribute type 8 has an invalid length. [ 466.051987][T13570] netlink: 'syz.1.2322': attribute type 29 has an invalid length. [ 466.069998][T13569] netlink: 'syz.4.2321': attribute type 7 has an invalid length. [ 466.085337][T13569] netlink: 198180 bytes leftover after parsing attributes in process `syz.4.2321'. [ 466.112099][T13576] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2323'. [ 466.121566][T13350] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 466.171710][T13576] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.2323'. [ 466.187313][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.212954][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.225360][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.241422][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.262137][T13572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.279785][T13572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.525668][T13589] netlink: 'syz.4.2326': attribute type 10 has an invalid length. [ 466.667591][T13350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.702948][T13350] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.716422][ T54] Bluetooth: hci0: command tx timeout [ 466.774158][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.781318][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.870306][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.877847][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.889981][T13603] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2330'. [ 467.532819][T13350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.786026][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.866914][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.885732][T13634] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2336'. [ 467.904002][T13642] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2337'. [ 467.916314][T13634] net_ratelimit: 237 callbacks suppressed [ 467.916451][T13634] openvswitch: netlink: Tunnel attr 0 has unexpected len 187 expected 8 [ 467.942318][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.992115][T13642] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.2337'. [ 468.032915][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.082850][T13639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.124023][T13639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.322899][T13350] veth0_vlan: entered promiscuous mode [ 468.324319][T13648] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 468.400540][T13350] veth1_vlan: entered promiscuous mode [ 468.528357][T13350] veth0_macvtap: entered promiscuous mode [ 468.580541][T13350] veth1_macvtap: entered promiscuous mode [ 468.621174][T13666] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2343'. [ 468.643449][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.654762][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.672885][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.687082][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.712281][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.751474][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.769863][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.783781][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.830089][T13350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.236738][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.261921][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.285007][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.311545][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.336180][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.348253][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.368504][T13350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.384605][T13350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.402479][T13350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.430259][T13350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.442280][T13350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.459303][T13350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.468571][T13350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.700183][T11756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.722675][T11756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.786099][T11749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.787811][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.807152][T11749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.818285][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.829464][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.842534][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.855872][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.866936][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.877141][T13698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.889462][T13698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.921578][T13701] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2354'. [ 469.960256][T13699] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2353'. [ 469.981948][T13699] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.2353'. [ 470.214258][T13712] validate_nla: 4 callbacks suppressed [ 470.214300][T13712] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 470.239619][T13712] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2358'. [ 471.072308][T13742] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2368'. [ 471.312372][T13747] netlink: 'syz.0.2370': attribute type 10 has an invalid length. [ 471.324131][T13747] netlink: 212712 bytes leftover after parsing attributes in process `syz.0.2370'. [ 471.337967][T13747] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 471.632960][T13753] netlink: 'syz.2.2372': attribute type 3 has an invalid length. [ 471.656020][T13753] netlink: 130976 bytes leftover after parsing attributes in process `syz.2.2372'. [ 472.392352][T11752] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.421868][T13773] netlink: 'syz.4.2379': attribute type 21 has an invalid length. [ 472.431555][T13773] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2379'. [ 472.442466][T13773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2379'. [ 472.937629][T11752] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.006557][T11752] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.105447][T13784] syz.4.2383: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 473.145818][T13784] CPU: 0 PID: 13784 Comm: syz.4.2383 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 473.155718][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 473.165844][T13784] Call Trace: [ 473.169199][T13784] [ 473.172190][T13784] dump_stack_lvl+0x241/0x360 [ 473.176950][T13784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.182216][T13784] ? __pfx__printk+0x10/0x10 [ 473.186987][T13784] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 473.193472][T13784] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 473.200044][T13784] warn_alloc+0x278/0x410 [ 473.204415][T13784] ? stack_depot_save_flags+0x29/0x830 [ 473.209898][T13784] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 473.215990][T13784] ? __pfx_warn_alloc+0x10/0x10 [ 473.220871][T13784] ? kasan_save_track+0x3f/0x80 [ 473.225741][T13784] ? __kasan_kmalloc+0x98/0xb0 [ 473.230620][T13784] ? xsk_setsockopt+0x598/0x950 [ 473.235492][T13784] ? do_sock_setsockopt+0x3af/0x720 [ 473.240734][T13784] ? __sys_setsockopt+0x1ae/0x250 [ 473.245806][T13784] ? __x64_sys_setsockopt+0xb5/0xd0 [ 473.251214][T13784] ? do_syscall_64+0xf3/0x230 [ 473.255917][T13784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.262036][T13784] __vmalloc_node_range_noprof+0x130/0x1460 [ 473.268041][T13784] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 473.274522][T13784] ? __kasan_kmalloc+0x98/0xb0 [ 473.279341][T13784] ? xskq_create+0x54/0x170 [ 473.283889][T13784] vmalloc_user_noprof+0x74/0x80 [ 473.288856][T13784] ? xskq_create+0xb6/0x170 [ 473.293378][T13784] xskq_create+0xb6/0x170 [ 473.297747][T13784] xsk_init_queue+0xa1/0x100 [ 473.302381][T13784] xsk_setsockopt+0x598/0x950 [ 473.307095][T13784] ? __pfx_xsk_setsockopt+0x10/0x10 [ 473.312329][T13784] ? __pfx_lock_acquire+0x10/0x10 [ 473.317375][T13784] ? aa_sock_opt_perm+0x79/0x120 [ 473.322426][T13784] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 473.327992][T13784] ? security_socket_setsockopt+0x87/0xb0 [ 473.333737][T13784] ? __pfx_xsk_setsockopt+0x10/0x10 [ 473.338955][T13784] do_sock_setsockopt+0x3af/0x720 [ 473.344026][T13784] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 473.349591][T13784] ? __fget_files+0x29/0x470 [ 