last executing test programs: 8.513110004s ago: executing program 0 (id=1406): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e0000"], 0xffffffffffffffcd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002380)={&(0x7f0000001e40)=@abs={0x1, 0x0, 0x3ff}, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x4004810}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 8.358734937s ago: executing program 1 (id=1408): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x106) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x1e, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0xf, 0x5, 0x80, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x4, @perf_config_ext={0xddd, 0x3d9}, 0x101004, 0x8, 0x1, 0x5, 0x6, 0x7fffffff, 0xc, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x9, r2, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.090432231s ago: executing program 2 (id=1409): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) socket$kcm(0xa, 0x3, 0x3a) 5.094787599s ago: executing program 1 (id=1410): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1], 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0xfdef) 5.094568939s ago: executing program 2 (id=1411): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x27) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x10, 0x0, 0x4d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8001, 0x6}, 0x940, 0x2, 0xfffffffe, 0x1, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000050000000000000000000000850000001100000018010000696c6c2500000000002020207bd3c3e3fd17dc9882a100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) 5.094423669s ago: executing program 3 (id=1412): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x86dd, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.093280089s ago: executing program 0 (id=1418): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d00000000010000"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810000}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x4}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.851631713s ago: executing program 2 (id=1413): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x300080c5) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000004000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xa, 0x3, 0x73) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1, 0x0, 0x0, 0x2000000}, 0x40002001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) sendmsg$inet(r0, 0x0, 0x0) 4.628249787s ago: executing program 2 (id=1414): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff77) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x900000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000"], 0x0, 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) recvmsg$unix(r2, 0x0, 0x10241) 1.88977217s ago: executing program 2 (id=1415): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.820391661s ago: executing program 1 (id=1416): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r0, 0x88, 0x64, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48014) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40400) 1.764026632s ago: executing program 0 (id=1417): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7fffffff}, 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x401}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) 1.739329462s ago: executing program 3 (id=1419): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) 1.539768286s ago: executing program 3 (id=1420): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000000, 0x3fff8000}, 0x110, 0x32, 0x43a1bd77, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='$!:\x00') perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x1, 0x8, 0x5, 0x6, 0x0, 0xfffffffffffffff2, 0x20a4, 0xf, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x10, 0x4, 0x13800000, 0x0, 0x7fffffffffffffff, 0x80, 0x3, 0x0, 0x70000, 0x0, 0x274c}, r1, 0xd, r3, 0x3) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 1.460947397s ago: executing program 0 (id=1421): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.057599193s ago: executing program 3 (id=1422): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.009125605s ago: executing program 1 (id=1423): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) socket$kcm(0xa, 0x3, 0x3a) 908.659236ms ago: executing program 0 (id=1424): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 607.963101ms ago: executing program 0 (id=1425): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x88702, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0), 0x0) write$cgroup_int(r3, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000600000061114f0000000000850000001e0000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x0, 0x200000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 569.028231ms ago: executing program 3 (id=1426): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xe}, 0x0, 0x0, 0x100000, 0x8, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, r0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYBLOB], 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 552.035592ms ago: executing program 1 (id=1427): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x9}, 0x114905, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r3], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) 196.605267ms ago: executing program 2 (id=1428): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x86dd, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 96.894999ms ago: executing program 3 (id=1429): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1], 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0xfdef) 0s ago: executing program 1 (id=1430): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x300080c5) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000004000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0xa, 0x3, 0x73) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1, 0x0, 0x0, 0x2000000}, 0x40002001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) sendmsg$inet(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 61.594802][ T5760] cgroup: Unknown subsys name 'net' [ 61.732045][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.130522][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.471968][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.480778][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.489022][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.498109][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.506456][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.524417][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.531855][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.540545][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.545157][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.548498][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.555674][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.563133][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.570965][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.576542][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.583665][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.590140][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.597950][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.611456][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.620370][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.631723][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.639047][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.645797][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.658218][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.666372][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.081223][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 65.107110][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 65.161449][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 65.171096][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 65.283739][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.291464][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.299052][ T5772] bridge_slave_0: entered allmulticast mode [ 65.306480][ T5772] bridge_slave_0: entered promiscuous mode [ 65.338525][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.347795][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.355445][ T5772] bridge_slave_1: entered allmulticast mode [ 65.362167][ T5772] bridge_slave_1: entered promiscuous mode [ 65.424140][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.431364][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.438697][ T5773] bridge_slave_0: entered allmulticast mode [ 65.445913][ T5773] bridge_slave_0: entered promiscuous mode [ 65.463475][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.475698][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.482840][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.492417][ T5775] bridge_slave_0: entered allmulticast mode [ 65.499900][ T5775] bridge_slave_0: entered promiscuous mode [ 65.508942][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.516939][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.524103][ T5773] bridge_slave_1: entered allmulticast mode [ 65.531517][ T5773] bridge_slave_1: entered promiscuous mode [ 65.561364][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.570698][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.580302][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.587669][ T5775] bridge_slave_1: entered allmulticast mode [ 65.594316][ T5775] bridge_slave_1: entered promiscuous mode [ 65.612389][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.622755][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.630609][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.638038][ T5774] bridge_slave_0: entered allmulticast mode [ 65.645195][ T5774] bridge_slave_0: entered promiscuous mode [ 65.673377][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.691692][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.700236][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.707593][ T5774] bridge_slave_1: entered allmulticast mode [ 65.714279][ T5774] bridge_slave_1: entered promiscuous mode [ 65.742673][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.774624][ T5773] team0: Port device team_slave_0 added [ 65.783850][ T5772] team0: Port device team_slave_0 added [ 65.794832][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.806420][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.817538][ T5773] team0: Port device team_slave_1 added [ 65.825750][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.836679][ T5772] team0: Port device team_slave_1 added [ 65.920612][ T5775] team0: Port device team_slave_0 added [ 65.929995][ T5775] team0: Port device team_slave_1 added [ 65.937002][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.943987][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.970486][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.984918][ T5774] team0: Port device team_slave_0 added [ 65.994525][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.001783][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.028003][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.050512][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.057777][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.085841][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.104653][ T5774] team0: Port device team_slave_1 added [ 66.122570][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.129602][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.156217][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.180211][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.187334][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.213899][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.226483][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.233445][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.265196][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.319985][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.329851][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.358439][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.401949][ T5773] hsr_slave_0: entered promiscuous mode [ 66.408674][ T5773] hsr_slave_1: entered promiscuous mode [ 66.424821][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.432044][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.458270][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.486895][ T5772] hsr_slave_0: entered promiscuous mode [ 66.493498][ T5772] hsr_slave_1: entered promiscuous mode [ 66.500361][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.508661][ T5772] Cannot create hsr debugfs directory [ 66.520207][ T5775] hsr_slave_0: entered promiscuous mode [ 66.526555][ T5775] hsr_slave_1: entered promiscuous mode [ 66.532697][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.540334][ T5775] Cannot create hsr debugfs directory [ 66.635888][ T51] Bluetooth: hci1: command tx timeout [ 66.683260][ T5774] hsr_slave_0: entered promiscuous mode [ 66.689623][ T5774] hsr_slave_1: entered promiscuous mode [ 66.696329][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.704372][ T5774] Cannot create hsr debugfs directory [ 66.716052][ T5782] Bluetooth: hci2: command tx timeout [ 66.721657][ T5782] Bluetooth: hci0: command tx timeout [ 66.725954][ T51] Bluetooth: hci3: command tx timeout [ 67.010587][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.023301][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.037392][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.048140][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.101852][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.125135][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.138741][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.152206][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.233897][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.244292][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.253740][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.263678][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.361369][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.374059][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.384201][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.396893][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.438223][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.478245][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.505282][ T2888] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.513959][ T2888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.549212][ T2888] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.556768][ T2888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.600366][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.657303][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.690045][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.707186][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.729640][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.741330][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.748502][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.764714][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.794996][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.802215][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.870353][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.877537][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.888865][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.896318][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.919332][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.961867][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.969073][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.997110][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.049449][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.056649][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.130058][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.248324][ T5775] veth0_vlan: entered promiscuous mode [ 68.282167][ T5775] veth1_vlan: entered promiscuous mode [ 68.360832][ T5775] veth0_macvtap: entered promiscuous mode [ 68.381242][ T5775] veth1_macvtap: entered promiscuous mode [ 68.419435][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.459280][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.491024][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.514337][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.523394][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.532647][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.603428][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.633305][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.680642][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.717735][ T51] Bluetooth: hci1: command tx timeout [ 68.743910][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.762773][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.797322][ T51] Bluetooth: hci0: command tx timeout [ 68.797384][ T5776] Bluetooth: hci3: command tx timeout [ 68.808930][ T5782] Bluetooth: hci2: command tx timeout [ 68.832484][ T5773] veth0_vlan: entered promiscuous mode [ 68.848061][ T2888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.848218][ T5774] veth0_vlan: entered promiscuous mode [ 68.867170][ T2888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.876298][ T5773] veth1_vlan: entered promiscuous mode [ 68.911895][ T5774] veth1_vlan: entered promiscuous mode [ 68.982520][ T5772] veth0_vlan: entered promiscuous mode [ 69.040627][ T5774] veth0_macvtap: entered promiscuous mode [ 69.059000][ T5772] veth1_vlan: entered promiscuous mode [ 69.070779][ T5774] veth1_macvtap: entered promiscuous mode [ 69.084452][ T5773] veth0_macvtap: entered promiscuous mode [ 69.117898][ T5773] veth1_macvtap: entered promiscuous mode [ 69.141102][ T5833] Illegal XDP return value 2054410281 on prog (id 2) dev N/A, expect packet