last executing test programs: 2m55.295094882s ago: executing program 2 (id=159): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa9, 0x6}, 0x1c00, 0xcd35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2f, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000ac0)="f76766d516e6ae66e5b4cf5aa39dd699a6412fbe2256323456838334fda59dcecc5b7fed1ce2ac26a168d2c6763330888046aeae2374f61af3fbed81add30cfe41856d95f7bda948ca5efed69396d8af6c49fd9065a397572e29bf6c93c04562dd0fc17ad8c89f5aa9fac246fa83a7c9970d0a45578e788be74ce9403c0f5102e99453abe3c74a9786848cc58d67b72cbd5c2fa79c48a747fe6fd0e9bf5160a668ccd00bd667ae819fa8f80a37da5b98757bfe4f28d79cd30630c326c760dcb23fdc96d3014d5f2621ed6c966670479f85afec99d53d6f14898c6f8edb2e65abb1f69f64e0", 0xe5}, {&(0x7f0000000dc0)="91d3059714c87fe811de9547f509f935188718c732a56f10dee2fe8bc1299ff9be5cfce95833e1581ac6516246efd239db6bc8049e993df5fceac76fed84a86ead8647ece2c450cf9568cc56478eb07342f364ba7f1765d54d3c491cfac50c7cbea1910afe8b21f859c1ace098307cf12a57647aea05b96dc12be678429c4ff631f022e60f9753da53e9910dc401b1593c2d8b04f74aa06f97db767a077b78d46055fa51305c52114d300a84e39085d291215d73ace66a28a861e12c1b7af24de1591c5dcb50adc8943b9c4451", 0xcd}], 0x2, &(0x7f0000000ec0)}, 0x4008010) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000015c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d06000000a705251e6182949a3651f60a84c9f4d493ddc1f6f17c3812cde900000000000000ba111a43a5316cef8cc2d6f36874a492", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x102) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffeff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008850) 2m55.112047165s ago: executing program 2 (id=160): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000690005"], 0xfe33) 2m55.004274736s ago: executing program 2 (id=161): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = gettid() r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x20000984) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000c80)=""/130, 0x82}, 0x12000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0x10, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, 0x0, 0x0, r6}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket$kcm(0x2, 0x3, 0x84) recvmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002142) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000089000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x1, 0xf7, 0xe, 0x8, 0x0, 0x200, 0x420, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x3, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0x1000, 0xccbe, 0x9, 0x2c4290476853fd59, 0x9, 0x5, 0x7, 0x0, 0xcc, 0x0, 0xff}, r4, 0xf, r3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x13, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, 0x0}, 0x4060845) sendmsg$inet(r1, &(0x7f0000001680)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000180)="2e45ea4e", 0x4}], 0x2}, 0x8804) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 2m54.716735891s ago: executing program 3 (id=164): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0xe0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m54.696666771s ago: executing program 1 (id=165): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x10104, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xba, 0x1, 0x0, 0x0, 0x0, 0x7fec, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0}, 0x10, 0x2e, 0xfffffbff, 0x1, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 2m54.410107196s ago: executing program 3 (id=168): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0xc, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0x80000000, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unlink(&(0x7f0000000200)='./cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)=0x20) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_devices(r3, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000a80)=ANY=[@ANYBLOB="c674fcf1206d00"], 0x8) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x5, 0x3, 0xd, 0x0, 0x7, 0x12000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x84, 0x1, @perf_config_ext={0x694, 0xa2}, 0x76fdc7004c3ef8f5, 0x7, 0x6, 0x3, 0x8000000000000000, 0x806, 0x0, 0x0, 0x4, 0x0, 0x9}, 0xffffffffffffffff, 0x100, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) 2m54.255233499s ago: executing program 1 (id=169): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x3, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 2m54.16161074s ago: executing program 3 (id=171): r0 = socket$kcm(0x2, 0x3, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, 0x0, 0x0) 2m54.036781262s ago: executing program 3 (id=173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94) socket$kcm(0x10, 0x2, 0x4) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) 2m53.974227823s ago: executing program 1 (id=174): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8258000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x0) 2m53.915232344s ago: executing program 2 (id=175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x88, 0x64, &(0x7f00000009c0), 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x8}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x3000, 0x4, 0x0, 0x2, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x536, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r3, 0x4, r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 2m53.828008276s ago: executing program 1 (id=177): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0xffffffffffffffff, 0x7, r0, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xc, 0xff, 0x0, 0x80, 0x0, 0xee6, 0x14a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x8e2, 0x2}, 0x110104, 0x32, 0x2, 0x3, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 2m53.627091099s ago: executing program 2 (id=178): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0xee1a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x408e0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000010000000970a00000000000095000000d3031a00"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) 2m53.626761749s ago: executing program 1 (id=179): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1803000000000000000000ddffffffff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m53.153625997s ago: executing program 2 (id=180): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000b80), 0x4) 2m53.140355347s ago: executing program 1 (id=181): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x5}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="97", 0x1}, {&(0x7f0000001080)="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", 0x4e4}], 0x2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 2m52.792532013s ago: executing program 32 (id=180): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000b80), 0x4) 2m52.650968465s ago: executing program 33 (id=181): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x5}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="97", 0x1}, {&(0x7f0000001080)="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", 0x4e4}], 0x2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 2m52.606352306s ago: executing program 3 (id=185): socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'wg0\x00', 0x8000}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3) 2m52.604092136s ago: executing program 3 (id=186): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0xfffffff9, 0x80000000, 0x152, 0x8000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x4, &(0x7f0000000040)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x416c, 0x64, 0x1, 0xc600, r1, 0x8, '\x00', 0x0, r4, 0x5, 0x5, 0x3, 0x2, @value=r5}, 0x50) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev, 0xa}, 0x80, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x900}, 0x0) 2m52.280180891s ago: executing program 34 (id=186): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0xfffffff9, 0x80000000, 0x152, 0x8000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x4, &(0x7f0000000040)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x416c, 0x64, 0x1, 0xc600, r1, 0x8, '\x00', 0x0, r4, 0x5, 0x5, 0x3, 0x2, @value=r5}, 0x50) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev, 0xa}, 0x80, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x900}, 0x0) 3.127811038s ago: executing program 0 (id=2148): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x83, 0x0, &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9", 0x5dc}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:23'], 0xa) 2.97403411s ago: executing program 0 (id=2143): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) 2.721763765s ago: executing program 0 (id=2147): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe", 0x1a}], 0x1}, 0x60044884) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x8, 0x2, 0x5, 0x5, 0x0, 0x4, 0x21000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x80, 0x6}, 0x108, 0x101, 0x6, 0x8, 0x9d, 0xc, 0x70, 0x0, 0x7f9f205d, 0x0, 0xff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000003c0)='./cgroup.net/syz0\x00') socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x108, 0x81}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) 2.721132834s ago: executing program 5 (id=2149): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10400002}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) 2.537089788s ago: executing program 4 (id=2150): socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd", 0x8}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) 2.500278108s ago: executing program 5 (id=2151): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0, r0, 0x4000, r1}, 0x18) 2.479217649s ago: executing program 0 (id=2152): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x83, 0x0, &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9", 0x5dc}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:23'], 0xa) 1.555079574s ago: executing program 4 (id=2154): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="00000000200000000000000004000000000000008e52e6ef7a8f9e41062001eac49bbc07", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="79129800000000006113280000000000bf2020000000000004000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc4cab575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.553145214s ago: executing program 0 (id=2162): socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd", 0x8}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) 1.529176914s ago: executing program 5 (id=2155): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100", @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 1.391840737s ago: executing program 6 (id=2156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x8, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.274584009s ago: executing program 5 (id=2157): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x0) 1.23063181s ago: executing program 4 (id=2158): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840), &(0x7f0000000880)=[0x0], 0x0, 0xc5, 0x0, 0x0, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r2}, 0xc) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x4, 0xc8, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) close(0xffffffffffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) 1.1783383s ago: executing program 6 (id=2159): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4004, 0x7ff, 0xfffffffe, 0x0, 0x80, 0x80002}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.047203592s ago: executing program 6 (id=2160): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) r6 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10400002}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000), 0x10) 1.041710023s ago: executing program 4 (id=2161): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe", 0x1a}], 0x1}, 0x60044884) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x8, 0x2, 0x5, 0x5, 0x0, 0x4, 0x21000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x80, 0x6}, 0x108, 0x101, 0x6, 0x8, 0x9d, 0xc, 0x70, 0x0, 0x7f9f205d, 0x0, 0xff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000003c0)='./cgroup.net/syz0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x108, 0x81}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) 899.298065ms ago: executing program 5 (id=2163): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x85, 0x0, &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd85", 