473.354215][T13784] ? __fget_files+0x3f6/0x470 [ 473.358952][T13784] __sys_setsockopt+0x1ae/0x250 [ 473.363858][T13784] __x64_sys_setsockopt+0xb5/0xd0 [ 473.368946][T13784] do_syscall_64+0xf3/0x230 [ 473.373489][T13784] ? clear_bhb_loop+0x35/0x90 [ 473.378211][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.384144][T13784] RIP: 0033:0x7fcf42b75f19 [ 473.388601][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.408234][T13784] RSP: 002b:00007fcf43949048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 473.416678][T13784] RAX: ffffffffffffffda RBX: 00007fcf42d05f60 RCX: 00007fcf42b75f19 [ 473.424664][T13784] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 473.432656][T13784] RBP: 00007fcf42be4e68 R08: 0000000000000004 R09: 0000000000000000 [ 473.441163][T13784] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000 [ 473.449176][T13784] R13: 000000000000000b R14: 00007fcf42d05f60 R15: 00007ffd819a5178 [ 473.457485][T13784] [ 473.469766][T13784] Mem-Info: [ 473.473299][T13784] active_anon:6488 inactive_anon:0 isolated_anon:0 [ 473.473299][T13784] active_file:21558 inactive_file:38333 isolated_file:0 [ 473.473299][T13784] unevictable:768 dirty:210 writeback:0 [ 473.473299][T13784] slab_reclaimable:9005 slab_unreclaimable:97266 [ 473.473299][T13784] mapped:12632 shmem:1242 pagetables:700 [ 473.473299][T13784] sec_pagetables:0 bounce:0 [ 473.473299][T13784] kernel_misc_reclaimable:0 [ 473.473299][T13784] free:1387523 free_pcp:4016 free_cma:0 [ 473.650838][T11752] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.656583][T13784] Node 0 active_anon:25920kB inactive_anon:0kB active_file:86232kB inactive_file:153248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52548kB dirty:720kB writeback:16kB shmem:3432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10544kB pagetables:2776kB sec_pagetables:0kB all_unreclaimable? no [ 473.805372][T13784] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 473.875583][T13784] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.995680][T13784] lowmem_reserve[]: 0 2571 2571 0 0 [ 474.014029][T13784] Node 0 DMA32 free:1580048kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:25872kB inactive_anon:0kB active_file:86232kB inactive_file:152936kB unevictable:1536kB writepending:732kB present:3129332kB managed:2659840kB mlocked:0kB bounce:0kB free_pcp:9676kB local_pcp:7648kB free_cma:0kB [ 474.085364][T13784] lowmem_reserve[]: 0 0 0 0 0 [ 474.279921][T11752] bridge_slave_1: left allmulticast mode [ 474.289284][T13784] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 474.289481][T13790] netlink: 'syz.0.2384': attribute type 3 has an invalid length. [ 474.404804][T13784] lowmem_reserve[]: 0 0 0 0 0 [ 474.404899][T13784] Node 1 Normal free:3947848kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 474.404979][T13784] lowmem_reserve[]: 0 0 0 0 0 [ 474.405059][T13784] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 474.405496][T13784] Node 0 DMA32: 132*4kB (UME) 912*8kB (UME) 1781*16kB (UME) 1029*32kB (UME) 1127*64kB (UME) 528*128kB (UME) 191*256kB (UM) 64*512kB (UME) 21*1024kB (UM) 5*2048kB (UME) 307*4096kB (M) = 1579840kB [ 474.405827][T13784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 474.406024][T13784] Node 1 Normal: 0*4kB 9*8kB (UM) 12*16kB (UM) 6*32kB (UM) 8*64kB (U) 7*128kB (U) 6*256kB (UM) 4*512kB (UM) 0*1024kB 3*2048kB (U) 961*4096kB (M) = 3947848kB [ 474.406380][T13784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.406404][T13784] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 474.406427][T13784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.406450][T13784] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 474.406472][T13784] 61133 total pagecache pages [ 474.406487][T13784] 0 pages in swap cache [ 474.406502][T13784] Free swap = 124996kB [ 474.406516][T13784] Total swap = 124996kB [ 474.406531][T13784] 2097051 pages RAM [ 474.406545][T13784] 0 pages HighMem/MovableOnly [ 474.406559][T13784] 400881 pages reserved [ 474.406572][T13784] 0 pages cma reserved [ 474.487043][T11752] bridge_slave_1: left promiscuous mode [ 474.487413][T11752] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.617098][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.619103][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.714393][T13790] netlink: 130976 bytes leftover after parsing attributes in process `syz.0.2384'. [ 474.715536][T11752] bridge_slave_0: left allmulticast mode [ 474.735498][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.743649][T11752] bridge_slave_0: left promiscuous mode [ 474.749511][T11752] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.758229][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.766276][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 474.773710][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.125831][T11752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.138362][T11752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.150586][T11752] bond0 (unregistering): Released all slaves [ 475.164769][T13795] netlink: 'syz.2.2386': attribute type 29 has an invalid length. [ 475.191557][T13801] netlink: 'syz.4.2387': attribute type 10 has an invalid length. [ 475.207229][T13801] bridge_slave_1: left allmulticast mode [ 475.212910][T13801] bridge_slave_1: left promiscuous mode [ 475.244473][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.274329][T13801] bridge_slave_0: left allmulticast mode [ 475.291973][T13801] bridge_slave_0: left promiscuous mode [ 475.311094][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.408150][T13803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2388'. [ 475.431555][T13799] netlink: 'syz.2.2386': attribute type 29 has an invalid length. [ 475.492922][T13819] netlink: 'syz.2.2391': attribute type 10 has an invalid length. [ 475.511612][T13819] netlink: 212712 bytes leftover after parsing attributes in process `syz.2.2391'. [ 475.522448][T13819] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 475.573181][T13815] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2390'. [ 475.588809][T13804] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2388'. [ 475.661623][T13805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2388'. [ 476.052226][T11752] hsr_slave_0: left promiscuous mode [ 476.092871][T11752] hsr_slave_1: left promiscuous mode [ 476.104131][T11752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.138324][T11752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.159297][T11752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.172551][T11752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.390317][T11752] veth1_macvtap: left promiscuous mode [ 476.424064][T11752] veth0_macvtap: left promiscuous mode [ 476.429849][T11752] veth1_vlan: left promiscuous mode [ 476.462659][T11752] veth0_vlan: left promiscuous mode [ 476.709959][T13852] netlink: 'syz.1.2399': attribute type 3 has an invalid length. [ 476.720192][T13852] netlink: 130976 bytes leftover after parsing attributes in process `syz.1.2399'. [ 476.805090][ T54] Bluetooth: hci0: command tx timeout [ 477.433553][T11752] team0 (unregistering): Port device team_slave_1 removed [ 477.476636][T11752] team0 (unregistering): Port device team_slave_0 removed [ 477.805117][T13842] netlink: 'syz.0.2397': attribute type 29 has an invalid length. [ 477.823608][T13845] netlink: 'syz.0.2397': attribute type 29 has an invalid length. [ 477.845194][T13846] netlink: 'syz.0.2397': attribute type 29 has an invalid length. [ 478.270779][T13796] chnl_net:caif_netlink_parms(): no params data found [ 478.421585][T13874] netlink: 'syz.4.2404': attribute type 39 has an invalid length. [ 478.748970][T13796] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.770830][T13796] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.778749][T13796] bridge_slave_0: entered allmulticast mode [ 478.795049][T13796] bridge_slave_0: entered promiscuous mode [ 478.812636][T13889] netlink: 'syz.1.2407': attribute type 21 has an invalid length. [ 478.838546][T13889] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2407'. [ 478.852492][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2407'. [ 478.870852][T13796] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.887249][ T54] Bluetooth: hci0: command tx timeout [ 478.892141][T13796] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.919029][T13796] bridge_slave_1: entered allmulticast mode [ 478.958222][T13796] bridge_slave_1: entered promiscuous mode [ 479.041641][T13899] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 479.075439][T13899] netlink: 212712 bytes leftover after parsing attributes in process `syz.1.2409'. [ 