loss! [ 69.159516][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.172499][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.185015][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.211823][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.224053][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.237629][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.248580][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.267111][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.284426][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.297294][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.316907][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.339650][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.353670][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.383061][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.395467][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.409520][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.424754][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.434860][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.446782][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.456053][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.482898][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.497522][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.509552][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.529011][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.796243][ T5782] Bluetooth: hci1: command tx timeout [ 70.876632][ T5782] Bluetooth: hci0: command tx timeout [ 70.876739][ T5776] Bluetooth: hci2: command tx timeout [ 70.882112][ T51] Bluetooth: hci3: command tx timeout [ 71.418423][ T5772] veth0_macvtap: entered promiscuous mode [ 71.569434][ T5772] veth1_macvtap: entered promiscuous mode [ 71.602014][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.608688][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.788265][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.812072][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.824387][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.834977][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.845983][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.857146][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.869179][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.913940][ T5841] syzkaller0: entered promiscuous mode [ 71.921404][ T5841] syzkaller0: entered allmulticast mode [ 71.934344][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.934588][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.952978][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.975539][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.992415][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.002996][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.012877][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.023424][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.034329][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.885875][ T5782] Bluetooth: hci1: command tx timeout [ 72.957089][ T5782] Bluetooth: hci2: command tx timeout [ 72.966481][ T51] Bluetooth: hci3: command tx timeout [ 72.972029][ T5782] Bluetooth: hci0: command tx timeout [ 73.006098][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.014102][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.032880][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.050197][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.061445][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.072662][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.132133][ C0] hrtimer: interrupt took 66631 ns [ 73.143984][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.157499][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.173292][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.200991][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.436075][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.443960][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.535200][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.579276][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.756562][ T5782] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 78.058284][ T5882] syzkaller0: entered allmulticast mode [ 78.168607][ T5884] warning: `syz.1.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.884584][ T5899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23'. [ 78.958982][ T5899] netlink: 3 bytes leftover after parsing attributes in process `syz.2.23'. [ 79.039565][ T5899] netlink: 3 bytes leftover after parsing attributes in process `syz.2.23'. [ 80.499030][ T5919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.29'. [ 80.663851][ T5921] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 81.241104][ T5933] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 81.548338][ T5948] Zero length message leads to an empty skb [ 81.582798][ T5949] netlink: 'syz.0.40': attribute type 10 has an invalid length. [ 81.637645][ T5949] bond0: (slave bond_slave_0): Releasing backup interface [ 81.852615][ T42] cfg80211: failed to load regulatory.db [ 81.929120][ T5953] netlink: 'syz.1.42': attribute type 21 has an invalid length. [ 81.974921][ T5953] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.42'. [ 84.657242][ T5993] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 (while UP) [ 85.120428][ T11] wlan1: Trigger new scan to find an IBSS to join [ 85.918004][ T6009] netlink: 'syz.2.62': attribute type 10 has an invalid length. [ 85.939632][ T6009] netlink: 55 bytes leftover after parsing attributes in process `syz.2.62'. [ 87.362742][ T6029] team0: Port device team_slave_0 removed [ 87.371334][ T6035] netlink: 164 bytes leftover after parsing attributes in process `syz.3.72'. [ 87.583857][ T6039] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 87.592398][ T6039] netlink: 55 bytes leftover after parsing attributes in process `syz.0.74'. [ 87.844107][ T6045] vcan0: entered allmulticast mode [ 87.877292][ T6045] netlink: 'syz.0.76': attribute type 10 has an invalid length. [ 87.904581][ T6045] veth0_macvtap: left promiscuous mode [ 88.022879][ T6051] netlink: 'syz.3.79': attribute type 29 has an invalid length. [ 88.049479][ T6051] netlink: 'syz.3.79': attribute type 29 has an invalid length. [ 88.294904][ T5782] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 88.298977][ T6056] syzkaller0: entered promiscuous mode [ 88.313201][ T6056] syzkaller0: entered allmulticast mode [ 89.981259][ T6080] syzkaller0: entered promiscuous mode [ 89.987194][ T6080] syzkaller0: entered allmulticast mode [ 90.086561][ T2925] wlan1: Trigger new scan to find an IBSS to join [ 91.046862][ T49] wlan1: Creating new IBSS network, BSSID 3e:ef:e1:8a:28:37 [ 91.513582][ T6100] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.100'. [ 92.289542][ T6112] netlink: 'syz.3.104': attribute type 16 has an invalid length. [ 92.300504][ T6112] netlink: 'syz.3.104': attribute type 3 has an invalid length. [ 92.308665][ T6112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.104'. [ 92.713658][ T6119] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 92.777161][ T6121] Dead loop on virtual device ip6_vti0, fix it urgently! [ 92.852899][ T6119] veth0_vlan: left promiscuous mode [ 92.911166][ T6119] veth0_vlan: entered promiscuous mode [ 92.957656][ T6119] team0: Device veth0_vlan failed to register rx_handler [ 93.033460][ T51] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 93.295508][ T6119] syz.3.107 (6119) used greatest stack depth: 17560 bytes left [ 93.639955][ T6139] syzkaller0: entered promiscuous mode [ 93.659968][ T6139] syzkaller0: entered allmulticast mode [ 96.496822][ T6181] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.523831][ T6181] syzkaller0: entered promiscuous mode [ 96.534097][ T6181] syzkaller0: entered allmulticast mode [ 99.118272][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 101.936190][ T6252] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 101.976005][ T6252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.157'. [ 102.012535][ T6252] ipvlan1: entered promiscuous mode [ 102.056501][ T6252] ipvlan1: entered allmulticast mode [ 102.086163][ T6252] veth0_vlan: entered allmulticast mode [ 102.166986][ T6252] bridge0: port 3(ipvlan1) entered blocking state [ 102.182540][ T6252] bridge0: port 3(ipvlan1) entered disabled state [ 102.273032][ T6252] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 102.753958][ T51] Bluetooth: hci1: Malformed LE Event: 0x0b [ 102.943935][ T6279] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 102.952480][ T6279] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.168'. [ 102.962466][ T6279] netlink: 9 bytes leftover after parsing attributes in process `syz.3.168'. [ 103.650808][ T6288] netlink: 668 bytes leftover after parsing attributes in process `syz.0.172'. [ 103.691701][ T6288] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 103.722635][ T6288] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 