0x5dc}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:23'], 0xa) 880.195055ms ago: executing program 6 (id=2164): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0, 0xc5, 0x0, 0x0, 0x10, &(0x7f0000000900), 0x0, 0x0, 0x88, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1, r2}, 0xc) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x4, 0xc8, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r5) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r0, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1fd7, 0x0, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, 0x0) r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) 792.462927ms ago: executing program 4 (id=2165): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0, r0, 0x4000, r1}, 0x18) 778.702317ms ago: executing program 5 (id=2166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100)={'veth0_virt_wifi', 0x32, 0x30}, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0, r0, 0x4000, r1}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0xff04}], 0x1}, 0x0) recvmsg(r5, 0x0, 0x10141) 561.68156ms ago: executing program 6 (id=2167): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100", @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 501.433541ms ago: executing program 4 (id=2168): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="00000000200000000000000004000000000000008e52e6ef7a8f9e41062001eac49bbc07", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="79129800000000006113280000000000bf2020000000000004000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc4cab575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 451.274072ms ago: executing program 0 (id=2169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x8, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=2170): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4004, 0x7ff, 0xfffffffe, 0x0, 0x80, 0x80002}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 411.009423][ T5820] cgroup: Unknown subsys name 'net' [ 411.169049][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 412.504070][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 413.867541][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 413.871987][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.876487][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.883642][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.896883][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.897195][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.913942][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.915161][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.929499][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.932810][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.937871][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.952816][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.953432][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.961737][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.970384][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 413.985101][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.986000][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.993778][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.009463][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.016646][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 414.024678][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.033556][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.043090][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 414.050533][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.486608][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 414.496161][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 414.654368][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 414.669229][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.676498][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.685042][ T5830] bridge_slave_0: entered allmulticast mode [ 414.691791][ T5830] bridge_slave_0: entered promiscuous mode [ 414.754474][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.761716][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.769536][ T5830] bridge_slave_1: entered allmulticast mode [ 414.776323][ T5830] bridge_slave_1: entered promiscuous mode [ 414.795050][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.802158][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.810746][ T5833] bridge_slave_0: entered allmulticast mode [ 414.818404][ T5833] bridge_slave_0: entered promiscuous mode [ 414.860220][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.867928][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.876512][ T5833] bridge_slave_1: entered allmulticast mode [ 414.883862][ T5833] bridge_slave_1: entered promiscuous mode [ 414.890391][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 414.903892][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.952772][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.962083][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.969532][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.977577][ T5832] bridge_slave_0: entered allmulticast mode [ 414.984869][ T5832] bridge_slave_0: entered promiscuous mode [ 415.000082][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.012985][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.044998][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.052131][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.059460][ T5832] bridge_slave_1: entered allmulticast mode [ 415.066693][ T5832] bridge_slave_1: entered promiscuous mode [ 415.119511][ T5830] team0: Port device team_slave_0 added [ 415.129140][ T5830] team0: Port device team_slave_1 added [ 415.154861][ T5833] team0: Port device team_slave_0 added [ 415.174025][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.190841][ T5833] team0: Port device team_slave_1 added [ 415.207734][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.249956][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.257215][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.283287][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.329014][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.336235][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.362467][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.383467][ T5832] team0: Port device team_slave_0 added [ 415.389685][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.397275][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.405155][ T5831] bridge_slave_0: entered allmulticast mode [ 415.411819][ T5831] bridge_slave_0: entered promiscuous mode [ 415.420448][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.428046][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.435303][ T5831] bridge_slave_1: entered allmulticast mode [ 415.442346][ T5831] bridge_slave_1: entered promiscuous mode [ 415.449652][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.456668][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.482765][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.495625][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.502638][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.528591][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.543811][ T5832] team0: Port device team_slave_1 added [ 415.603883][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.616551][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.648296][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.655331][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.681281][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.730010][ T5830] hsr_slave_0: entered promiscuous mode [ 415.736828][ T5830] hsr_slave_1: entered promiscuous mode [ 415.744445][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.751386][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.778473][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.804704][ T5831] team0: Port device team_slave_0 added [ 415.816565][ T5833] hsr_slave_0: entered promiscuous mode [ 415.823140][ T5833] hsr_slave_1: entered promiscuous mode [ 415.829170][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.837026][ T5833] Cannot create hsr debugfs directory [ 415.864085][ T5831] team0: Port device team_slave_1 added [ 415.946697][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.954025][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.982827][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.019141][ T5832] hsr_slave_0: entered promiscuous mode [ 416.025623][ T5832] hsr_slave_1: entered promiscuous mode [ 416.031803][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.039784][ T5832] Cannot create hsr debugfs directory [ 416.045992][ T5105] Bluetooth: hci0: command tx timeout [ 416.053673][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.060632][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.086959][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.090671][ T5105] Bluetooth: hci2: command tx timeout [ 416.122727][ T5835] Bluetooth: hci3: command tx timeout [ 416.128520][ T5105] Bluetooth: hci1: command tx timeout [ 416.207204][ T5831] hsr_slave_0: entered promiscuous mode [ 416.214320][ T5831] hsr_slave_1: entered promiscuous mode [ 416.220313][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.228094][ T5831] Cannot create hsr debugfs directory [ 416.493092][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.507230][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.516567][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.528529][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.595359][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.620398][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.631336][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.642092][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.724561][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 416.736344][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 416.747142][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 416.758585][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 416.864910][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 416.876189][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 416.888236][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 416.900425][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 416.917563][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.981693][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.020555][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.027922][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.038414][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.045531][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.087863][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.131430][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.165576][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.206849][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.214035][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.231128][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.238300][ T5880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.256042][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.276276][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.291038][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.298251][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.324898][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.331991][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.380069][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.458071][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.465281][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.527665][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.534924][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.740962][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.846008][ T5830] veth0_vlan: entered promiscuous mode [ 417.897582][ T5830] veth1_vlan: entered promiscuous mode [ 417.947677][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.988800][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.016173][ T5830] veth0_macvtap: entered promiscuous mode [ 