479.094247][T13899] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 479.108849][T13796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.168814][T13796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.296827][T13796] team0: Port device team_slave_0 added [ 479.347534][T13908] netlink: 'syz.0.2412': attribute type 3 has an invalid length. [ 479.359159][T13796] team0: Port device team_slave_1 added [ 479.374217][T13908] netlink: 130976 bytes leftover after parsing attributes in process `syz.0.2412'. [ 479.423577][T13796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.446002][T13796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.485999][T13796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.499806][T13796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.507011][T13796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.577664][T13796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.707173][T13796] hsr_slave_0: entered promiscuous mode [ 479.733233][T13796] hsr_slave_1: entered promiscuous mode [ 479.873784][T13927] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 480.832514][T13960] validate_nla: 1 callbacks suppressed [ 480.832553][T13960] netlink: 'syz.4.2425': attribute type 3 has an invalid length. [ 480.876685][T13960] __nla_validate_parse: 2 callbacks suppressed [ 480.876726][T13960] netlink: 130976 bytes leftover after parsing attributes in process `syz.4.2425'. [ 480.951473][T13965] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2427'. [ 480.960687][ T54] Bluetooth: hci0: command tx timeout [ 481.076121][T13973] netlink: 'syz.4.2429': attribute type 10 has an invalid length. [ 481.087125][T13973] netlink: 212712 bytes leftover after parsing attributes in process `syz.4.2429'. [ 481.097408][T13973] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 481.174764][T13968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.433320][T13984] netlink: 'syz.1.2433': attribute type 21 has an invalid length. [ 481.458220][T13984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2433'. [ 481.512061][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2433'. [ 481.550893][T13796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 481.580285][T13796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 481.608936][T13796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 481.644849][T13796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.692723][T13997] netlink: 'syz.1.2434': attribute type 10 has an invalid length. [ 481.872842][T13796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.926918][T13796] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.946969][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.954179][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.996354][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.003577][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.470324][T14017] netlink: 'syz.0.2439': attribute type 3 has an invalid length. [ 482.489948][T14017] netlink: 130976 bytes leftover after parsing attributes in process `syz.0.2439'. [ 482.728933][T13796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.813526][T14035] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2443'. [ 482.882533][T14037] netlink: 'syz.4.2444': attribute type 21 has an invalid length. [ 482.897771][T14037] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2444'. [ 482.996201][T14037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2444'. [ 483.037959][ T54] Bluetooth: hci0: command tx timeout [ 483.299582][T13796] veth0_vlan: entered promiscuous mode [ 483.321692][T13796] veth1_vlan: entered promiscuous mode [ 483.543275][T13796] veth0_macvtap: entered promiscuous mode [ 483.593349][T13796] veth1_macvtap: entered promiscuous mode [ 483.612060][T14063] netlink: 'syz.1.2449': attribute type 21 has an invalid length. [ 483.636718][T14063] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2449'. [ 483.703559][T14050] netlink: 'syz.2.2446': attribute type 7 has an invalid length. [ 483.828497][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.855777][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.869324][T14068] netlink: 'syz.4.2451': attribute type 3 has an invalid length. [ 483.883549][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.909101][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.938759][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.949920][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.960714][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.973201][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.988443][T13796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.047467][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.101873][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.125172][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.151773][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.173895][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.231306][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.250559][T13796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.284831][T13796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.336083][T13796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.399784][T13796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.429557][T13796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.461082][T13796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.483762][T13796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.692688][T14090] syz_tun: entered promiscuous mode [ 484.725663][T14096] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 484.759003][T14096] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 484.819694][T11756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.863995][T11756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.887183][T14098] netlink: 'syz.2.2459': attribute type 21 has an invalid length. [ 485.022014][T11746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.051321][T11746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.249085][T14121] __nla_validate_parse: 7 callbacks suppressed [ 486.249108][T14121] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2464'. [ 486.291749][T14118] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2464'. [ 486.408311][T14146] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 486.711712][T14157] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2472'. [ 486.754056][T14157] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 486.762366][T14157] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 487.501779][T14181] validate_nla: 1 callbacks suppressed [ 487.501803][T14181] netlink: 'syz.0.2479': attribute type 3 has an invalid length. [ 487.584802][T14181] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2479'. [ 487.661166][T14183] netlink: 'syz.1.2480': attribute type 3 has an invalid length. [ 487.683748][T14183] netlink: 130928 bytes leftover after parsing attributes in process `syz.1.2480'. [ 488.509027][T11749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.909523][T11749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.172738][T11749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.270188][T11749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.556472][T11749] bridge_slave_1: left allmulticast mode [ 489.572428][T11749] bridge_slave_1: left promiscuous mode [ 489.596992][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.655802][T11749] bridge_slave_0: left allmulticast mode [ 489.714663][T11749] bridge_slave_0: left promiscuous mode [ 489.723717][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.242465][T14275] netlink: 'syz.1.2492': attribute type 3 has an invalid length. [ 490.266098][T14275] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2492'. [ 490.551828][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.561725][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.576964][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 490.587816][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 490.595969][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 490.603346][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.916025][T11749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.933995][T11749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.953533][T11749] bond0 (unregistering): Released all slaves [ 491.221564][T14288] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2496'. [ 491.221677][T14286] netlink: 'syz.2.2494': attribute type 3 has an invalid length. [ 491.255617][T14286] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.2494'. [ 492.137813][T11749] hsr_slave_0: left promiscuous mode [ 492.233155][T11749] hsr_slave_1: left promiscuous mode [ 492.380246][T11749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.401657][T11749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.460546][T14321] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2501'. [ 492.510363][T11749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.559386][T11749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.714273][ T54] Bluetooth: hci0: command tx timeout [ 492.844142][T11749] veth1_macvtap: left promiscuous mode [ 492.912872][T11749] veth0_macvtap: left promiscuous mode [ 492.945431][T11749] veth1_vlan: left promiscuous mode [ 492.950822][T11749] veth0_vlan: left promiscuous mode [ 493.204744][T14346] netlink: 'syz.2.2509': attribute type 3 has an invalid length. [ 493.224042][T14346] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.2509'. [ 493.881074][T11749] team0 (unregistering): Port device team_slave_1 removed [ 493.945121][T11749] team0 (unregistering): Port device team_slave_0 removed [ 494.574768][T14277] chnl_net:caif_netlink_parms(): no params data found [ 494.742117][T14363] netlink: 'syz.0.2514': attribute type 29 has an invalid length. [ 494.762780][T14364] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2515'. [ 494.774676][T14366] netlink: 'syz.0.2514': attribute type 29 has an invalid length. [ 494.794812][T14363] netlink: 'syz.0.2514': attribute type 29 has an invalid length. [ 494.813382][ T54] Bluetooth: hci0: command tx timeout [ 494.903289][T14363] netlink: 'syz.0.2514': attribute type 29 has an invalid length. [ 495.238517][T14277] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.283195][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.331132][T14277] bridge_slave_0: entered allmulticast mode [ 495.367724][T14277] bridge_slave_0: entered promiscuous mode [ 495.392315][T14277] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.406522][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.429023][T14277] bridge_slave_1: entered allmulticast mode [ 495.447371][T14277] bridge_slave_1: entered promiscuous mode [ 495.579286][T14277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.719045][T14393] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2522'. [ 495.736913][T14277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.786831][T14397] netlink: 'syz.0.2523': attribute type 3 has an invalid length. [ 495.812177][T14397] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2523'. [ 495.935408][T14277] team0: Port device team_slave_0 added [ 495.972670][T14277] team0: Port device team_slave_1 added [ 496.090965][T14277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.119500][T14277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.194111][T14277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.223548][T14415] netlink: 'syz.2.2528': attribute type 29 has an invalid length. [ 496.287508][T14277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.309154][T14277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.342507][T14277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.361030][T14418] netlink: 'syz.2.2528': attribute type 29 has an invalid length. [ 496.460681][T14423] netlink: 'syz.2.2528': attribute type 29 has an invalid length. [ 496.593554][T14415] netlink: 'syz.2.2528': attribute type 29 has an invalid length. [ 496.815557][T14277] hsr_slave_0: entered promiscuous mode [ 496.833652][T14277] hsr_slave_1: entered promiscuous mode [ 496.874212][ T54] Bluetooth: hci0: command tx timeout [ 497.627947][T14455] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2539'. [ 498.954759][ T54] Bluetooth: hci0: command tx timeout [ 499.263141][T14525] validate_nla: 8 callbacks suppressed [ 499.263162][T14525] netlink: 'syz.2.2556': attribute type 29 has an invalid length. [ 499.451220][T14277] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 499.499654][T14277] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 499.539454][T14531] netlink: 'syz.2.2556': attribute type 29 has an invalid length. [ 499.582000][T14535] netlink: 'syz.0.2559': attribute type 23 has an invalid length. [ 499.605275][T14277] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 499.641745][T14277] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 499.748777][T14534] netlink: 'syz.2.2556': attribute type 29 has an invalid length. [ 499.835899][T14525] netlink: 'syz.2.2556': attribute type 29 has an invalid length. [ 500.294276][T14277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.406136][T14277] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.462180][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.469444][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.520782][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.527976][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.138635][T14576] netlink: 'syz.0.2570': attribute type 11 has an invalid length. [ 501.150711][T14581] FAULT_INJECTION: forcing a failure. [ 501.150711][T14581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.174263][T14576] netlink: 159336 bytes leftover after parsing attributes in process `syz.0.2570'. [ 501.271309][T14581] CPU: 1 PID: 14581 Comm: syz.4.2573 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 501.281176][T14581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 501.289000][T14579] netlink: 'syz.1.2571': attribute type 3 has an invalid length. [ 501.291316][T14581] Call Trace: [ 501.291331][T14581] [ 501.291341][T14581] dump_stack_lvl+0x241/0x360 [ 501.291374][T14581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.291397][T14581] ? __pfx__printk+0x10/0x10 [ 501.291421][T14581] ? __pfx_lock_release+0x10/0x10 [ 501.291455][T14581] should_fail_ex+0x3b0/0x4e0 [ 501.291485][T14581] _copy_from_iter+0x1f6/0x1960 [ 501.291518][T14581] ? __virt_addr_valid+0x183/0x530 [ 501.291542][T14581] ? skb_set_owner_w+0x238/0x3e0 [ 501.302672][T14579] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.2571'. [ 501.305534][T14581] ? __pfx__copy_from_iter+0x10/0x10 [ 501.305566][T14581] ? __pfx__copy_from_iter+0x10/0x10 [ 501.305596][T14581] ? page_copy_sane+0x154/0x260 [ 501.305624][T14581] copy_page_from_iter+0x7a/0x100 [ 501.305652][T14581] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 501.305696][T14581] tun_get_user+0xec3/0x4720 [ 501.305736][T14581] ? perf_trace_lock+0x136/0x490 [ 501.305759][T14581] ? __lock_acquire+0x1346/0x1fd0 [ 501.305791][T14581] ? __pfx_tun_get_user+0x10/0x10 [ 501.305837][T14581] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 501.305862][T14581] ? tun_get+0x1e/0x2f0 [ 501.305891][T14581] ? __pfx_lock_release+0x10/0x10 [ 501.305932][T14581] ? tun_get+0x1e/0x2f0 [ 501.305954][T14581] ? tun_get+0x27d/0x2f0 [ 501.305979][T14581] tun_chr_write_iter+0x113/0x1f0 [ 501.306007][T14581] vfs_write+0xa72/0xc90 [ 501.306039][T14581] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 501.306065][T14581] ? __pfx_vfs_write+0x10/0x10 [ 501.306117][T14581] ksys_write+0x1a0/0x2c0 [ 501.306151][T14581] ? __pfx_ksys_write+0x10/0x10 [ 501.306177][T14581] ? do_syscall_64+0x100/0x230 [ 501.306203][T14581] ? do_syscall_64+0xb6/0x230 [ 501.306227][T14581] do_syscall_64+0xf3/0x230 [ 501.306249][T14581] ? clear_bhb_loop+0x35/0x90 [ 501.306274][T14581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.306297][T14581] RIP: 0033:0x7fcf42b75f19 [ 501.306317][T14581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.306334][T14581] RSP: 002b:00007fcf43949048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 501.306358][T14581] RAX: ffffffffffffffda RBX: 00007fcf42d05f60 RCX: 00007fcf42b75f19 [ 501.306374][T14581] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 501.306388][T14581] RBP: 00007fcf439490a0 R08: 0000000000000000 R09: 0000000000000000 [ 501.306403][T14581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.306416][T14581] R13: 000000000000000b R14: 00007fcf42d05f60 R15: 00007ffd819a5178 [ 501.549262][T14581] [ 501.850303][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.865393][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.955803][T14587] netlink: 'syz.2.2572': attribute type 11 has an invalid length. [ 501.988198][T14277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.062095][T14587] netlink: 159336 bytes leftover after parsing attributes in process `syz.2.2572'. [ 502.092365][T14596] netlink: 'syz.0.2576': attribute type 29 has an invalid length. [ 502.127865][T14599] netlink: 'syz.0.2576': attribute type 29 has an invalid length. [ 502.317817][T14277] veth0_vlan: entered promiscuous mode [ 502.381464][T14277] veth1_vlan: entered promiscuous mode [ 502.506104][T14277] veth0_macvtap: entered promiscuous mode [ 502.542119][T14277] veth1_macvtap: entered promiscuous mode [ 502.621035][T14277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.694014][T14277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.725479][T14277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.730104][T14616] netlink: 159336 bytes leftover after parsing attributes in process `syz.0.2582'. [ 502.768236][T14277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.804479][T14277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.848910][T14277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.885891][T14277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.916445][T14277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.949334][T14277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.093764][T14623] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2584'. [ 503.198059][T14277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.251737][T14277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.303011][T14277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.354489][T14277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.375916][T14277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.404449][T14277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.425277][T14277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.463929][T14277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.500728][T14277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.598821][T14277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.639024][T14277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.665025][T14277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.684163][T14277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.959440][T11756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.981631][T11756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.080282][T11756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.144935][T11756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.550895][T14662] validate_nla: 8 callbacks suppressed [ 504.551838][T14662] netlink: 'syz.0.2595': attribute type 11 has an invalid length. [ 504.576057][T14662] netlink: 159336 bytes leftover after parsing attributes in process `syz.0.2595'. [ 504.967417][T14673] netlink: 'syz.4.2599': attribute type 1 has an invalid length. [ 504.977827][T14673] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2599'. [ 505.158388][T14684] netlink: 'syz.4.2602': attribute type 29 has an invalid length. [ 505.188499][T14684] netlink: 'syz.4.2602': attribute type 29 has an invalid length. [ 505.223540][T14684] netlink: 'syz.4.2602': attribute type 29 has an invalid length. [ 505.253292][T14684] netlink: 'syz.4.2602': attribute type 29 has an invalid length. [ 505.830422][T14704] netlink: 'syz.4.2610': attribute type 29 has an invalid length. [ 505.920038][T14709] netlink: 'syz.4.2610': attribute type 29 has an invalid length. [ 505.925245][T14706] netlink: 'syz.1.2611': attribute type 11 has an invalid length. [ 505.954521][T14706] netlink: 159336 bytes leftover after parsing attributes in process `syz.1.2611'. [ 506.293163][T14714] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 506.312359][T14714] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2613'. [ 506.422961][T10932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.603192][T10932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.716084][T10932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.787155][T10932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.913736][T10932] bridge_slave_1: left allmulticast mode [ 506.921590][T10932] bridge_slave_1: left promiscuous mode [ 506.929255][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.938861][T10932] bridge_slave_0: left allmulticast mode [ 506.944781][T10932] bridge_slave_0: left promiscuous mode [ 506.950449][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.336535][T10932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.425431][T14717] netlink: 209584 bytes leftover after parsing attributes in process `syz.2.2616'. [ 507.437627][T10932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.496918][T10932] bond0 (unregistering): Released all slaves [ 507.569219][T14727] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2618'. [ 507.947424][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.957986][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.018073][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.041340][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.056049][T14750] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2625'. [ 508.074843][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 508.084586][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.355981][T14747] team0: Device veth0_macvtap failed to register rx_handler [ 508.514642][T14754] syzkaller0: entered allmulticast mode [ 508.946405][T14762] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2626'. [ 509.958216][T14773] validate_nla: 6 callbacks suppressed [ 509.958239][T14773] netlink: 'syz.0.2627': attribute type 29 has an invalid length. [ 510.028688][T14777] netlink: 'syz.0.2627': attribute type 29 has an invalid length. [ 510.164500][ T54] Bluetooth: hci0: command tx timeout [ 510.457044][T10932] hsr_slave_0: left promiscuous mode [ 510.507591][T10932] hsr_slave_1: left promiscuous mode [ 510.574237][T10932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.592551][T10932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.631874][T10932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.652134][T10932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.735958][T10932] veth1_macvtap: left promiscuous mode [ 510.750830][T10932] veth0_macvtap: left promiscuous mode [ 510.765276][T10932] veth1_vlan: left promiscuous mode [ 510.771070][T10932] veth0_vlan: left promiscuous mode [ 511.609907][T10932] team0 (unregistering): Port device team_slave_1 removed [ 511.663216][T10932] team0 (unregistering): Port device team_slave_0 removed [ 512.040958][T14785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.049224][T14785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.058394][T14785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.066226][T14785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.140176][T14793] netlink: 'syz.1.2631': attribute type 29 has an invalid length. [ 512.234112][ T54] Bluetooth: hci0: command tx timeout [ 512.769802][T14742] chnl_net:caif_netlink_parms(): no params data found [ 512.785940][T14830] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2641'. [ 513.037594][T14839] netlink: 'syz.0.2642': attribute type 29 has an invalid length. [ 513.146776][T14842] netlink: 'syz.0.2642': attribute type 29 has an invalid length. [ 513.427571][T14858] netlink: 'syz.1.2645': attribute type 29 has an invalid length. [ 513.463332][T14742] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.485524][T14742] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.512813][T14742] bridge_slave_0: entered allmulticast mode [ 513.526917][T14742] bridge_slave_0: entered promiscuous mode [ 513.542239][T14742] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.560010][T14742] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.575438][T14742] bridge_slave_1: entered allmulticast mode [ 513.590515][T14742] bridge_slave_1: entered promiscuous mode [ 513.625918][T14858] netlink: 'syz.1.2645': attribute type 29 has an invalid length. [ 513.699737][T14867] netlink: 'syz.1.2645': attribute type 29 has an invalid length. [ 513.769165][T14871] netlink: 'syz.1.2645': attribute type 29 has an invalid length. [ 513.789764][T14870] pim6reg1: entered promiscuous mode [ 513.813050][T14870] pim6reg1: entered allmulticast mode [ 514.171787][T14742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.314548][ T54] Bluetooth: hci0: command tx timeout [ 514.382792][T14742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.592838][T14742] team0: Port device team_slave_0 added [ 514.613785][T14742] team0: Port device team_slave_1 added [ 514.839362][T14742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.875162][T14742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.918724][T14911] FAULT_INJECTION: forcing a failure. [ 514.918724][T14911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.968240][T14911] CPU: 1 PID: 14911 Comm: syz.1.2658 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 514.978108][T14911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 514.982193][T14742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.988164][T14911] Call Trace: [ 514.988178][T14911] [ 514.988187][T14911] dump_stack_lvl+0x241/0x360 [ 514.988216][T14911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.988236][T14911] ? __pfx__printk+0x10/0x10 [ 514.988257][T14911] ? __pfx_lock_release+0x10/0x10 [ 514.988285][T14911] should_fail_ex+0x3b0/0x4e0 [ 515.004559][T14742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.004954][T14911] _copy_to_user+0x2f/0xb0 [ 515.009733][T14742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.014915][T14911] bpf_test_finish+0x30f/0x8b0 [ 515.014951][T14911] ? __pfx_bpf_test_finish+0x10/0x10 [ 515.014975][T14911] ? convert___skb_to_skb+0x41/0x620 [ 515.014993][T14911] ? convert_skb_to___skb+0x2d3/0x510 [ 515.015014][T14911] bpf_prog_test_run_skb+0xfe5/0x1820 [ 515.015055][T14911] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 515.020720][T14742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.024614][T14911] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 515.024642][T14911] bpf_prog_test_run+0x33a/0x3b0 [ 515.024667][T14911] __sys_bpf+0x48d/0x810 [ 515.024688][T14911] ? __pfx___sys_bpf+0x10/0x10 [ 515.024719][T14911] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 515.024742][T14911] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 515.141176][T14911] ? do_syscall_64+0x100/0x230 [ 515.145984][T14911] __x64_sys_bpf+0x7c/0x90 [ 515.150436][T14911] do_syscall_64+0xf3/0x230 [ 515.154972][T14911] ? clear_bhb_loop+0x35/0x90 [ 515.159682][T14911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.165601][T14911] RIP: 0033:0x7f5779775f19 [ 515.170029][T14911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.189653][T14911] RSP: 002b:00007f577a52f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.198069][T14911] RAX: ffffffffffffffda RBX: 00007f5779905f60 RCX: 00007f5779775f19 [ 515.206036][T14911] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 515.214090][T14911] RBP: 00007f577a52f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 515.222057][T14911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.230279][T14911] R13: 000000000000000b R14: 00007f5779905f60 R15: 00007ffe981fd988 [ 515.238591][T14911] [ 515.530190][T14742] hsr_slave_0: entered promiscuous mode [ 515.587468][T14742] hsr_slave_1: entered promiscuous mode [ 515.644306][T14918] netlink: 'syz.0.2659': attribute type 29 has an invalid length. [ 515.685063][T14921] netlink: 'syz.0.2659': attribute type 29 has an invalid length. [ 515.927513][T14935] netlink: 'syz.4.2663': attribute type 29 has an invalid length. [ 515.982506][T14938] netlink: 'syz.4.2663': attribute type 29 has an invalid length. [ 516.141785][T14935] netlink: 'syz.4.2663': attribute type 29 has an invalid length. [ 516.174174][T14938] netlink: 'syz.4.2663': attribute type 29 has an invalid length. [ 516.394168][ T54] Bluetooth: hci0: command tx timeout [ 516.577020][T14949] netlink: 'syz.1.2668': attribute type 21 has an invalid length. [ 516.607978][T14949] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2668'. [ 517.218160][T14971] netlink: 'syz.4.2675': attribute type 7 has an invalid length. [ 517.247108][T14971] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2675'. [ 517.600443][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 517.625232][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 517.635229][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 517.647067][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 517.663216][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 517.674642][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 517.857425][T14980] netlink: 'syz.2.2677': attribute type 29 has an invalid length. [ 517.873180][T14983] netlink: 'syz.2.2677': attribute type 29 has an invalid length. [ 518.103035][T11749] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.260525][T11749] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.558629][T11749] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.712730][T11749] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.763313][T14742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 518.798286][T14742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 518.889665][T14988] chnl_net:caif_netlink_parms(): no params data found [ 518.903763][T14742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 518.906516][T15022] [ 518.912852][T15022] ====================================================== [ 518.919848][T15022] WARNING: possible circular locking dependency detected [ 518.926838][T15022] 6.10.0-syzkaller-04506-g229d6db14942 #0 Not tainted [ 518.933653][T15022] ------------------------------------------------------ [ 518.940727][T15022] syz.0.2686/15022 is trying to acquire lock: [ 518.946763][T15022] ffff8880b9538798 (lock#10){+.+.}-{2:2}, at: __mmap_lock_do_trace_start_locking+0x83/0x620 [ 518.956830][T15022] [ 518.956830][T15022] but task is already holding lock: [ 518.964252][T15022] ffff8880b953e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 518.973697][T15022] [ 518.973697][T15022] which lock already depends on the new lock. [ 518.973697][T15022] [ 518.984074][T15022] [ 518.984074][T15022] the existing dependency chain (in reverse order) is: [ 518.993060][T15022] [ 518.993060][T15022] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 519.000328][T15022] lock_acquire+0x1ed/0x550 [ 519.005339][T15022] _raw_spin_lock_nested+0x31/0x40 [ 519.010952][T15022] raw_spin_rq_lock_nested+0x2a/0x140 [ 519.016817][T15022] task_fork_fair+0x61/0x1e0 [ 519.021923][T15022] sched_cgroup_fork+0x37c/0x410 [ 519.027366][T15022] copy_process+0x2217/0x3dc0 [ 519.032538][T15022] kernel_clone+0x226/0x8f0 [ 519.037537][T15022] user_mode_thread+0x132/0x1a0 [ 519.042885][T15022] rest_init+0x23/0x300 [ 519.047536][T15022] start_kernel+0x47a/0x500 [ 519.052542][T15022] x86_64_start_reservations+0x2a/0x30 [ 519.058512][T15022] x86_64_start_kernel+0x99/0xa0 [ 519.063954][T15022] common_startup_64+0x13e/0x147 [ 519.069395][T15022] [ 519.069395][T15022] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 519.076677][T15022] lock_acquire+0x1ed/0x550 [ 519.081695][T15022] _raw_spin_lock_irqsave+0xd5/0x120 [ 519.087483][T15022] try_to_wake_up+0xb0/0x1470 [ 519.092667][T15022] rcu_read_unlock_special+0x3db/0x550 [ 519.098624][T15022] __rcu_read_unlock+0xa1/0x110 [ 519.103986][T15022] __mmap_lock_do_trace_released+0x1f2/0x620 [ 519.110493][T15022] exc_page_fault+0x7a2/0x8c0 [ 519.115684][T15022] asm_exc_page_fault+0x26/0x30 [ 519.121050][T15022] rep_movs_alternative+0x4a/0x70 [ 519.126763][T15022] _copy_from_iter+0x26b/0x1960 [ 519.132113][T15022] netlink_sendmsg+0x73d/0xcb0 [ 519.137376][T15022] __sock_sendmsg+0x221/0x270 [ 519.142553][T15022] ____sys_sendmsg+0x525/0x7d0 [ 519.147820][T15022] __sys_sendmsg+0x2b0/0x3a0 [ 519.152912][T15022] do_syscall_64+0xf3/0x230 [ 519.157913][T15022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.164309][T15022] [ 519.164309][T15022] -> #0 (lock#10){+.+.}-{2:2}: [ 519.171253][T15022] validate_chain+0x18e0/0x5900 [ 519.176605][T15022] __lock_acquire+0x1346/0x1fd0 [ 519.181953][T15022] lock_acquire+0x1ed/0x550 [ 519.186954][T15022] __mmap_lock_do_trace_start_locking+0x9c/0x620 [ 519.193779][T15022] stack_map_get_build_id_offset+0x98a/0x9d0 [ 519.200256][T15022] __bpf_get_stack+0x4ad/0x5a0 [ 519.205517][T15022] bpf_get_stack_raw_tp+0x1a3/0x240 [ 519.211215][T15022] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 519.217169][T15022] bpf_trace_run2+0x2ec/0x540 [ 519.222341][T15022] trace_tlb_flush+0x118/0x140 [ 519.227605][T15022] switch_mm_irqs_off+0x7cb/0xae0 [ 519.233132][T15022] __schedule+0x1079/0x4a60 [ 519.238134][T15022] preempt_schedule_common+0x84/0xd0 [ 519.243918][T15022] preempt_schedule+0xe1/0xf0 [ 519.249094][T15022] preempt_schedule_thunk+0x1a/0x30 [ 519.254791][T15022] _raw_spin_unlock+0x3e/0x50 [ 519.259967][T15022] __text_poke+0xa6b/0xd30 [ 519.264898][T15022] text_poke_bp_batch+0x265/0xb30 [ 519.270427][T15022] text_poke_finish+0x30/0x50 [ 519.275598][T15022] arch_jump_label_transform_apply+0x1c/0x30 [ 519.282077][T15022] static_key_enable_cpuslocked+0x136/0x260 [ 519.288468][T15022] static_key_enable+0x1a/0x20 [ 519.293729][T15022] tracepoint_add_func+0x953/0x9e0 [ 519.299335][T15022] tracepoint_probe_register+0x105/0x160 [ 519.305463][T15022] perf_trace_event_init+0x478/0x930 [ 519.311330][T15022] perf_trace_init+0x243/0x2e0 [ 519.316594][T15022] perf_tp_event_init+0x8d/0x110 [ 519.322032][T15022] perf_try_init_event+0x139/0x3f0 [ 519.327645][T15022] perf_event_alloc+0x131a/0x22d0 [ 519.333169][T15022] __se_sys_perf_event_open+0xb43/0x38d0 [ 519.339296][T15022] do_syscall_64+0xf3/0x230 [ 519.344303][T15022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.350694][T15022] [ 519.350694][T15022] other info that might help us debug this: [ 519.350694][T15022] [ 519.360895][T15022] Chain exists of: [ 