105.082719][ T6311] raw_sendmsg: syz.3.179 forgot to set AF_INET. Fix it! [ 111.184723][ T6328] delete_channel: no stack [ 111.932089][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 111.940187][ T51] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 111.986428][ T6356] __sock_release: fasync list not empty! [ 112.145050][ T51] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 112.607323][ T6377] sock: sock_set_timeout: `syz.1.205' (pid 6377) tries to set negative timeout [ 112.668798][ T6375] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.204'. [ 112.682036][ T6375] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 113.194467][ T6391] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.269683][ T6391] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.211'. [ 113.731121][ T6400] syzkaller0: entered promiscuous mode [ 113.739598][ T6400] syzkaller0: entered allmulticast mode [ 113.775773][ T6404] syz.1.217 uses obsolete (PF_INET,SOCK_PACKET) [ 115.351148][ T6408] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 115.386006][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.419410][ T6408] bridge_slave_1: left allmulticast mode [ 115.444750][ T6408] bridge_slave_1: left promiscuous mode [ 115.452170][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.472927][ T6408] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 116.631489][ T6440] netlink: 'syz.2.226': attribute type 10 has an invalid length. [ 116.748440][ T6440] team0: Port device geneve1 added [ 117.091891][ T6447] syzkaller0: entered promiscuous mode [ 117.115630][ T6447] syzkaller0: entered allmulticast mode [ 121.149071][ T2959] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 121.202925][ T6508] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 121.275181][ T6508] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.331429][ T6508] bond0: (slave team0): Enslaving as an active interface with an up link [ 121.362098][ T6512] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 121.370689][ T6512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.250'. [ 121.381638][ T6512] team0: entered promiscuous mode [ 121.395562][ T6512] team_slave_0: entered promiscuous mode [ 121.409572][ T6512] team_slave_1: entered promiscuous mode [ 121.429075][ T6512] team0: entered allmulticast mode [ 121.446408][ T6512] team_slave_0: entered allmulticast mode [ 121.475530][ T6512] team_slave_1: entered allmulticast mode [ 121.493140][ T6512] bond0: (slave team0): Releasing backup interface [ 121.536545][ T6512] bridge0: port 3(team0) entered blocking state [ 121.557041][ T6512] bridge0: port 3(team0) entered disabled state [ 121.809418][ T6517] syzkaller0: entered promiscuous mode [ 121.814964][ T6517] syzkaller0: entered allmulticast mode [ 123.032620][ T6547] netlink: 'syz.1.264': attribute type 29 has an invalid length. [ 124.077771][ T6547] netlink: 'syz.1.264': attribute type 29 has an invalid length. [ 124.290600][ T5782] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 124.690601][ T6567] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.272'. [ 124.907092][ T6575] delete_channel: no stack [ 126.687248][ T6596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.695073][ T6596] IPv6: NLM_F_CREATE should be set when creating new route [ 126.702781][ T6596] IPv6: NLM_F_CREATE should be set when creating new route [ 126.710299][ T6596] IPv6: NLM_F_CREATE should be set when creating new route [ 126.804969][ T6596] netlink: 'syz.0.287': attribute type 9 has an invalid length. [ 126.822367][ T6596] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.287'. [ 126.832615][ T6599] syzkaller0: entered promiscuous mode [ 126.832636][ T6599] syzkaller0: entered allmulticast mode [ 127.335547][ T6602] netlink: 'syz.0.287': attribute type 9 has an invalid length. [ 127.391419][ T6602] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.287'. [ 127.401498][ T5782] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 127.654319][ T6613] netlink: 'syz.2.294': attribute type 3 has an invalid length. [ 127.706280][ T6613] netlink: 'syz.2.294': attribute type 1 has an invalid length. [ 127.721470][ T6613] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.294'. [ 129.445577][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 130.927938][ T6626] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 130.942815][ T6626] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.299'. [ 130.985077][ T6626] netlink: 1 bytes leftover after parsing attributes in process `syz.2.299'. [ 131.160495][ T6636] netlink: 'syz.0.304': attribute type 11 has an invalid length. [ 131.225506][ T6636] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.304'. [ 133.035134][ T6663] netlink: 'syz.2.318': attribute type 29 has an invalid length. [ 133.056334][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.056425][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.098945][ T6665] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.317'. [ 133.119285][ T6665] openvswitch: netlink: Key type 4112 is out of range max 32 [ 133.154289][ T6668] netlink: 'syz.2.318': attribute type 29 has an invalid length. [ 133.166528][ T6663] netlink: 'syz.2.318': attribute type 29 has an invalid length. [ 133.270205][ T6663] netlink: 'syz.2.318': attribute type 21 has an invalid length. [ 133.306629][ T6663] netlink: 164 bytes leftover after parsing attributes in process `syz.2.318'. [ 133.719303][ T6683] syzkaller0: entered promiscuous mode [ 133.749805][ T6683] syzkaller0: entered allmulticast mode [ 133.771178][ T6688] netlink: 'syz.1.328': attribute type 11 has an invalid length. [ 133.791676][ T6688] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.328'. [ 133.829127][ T6688] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 136.800896][ T6712] netlink: 'syz.1.338': attribute type 29 has an invalid length. [ 136.845795][ T6715] netlink: 'syz.1.338': attribute type 29 has an invalid length. [ 137.557155][ T6712] netlink: 'syz.1.338': attribute type 29 has an invalid length. [ 137.570986][ T6716] netlink: 'syz.1.338': attribute type 21 has an invalid length. [ 137.589562][ T6716] netlink: 164 bytes leftover after parsing attributes in process `syz.1.338'. [ 137.652012][ T6720] netlink: 'syz.3.340': attribute type 11 has an invalid length. [ 137.666558][ T6720] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.340'. [ 137.680123][ T6720] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 138.018099][ T6726] netlink: 'syz.2.354': attribute type 11 has an invalid length. [ 138.026412][ T6726] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.354'. [ 138.046473][ T6726] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 138.893741][ T6745] syzkaller0: entered promiscuous mode [ 138.899621][ T6745] syzkaller0: entered allmulticast mode [ 142.350724][ T6774] delete_channel: no stack [ 144.157208][ T6797] netlink: 'syz.2.386': attribute type 29 has an invalid length. [ 144.170838][ T6795] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.378'. [ 144.183560][ T6797] netlink: 'syz.2.386': attribute type 29 has an invalid length. [ 144.219299][ T6797] netlink: 'syz.2.386': attribute type 29 has an invalid length. [ 144.304093][ T5782] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 144.448824][ T6805] delete_channel: no stack [ 145.443784][ T5782] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 145.458604][ T6828] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.392'. [ 145.876572][ T6837] netlink: 'syz.3.398': attribute type 29 has an invalid length. [ 145.929505][ T6836] delete_channel: no stack [ 145.939685][ T6837] netlink: 'syz.3.398': attribute type 29 has an invalid length. [ 145.952234][ T6841] netlink: 'syz.3.398': attribute type 29 has an invalid length. [ 146.442004][ T6851] delete_channel: no stack [ 150.060031][ T6864] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.406'. [ 150.369778][ T6874] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 150.413678][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.451436][ T6874] bond0: (slave team0): Enslaving as an active interface with an up link [ 150.487383][ T6876] netlink: 'syz.2.413': attribute type 10 has an invalid length. [ 150.515535][ T6876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.413'. [ 150.531366][ T6876] team0: entered promiscuous mode [ 150.537330][ T6876] team_slave_1: entered promiscuous mode [ 150.543344][ T6876] geneve1: entered promiscuous mode [ 150.549801][ T6876] team0: entered allmulticast mode [ 150.556032][ T6876] team_slave_1: entered allmulticast mode [ 150.564146][ T6876] geneve1: entered allmulticast mode [ 150.586167][ T6876] bond0: (slave team0): Releasing backup interface [ 150.606359][ T6876] bridge0: port 2(team0) entered blocking state [ 150.612967][ T6876] bridge0: port 2(team0) entered disabled state [ 150.861685][ T6883] syzkaller0: entered promiscuous mode [ 150.889027][ T6883] syzkaller0: entered allmulticast mode [ 151.382136][ T6895] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.420'. [ 152.255248][ T8] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 153.258357][ T6917] delete_channel: no stack [ 153.805852][ T6937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.813435][ T6937] IPv6: NLM_F_CREATE should be set when creating new route [ 153.820951][ T6937] IPv6: NLM_F_CREATE should be set when creating new route [ 153.828351][ T6937] IPv6: NLM_F_CREATE should be set when creating new route [ 153.859866][ T6937] netlink: 'syz.3.436': attribute type 9 has an invalid length. [ 153.872293][ T6937] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.436'. [ 154.051944][ T6939] netlink: 'syz.3.436': attribute type 9 has an invalid length. [ 154.073458][ T6939] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.436'. [ 154.864413][ T6948] syzkaller0: entered promiscuous mode [ 154.873304][ T6948] syzkaller0: entered allmulticast mode [ 156.842654][ T6961] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 156.896937][ T6961] team0: Port device geneve1 added [ 157.773471][ T6980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.780936][ T6980] IPv6: NLM_F_CREATE should be set when creating new route [ 157.788589][ T6980] IPv6: NLM_F_CREATE should be set when creating new route [ 157.796020][ T6980] IPv6: NLM_F_CREATE should be set when creating new route [ 157.826808][ T6980] netlink: 'syz.1.450': attribute type 9 has an invalid length. [ 157.862294][ T6980] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.450'. [ 158.722301][ T6982] netlink: 'syz.1.450': attribute type 9 has an invalid length. [ 158.730505][ T6982] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.450'. [ 159.250663][ T6998] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.461'. [ 159.464016][ T7002] syzkaller0: entered promiscuous mode [ 159.474748][ T7002] syzkaller0: entered allmulticast mode [ 162.123462][ T7023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.131027][ T7023] IPv6: NLM_F_CREATE should be set when creating new route [ 162.138630][ T7023] IPv6: NLM_F_CREATE should be set when creating new route [ 162.146103][ T7023] IPv6: NLM_F_CREATE should be set when creating new route [ 162.224340][ T7023] netlink: 'syz.2.468': attribute type 9 has an invalid length. [ 162.255259][ T7023] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.468'. [ 162.558752][ T7033] netlink: 'syz.2.468': attribute type 9 has an invalid length. [ 162.611236][ T7033] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.468'. [ 163.120441][ T7050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.239838][ T7050] netlink: 'syz.1.486': attribute type 9 has an invalid length. [ 163.275501][ T7050] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.486'. [ 163.301549][ T7049] syzkaller0: entered promiscuous mode [ 163.324258][ T7049] syzkaller0: entered allmulticast mode [ 163.993152][ T7053] netlink: 'syz.1.486': attribute type 9 has an invalid length. [ 164.024719][ T7053] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.486'. [ 166.058661][ T7066] sock: sock_set_timeout: `syz.2.482' (pid 7066) tries to set negative timeout [ 167.408718][ T7095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.427540][ T7095] netlink: 'syz.2.491': attribute type 9 has an invalid length. [ 167.435289][ T7095] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.491'. [ 167.530422][ T7096] netlink: 'syz.2.491': attribute type 9 has an invalid length. [ 167.586898][ T7096] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.491'. [ 168.852811][ T7125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.855954][ T7127] netlink: 'syz.3.507': attribute type 9 has an invalid length. [ 168.892276][ T7127] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.507'. [ 169.113237][ T7125] netlink: 'syz.3.507': attribute type 9 has an invalid length. [ 169.131729][ T7125] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.507'. [ 170.913236][ T5782] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 171.609950][ T7166] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.660696][ T7166] netlink: 'syz.3.519': attribute type 9 has an invalid length. [ 171.705852][ T7166] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.519'. [ 171.931107][ T7169] netlink: 'syz.3.519': attribute type 9 has an invalid length. [ 171.958190][ T7169] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.519'. [ 172.390467][ T7180] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.524'. [ 172.403742][ T7180] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 173.009279][ T5782] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 173.115975][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 173.124411][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 173.301174][ T7201] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 173.395977][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.422269][ T7201] bridge_slave_1: left allmulticast mode [ 173.437556][ T7201] bridge_slave_1: left promiscuous mode [ 173.451284][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.597518][ T7201] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 173.930235][ T7219] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.538'. [ 173.950680][ T7219] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 174.863333][ T5782] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 175.109032][ T7236] __sock_release: fasync list not empty! [ 176.115127][ T7239] netlink: 'syz.1.549': attribute type 10 has an invalid length. [ 176.154419][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.201036][ T7239] bridge_slave_1: left allmulticast mode [ 176.219099][ T7239] bridge_slave_1: left promiscuous mode [ 176.236969][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.278249][ T7239] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 176.540857][ T7250] syzkaller0: entered promiscuous mode [ 176.547269][ T7250] syzkaller0: entered allmulticast mode [ 176.566540][ T7251] netlink: 'syz.0.562': attribute type 10 has an invalid length. [ 176.659797][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.713849][ T7251] bridge_slave_1: left allmulticast mode [ 176.738276][ T7251] bridge_slave_1: left promiscuous mode [ 176.788401][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.858625][ T7253] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.551'. [ 176.871161][ T7253] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 176.940320][ T7251] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 178.065625][ T7262] delete_channel: no stack [ 182.569560][ T7271] netlink: 'syz.1.569': attribute type 10 has an invalid length. [ 183.785226][ T7288] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.566'. [ 183.796079][ T7288] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 184.804963][ T7301] netlink: 'syz.1.574': attribute type 10 has an invalid length. [ 185.541265][ T7300] delete_channel: no stack [ 186.439888][ T7331] netlink: 'syz.3.585': attribute type 10 has an invalid length. [ 189.386705][ T7345] delete_channel: no stack [ 191.435493][ T5090] Bluetooth: hci0: command 0x0406 tx timeout [ 191.435725][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 191.442276][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 191.447804][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 191.928442][ T7375] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 192.424907][ T7381] netlink: 'syz.0.611': attribute type 10 has an invalid length. [ 194.333978][ T7402] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 194.353738][ T7402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'. [ 194.393994][ T7402] ipvlan1: entered promiscuous mode [ 194.428525][ T7402] ipvlan1: entered allmulticast mode [ 194.451165][ T7402] veth0_vlan: entered allmulticast mode [ 194.526059][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.532416][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.538828][ T7402] bridge0: port 2(ipvlan1) entered blocking state [ 194.589853][ T7402] bridge0: port 2(ipvlan1) entered disabled state [ 194.684563][ T7402] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 198.961350][ T7429] netlink: 'syz.1.622': attribute type 10 has an invalid length. [ 198.974742][ T7429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.622'. [ 199.000246][ T7429] ipvlan1: entered promiscuous mode [ 199.006783][ T7429] ipvlan1: entered allmulticast mode [ 199.016935][ T7429] veth0_vlan: entered allmulticast mode [ 199.071357][ T7429] bridge0: port 2(ipvlan1) entered blocking state [ 199.087523][ T7429] bridge0: port 2(ipvlan1) entered disabled state [ 199.110224][ T7429] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 203.089626][ T7469] netlink: 'syz.3.638': attribute type 10 has an invalid length. [ 203.105975][ T7469] netlink: 40 bytes leftover after parsing attributes in process `syz.3.638'. [ 203.121019][ T7469] ipvlan1: entered promiscuous mode [ 203.127842][ T7469] ipvlan1: entered allmulticast mode [ 203.133985][ T7469] veth0_vlan: entered allmulticast mode [ 203.160043][ T7469] bridge0: port 2(ipvlan1) entered blocking state [ 203.170273][ T7469] bridge0: port 2(ipvlan1) entered