418.028593][ T5830] veth1_macvtap: entered promiscuous mode [ 418.079674][ T5832] veth0_vlan: entered promiscuous mode [ 418.088830][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.123272][ T5835] Bluetooth: hci0: command tx timeout [ 418.129795][ T5105] Bluetooth: hci2: command tx timeout [ 418.138142][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.150085][ T5832] veth1_vlan: entered promiscuous mode [ 418.164201][ T5833] veth0_vlan: entered promiscuous mode [ 418.180814][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.192697][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.201592][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.213207][ T5105] Bluetooth: hci1: command tx timeout [ 418.218641][ T5105] Bluetooth: hci3: command tx timeout [ 418.226058][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.234905][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.254866][ T5833] veth1_vlan: entered promiscuous mode [ 418.316515][ T5831] veth0_vlan: entered promiscuous mode [ 418.334032][ T5832] veth0_macvtap: entered promiscuous mode [ 418.346912][ T5832] veth1_macvtap: entered promiscuous mode [ 418.371265][ T5833] veth0_macvtap: entered promiscuous mode [ 418.381833][ T5833] veth1_macvtap: entered promiscuous mode [ 418.416967][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.427798][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.440423][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.452236][ T5831] veth1_vlan: entered promiscuous mode [ 418.474569][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.486052][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.497572][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.540544][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.550194][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.550596][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.559766][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.576196][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.585464][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.595433][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.606198][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.616852][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.627386][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.638287][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.649511][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.660359][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.670212][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.680834][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.692258][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.735537][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.744750][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.755706][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.766401][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.821538][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.822056][ T5831] veth0_macvtap: entered promiscuous mode [ 418.832477][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.886136][ T5831] veth1_macvtap: entered promiscuous mode [ 418.906942][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.926288][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.960969][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.977243][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.987579][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.998441][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.009923][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.021138][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.033949][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.076815][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.090312][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.111504][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.134465][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.146450][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.157036][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.169790][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.190807][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.199422][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.264468][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.281775][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.295078][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.303966][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.368583][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.380389][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.534717][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.567320][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.670420][ C0] hrtimer: interrupt took 262037 ns [ 419.689667][ T5880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.721776][ T5880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.835654][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.877428][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.235007][ T5105] Bluetooth: hci2: command tx timeout [ 420.241579][ T5105] Bluetooth: hci0: command tx timeout [ 420.283551][ T5835] Bluetooth: hci1: command tx timeout [ 420.289074][ T5105] Bluetooth: hci3: command tx timeout [ 420.301340][ T5937] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7'. [ 420.385813][ T5937] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 421.131821][ T5953] netlink: 'syz.2.10': attribute type 21 has an invalid length. [ 421.976627][ T5964] 0: renamed from pim6reg1 [ 421.985666][ T5967] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 422.070370][ T5967] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 422.284136][ T5105] Bluetooth: hci0: command tx timeout [ 422.290654][ T5105] Bluetooth: hci2: command tx timeout [ 422.326399][ T5967] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 422.348527][ T5967] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 422.361764][ T5967] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 422.370059][ T5835] Bluetooth: hci1: command tx timeout [ 422.373164][ T5105] Bluetooth: hci3: command tx timeout [ 422.697695][ T5973] netlink: 'syz.2.15': attribute type 21 has an invalid length. [ 422.705742][ T5973] netlink: 'syz.2.15': attribute type 11 has an invalid length. [ 422.805963][ T5977] netlink: 'syz.1.16': attribute type 7 has an invalid length. [ 423.514476][ T5994] netlink: 'syz.2.19': attribute type 2 has an invalid length. [ 423.530539][ T5994] netlink: 164 bytes leftover after parsing attributes in process `syz.2.19'. [ 423.552233][ T5995] netlink: 830 bytes leftover after parsing attributes in process `syz.0.21'. [ 424.569077][ T6029] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.35'. [ 424.788148][ T6034] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.37'. [ 436.068255][ T6069] validate_nla: 4 callbacks suppressed [ 436.068270][ T6069] netlink: 'syz.2.53': attribute type 3 has an invalid length. [ 436.100334][ T6073] raw_sendmsg: syz.0.55 forgot to set AF_INET. Fix it! [ 436.107428][ T6069] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.53'. [ 436.129310][ T6073] FAULT_INJECTION: forcing a failure. [ 436.129310][ T6073] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 436.159259][ T6073] CPU: 1 PID: 6073 Comm: syz.0.55 Not tainted 6.6.100-syzkaller #0 [ 436.167209][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.177297][ T6073] Call Trace: [ 436.180590][ T6073] [ 436.183542][ T6073] dump_stack_lvl+0x16c/0x230 [ 436.188248][ T6073] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.194441][ T6073] ? show_regs_print_info+0x20/0x20 [ 436.199663][ T6073] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 436.205871][ T6073] should_fail_ex+0x39d/0x4d0 [ 436.210578][ T6073] _copy_to_user+0x2f/0xa0 [ 436.215016][ T6073] simple_read_from_buffer+0xe7/0x150 [ 436.220419][ T6073] proc_fail_nth_read+0x1e3/0x250 [ 436.225472][ T6073] ? proc_fault_inject_write+0x340/0x340 [ 436.231138][ T6073] ? fsnotify_perm+0x271/0x5e0 [ 436.235929][ T6073] ? proc_fault_inject_write+0x340/0x340 [ 436.241590][ T6073] vfs_read+0x27e/0x920 [ 436.245864][ T6073] ? kernel_read+0x1e0/0x1e0 [ 436.250486][ T6073] ? __fget_files+0x28/0x4d0 [ 436.255105][ T6073] ? __fget_files+0x44a/0x4d0 [ 436.259813][ T6073] ? __fdget_pos+0x2a3/0x330 [ 436.264426][ T6073] ? ksys_read+0x75/0x250 [ 436.268771][ T6073] ksys_read+0x147/0x250 [ 436.273018][ T6073] ? vfs_write+0x940/0x940 [ 436.277434][ T6073] ? lockdep_hardirqs_on+0x98/0x150 [ 436.282632][ T6073] do_syscall_64+0x55/0xb0 [ 436.287047][ T6073] ? clear_bhb_loop+0x40/0x90 [ 436.291713][ T6073] ? clear_bhb_loop+0x40/0x90 [ 436.296384][ T6073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.302272][ T6073] RIP: 0033:0x7f933e18d3bc [ 436.306690][ T6073] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 436.326299][ T6073] RSP: 002b:00007f933f0af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.334718][ T6073] RAX: ffffffffffffffda RBX: 00007f933e3b5fa0 RCX: 00007f933e18d3bc [ 436.342680][ T6073] RDX: 000000000000000f RSI: 00007f933f0af0a0 RDI: 0000000000000005 [ 436.350648][ T6073] RBP: 00007f933f0af090 R08: 0000000000000000 R09: 0000000000000000 [ 436.358611][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.366576][ T6073] R13: 0000000000000000 R14: 00007f933e3b5fa0 R15: 00007ffd3a3e2388 [ 436.374578][ T6073] [ 436.417027][ T6079] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.57'. [ 436.609066][ T6076] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.56'. [ 436.855224][ T6085] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 436.867767][ T6085] netlink: 152 bytes leftover after parsing attributes in process `syz.1.60'. [ 437.015172][ T6085] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 437.219346][ T6085] syz.1.60 (6085) used greatest stack depth: 20072 bytes left [ 437.233469][ T6099] Zero length message leads to an empty skb [ 437.555922][ T6108] netlink: 830 bytes leftover after parsing attributes in process `syz.3.68'. [ 437.574081][ T6110] netlink: 'syz.0.69': attribute type 21 has an invalid length. [ 437.805648][ T6122] netlink: 'syz.2.73': attribute type 4 has an invalid length. [ 437.826887][ T6122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.73'. [ 440.296177][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.303077][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.302764][ T6151] netlink: 'syz.3.83': attribute type 29 has an invalid length. [ 446.310511][ T6151] netlink: 'syz.3.83': attribute type 29 has an invalid length. [ 446.339347][ T6153] syz.1.85 (6153) used obsolete PPPIOCDETACH ioctl [ 446.378912][ T6156] netlink: 'syz.0.86': attribute type 3 has an invalid length. [ 446.394956][ T6156] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 446.441122][ T6156] netlink: 130144 bytes leftover after parsing attributes in process `syz.0.86'. [ 447.537046][ T6192] tap0: tun_chr_ioctl cmd 2147767520 [ 448.324295][ T6221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.112'. [ 448.358000][ T6221] Driver unsupported XDP return value 0 on prog (id 102) dev N/A, expect packet loss! [ 448.851322][ T6236] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.121'. [ 449.511520][ T6266] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.131'. [ 449.766581][ T6274] mac80211_hwsim hwsim9 4: renamed from wlan1 (while UP) [ 449.855666][ T6275] netlink: 'syz.1.134': attribute type 10 has an invalid length. [ 449.869870][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.878326][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.925943][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.933324][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.941785][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.949329][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.990594][ T6275] team0: Port device bridge0 added [ 450.458332][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 450.651075][ T6295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.140'. [ 451.083237][ T6307] wg2: entered promiscuous mode [ 451.098652][ T6307] wg2: entered allmulticast mode [ 451.288475][ T6314] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 452.249446][ T6338] netlink: 60 bytes leftover after parsing attributes in