519.360895][T15022] lock#10 --> &p->pi_lock --> &rq->__lock [ 519.360895][T15022] [ 519.372516][T15022] Possible unsafe locking scenario: [ 519.372516][T15022] [ 519.380043][T15022] CPU0 CPU1 [ 519.385382][T15022] ---- ---- [ 519.390722][T15022] lock(&rq->__lock); [ 519.394766][T15022] lock(&p->pi_lock); [ 519.401330][T15022] lock(&rq->__lock); [ 519.407891][T15022] lock(lock#10); [ 519.411589][T15022] [ 519.411589][T15022] *** DEADLOCK *** [ 519.411589][T15022] [ 519.419703][T15022] 9 locks held by syz.0.2686/15022: [ 519.424872][T15022] #0: ffffffff94819d30 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xd7e/0x22d0 [ 519.434239][T15022] #1: ffffffff8e391528 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x53/0x2e0 [ 519.443434][T15022] #2: ffffffff8e383368 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register+0xb6/0x160 [ 519.454014][T15022] #3: ffffffff8e1d05b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 519.463724][T15022] #4: ffffffff8e3e5368 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xd7/0x260 [ 519.474480][T15022] #5: ffffffff8e1e5728 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0x17/0x30 [ 519.484975][T15022] #6: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: __pte_offset_map+0x82/0x380 [ 519.494430][T15022] #7: ffff8880b953e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 519.504386][T15022] #8: ffffffff8e335fe0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 519.513750][T15022] [ 519.513750][T15022] stack backtrace: [ 519.519611][T15022] CPU: 1 PID: 15022 Comm: syz.0.2686 Not tainted 6.10.0-syzkaller-04506-g229d6db14942 #0 [ 519.529392][T15022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 519.539421][T15022] Call Trace: [ 519.542681][T15022] [ 519.545593][T15022] dump_stack_lvl+0x241/0x360 [ 519.550250][T15022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.555434][T15022] ? print_circular_bug+0x130/0x1a0 [ 519.560617][T15022] check_noncircular+0x36a/0x4a0 [ 519.565533][T15022] ? hlock_conflict+0x59/0x1e0 [ 519.570280][T15022] ? __pfx_check_noncircular+0x10/0x10 [ 519.575718][T15022] ? lockdep_lock+0x123/0x2b0 [ 519.580371][T15022] ? __pfx_lock_release+0x10/0x10 [ 519.585376][T15022] ? _find_first_zero_bit+0xd3/0x100 [ 519.590644][T15022] validate_chain+0x18e0/0x5900 [ 519.595477][T15022] ? lockdep_unlock+0x16a/0x300 [ 519.600305][T15022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.606350][T15022] ? __pfx_validate_chain+0x10/0x10 [ 519.611527][T15022] ? validate_chain+0x11e/0x5900 [ 519.616448][T15022] ? __pfx_validate_chain+0x10/0x10 [ 519.621638][T15022] ? lockdep_unlock+0x16a/0x300 [ 519.626552][T15022] ? __pfx_lockdep_unlock+0x10/0x10 [ 519.631816][T15022] ? mark_lock+0x9a/0x350 [ 519.636127][T15022] __lock_acquire+0x1346/0x1fd0 [ 519.640962][T15022] lock_acquire+0x1ed/0x550 [ 519.645443][T15022] ? __mmap_lock_do_trace_start_locking+0x83/0x620 [ 519.651929][T15022] ? __pfx_lock_acquire+0x10/0x10 [ 519.656932][T15022] ? validate_chain+0x11e/0x5900 [ 519.661848][T15022] ? __pfx_validate_chain+0x10/0x10 [ 519.667027][T15022] ? validate_chain+0x11e/0x5900 [ 519.671951][T15022] ? __pfx_validate_chain+0x10/0x10 [ 519.677131][T15022] ? exc_int3+0xe/0x80 [ 519.681181][T15022] ? __mmap_lock_do_trace_start_locking+0x83/0x620 [ 519.687662][T15022] __mmap_lock_do_trace_start_locking+0x9c/0x620 [ 519.694839][T15022] ? __mmap_lock_do_trace_start_locking+0x83/0x620 [ 519.701325][T15022] stack_map_get_build_id_offset+0x98a/0x9d0 [ 519.707291][T15022] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 519.713776][T15022] __bpf_get_stack+0x4ad/0x5a0 [ 519.718522][T15022] ? __pfx___bpf_get_stack+0x10/0x10 [ 519.723787][T15022] ? __pfx___cant_migrate+0x10/0x10 [ 519.728960][T15022] bpf_get_stack_raw_tp+0x1a3/0x240 [ 519.734140][T15022] ? bpf_trace_run2+0x1fc/0x540 [ 519.738968][T15022] bpf_prog_ec3b2eefa702d8d3+0x43/0x47 [ 519.744406][T15022] bpf_trace_run2+0x2ec/0x540 [ 519.749058][T15022] ? __pfx_bpf_trace_run2+0x10/0x10 [ 519.754229][T15022] ? ctx_sched_out+0x426/0x560 [ 519.758976][T15022] ? __perf_event_task_sched_out+0x2bb/0x28a0 [ 519.765022][T15022] trace_tlb_flush+0x118/0x140 [ 519.769767][T15022] switch_mm_irqs_off+0x7cb/0xae0 [ 519.774893][T15022] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 519.780437][T15022] __schedule+0x1079/0x4a60 [ 519.784933][T15022] ? bpf_get_stack_raw_tp+0x1a3/0x240 [ 519.790295][T15022] ? __pfx___schedule+0x10/0x10 [ 519.795126][T15022] ? bpf_trace_run2+0x36e/0x540 [ 519.799961][T15022] ? preempt_schedule+0xe1/0xf0 [ 519.804882][T15022] preempt_schedule_common+0x84/0xd0 [ 519.810147][T15022] preempt_schedule+0xe1/0xf0 [ 519.814802][T15022] ? __pfx_preempt_schedule+0x10/0x10 [ 519.820155][T15022] ? __gup_longterm_locked+0x1eb3/0x2a80 [ 519.825884][T15022] ? __gup_longterm_locked+0x1eb3/0x2a80 [ 519.831492][T15022] preempt_schedule_thunk+0x1a/0x30 [ 519.836673][T15022] _raw_spin_unlock+0x3e/0x50 [ 519.841327][T15022] __text_poke+0xa6b/0xd30 [ 519.845725][T15022] ? __gup_longterm_locked+0x1eb3/0x2a80 [ 519.851334][T15022] ? __pfx_text_poke_memcpy+0x10/0x10 [ 519.856692][T15022] ? __pfx___text_poke+0x10/0x10 [ 519.861608][T15022] ? __pfx___might_resched+0x10/0x10 [ 519.866870][T15022] ? __mutex_trylock_common+0x183/0x2e0 [ 519.872397][T15022] ? __pfx___might_resched+0x10/0x10 [ 519.877661][T15022] ? __gup_longterm_locked+0x1eb3/0x2a80 [ 519.883273][T15022] text_poke_bp_batch+0x265/0xb30 [ 519.888278][T15022] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 519.893803][T15022] ? __pfx___mutex_lock+0x10/0x10 [ 519.898808][T15022] ? arch_jump_label_transform_queue+0x9b/0x100 [ 519.905032][T15022] text_poke_finish+0x30/0x50 [ 519.909688][T15022] arch_jump_label_transform_apply+0x1c/0x30 [ 519.915644][T15022] static_key_enable_cpuslocked+0x136/0x260 [ 519.921516][T15022] ? __pfx_perf_trace_mmap_lock+0x10/0x10 [ 519.927244][T15022] static_key_enable+0x1a/0x20 [ 519.931985][T15022] tracepoint_add_func+0x953/0x9e0 [ 519.937252][T15022] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 519.943124][T15022] ? __pfx_perf_trace_mmap_lock+0x10/0x10 [ 519.948821][T15022] tracepoint_probe_register+0x105/0x160 [ 519.954433][T15022] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 519.960567][T15022] ? __pfx_perf_trace_mmap_lock+0x10/0x10 [ 519.966271][T15022] perf_trace_event_init+0x478/0x930 [ 519.971540][T15022] perf_trace_init+0x243/0x2e0 [ 519.976290][T15022] perf_tp_event_init+0x8d/0x110 [ 519.981213][T15022] perf_try_init_event+0x139/0x3f0 [ 519.986308][T15022] ? perf_event_alloc+0x130e/0x22d0 [ 519.991489][T15022] ? perf_event_alloc+0xd7e/0x22d0 [ 519.996575][T15022] perf_event_alloc+0x131a/0x22d0 [ 520.001573][T15022] ? perf_event_alloc+0xd7e/0x22d0 [ 520.006665][T15022] ? __se_sys_perf_event_open+0x691/0x38d0 [ 520.012449][T15022] __se_sys_perf_event_open+0xb43/0x38d0 [ 520.018065][T15022] ? __se_sys_perf_event_open+0x770/0x38d0 [ 520.023853][T15022] ? __pfx_do_futex+0x10/0x10 [ 520.028506][T15022] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 520.034549][T15022] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 520.040707][T15022] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 520.047015][T15022] ? do_syscall_64+0x100/0x230 [ 520.051762][T15022] ? __x64_sys_perf_event_open+0x20/0xc0 [ 520.057372][T15022] do_syscall_64+0xf3/0x230 [ 520.061853][T15022] ? clear_bhb_loop+0x35/0x90 [ 520.066516][T15022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.072387][T15022] RIP: 0033:0x7fcadf375f19 [ 520.076780][T15022] Code: Unable to access opcode bytes at 0x7fcadf375eef. [ 520.083782][T15022] RSP: 002b:00007fcae00bb048 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 520.092181][T15022] RAX: ffffffffffffffda RBX: 00007fcadf505f60 RCX: 00007fcadf375f19 [ 520.100321][T15022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000480 [ 520.108281][T15022] RBP: 00007fcadf3e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 520.116239][T15022] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 520.124198][T15022] R13: 000000000000000b R14: 00007fcadf505f60 R15: 00007fffab4e4658 [ 520.132159][T15022] [ 520.144874][ T5100] Bluetooth: hci2: command tx timeout [ 520.162938][T14742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 520.431286][T11749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.443656][T11749] bond_slave_0: left promiscuous mode [ 520.451747][T11749] bond_slave_0: left allmulticast mode [ 520.459320][T11749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.468382][T11749] bond_slave_1: left promiscuous mode [ 520.476424][T11749] bond_slave_1: left allmulticast mode [ 520.487004][T11749] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 520.497554][T11749] macvlan0: left promiscuous