disabled state [ 203.243179][ T7469] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 207.135842][ T7503] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 207.154505][ T7503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.651'. [ 207.173824][ T7503] bridge0: port 2(ipvlan1) entered blocking state [ 207.184523][ T7503] bridge0: port 2(ipvlan1) entered disabled state [ 207.313381][ T7503] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 215.448823][ T5776] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 215.748334][ T7591] Dead loop on virtual device ip6_vti0, fix it urgently! [ 216.072092][ T7593] netlink: 'syz.0.683': attribute type 10 has an invalid length. [ 216.249740][ T7593] veth0_vlan: left promiscuous mode [ 216.287339][ T7593] veth0_vlan: entered promiscuous mode [ 216.342292][ T7593] team0: Device veth0_vlan failed to register rx_handler [ 216.773219][ T7593] syz.0.683 (7593) used greatest stack depth: 17256 bytes left [ 217.703195][ T5776] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 220.156378][ T7639] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 220.500188][ T7639] veth0_vlan: left promiscuous mode [ 220.559857][ T7639] veth0_vlan: entered promiscuous mode [ 220.620273][ T7639] team0: Device veth0_vlan failed to register rx_handler [ 220.642655][ T7643] netlink: 'syz.0.702': attribute type 16 has an invalid length. [ 220.672941][ T7643] netlink: 'syz.0.702': attribute type 3 has an invalid length. [ 220.744192][ T7643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.702'. [ 220.873222][ T7647] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.704'. [ 221.609354][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 224.183130][ T7691] netlink: 'syz.2.715': attribute type 10 has an invalid length. [ 224.401523][ T7691] veth0_vlan: left promiscuous mode [ 224.433168][ T7691] veth0_vlan: entered promiscuous mode [ 224.509639][ T7691] team0: Device veth0_vlan failed to register rx_handler [ 224.533746][ T7698] netlink: 'syz.1.717': attribute type 16 has an invalid length. [ 224.589644][ T7698] netlink: 'syz.1.717': attribute type 3 has an invalid length. [ 224.630429][ T7698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.717'. [ 225.117167][ T7700] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.718'. [ 225.515058][ T7707] netlink: 'syz.2.730': attribute type 10 has an invalid length. [ 225.536229][ T7707] veth0_vlan: left promiscuous mode [ 225.553807][ T7707] veth0_vlan: entered promiscuous mode [ 225.581782][ T7707] team0: Device veth0_vlan failed to register rx_handler [ 226.719439][ T7718] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 226.728254][ T7718] veth0_vlan: left promiscuous mode [ 226.738555][ T7718] veth0_vlan: entered promiscuous mode [ 226.761105][ T7718] team0: Device veth0_vlan failed to register rx_handler [ 227.102053][ T7728] Dead loop on virtual device ip6_vti0, fix it urgently! [ 227.901766][ T7737] syzkaller0: entered promiscuous mode [ 227.945150][ T7737] syzkaller0: entered allmulticast mode [ 230.218066][ T7756] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.738'. [ 231.919607][ T7771] syzkaller0: entered promiscuous mode [ 231.925857][ T7771] syzkaller0: entered allmulticast mode [ 231.996240][ T7777] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.753'. [ 234.541748][ T7798] netlink: 'syz.0.751': attribute type 10 has an invalid length. [ 234.553934][ T7798] veth0_vlan: left promiscuous mode [ 234.564708][ T7798] veth0_vlan: entered promiscuous mode [ 234.585165][ T7798] team0: Device veth0_vlan failed to register rx_handler [ 234.912267][ T7803] syzkaller0: entered promiscuous mode [ 234.918439][ T7803] syzkaller0: entered allmulticast mode [ 236.934447][ T7811] netlink: 'syz.3.764': attribute type 10 has an invalid length. [ 236.942803][ T7811] veth0_vlan: left promiscuous mode [ 236.949625][ T7811] veth0_vlan: entered promiscuous mode [ 236.961240][ T7811] team0: Device veth0_vlan failed to register rx_handler [ 237.178598][ T7827] netlink: 164 bytes leftover after parsing attributes in process `syz.0.757'. [ 237.557809][ T7836] syzkaller0: entered promiscuous mode [ 237.566490][ T7836] syzkaller0: entered allmulticast mode [ 240.331198][ T7850] team0: Port device team_slave_0 removed [ 240.540442][ T7865] netlink: 164 bytes leftover after parsing attributes in process `syz.1.772'. [ 240.666555][ T7870] vcan0: entered allmulticast mode [ 240.690838][ T7870] netlink: 'syz.3.773': attribute type 10 has an invalid length. [ 240.706963][ T7870] veth0_macvtap: left promiscuous mode [ 241.669755][ T7888] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP) [ 243.027869][ T7898] vcan0: entered allmulticast mode [ 243.088815][ T7898] netlink: 'syz.1.788': attribute type 10 has an invalid length. [ 243.221577][ T7898] veth0_macvtap: left promiscuous mode [ 243.527803][ T7902] netlink: 164 bytes leftover after parsing attributes in process `syz.2.789'. [ 244.539603][ T7922] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 (while UP) [ 246.133565][ T7945] netlink: 164 bytes leftover after parsing attributes in process `syz.1.802'. [ 251.192000][ T7986] netlink: 164 bytes leftover after parsing attributes in process `syz.1.818'. [ 252.752098][ T8010] netlink: 'syz.0.827': attribute type 21 has an invalid length. [ 252.761999][ T8010] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.827'. [ 255.947878][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.954346][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.602740][ T8051] netlink: 'syz.3.842': attribute type 21 has an invalid length. [ 256.658966][ T8051] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.842'. [ 258.045175][ T8069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.852'. [ 258.095892][ T8069] netlink: 3 bytes leftover after parsing attributes in process `syz.3.852'. [ 258.134769][ T8069] netlink: 3 bytes leftover after parsing attributes in process `syz.3.852'. [ 263.146546][ T8114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.871'. [ 268.944353][ T8188] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.894'. [ 269.128736][ T5776] Bluetooth: hci0: Unknown advertising packet type: 0x17 [ 269.253911][ T5776] Bluetooth: hci3: Malformed LE Event: 0x0d [ 269.366713][ T8196] netlink: 'syz.2.898': attribute type 9 has an invalid length. [ 269.374755][ T8196] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.898'. [ 271.850668][ T8228] netlink: 'syz.0.910': attribute type 9 has an invalid length. [ 271.873492][ T8228] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.910'. [ 272.078999][ T5776] Bluetooth: hci2: Unknown advertising packet type: 0x17 [ 272.267837][ T8237] netlink: 'syz.2.915': attribute type 1 has an invalid length. [ 272.315980][ T8237] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.915'. [ 272.329637][ T8239] netlink: 'syz.3.916': attribute type 10 has an invalid length. [ 272.372709][ T8239] hsr_slave_0: left promiscuous mode [ 272.406911][ T8239] hsr_slave_1: left promiscuous mode [ 272.437461][ T5776] Bluetooth: hci2: unexpected event 0x34 length: 15 > 6 [ 273.003436][ T8249] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.920'. [ 274.529803][ T8278] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 274.542294][ T8278] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.929'. [ 274.749024][ T5776] Bluetooth: hci1: Malformed LE Event: 0x0d [ 275.498578][ T8310] netlink: 'syz.3.943': attribute type 1 has an invalid length. [ 275.508465][ T8310] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.943'. [ 275.519991][ T8306] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 275.549504][ T8306] hsr_slave_0: left promiscuous mode [ 275.572549][ T8306] hsr_slave_1: left promiscuous mode [ 275.779864][ T8312] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.944'. [ 276.010471][ T5776] Bluetooth: hci2: Malformed LE Event: 0x0d [ 276.159568][ T5776] Bluetooth: hci3: Malformed LE Event: 0x0d [ 276.283417][ T8320] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 276.315943][ T8320] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.958'. [ 276.496339][ T8326] syzkaller0: entered promiscuous mode [ 276.511378][ T8326] syzkaller0: entered allmulticast mode [ 276.987345][ T8340] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.957'. [ 277.121064][ T8345] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 277.131751][ T8345] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.962'. [ 277.818937][ T8366] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.971'. [ 277.962717][ T8369] netlink: zone id is out of range [ 277.993186][ T8369] netlink: set zone limit has 8 unknown bytes [ 278.066150][ T8369] netlink: 'syz.2.974': attribute type 10 has an invalid length. [ 278.110659][ T8369] netlink: 55 bytes leftover after parsing attributes in process `syz.2.974'. [ 278.857477][ T5776] Bluetooth: hci0: Malformed LE Event: 0x0d [ 279.216622][ T8395] netlink: 'syz.0.984': attribute type 39 has an invalid length. [ 279.378127][ T5776] Bluetooth: hci3: Malformed LE Event: 0x0d [ 279.723433][ T5776] Bluetooth: hci2: Malformed LE Event: 0x0d [ 280.376895][ T5776] Bluetooth: hci1: Malformed LE Event: 0x0d [ 280.643713][ T5776] Bluetooth: hci1: Malformed LE Event: 0x0d [ 280.726066][ T8438] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1003'. [ 281.230449][ T8448] netlink: 'syz.0.1007': attribute type 21 has an invalid length. [ 281.470372][ T5776] Bluetooth: hci2: Malformed LE Event: 0x0d [ 282.691780][ T8485] netlink: zone id is out of range [ 282.709283][ T8485] netlink: set zone limit has 8 unknown bytes [ 282.769372][ T8485] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 282.815641][ T8485] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1023'. [ 284.053531][ T8505] netlink: 'syz.3.1031': attribute type 21 has an invalid length. [ 284.244139][ T8512] netlink: 'syz.2.1042': attribute type 21 has an invalid length. [ 284.765146][ T8530] netlink: 'syz.1.1047': attribute type 21 has an invalid length. [ 289.275858][ T9] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 290.103013][ T8611] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1068'. [ 291.529131][ T5776] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 292.876470][ T42] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 293.109530][ T8638] netlink: 'syz.1.1076': attribute type 21 has an invalid length. [ 299.493618][ T8731] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1114'. [ 299.685641][ T5776] Bluetooth: hci0: Malformed LE Event: 0x0d [ 303.068703][ T8788] netlink: 'syz.2.1137': attribute type 1 has an invalid length. [ 309.087055][ T8838] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1159'. [ 309.114552][ T8838] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1159'. [ 312.057837][ T8871] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1175'. [ 312.100656][ T8871] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1175'. [ 316.229380][ T8892] netlink: 'syz.2.1181': attribute type 5 has an invalid length. [ 317.067533][ T8909] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1187'. [ 317.113206][ T8909] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1187'. [ 317.113445][ T8908] netlink: 'syz.0.1197': attribute type 10 has an invalid length. [ 317.141601][ T8908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1197'. [ 317.347494][ T8918] veth0_vlan: left promiscuous mode [ 317.424409][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.431173][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.445358][ T8918] veth0_vlan: entered promiscuous mode [ 317.964900][ T8935] delete_channel: no stack [ 317.971219][ T8935] delete_channel: no stack [ 318.594270][ T8944] delete_channel: no stack [ 318.607284][ T8944] delete_channel: no stack [ 319.918305][ T8964] netlink: 'syz.2.1213': attribute type 10 has an invalid length. [ 319.936013][ T8964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1213'. [ 320.105905][ T8972] delete_channel: no stack [ 320.114278][ T8972] delete_channel: no stack [ 321.824500][ T9010] delete_channel: no stack [ 321.834313][ T9010] delete_channel: no stack [ 321.898986][ T9008] netlink: 'syz.1.1229': attribute type 10 has an invalid length. [ 321.915955][ T9008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1229'. [ 321.987038][ T9008] batman_adv: batadv0: Adding interface: virt_wifi0 [ 322.014497][ T9008] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.080674][ T9008] batman_adv: batadv0: Interface activated: virt_wifi0 [ 323.185038][ T9045] delete_channel: no stack [ 323.245440][ T9045] delete_channel: no stack [ 323.686213][ T9054] netlink: 'syz.3.1241': attribute type 10 has an invalid length. [ 323.694752][ T9054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1241'. [ 323.725206][ T9054] batman_adv: batadv0: Adding interface: virt_wifi0 [ 323.732972][ T9054] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.762773][ T9054] batman_adv: batadv0: Interface activated: virt_wifi0 [ 324.029986][ T9061] veth0_vlan: left promiscuous mode [ 324.071506][ T9061] veth0_vlan: entered promiscuous mode [ 324.469287][ T9080] netlink: 'syz.1.1254': attribute type 10 has an invalid length. [ 324.477809][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1254'. [ 324.956405][ T9086] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 324.964612][ T9086] netlink: 'syz.1.1256': attribute type 4 has an invalid length. [ 324.973042][ T9086] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1256'. [ 325.052238][ T9088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.278882][ T9094] veth0_vlan: left promiscuous mode [ 325.318574][ T9094] veth0_vlan: entered promiscuous mode [ 325.716100][ T9107] syz.3.1265: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 325.758888][ T9107] CPU: 1 PID: 9107 Comm: syz.3.1265 Not tainted syzkaller #0 [ 325.766336][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.776437][ T9107] Call Trace: [ 325.779753][ T9107] [ 325.782709][ T9107] dump_stack_lvl+0x18c/0x250 [ 325.787426][ T9107] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.793630][ T9107] ? show_regs_print_info+0x20/0x20 [ 325.798872][ T9107] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.805087][ T9107] warn_alloc+0x246/0x340 [ 325.809462][ T9107] ? stack_trace_save+0xaa/0x100 [ 325.814440][ T9107] ? zone_watermark_ok_safe+0x230/0x230 [ 325.820019][ T9107] ? kasan_set_track+0x5f/0x70 [ 325.824818][ T9107] ? kasan_set_track+0x4e/0x70 [ 325.829607][ T9107] ? __kasan_kmalloc+0x8f/0xa0 [ 325.834405][ T9107] ? xsk_init_queue+0xad/0x100 [ 325.839198][ T9107] ? xsk_setsockopt+0x4c9/0x750 [ 325.844063][ T9107] ? do_sock_setsockopt+0x175/0x1a0 [ 325.849283][ T9107] ? __x64_sys_setsockopt+0x182/0x200 [ 325.854680][ T9107] __vmalloc_node_range+0x129/0x1320 [ 325.860025][ T9107] ? free_vm_area+0x50/0x50 [ 325.864571][ T9107] vmalloc_user+0x74/0x80 [ 325.868946][ T9107] ? xskq_create+0xbf/0x170 [ 325.873475][ T9107] xskq_create+0xbf/0x170 [ 325.877827][ T9107] xsk_init_queue+0xad/0x100 [ 325.882440][ T9107] xsk_setsockopt+0x4c9/0x750 [ 325.887126][ T9107] ? xsk_poll+0x670/0x670 [ 325.891463][ T9107] ? __fget_files+0x28/0x460 [ 325.896144][ T9107] ? aa_sock_opt_perm+0x74/0x100 [ 325.901236][ T9107] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 325.906803][ T9107] ? security_socket_setsockopt+0x7e/0xa0 [ 325.912635][ T9107] ? xsk_poll+0x670/0x670 [ 325.916994][ T9107] do_sock_setsockopt+0x175/0x1a0 [ 325.922036][ T9107] ? __fdget+0x180/0x210 [ 325.926322][ T9107] __x64_sys_setsockopt+0x182/0x200 [ 325.931544][ T9107] do_syscall_64+0x55/0xb0 [ 325.935970][ T9107] ? clear_bhb_loop+0x40/0x90 [ 325.940649][ T9107] ? clear_bhb_loop+0x40/0x90 [ 325.945360][ T9107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.951362][ T9107] RIP: 0033:0x7f61cd79ce59 [ 325.955793][ T9107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.975623][ T9107] RSP: 002b:00007f61ce687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 325.984103][ T9107] RAX: ffffffffffffffda RBX: 00007f61cda15fa0 RCX: 00007f61cd79ce59 [ 325.992074][ T9107] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 326.000043][ T9107] RBP: 00007f61cd832e6f R08: 0000000000000004 R09: 0000000000000000 [ 326.008041][ T9107] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 326.016017][ T9107] R13: 00007f61cda16038 R14: 00007f61cda15fa0 R15: 00007ffcc69dec68 [ 326.024014][ T9107] [ 326.049608][ T9107] Mem-Info: [ 326.053072][ T9107] active_anon:5722 inactive_anon:0 isolated_anon:0 [ 326.053072][ T9107] active_file:1078 inactive_file:40040 isolated_file:0 [ 326.053072][ T9107] unevictable:768 dirty:244 writeback:0 [ 326.053072][ T9107] slab_reclaimable:9996 slab_unreclaimable:95279 [ 326.053072][ T9107] mapped:24053 shmem:1361 pagetables:556 [ 326.053072][ T9107] sec_pagetables:0 bounce:0 [ 326.053072][ T9107] kernel_misc_reclaimable:0 [ 326.053072][ T9107] free:1361089 free_pcp:11759 free_cma:0 [ 326.170063][ T9107] Node 0 active_anon:22820kB inactive_anon:0kB active_file:4312kB inactive_file:159960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96280kB dirty:1004kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10520kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no [ 326.232565][ T9107] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 326.355594][ T9107] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.390708][ T9121] netlink: 'syz.2.1269': attribute type 29 has an invalid length. [ 326.412530][ T9107] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 326.420608][ T9121] netlink: 'syz.2.1269': attribute type 29 has an invalid length. [ 326.423701][ T9107] Node 0 DMA32 free:1533940kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22780kB inactive_anon:0kB active_file:4312kB inactive_file:159140kB unevictable:1536kB writepending:1004kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:30124kB local_pcp:19220kB free_cma:0kB [ 326.451576][ T9121] netlink: 'syz.2.1269': attribute type 29 has an invalid length. [ 326.463107][ T9107] lowmem_reserve[]: 0 0 0 0 0 [ 326.477846][ T9107] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 326.506437][ T9122] netlink: 'syz.2.1269': attribute