process `syz.2.159'. [ 452.793478][ T6350] netlink: 'syz.3.164': attribute type 10 has an invalid length. [ 452.877698][ T6350] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 453.225166][ T6362] netlink: 'syz.0.170': attribute type 29 has an invalid length. [ 453.237719][ T6362] netlink: 'syz.0.170': attribute type 29 has an invalid length. [ 454.385683][ T2955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.625856][ T2955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.786237][ T2955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.905825][ T2955] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.334276][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 455.350914][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 455.362215][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 455.390443][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 455.399157][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 455.407230][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 455.707576][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.717463][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.739974][ T5105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.764080][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.783820][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 455.792951][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.930086][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.939188][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.947300][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.955690][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.964130][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 455.971501][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.033637][ T6416] netlink: 'syz.0.190': attribute type 1 has an invalid length. [ 456.778952][ T6439] netlink: 10 bytes leftover after parsing attributes in process `syz.0.195'. [ 456.791865][ T6400] chnl_net:caif_netlink_parms(): no params data found [ 457.077982][ T2955] hsr_slave_0: left promiscuous mode [ 457.101657][ T2955] hsr_slave_1: left promiscuous mode [ 457.116124][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.128528][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.138852][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.146887][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.155496][ T2955] bridge_slave_1: left allmulticast mode [ 457.161319][ T2955] bridge_slave_1: left promiscuous mode [ 457.169549][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.181185][ T2955] bridge_slave_0: left allmulticast mode [ 457.187209][ T2955] bridge_slave_0: left promiscuous mode [ 457.197856][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.248681][ T2955] veth1_macvtap: left promiscuous mode [ 457.258249][ T2955] veth0_macvtap: left promiscuous mode [ 457.266936][ T2955] veth1_vlan: left promiscuous mode [ 457.275331][ T2955] veth0_vlan: left promiscuous mode [ 457.484062][ T5835] Bluetooth: hci1: command tx timeout [ 457.756816][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 457.791864][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 457.827969][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.861291][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.885683][ T5835] Bluetooth: hci2: command tx timeout [ 458.043129][ T5835] Bluetooth: hci3: command tx timeout [ 458.133409][ T2955] team0 (unregistering): Port device bridge0 removed [ 458.222307][ T2955] bond0 (unregistering): Released all slaves [ 458.339871][ T6405] chnl_net:caif_netlink_parms(): no params data found [ 458.471504][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.478968][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.487845][ T6400] bridge_slave_0: entered allmulticast mode [ 458.495420][ T6400] bridge_slave_0: entered promiscuous mode [ 458.507168][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.515159][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.522366][ T6400] bridge_slave_1: entered allmulticast mode [ 458.530125][ T6400] bridge_slave_1: entered promiscuous mode [ 458.608662][ T6411] chnl_net:caif_netlink_parms(): no params data found [ 458.735321][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.813769][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.986225][ T6400] team0: Port device team_slave_0 added [ 459.562883][ T5835] Bluetooth: hci1: command tx timeout [ 459.802049][ T6400] team0: Port device team_slave_1 added [ 459.835089][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.842808][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.861386][ T6405] bridge_slave_0: entered allmulticast mode [ 459.870711][ T6405] bridge_slave_0: entered promiscuous mode [ 459.880313][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.890879][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.898647][ T6405] bridge_slave_1: entered allmulticast mode [ 459.906371][ T6405] bridge_slave_1: entered promiscuous mode [ 459.915454][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.929173][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.936923][ T6411] bridge_slave_0: entered allmulticast mode [ 459.961564][ T6411] bridge_slave_0: entered promiscuous mode [ 459.973139][ T5835] Bluetooth: hci2: command tx timeout [ 459.985967][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.998317][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.006217][ T6411] bridge_slave_1: entered allmulticast mode [ 460.013696][ T6411] bridge_slave_1: entered promiscuous mode [ 460.079929][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.087624][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.114371][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.132525][ T5835] Bluetooth: hci3: command tx timeout [ 460.171697][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.179221][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.207218][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.226398][ T6405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.241985][ T6405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.277622][ T6411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.351334][ T6405] team0: Port device team_slave_0 added [ 460.360686][ T6411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.420055][ T6405] team0: Port device team_slave_1 added [ 460.468848][ T6506] netlink: 'syz.0.206': attribute type 29 has an invalid length. [ 460.547534][ T2955] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.581318][ T6506] netlink: 'syz.0.206': attribute type 29 has an invalid length. [ 460.601000][ T6508] netlink: 'syz.0.206': attribute type 29 has an invalid length. [ 460.627455][ T6400] hsr_slave_0: entered promiscuous mode [ 460.634385][ T6400] hsr_slave_1: entered promiscuous mode [ 460.640745][ T6400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.649272][ T6400] Cannot create hsr debugfs directory [ 460.681730][ T6405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.691714][ T6405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.726380][ T6405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.748789][ T6411] team0: Port device team_slave_0 added [ 460.779857][ T2955] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.800508][ T6503] netlink: 'syz.0.206': attribute type 29 has an invalid length. [ 460.819154][ T6405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.829815][ T6405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.863923][ T6405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.890966][ T6411] team0: Port device team_slave_1 added [ 460.898253][ T6506] netlink: 'syz.0.206': attribute type 29 has an invalid length. [ 460.961407][ T2955] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.031906][ T6522] netlink: 'syz.0.207': attribute type 29 has an invalid length. [ 461.110657][ T6522] netlink: 'syz.0.207': attribute type 29 has an invalid length. [ 461.141495][ T2955] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.204062][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.211067][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.237940][ T6411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.249460][ T6524] netlink: 'syz.0.207': attribute type 29 has an invalid length. [ 461.265701][ T6405] hsr_slave_0: entered promiscuous mode [ 461.273305][ T6405] hsr_slave_1: entered promiscuous mode [ 461.289464][ T6405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.297317][ T6405] Cannot create hsr debugfs directory [ 461.351642][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.365308][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.393823][ T6411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.519568][ T6411] hsr_slave_0: entered promiscuous mode [ 461.530589][ T6411] hsr_slave_1: entered promiscuous mode [ 461.539299][ T6411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.547355][ T6411] Cannot create hsr debugfs directory [ 461.642712][ T5835] Bluetooth: hci1: command tx timeout [ 462.043944][ T5835] Bluetooth: hci2: command tx timeout [ 462.204147][ T5835] Bluetooth: hci3: command tx timeout [ 462.338892][ T6400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 462.351906][ T6400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 462.500177][ T6400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 462.518916][ T6400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 462.760259][ T6405] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 462.775784][ T6405] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 462.834252][ T6405] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 462.876202][ T6405] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 462.888743][ T6411] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 462.899440][ T6411] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 462.926614][ T6411] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 462.938109][ T6411] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 463.297490][ T2955] hsr_slave_0: left promiscuous mode [ 463.306110][ T2955] hsr_slave_1: left promiscuous mode [ 463.313686][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.321154][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.330880][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.346665][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.358336][ T2955] bridge_slave_1: left allmulticast mode [ 463.370601][ T2955] bridge_slave_1: left promiscuous mode [ 463.379087][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.397380][ T2955] bridge_slave_0: left allmulticast mode [ 463.408764][ T2955] bridge_slave_0: left promiscuous mode [ 463.418939][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.466637][ T2955] veth1_macvtap: left promiscuous mode [ 463.480733][ T2955] veth0_macvtap: left promiscuous mode [ 463.487830][ T2955] veth1_vlan: left promiscuous mode [ 463.502274][ T2955] veth0_vlan: left promiscuous mode [ 463.722640][ T5835] Bluetooth: hci1: command tx timeout [ 463.991112][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 464.026148][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 464.064400][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.103147][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.122705][ T5835] Bluetooth: hci2: command tx timeout [ 464.285007][ T5835] Bluetooth: hci3: command tx timeout [ 464.463368][ T2955] bond0 (unregistering): Released all slaves [ 464.563722][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.607632][ T6411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.667938][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.702874][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.710042][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.755812][ T6405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.770421][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.777636][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.801270][ T6411] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.857365][ T6405] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.909639][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.916894][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.965079][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.972219][ T5880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.056185][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.063391][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.078316][ T5835] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 465.084720][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.092899][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.321428][ T6411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.574639][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.844314][ T6617] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.214'. [ 465.920132][ T6405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.965574][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.376834][ T6400] veth0_vlan: entered promiscuous mode [ 466.428024][ T6400] veth1_vlan: entered promiscuous mode [ 466.596201][ T6400] veth0_macvtap: entered promiscuous mode [ 466.636189][ T6400] veth1_macvtap: entered promiscuous mode [ 466.778700][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.795909][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.808044][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.830231][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.857933][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.930390][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.942139][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.958677][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.969692][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.991380][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.009960][ T6405] veth0_vlan: entered promiscuous mode [ 467.023327][ T6400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.032226][ T6400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.042331][ T6400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.051919][ T6400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.091224][ T6405] veth1_vlan: entered promiscuous mode [ 467.163036][ T5105] Bluetooth: hci0: command tx timeout [ 467.180371][ T6411] veth0_vlan: entered promiscuous mode [ 467.198173][ T6411] veth1_vlan: entered promiscuous mode [ 467.222087][ T6405] veth0_macvtap: entered promiscuous mode [ 467.251469][ T6405] veth1_macvtap: entered promiscuous mode [ 467.266080][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.285947][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.349117][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.361838][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.378779][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.389497][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.403109][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.424308][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.437260][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.458905][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.471082][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.485616][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.497409][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.510214][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.527037][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.537158][ T6405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.558293][ T6405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.580922][ T6405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.609107][ T6405] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.627094][ T6405] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.640277][ T6405] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.659062][ T6405] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.706690][ T6411] veth0_macvtap: entered promiscuous mode [ 467.807348][ T6411] veth1_macvtap: entered promiscuous mode [ 467.893799][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.922646][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.942045][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.954764][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.966432][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.977188][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.002004][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.021983][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.060589][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.070764][ T6674] warning: `syz.0.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 468.115082][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.142725][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.163087][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.173955][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.183860][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.194368][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.204528][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.215403][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.227360][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.249581][ T6411] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.260112][ T6411] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.270846][ T6411] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.302581][ T6411] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.389256][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.407097][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.471001][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.483143][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.635226][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.656971][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.745809][ T5873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.764314][ T5873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.030508][ T6720] netlink: 'syz.4.230': attribute type 33 has an invalid length. [ 470.058905][ T6720] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.230'. [ 470.406418][ T6737] netlink: 132 bytes leftover after parsing attributes in process `syz.6.235'. [ 471.560763][ T6778] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 471.567598][ T6778] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 472.581225][ T6803] syz.5.255 uses obsolete (PF_INET,SOCK_PACKET) [ 472.893960][ T6815] netlink: 'syz.6.258': attribute type 2 has an invalid length. [ 472.911455][ T6815] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.258'. [ 473.167809][ T6824] netlink: 'syz.6.261': attribute type 10 has an invalid length. [ 473.198627][ T6824] netlink: 55 bytes leftover after parsing attributes in process `syz.6.261'. [ 474.357269][ T6846] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 476.035666][ T6905] netlink: 60 bytes leftover after parsing attributes in process `syz.6.283'. [ 476.059344][ T6905] netlink: 60 bytes leftover after parsing attributes in process `syz.6.283'. [ 476.079026][ T6902] netlink: 60 bytes leftover after parsing attributes in process `syz.6.283'. [ 476.368222][ T6918] netlink: 15743 bytes leftover after parsing attributes in process `syz.6.287'. [ 476.397563][ T6904] netlink: 10 bytes leftover after parsing attributes in process `syz.5.282'. [ 476.915588][ T6934] netlink: 'syz.4.292': attribute type 4 has an invalid length. [ 476.935532][ T6934] netlink: 140 bytes leftover after parsing attributes in process `syz.4.292'. [ 477.864391][ T6957] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 477.895414][ T6953] netlink: 'syz.4.297': attribute type 10 has an invalid length. [ 477.953196][ T6953] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 478.729981][ T6986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.307'. [ 479.075105][ T7002] netlink: 'syz.0.313': attribute type 39 has an invalid length. [ 479.695788][ T7023] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.315'. [ 479.749360][ T7022] syzkaller0: entered promiscuous mode [ 482.161683][ T7045] netlink: 152 bytes leftover after parsing attributes in process `syz.5.326'. [ 483.245731][ T7081] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.338'. [ 483.479053][ T7087] netlink: 'syz.4.341': attribute type 2 has an invalid length. [ 483.501587][ T7087] netlink: 'syz.4.341': attribute type 8 has an invalid length. [ 483.510090][ T7087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.341'. [ 483.537680][ T5105] Bluetooth: hci0: unexpected subevent 0x0e length: 14 < 15 [ 484.051819][ T7107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.346'. [ 484.068934][ T7107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.346'. [ 484.091742][ T7105] netlink: 60 bytes leftover after parsing attributes in process `syz.4.346'. [ 484.113827][ T7107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.346'. [ 484.645533][ T7124] netlink: 'syz.5.351': attribute type 2 has an invalid length. [ 484.675760][ T7124] netlink: 164 bytes leftover after parsing attributes in process `syz.5.351'. [ 487.324720][ T7164] mac80211_hwsim hwsim13 4: renamed from wlan1 (while UP) [ 487.354410][ T7166] netlink: 'syz.4.365': attribute type 10 has an invalid length. [ 487.369234][ T7166] netlink: 168 bytes leftover after parsing attributes in process `syz.4.365'. [ 487.389226][ T7173] netlink: 'syz.6.367': attribute type 21 has an invalid length. [ 487.403609][ T7173] netlink: 164 bytes leftover after parsing attributes in process `syz.6.367'. [ 488.271451][ T7216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.379'. [ 488.292766][ T7216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.379'. [ 488.346850][ T7216] netlink: 60 bytes leftover after parsing attributes in process `syz.4.379'. [ 488.380915][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.405974][ T7218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.427700][ T7218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.438832][ T7218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.844240][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.864495][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.897184][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.927853][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.041017][ T7256] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 490.049274][ T7256] __nla_validate_parse: 1 callbacks suppressed [ 490.049369][ T7256] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.392'. [ 490.663330][ T7271] syzkaller0: entered promiscuous mode [ 490.690960][ T7271] syzkaller0: entered allmulticast mode [ 492.031732][ T7305] netlink: 'syz.4.409': attribute type 27 has an invalid length. [ 492.039897][ T7305] netlink: 'syz.4.409': attribute type 3 has an invalid length. [ 492.048725][ T7305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.409'. [ 492.889489][ T7301] netlink: 'syz.5.408': attribute type 10 has an invalid length. [ 492.928244][ T7302] netlink: 'syz.5.408': attribute type 10 has an invalid length. [ 492.953566][ T7302] netlink: 2 bytes leftover after parsing attributes in process `syz.5.408'. [ 492.971674][ T7302] team0: entered promiscuous mode [ 492.979631][ T7302] team_slave_0: entered promiscuous mode [ 492.985813][ T7302] team_slave_1: entered promiscuous mode [ 492.993881][ T7302] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.000992][ T7302] bridge0: port 3(team0) entered blocking state [ 493.008289][ T7302] bridge0: port 3(team0) entered disabled state [ 493.018827][ T7302] team0: entered allmulticast mode [ 493.024940][ T7302] team_slave_0: entered allmulticast mode [ 493.034138][ T7302] team_slave_1: entered allmulticast mode [ 493.043678][ T7302] bridge0: port 3(team0) entered blocking state [ 493.050080][ T7302] bridge0: port 3(team0) entered forwarding state [ 493.276829][ T7329] netlink: 148 bytes leftover after parsing attributes in process `syz.0.414'. [ 494.287673][ T5105] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 495.166799][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.182596][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.194770][ T7417] bridge0: entered allmulticast mode [ 495.286988][ T5105] Bluetooth: hci0: unexpected event 0x18 length: 151 > 23 [ 495.494231][ T7436] netlink: 'syz.0.444': attribute type 2 has an invalid length. [ 495.529382][ T7436] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.444'. [ 496.765749][ T7471] vlan0: entered allmulticast mode [ 496.779811][ T7471] veth0_vlan: entered allmulticast mode [ 498.243039][ T7524] netlink: 10 bytes leftover after parsing attributes in process `syz.4.470'. [ 499.411115][ T7575] syz.6.484[7575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.411549][ T7575] syz.6.484[7575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.789210][ T7634] netlink: 'syz.4.499': attribute type 3 has an invalid length. [ 500.832550][ T7634] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 500.863123][ T7634] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.499'. [ 501.060325][ T7645] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.504'. [ 501.378498][ T7655] bridge_slave_1: left allmulticast mode [ 501.394547][ T7655] bridge_slave_1: left promiscuous mode [ 501.400487][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.621618][ T7655] bridge_slave_0: left allmulticast mode [ 501.632318][ T7655] bridge_slave_0: left promiscuous mode [ 501.647502][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.728236][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.736069][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.626526][ T5105] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 504.451349][ T7724] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.525'. [ 504.521018][ T5105] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 505.347606][ T7750] netlink: 188 bytes leftover after parsing attributes in process `syz.6.534'. [ 506.076683][ T5835] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 506.613116][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 506.864093][ T7773] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 506.871559][ T7773] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 507.499609][ T7792] netlink: 60 bytes leftover after parsing attributes in process `syz.6.550'. [ 507.529357][ T7792] netlink: 60 bytes leftover after parsing attributes in process `syz.6.550'. [ 507.543213][ T7789] netlink: 60 bytes leftover after parsing attributes in process `syz.6.550'. [ 507.574193][ T7792] netlink: 60 bytes leftover after parsing attributes in process `syz.6.550'. [ 508.145368][ T7813] netlink: 830 bytes leftover after parsing attributes in process `syz.6.560'. [ 508.833691][ T7829] netlink: 14 bytes leftover after parsing attributes in process `syz.6.566'. [ 508.966560][ T5105] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 509.190543][ T7833] netlink: 'syz.0.567': attribute type 3 has an invalid length. [ 509.202668][ T7833] netlink: 152 bytes leftover after parsing attributes in process `syz.0.567'. [ 509.536566][ T7842] syzkaller0: entered promiscuous mode [ 509.542189][ T7842] syzkaller0: entered allmulticast mode [ 511.002846][ T5835] Bluetooth: hci1: command tx timeout [ 515.374348][ T7897] netlink: 'syz.6.593': attribute type 10 has an invalid length. [ 515.703484][ T7905] syz.5.597[7905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 515.703965][ T7905] syz.5.597[7905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.117494][ T7920] netlink: 152 bytes leftover after parsing attributes in process `syz.5.601'. [ 516.141365][ T7920] tc_dump_action: action bad kind [ 516.500118][ T7930] netlink: 763 bytes leftover after parsing attributes in process `syz.5.606'. [ 516.771430][ T7936] netlink: 14 bytes leftover after parsing attributes in process `syz.0.609'. [ 516.810707][ T7936] netlink: del zone limit has 4 unknown bytes [ 517.254155][ T5835] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 517.326906][ T7961] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.621'. [ 517.412172][ T7965] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 517.474447][ T7965] batman_adv: batadv0: Adding interface: team0 [ 517.480660][ T7965] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.537545][ T7965] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 517.543240][ T7969] netlink: 'syz.6.624': attribute type 1 has an invalid length. [ 517.555193][ T7967] netlink: 'syz.4.626': attribute type 10 has an invalid length. [ 517.568737][ T7969] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.624'. [ 517.577495][ T7967] bridge0: port 3(netdevsim0) entered blocking state [ 517.585050][ T7967] bridge0: port 3(netdevsim0) entered disabled state [ 517.592081][ T7967] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 517.605572][ T7967] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 517.615191][ T7971] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 517.626661][ T7971] netlink: 2 bytes leftover after parsing attributes in process `syz.0.623'. [ 517.653865][ T7971] team0: entered promiscuous mode [ 517.673559][ T7971] team_slave_0: entered promiscuous mode [ 517.693767][ T7971] team_slave_1: entered promiscuous mode [ 517.701628][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.718573][ T7971] batman_adv: batadv0: Interface activated: team0 [ 517.746629][ T7971] batman_adv: batadv0: Interface deactivated: team0 [ 517.762731][ T7971] batman_adv: batadv0: Removing interface: team0 [ 517.783943][ T7971] bridge0: port 3(team0) entered blocking state [ 517.802890][ T7971] bridge0: port 3(team0) entered disabled state [ 517.813933][ T7971] team0: entered allmulticast mode [ 517.825307][ T7971] team_slave_0: entered allmulticast mode [ 517.831244][ T7971] team_slave_1: entered allmulticast mode [ 517.844275][ T7971] bridge0: port 3(team0) entered blocking state [ 517.850718][ T7971] bridge0: port 3(team0) entered forwarding state [ 518.068460][ T7987] netlink: 'syz.5.633': attribute type 29 has an invalid length. [ 518.094908][ T7987] netlink: 'syz.5.633': attribute type 29 has an invalid length. [ 518.346474][ T7997] netlink: 'syz.4.638': attribute type 5 has an invalid length. [ 518.421375][ T8001] Q6\bY4: renamed from lo (while UP) [ 518.739661][ T8015] netlink: 'syz.5.645': attribute type 10 has an invalid length. [ 518.776603][ T8015] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 518.825266][ T8015] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 518.864628][ T8015] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 518.918328][ T8015] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 519.696865][ T8045] netlink: 'syz.6.656': attribute type 4 has an invalid length. [ 519.717463][ T8045] netlink: 152 bytes leftover after parsing attributes in process `syz.6.656'. [ 519.770821][ T8045] : renamed from bond0 (while UP) [ 520.747271][ T5835] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 521.207063][ T8085] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 521.225209][ T8085] bridge0: port 3(team0) entered disabled state [ 521.232521][ T8085] team0: left allmulticast mode [ 521.241650][ T8085] team_slave_0: left allmulticast mode [ 521.247782][ T8085] team_slave_1: left allmulticast mode [ 521.254786][ T8085] team0: left promiscuous mode [ 521.260808][ T8085] team_slave_0: left promiscuous mode [ 521.268902][ T8085] team_slave_1: left promiscuous mode [ 521.275841][ T8085] bridge0: port 3(team0) entered disabled state [ 521.290545][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.309963][ T8085] bond0: (slave team0): Enslaving as an active interface with an up link [ 521.327059][ T8088] bridge0: port 3(bond0) entered blocking state [ 521.334298][ T8088] bridge0: port 3(bond0) entered disabled state [ 521.341514][ T8088] bond0: entered allmulticast mode [ 521.347353][ T8088] bond_slave_0: entered allmulticast mode [ 521.353959][ T8088] bond_slave_1: entered allmulticast mode [ 521.359806][ T8088] team0: entered allmulticast mode [ 521.365585][ T8088] team_slave_0: entered allmulticast mode [ 521.371649][ T8088] team_slave_1: entered allmulticast mode [ 521.379603][ T8088] bond0: entered promiscuous mode [ 521.384777][ T8088] bond_slave_0: entered promiscuous mode [ 521.390564][ T8088] bond_slave_1: entered promiscuous mode [ 521.396525][ T8088] team0: entered promiscuous mode [ 521.401567][ T8088] team_slave_0: entered promiscuous mode [ 521.409526][ T8088] team_slave_1: entered promiscuous mode [ 521.418178][ T8088] bridge0: port 3(bond0) entered blocking state [ 521.424796][ T8088] bridge0: port 3(bond0) entered forwarding state [ 521.562025][ T8095] syz_tun: refused to change device tx_queue_len [ 521.899825][ T8105] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.681'. [ 522.284847][ T8111] netlink: 'syz.4.684': attribute type 3 has an invalid length. [ 522.313651][ T8111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.684'. [ 522.784375][ T5835] Bluetooth: hci2: command tx timeout [ 522.912837][ T8129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.689'. [ 523.337484][ T8144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.692'. [ 523.359014][ T8144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.692'. [ 523.375999][ T8137] netlink: 60 bytes leftover after parsing attributes in process `syz.4.692'. [ 523.394227][ T8144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.692'. [ 523.977398][ T8157] netlink: 132 bytes leftover after parsing attributes in process `syz.4.700'. [ 524.010164][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.019770][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.035792][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.044523][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.315765][ T8168] netlink: 10 bytes leftover after parsing attributes in process `syz.0.704'. [ 524.387982][ T8172] netlink: 'syz.4.706': attribute type 10 has an invalid length. [ 524.485728][ T8172] netlink: 'syz.4.706': attribute type 10 has an invalid length. [ 524.499576][ T8172] netlink: 2 bytes leftover after parsing attributes in process `syz.4.706'. [ 524.510275][ T8172] team0: entered promiscuous mode [ 524.518674][ T8172] team_slave_0: entered promiscuous mode [ 524.524872][ T8172] team_slave_1: entered promiscuous mode [ 524.533883][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.542216][ T8172] bridge0: port 4(team0) entered blocking state [ 524.550582][ T8172] bridge0: port 4(team0) entered disabled state [ 524.557378][ T8172] team0: entered allmulticast mode [ 524.562809][ T8172] team_slave_0: entered allmulticast mode [ 524.568647][ T8172] team_slave_1: entered allmulticast mode [ 524.649236][ T8181] syzkaller0: entered promiscuous mode [ 524.655879][ T8181] syzkaller0: entered allmulticast mode [ 526.682323][ T8211] netlink: 'syz.6.722': attribute type 10 has an invalid length. [ 526.817966][ T8211] netlink: 'syz.6.722': attribute type 10 has an invalid length. [ 526.873130][ T8211] team0: entered promiscuous mode [ 526.893460][ T8211] team_slave_0: entered promiscuous mode [ 526.902813][ T8211] team_slave_1: entered promiscuous mode [ 526.926147][ T8211] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.271752][ T8228] netlink: 'syz.6.727': attribute type 3 has an invalid length. [ 527.303676][ T8228] __nla_validate_parse: 2 callbacks suppressed [ 527.303704][ T8228] netlink: 152 bytes leftover after parsing attributes in process `syz.6.727'. [ 527.568106][ T5835] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 528.015908][ T8260] netlink: 188 bytes leftover after parsing attributes in process `syz.5.740'. [ 528.535786][ T8278] netlink: 'syz.5.745': attribute type 3 has an invalid length. [ 528.552295][ T8278] netlink: 152 bytes leftover after parsing attributes in process `syz.5.745'. [ 528.614695][ T8286] netlink: 'syz.4.747': attribute type 2 has an invalid length. [ 528.632957][ T8286] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.747'. [ 528.703856][ T5835] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 528.790202][ T8293] netlink: 148 bytes leftover after parsing attributes in process `syz.4.750'. [ 528.968587][ T8301] netlink: 'syz.5.753': attribute type 4 has an invalid length. [ 528.976658][ T8301] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.753'. [ 529.176886][ T8309] netlink: 188 bytes leftover after parsing attributes in process `syz.0.760'. [ 529.497958][ T5835] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 529.644254][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 529.655083][ T8329] netlink: 148 bytes leftover after parsing attributes in process `syz.4.768'. [ 529.709048][ T8332] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.770'. [ 530.664095][ T8354] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.781'. [ 530.748984][ T5105] Bluetooth: hci3: unexpected subevent 0x0e length: 14 < 15 [ 531.562725][ T5105] Bluetooth: hci1: command 0x0406 tx timeout [ 531.607882][ T5835] Bluetooth: hci2: unexpected subevent 0x0e length: 14 < 15 [ 532.076879][ T8405] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 532.432520][ T8417] netlink: 'syz.5.804': attribute type 10 has an invalid length. [ 532.460444][ T8417] mac80211_hwsim hwsim13 4: left promiscuous mode [ 532.499356][ T8417] bond0: (slave 4): Enslaving as an active interface with an up link [ 532.666958][ T8424] netlink: 'syz.4.809': attribute type 10 has an invalid length. [ 533.021513][ T5835] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 533.029613][ T5835] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 533.039944][ T5835] CPU: 1 PID: 5835 Comm: kworker/u5:2 Not tainted 6.6.100-syzkaller #0 [ 533.048227][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.058307][ T5835] Workqueue: hci1 hci_rx_work [ 533.063030][ T5835] Call Trace: [ 533.066333][ T5835] [ 533.069282][ T5835] dump_stack_lvl+0x16c/0x230 [ 533.073993][ T5835] ? show_regs_print_info+0x20/0x20 [ 533.079227][ T5835] ? load_image+0x3b0/0x3b0 [ 533.083775][ T5835] sysfs_create_dir_ns+0x256/0x280 [ 533.088926][ T5835] ? hci_rx_work+0x43a/0xd80 [ 533.093542][ T5835] ? sysfs_warn_dup+0xa0/0xa0 [ 533.098256][ T5835] ? do_raw_spin_unlock+0x121/0x230 [ 533.103494][ T5835] kobject_add_internal+0x6b8/0xc70 [ 533.108734][ T5835] kobject_add+0x156/0x220 [ 533.113193][ T5835] ? __rwlock_init+0x150/0x150 [ 533.117984][ T5835] ? kobject_init+0x1e0/0x1e0 [ 533.122695][ T5835] ? _raw_spin_unlock+0x28/0x40 [ 533.127580][ T5835] ? get_device_parent+0x366/0x390 [ 533.132722][ T5835] device_add+0x408/0xc20 [ 533.137089][ T5835] hci_conn_add_sysfs+0xd5/0x1e0 [ 533.142061][ T5835] le_conn_complete_evt+0xc37/0x1220 [ 533.147419][ T5835] ? bt_warn+0x10c/0x160 [ 533.151692][ T5835] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 533.157959][ T5835] ? bt_info+0x160/0x160 [ 533.162233][ T5835] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 533.167900][ T5835] ? skb_pull_data+0xfb/0x200 [ 533.172613][ T5835] hci_le_conn_complete_evt+0x187/0x440 [ 533.178192][ T5835] ? hci_remote_host_features_evt+0x160/0x160 [ 533.184300][ T5835] hci_event_packet+0x795/0x1210 [ 533.189296][ T5835] ? bis_list+0x290/0x290 [ 533.193666][ T5835] ? lockdep_hardirqs_on+0x98/0x150 [ 533.198923][ T5835] ? hci_send_to_monitor+0xd7/0x4f0 [ 533.204159][ T5835] hci_rx_work+0x43a/0xd80 [ 533.208613][ T5835] ? process_scheduled_works+0x957/0x15b0 [ 533.214368][ T5835] process_scheduled_works+0xa45/0x15b0 [ 533.219973][ T5835] ? assign_work+0x400/0x400 [ 533.224697][ T5835] ? assign_work+0x39e/0x400 [ 533.229318][ T5835] worker_thread+0xa55/0xfc0 [ 533.233931][ T5835] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 533.239841][ T5835] ? _raw_spin_unlock+0x40/0x40 [ 533.244709][ T5835] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 533.250623][ T5835] kthread+0x2fa/0x390 [ 533.254686][ T5835] ? pr_cont_work+0x560/0x560 [ 533.259356][ T5835] ? kthread_blkcg+0xd0/0xd0 [ 533.264029][ T5835] ret_from_fork+0x48/0x80 [ 533.268439][ T5835] ? kthread_blkcg+0xd0/0xd0 [ 533.273031][ T5835] ret_from_fork_asm+0x11/0x20 [ 533.277802][ T5835] [ 533.290324][ T5835] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 533.305107][ T5835] Bluetooth: hci1: failed to register connection device [ 533.783294][ T8463] netlink: 'syz.4.822': attribute type 10 has an invalid length. [ 533.791088][ T8463] __nla_validate_parse: 1 callbacks suppressed [ 533.791101][ T8463] netlink: 55 bytes leftover after parsing attributes in process `syz.4.822'. [ 534.150929][ T8469] mac80211_hwsim hwsim15 4: renamed from wlan1 (while UP) [ 534.162540][ T8472] netlink: 'syz.6.824': attribute type 10 has an invalid length. [ 535.026370][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.5.840'. [ 535.340449][ T5105] Bluetooth: hci1: command 0x0406 tx timeout [ 536.483094][ T5105] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 536.561376][ T5835] Bluetooth: hci3: unexpected subevent 0x0e length: 14 < 15 [ 536.920870][ T8562] netlink: 'syz.4.863': attribute type 4 has an invalid length. [ 536.930547][ T8562] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.863'. [ 537.599148][ T8590] netlink: 'syz.0.877': attribute type 4 has an invalid length. [ 537.619339][ T8590] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.877'. [ 538.106830][ T8616] netlink: 'syz.0.889': attribute type 4 has an invalid length. [ 538.118406][ T8616] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.889'. [ 538.523434][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 538.727885][ T8647] netlink: 'syz.4.904': attribute type 4 has an invalid length. [ 538.736407][ T8647] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.904'. [ 539.240192][ T8668] syzkaller0: entered promiscuous mode [ 539.246243][ T8668] syzkaller0: entered allmulticast mode [ 539.256947][ T8674] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.915'. [ 539.656975][ T5105] Bluetooth: hci0: command 0x0406 tx timeout [ 541.002382][ T8700] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.927'. [ 541.490128][ T8727] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.939'. [ 541.991058][ T8750] netlink: 'syz.0.947': attribute type 4 has an invalid length. [ 542.002525][ T8750] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.947'. [ 542.196065][ T8761] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.951'. [ 542.533427][ T8776] netlink: 'syz.0.959': attribute type 4 has an invalid length. [ 542.541687][ T8776] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.959'. [ 542.817244][ T8791] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.966'. [ 543.197400][ T8808] netlink: 'syz.5.974': attribute type 4 has an invalid length. [ 543.214114][ T8808] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.974'. [ 543.298803][ T8812] netlink: 148 bytes leftover after parsing attributes in process `syz.6.976'. [ 543.449006][ T8820] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.979'. [ 543.852932][ T8841] netlink: 'syz.6.989': attribute type 4 has an invalid length. [ 544.452387][ T8863] netlink: 'syz.5.999': attribute type 4 has an invalid length. [ 544.466074][ T8863] __nla_validate_parse: 3 callbacks suppressed [ 544.466088][ T8863] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.999'. [ 544.644529][ T8870] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1002'. [ 545.093822][ T8890] netlink: 'syz.4.1011': attribute type 4 has an invalid length. [ 545.104316][ T8890] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1011'. [ 545.910354][ T8913] netlink: 'syz.4.1020': attribute type 4 has an invalid length. [ 545.919400][ T8913] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1020'. [ 546.461971][ T8945] netlink: 'syz.6.1034': attribute type 4 has an invalid length. [ 546.481338][ T8945] netlink: 14345 bytes leftover after parsing attributes in process `syz.6.1034'. [ 547.081134][ T8968] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1043'. [ 547.705989][ T9001] netlink: 'syz.5.1056': attribute type 4 has an invalid length. [ 547.714174][ T9001] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.1056'. [ 548.381346][ T9026] netlink: 'syz.6.1065': attribute type 4 has an invalid length. [ 548.401739][ T9026] netlink: 14345 bytes leftover after parsing attributes in process `syz.6.1065'. [ 548.459704][ T5835] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 548.468795][ T5835] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 548.503307][ T9029] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1067'. [ 549.169753][ T9058] netlink: 'syz.4.1077': attribute type 4 has an invalid length. [ 549.188100][ T9058] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1077'. [ 550.327744][ T5835] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 551.025656][ T9159] syzkaller0: entered promiscuous mode [ 551.047401][ T9159] syzkaller0: entered allmulticast mode [ 551.253556][ T5835] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 551.261089][ T5835] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 552.364662][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 552.947800][ T9188] netlink: 'syz.4.1132': attribute type 4 has an invalid length. [ 552.956631][ T9188] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1132'. [ 552.968288][ T9195] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1136'. [ 553.421153][ T9216] netlink: 'syz.6.1146': attribute type 4 has an invalid length. [ 553.429374][ T9216] netlink: 14345 bytes leftover after parsing attributes in process `syz.6.1146'. [ 553.539481][ T9219] syzkaller0: entered promiscuous mode [ 553.546157][ T9219] syzkaller0: entered allmulticast mode [ 555.526164][ T9245] netlink: 'syz.5.1157': attribute type 4 has an invalid length. [ 555.534038][ T9245] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.1157'. [ 555.824154][ T9261] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1164'. [ 556.044882][ T9264] syzkaller0: entered promiscuous mode [ 556.058232][ T9264] syzkaller0: entered allmulticast mode [ 556.790343][ T5105] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 556.797937][ T5105] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 557.939216][ T9284] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1176'. [ 557.956104][ T9289] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1178'. [ 558.381150][ T9311] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1187'. [ 559.215347][ T9315] syzkaller0: entered promiscuous mode [ 559.220881][ T9315] syzkaller0: entered allmulticast mode [ 559.238774][ T9321] netlink: 'syz.0.1197': attribute type 4 has an invalid length. [ 559.263562][ T9321] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1197'. [ 559.276808][ T9317] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1189'. [ 559.354209][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 559.361857][ T5842] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 561.546912][ T9344] netlink: 'syz.4.1202': attribute type 4 has an invalid length. [ 561.555557][ T9344] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1202'. [ 561.713869][ T9366] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1213'. [ 562.064298][ T9381] netlink: 'syz.0.1221': attribute type 4 has an invalid length. [ 562.079467][ T9381] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1221'. [ 562.208176][ T9391] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1224'. [ 562.784774][ T9409] netlink: 'syz.0.1233': attribute type 4 has an invalid length. [ 562.822703][ T9409] netlink: 14345 bytes leftover after parsing attributes in process `syz.0.1233'. [ 563.178549][ T5105] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 563.187085][ T5105] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 563.202968][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.209302][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.353786][ T5873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.519820][ T5873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.550613][ T9441] netlink: 'syz.5.1247': attribute type 4 has an invalid length. [ 563.562771][ T9441] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.1247'. [ 563.601264][ T5873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.619009][ T5842] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 563.726756][ T5873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.109081][ T5842] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 564.149114][ T9472] netlink: 'syz.4.1260': attribute type 4 has an invalid length. [ 564.178213][ T9472] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1260'. [ 564.658969][ T5842] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 564.694650][ T9499] netlink: 'syz.6.1273': attribute type 4 has an invalid length. [ 564.742630][ T9499] netlink: 14345 bytes leftover after parsing attributes in process `syz.6.1273'. [ 565.034476][ T5873] bond0: (slave wlan1): Releasing backup interface [ 565.185809][ T5842] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 565.278518][ T5873] hsr_slave_0: left promiscuous mode [ 565.300667][ T5873] hsr_slave_1: left promiscuous mode [ 