mode [ 520.502823][T11749] macvlan0: left allmulticast mode [ 520.508490][T11749] veth1_vlan: left allmulticast mode [ 520.516960][T11749] bond0 (unregistering): Released all slaves [ 520.601465][T14988] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.610957][T14988] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.619821][T14988] bridge_slave_0: entered allmulticast mode [ 520.635648][T14988] bridge_slave_0: entered promiscuous mode [ 520.649987][T14988] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.657780][T14988] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.667086][T14988] bridge_slave_1: entered allmulticast mode [ 520.674254][T14988] bridge_slave_1: entered promiscuous mode [ 520.735250][T14988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.757273][T14988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.820738][T14988] team0: Port device team_slave_0 added [ 520.835700][T14988] team0: Port device team_slave_1 added [ 520.852103][T11749] hsr_slave_0: left promiscuous mode [ 520.859292][T11749] hsr_slave_1: left promiscuous mode [ 520.869395][T11749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.879802][T11749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.889950][T11749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.898447][T11749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.908647][T11749] veth1_macvtap: left promiscuous mode [ 520.917720][T11749] veth0_macvtap: left promiscuous mode [ 520.923355][T11749] veth1_vlan: left promiscuous mode [ 520.929413][T11749] veth0_vlan: left promiscuous mode [ 521.164118][T11749] team0 (unregistering): Port device team_slave_1 removed [ 521.186927][T11749] team0 (unregistering): Port device team_slave_0 removed [ 521.419060][T14988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.446022][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.476186][T14988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.488412][T14988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.496975][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.524780][T14988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.564970][T14742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.608817][T14988] hsr_slave_0: entered promiscuous mode [ 521.615772][T14988] hsr_slave_1: entered promiscuous mode [ 521.621994][T14988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.631607][T14988] Cannot create hsr debugfs directory [ 521.688408][T14742] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.728979][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.736154][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.747936][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.755080][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.043299][T14742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.102136][T14742] veth0_vlan: entered promiscuous mode [ 522.137108][T14742] veth1_vlan: entered promiscuous mode [ 522.171288][T14988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 522.190246][T14742] veth0_macvtap: entered promiscuous mode [ 522.199569][T14988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 522.211442][T14742] veth1_macvtap: entered promiscuous mode [ 522.221893][T14988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 522.235054][ T5100] Bluetooth: hci2: command tx timeout [ 522.235548][T14988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 522.256426][T14742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.269107][T14742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.279234][T14742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.290223][T14742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.301680][T14742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.323159][T14742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.333900][T14742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.343714][T14742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.354793][T14742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.366051][T14742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.382905][T14742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.392242][T14742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.402144][T14742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.410952][T14742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.467953][T14742] ieee80211 phy67: Selected rate control algorithm 'minstrel_ht' [ 522.515835][T11734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.525634][T14742] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 522.538912][T11734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.568056][T14988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.585932][T10932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.594171][T10932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.638831][T14988] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.696738][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.703905][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.713427][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.720595][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.859440][T14988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.892129][T14988] veth0_vlan: entered promiscuous mode [ 522.902562][T14988] veth1_vlan: entered promiscuous mode [ 522.923829][T14988] veth0_macvtap: entered promiscuous mode [ 522.932674][T14988] veth1_macvtap: entered promiscuous mode [ 522.948223][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.961290][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.971228][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.982150][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.992069][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.002763][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.013588][T14988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.027055][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.038836][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.050590][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.061537][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.072691][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.083519][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.095179][T14988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.107820][T14988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.116880][T14988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.126389][T14988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.135133][T14988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.167681][T14988] ieee80211 phy69: Selected rate control algorithm 'minstrel_ht' [ 523.192007][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.195328][T14988] ieee80211 phy70: Selected rate control algorithm 'minstrel_ht' [ 523.212493][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.232481][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.240530][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.171070][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.313993][ T5100] Bluetooth: hci2: command tx timeout [ 526.148924][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.229774][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.297825][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.394458][ T5100] Bluetooth: hci2: command tx timeout [ 526.430731][ T12] bridge_slave_1: left allmulticast mode [ 526.450302][ T12] bridge_slave_1: left promiscuous mode [ 526.464176][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.478609][ T12] bridge_slave_0: left allmulticast mode [ 526.485287][ T12] bridge_slave_0: left promiscuous mode [ 526.491011][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.635849][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.647279][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.659942][ T12] bond0 (unregistering): Released all slaves [ 526.961491][ T12] hsr_slave_0: left promiscuous mode [ 526.975374][ T12] hsr_slave_1: left promiscuous mode [ 526.989503][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.997319][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.014842][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.022274][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.054064][ T12] veth1_macvtap: left promiscuous mode [ 527.059614][ T12] veth0_macvtap: left promiscuous mode [ 527.074684][ T12] veth1_vlan: left promiscuous mode [ 527.080021][ T12] veth0_vlan: left promiscuous mode [ 527.303023][ T12] team0 (unregistering): Port device team_slave_1 removed [ 527.348999][ T12] team0 (unregistering): Port device team_slave_0 removed