type 29 has an invalid length. [ 326.535514][ T9107] lowmem_reserve[]: 0 0 0 0 0 [ 326.540765][ T9107] Node 1 Normal free:3891876kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19488kB local_pcp:11520kB free_cma:0kB [ 326.588659][ T9122] netlink: 'syz.2.1269': attribute type 29 has an invalid length. [ 326.627536][ T9107] lowmem_reserve[]: 0 0 0 0 0 [ 326.632771][ T9107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 326.648145][ T9107] Node 0 DMA32: 947*4kB (UME) 582*8kB (UM) 538*16kB (UME) 99*32kB (UM) 1447*64kB (UM) 635*128kB (UM) 232*256kB (UME) 88*512kB (UME) 18*1024kB (UE) 7*2048kB (UME) 293*4096kB (UM) = 1531452kB [ 326.668089][ T9107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 326.681166][ T9107] Node 1 Normal: 203*4kB (UME) 49*8kB (UME) 45*16kB (UME) 111*32kB (UME) 31*64kB (UME) 7*128kB (UME) 2*256kB (ME) 2*512kB (UE) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3891876kB [ 326.723075][ T9107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.756188][ T9107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 326.773778][ T9107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 326.784067][ T9107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 326.806936][ T9107] 42479 total pagecache pages [ 326.811716][ T9107] 0 pages in swap cache [ 326.829667][ T9107] Free swap = 124996kB [ 326.833884][ T9107] Total swap = 124996kB [ 326.860658][ T9107] 2097051 pages RAM [ 326.864519][ T9107] 0 pages HighMem/MovableOnly [ 326.879615][ T9107] 416931 pages reserved [ 326.883833][ T9107] 0 pages cma reserved [ 326.934258][ T9131] veth0_vlan: left promiscuous mode [ 326.992784][ T9131] veth0_vlan: entered promiscuous mode [ 327.049984][ T9129] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 327.361010][ T9129] syzkaller0: entered promiscuous mode [ 327.367737][ T9129] syzkaller0: entered allmulticast mode [ 328.019550][ T5776] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 328.027791][ T5776] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 328.037540][ T5776] CPU: 1 PID: 5776 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 328.045151][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.055236][ T5776] Workqueue: hci3 hci_rx_work [ 328.059975][ T5776] Call Trace: [ 328.063260][ T5776] [ 328.066199][ T5776] dump_stack_lvl+0x18c/0x250 [ 328.070896][ T5776] ? show_regs_print_info+0x20/0x20 [ 328.076106][ T5776] ? load_image+0x420/0x420 [ 328.080678][ T5776] sysfs_create_dir_ns+0x26e/0x2a0 [ 328.085801][ T5776] ? __lock_acquire+0x7d80/0x7d80 [ 328.090839][ T5776] ? sysfs_warn_dup+0xa0/0xa0 [ 328.095545][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 328.100786][ T5776] kobject_add_internal+0x617/0xc90 [ 328.106043][ T5776] kobject_add+0x164/0x240 [ 328.110488][ T5776] ? kobject_init+0x1d0/0x1d0 [ 328.115187][ T5776] ? get_device_parent+0x366/0x390 [ 328.120313][ T5776] device_add+0x3fa/0xc40 [ 328.124660][ T5776] hci_conn_add_sysfs+0xd5/0x1e0 [ 328.129617][ T5776] le_conn_complete_evt+0xe9f/0x1480 [ 328.134939][ T5776] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 328.141209][ T5776] ? bt_info+0x180/0x180 [ 328.145469][ T5776] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 328.151134][ T5776] ? mutex_unlock+0x10/0x10 [ 328.155657][ T5776] ? skb_pull_data+0xf0/0x1f0 [ 328.160384][ T5776] hci_le_enh_conn_complete_evt+0x189/0x460 [ 328.166387][ T5776] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 328.172818][ T5776] ? hci_remote_host_features_evt+0x150/0x150 [ 328.178903][ T5776] hci_event_packet+0x7b4/0x1280 [ 328.183860][ T5776] ? __lock_acquire+0x7d80/0x7d80 [ 328.188899][ T5776] ? lock_chain_count+0x20/0x20 [ 328.193778][ T5776] ? bis_list+0x290/0x290 [ 328.198148][ T5776] ? lockdep_hardirqs_on+0x98/0x150 [ 328.203451][ T5776] ? hci_send_to_monitor+0xd7/0x4f0 [ 328.208674][ T5776] hci_rx_work+0x43a/0xd60 [ 328.213117][ T5776] ? process_scheduled_works+0x975/0x1600 [ 328.218855][ T5776] process_scheduled_works+0xa60/0x1600 [ 328.224548][ T5776] ? worker_attach_to_pool+0x370/0x370 [ 328.230038][ T5776] ? assign_work+0x3cc/0x5d0 [ 328.234734][ T5776] worker_thread+0xa5e/0xfe0 [ 328.239377][ T5776] ? _raw_spin_unlock+0x40/0x40 [ 328.244241][ T5776] ? __kthread_parkme+0x71/0x1c0 [ 328.249204][ T5776] kthread+0x2fa/0x390 [ 328.253277][ T5776] ? pr_cont_work+0x550/0x550 [ 328.257968][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 328.262565][ T5776] ret_from_fork+0x48/0x80 [ 328.266989][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 328.271586][ T5776] ret_from_fork_asm+0x11/0x20 [ 328.276396][ T5776] [ 328.281360][ T5776] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 328.295868][ T5776] Bluetooth: hci3: failed to register connection device [ 328.716143][ T9162] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1284'. [ 330.609727][ T9159] veth0_vlan: left promiscuous mode [ 330.620932][ T9159] veth0_vlan: entered promiscuous mode [ 333.691904][ T9214] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1303'. [ 333.803032][ T9218] netlink: 'syz.2.1306': attribute type 1 has an invalid length. [ 333.811476][ T9218] netlink: 'syz.2.1306': attribute type 4 has an invalid length. [ 333.835596][ T9218] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1306'. [ 334.044034][ T9223] netlink: 'syz.2.1317': attribute type 28 has an invalid length. [ 334.201528][ T9225] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 334.409439][ T9225] syzkaller0: entered promiscuous mode [ 334.415287][ T9225] syzkaller0: entered allmulticast mode [ 335.215813][ T9247] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1315'. [ 338.560247][ T9250] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 338.580793][ T9259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1322'. [ 339.001480][ T9272] GPL: port 1(syz_tun) entered blocking state [ 339.008308][ T9272] GPL: port 1(syz_tun) entered disabled state [ 339.024879][ T9272] syz_tun: entered allmulticast mode [ 339.034245][ T9272] syz_tun: entered promiscuous mode [ 339.068506][ T9273] syz_tun: left allmulticast mode [ 339.073718][ T9273] syz_tun: left promiscuous mode [ 339.080552][ T9273] GPL: port 1(syz_tun) entered disabled state [ 339.443983][ T9275] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 339.607991][ T9275] syzkaller0: entered promiscuous mode [ 339.614476][ T9275] syzkaller0: entered allmulticast mode [ 339.656660][ T9283] netlink: 'syz.1.1330': attribute type 10 has an invalid length. [ 340.334624][ T9283] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 342.862544][ T9320] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 343.300943][ T9326] netlink: 'syz.0.1344': attribute type 10 has an invalid length. [ 344.378945][ T9326] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 350.923510][ T9391] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 351.043410][ T9395] netlink: 'syz.2.1366': attribute type 10 has an invalid length. [ 351.155012][ T9395] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 360.098812][ T9484] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1401'. Stopping sshd: stopped /usr/sbin/sshd (pid 5535) OK Stopping crond: stopped /usr/sbin/crond (pid 5513) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5438) Stopping network: OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: [ 367.649893][ T9535] netlink: 'syz.0.1418': attribute type 10 has an invalid length. [ 367.950741][ T9566] netlink: 'syz.1.1416': attribute type 10 has an invalid length. OK [ 368.061391][ T9566] nlmon0: entered promiscuous mode [ 368.076844][ T9566] nlmon0: entered allmulticast mode [ 368.095900][ T9566] team0: Device nlmon0 is of different type Stopping syslogd: [ 368.200979][ T9574] netlink: 'syz.3.1420': attribute type 3 has an invalid length. [ 368.265533][ T9574] netlink: 'syz.3.1420': attribute type 1 has an invalid length. [ 368.273506][ T9574] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1420'. stopped /sbin/syslogd (pid 5126) OK umount: can't remount debugfs read-only umount: can't remount tmpfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.67 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 372.884356][ T3002] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.951915][ T3002] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.011329][ T3002] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.080800][ T3002] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.191202][ T3002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.272476][ T3002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.351880][ T3002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.408510][ T3002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.493193][ T3002] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.544444][ T9618] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 373.563278][ T9618] ACPI: PM: Preparing to enter system sleep state S5 [ 373.573443][ T3002] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.574693][ T9618] kvm: exiting hardware virtualization [ 373.590539][ T9618] reboot: Power down serialport: VM disconnected.