565.307214][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.322862][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.331021][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.339088][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.347997][ T5873] bridge_slave_1: left allmulticast mode [ 565.365592][ T5873] bridge_slave_1: left promiscuous mode [ 565.381556][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.396348][ T5873] bridge_slave_0: left allmulticast mode [ 565.412590][ T5873] bridge_slave_0: left promiscuous mode [ 565.418430][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.464544][ T5873] veth1_macvtap: left promiscuous mode [ 565.470205][ T5873] veth0_macvtap: left promiscuous mode [ 565.477562][ T5873] veth1_vlan: left promiscuous mode [ 565.483917][ T5873] veth0_vlan: left promiscuous mode [ 565.820199][ T5842] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 566.125333][ T5873] team0 (unregistering): Port device team_slave_1 removed [ 566.171636][ T5873] team0 (unregistering): Port device team_slave_0 removed [ 566.210921][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.249511][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.611597][ T5873] bond0 (unregistering): Released all slaves [ 566.674372][ T9528] netlink: 'syz.4.1286': attribute type 4 has an invalid length. [ 566.682248][ T9528] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1286'. [ 566.691756][ T9533] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1288'. [ 567.089677][ T5842] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 567.187836][ T9572] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1306'. [ 567.217978][ T9568] netlink: 'syz.5.1304': attribute type 4 has an invalid length. [ 567.243695][ T9568] netlink: 14345 bytes leftover after parsing attributes in process `syz.5.1304'. [ 567.787523][ T9596] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1317'. [ 568.701582][ T9635] netlink: 'syz.5.1335': attribute type 5 has an invalid length. [ 568.959295][ T9639] syzkaller0: entered promiscuous mode [ 568.972575][ T9639] syzkaller0: entered allmulticast mode [ 568.989568][ T9647] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1340'. [ 570.747411][ T9665] netlink: 'syz.0.1349': attribute type 5 has an invalid length. [ 570.762622][ T9673] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.1352'. [ 570.838150][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 570.845917][ T5842] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 571.155472][ T9692] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.1362'. [ 571.445557][ T5105] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 571.565384][ T9720] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1374'. [ 571.825877][ T5105] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 572.212255][ T9765] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.1391'. [ 572.337081][ T5105] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 572.637315][ T9790] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1403'. [ 572.829263][ T5105] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 573.184963][ T9821] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1416'. [ 573.220293][ T5105] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 573.470984][ T9840] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1425'. [ 573.554053][ T5105] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 573.562015][ T5105] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 573.571742][ T5105] CPU: 0 PID: 5105 Comm: kworker/u5:1 Not tainted 6.6.100-syzkaller #0 [ 573.580019][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.590091][ T5105] Workqueue: hci0 hci_rx_work [ 573.594778][ T5105] Call Trace: [ 573.598049][ T5105] [ 573.600973][ T5105] dump_stack_lvl+0x16c/0x230 [ 573.605654][ T5105] ? show_regs_print_info+0x20/0x20 [ 573.610845][ T5105] ? load_image+0x3b0/0x3b0 [ 573.615357][ T5105] sysfs_create_dir_ns+0x256/0x280 [ 573.620465][ T5105] ? hci_rx_work+0x43a/0xd80 [ 573.625051][ T5105] ? sysfs_warn_dup+0xa0/0xa0 [ 573.629724][ T5105] ? do_raw_spin_unlock+0x121/0x230 [ 573.634920][ T5105] kobject_add_internal+0x6b8/0xc70 [ 573.640125][ T5105] kobject_add+0x156/0x220 [ 573.644534][ T5105] ? __rwlock_init+0x150/0x150 [ 573.649297][ T5105] ? kobject_init+0x1e0/0x1e0 [ 573.653986][ T5105] ? _raw_spin_unlock+0x28/0x40 [ 573.658854][ T5105] ? get_device_parent+0x366/0x390 [ 573.663964][ T5105] device_add+0x408/0xc20 [ 573.668291][ T5105] hci_conn_add_sysfs+0xd5/0x1e0 [ 573.673229][ T5105] le_conn_complete_evt+0xc37/0x1220 [ 573.678555][ T5105] ? bt_warn+0x10c/0x160 [ 573.682794][ T5105] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 573.689030][ T5105] ? bt_info+0x160/0x160 [ 573.693261][ T5105] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 573.698889][ T5105] ? skb_pull_data+0xfb/0x200 [ 573.703567][ T5105] hci_le_conn_complete_evt+0x187/0x440 [ 573.709109][ T5105] ? hci_remote_host_features_evt+0x160/0x160 [ 573.715172][ T5105] hci_event_packet+0x795/0x1210 [ 573.720110][ T5105] ? bis_list+0x290/0x290 [ 573.724432][ T5105] ? lockdep_hardirqs_on+0x98/0x150 [ 573.729625][ T5105] ? hci_send_to_monitor+0xd7/0x4f0 [ 573.734825][ T5105] hci_rx_work+0x43a/0xd80 [ 573.739239][ T5105] ? process_scheduled_works+0x957/0x15b0 [ 573.744949][ T5105] process_scheduled_works+0xa45/0x15b0 [ 573.750507][ T5105] ? assign_work+0x400/0x400 [ 573.755094][ T5105] ? assign_work+0x39e/0x400 [ 573.759677][ T5105] worker_thread+0xa55/0xfc0 [ 573.764259][ T5105] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 573.770148][ T5105] ? _raw_spin_unlock+0x40/0x40 [ 573.774993][ T5105] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 573.780893][ T5105] kthread+0x2fa/0x390 [ 573.784950][ T5105] ? pr_cont_work+0x560/0x560 [ 573.789620][ T5105] ? kthread_blkcg+0xd0/0xd0 [ 573.794200][ T5105] ret_from_fork+0x48/0x80 [ 573.798636][ T5105] ? kthread_blkcg+0xd0/0xd0 [ 573.803214][ T5105] ret_from_fork_asm+0x11/0x20 [ 573.807982][ T5105] [ 573.815548][ T5105] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 573.829459][ T5105] Bluetooth: hci0: failed to register connection device [ 574.075780][ T9864] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.1434'. [ 574.130040][ T9868] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1436'. [ 574.197480][ T5105] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 574.212896][ T5105] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 574.222206][ T5105] CPU: 0 PID: 5105 Comm: kworker/u5:1 Not tainted 6.6.100-syzkaller #0 [ 574.230459][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.240543][ T5105] Workqueue: hci2 hci_rx_work [ 574.245257][ T5105] Call Trace: [ 574.248563][ T5105] [ 574.251534][ T5105] dump_stack_lvl+0x16c/0x230 [ 574.256236][ T5105] ? show_regs_print_info+0x20/0x20 [ 574.261431][ T5105] ? load_image+0x3b0/0x3b0 [ 574.265956][ T5105] sysfs_create_dir_ns+0x256/0x280 [ 574.271094][ T5105] ? hci_rx_work+0x43a/0xd80 [ 574.275710][ T5105] ? sysfs_warn_dup+0xa0/0xa0 [ 574.280411][ T5105] ? do_raw_spin_unlock+0x121/0x230 [ 574.285627][ T5105] kobject_add_internal+0x6b8/0xc70 [ 574.290870][ T5105] kobject_add+0x156/0x220 [ 574.295326][ T5105] ? __rwlock_init+0x150/0x150 [ 574.300126][ T5105] ? kobject_init+0x1e0/0x1e0 [ 574.304833][ T5105] ? _raw_spin_unlock+0x28/0x40 [ 574.309716][ T5105] ? get_device_parent+0x366/0x390 [ 574.314870][ T5105] device_add+0x408/0xc20 [ 574.319236][ T5105] hci_conn_add_sysfs+0xd5/0x1e0 [ 574.324210][ T5105] le_conn_complete_evt+0xc37/0x1220 [ 574.329523][ T5105] ? bt_warn+0x10c/0x160 [ 574.333797][ T5105] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 574.340069][ T5105] ? bt_info+0x160/0x160 [ 574.344339][ T5105] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 574.350006][ T5105] ? skb_pull_data+0xfb/0x200 [ 574.354710][ T5105] hci_le_conn_complete_evt+0x187/0x440 [ 574.360272][ T5105] ? hci_remote_host_features_evt+0x160/0x160 [ 574.366353][ T5105] hci_event_packet+0x795/0x1210 [ 574.371307][ T5105] ? bis_list+0x290/0x290 [ 574.375643][ T5105] ? lockdep_hardirqs_on+0x98/0x150 [ 574.380842][ T5105] ? hci_send_to_monitor+0xd7/0x4f0 [ 574.386035][ T5105] hci_rx_work+0x43a/0xd80 [ 574.390452][ T5105] ? process_scheduled_works+0x957/0x15b0 [ 574.396167][ T5105] process_scheduled_works+0xa45/0x15b0 [ 574.401733][ T5105] ? assign_work+0x400/0x400 [ 574.406322][ T5105] ? assign_work+0x39e/0x400 [ 574.410927][ T5105] worker_thread+0xa55/0xfc0 [ 574.415539][ T5105] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 574.421438][ T5105] ? _raw_spin_unlock+0x40/0x40 [ 574.426293][ T5105] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 574.432200][ T5105] kthread+0x2fa/0x390 [ 574.436262][ T5105] ? pr_cont_work+0x560/0x560 [ 574.440935][ T5105] ? kthread_blkcg+0xd0/0xd0 [ 574.445517][ T5105] ret_from_fork+0x48/0x80 [ 574.449929][ T5105] ? kthread_blkcg+0xd0/0xd0 [ 574.454526][ T5105] ret_from_fork_asm+0x11/0x20 [ 574.459314][ T5105] [ 574.465112][ T5105] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 574.479179][ T5105] Bluetooth: hci2: failed to register connection device [ 574.674511][ T9888] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.1445'. [ 574.740431][ T5105] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 575.091775][ T9911] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.1455'. [ 575.530968][ T9941] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1467'. [ 575.680657][ T5105] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 575.892742][ T5105] Bluetooth: hci0: command 0x0406 tx timeout [ 575.981027][ T9967] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1478'. [ 576.082984][ T5105] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 576.211099][ T5105] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 576.218761][ T5105] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 576.488628][ T5105] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 576.522773][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 576.620196][T10002] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.1493'. [ 576.632390][ T5105] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 576.639954][ T5105] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 576.763256][ T5105] Bluetooth: hci3: command 0x0406 tx timeout [ 576.984492][ T5105] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 576.993221][ T5105] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 577.005722][ T5105] CPU: 0 PID: 5105 Comm: kworker/u5:1 Not tainted 6.6.100-syzkaller #0 [ 577.014002][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 577.024178][ T5105] Workqueue: hci3 hci_rx_work [ 577.028891][ T5105] Call Trace: [ 577.032191][ T5105] [ 577.035195][ T5105] dump_stack_lvl+0x16c/0x230 [ 577.039894][ T5105] ? show_regs_print_info+0x20/0x20 [ 577.045097][ T5105] ? load_image+0x3b0/0x3b0 [ 577.049607][ T5105] sysfs_create_dir_ns+0x256/0x280 [ 577.054717][ T5105] ? hci_rx_work+0x43a/0xd80 [ 577.059303][ T5105] ? sysfs_warn_dup+0xa0/0xa0 [ 577.063980][ T5105] ? do_raw_spin_unlock+0x121/0x230 [ 577.069193][ T5105] kobject_add_internal+0x6b8/0xc70 [ 577.074410][ T5105] kobject_add+0x156/0x220 [ 577.078845][ T5105] ? __rwlock_init+0x150/0x150 [ 577.083606][ T5105] ? kobject_init+0x1e0/0x1e0 [ 577.088279][ T5105] ? _raw_spin_unlock+0x28/0x40 [ 577.093130][ T5105] ? get_device_parent+0x366/0x390 [ 577.098248][ T5105] device_add+0x408/0xc20 [ 577.102582][ T5105] hci_conn_add_sysfs+0xd5/0x1e0 [ 577.107518][ T5105] le_conn_complete_evt+0xc37/0x1220 [ 577.112804][ T5105] ? bt_warn+0x10c/0x160 [ 577.117042][ T5105] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 577.123280][ T5105] ? bt_info+0x160/0x160 [ 577.127518][ T5105] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 577.133148][ T5105] ? skb_pull_data+0xfb/0x200 [ 577.137827][ T5105] hci_le_conn_complete_evt+0x187/0x440 [ 577.143367][ T5105] ? hci_remote_host_features_evt+0x160/0x160 [ 577.149433][ T5105] hci_event_packet+0x795/0x1210 [ 577.154392][ T5105] ? bis_list+0x290/0x290 [ 577.158725][ T5105] ? lockdep_hardirqs_on+0x98/0x150 [ 577.163928][ T5105] ? hci_send_to_monitor+0xd7/0x4f0 [ 577.169134][ T5105] hci_rx_work+0x43a/0xd80 [ 577.173657][ T5105] ? process_scheduled_works+0x957/0x15b0 [ 577.179384][ T5105] process_scheduled_works+0xa45/0x15b0 [ 577.184946][ T5105] ? assign_work+0x400/0x400 [ 577.189535][ T5105] ? assign_work+0x39e/0x400 [ 577.194121][ T5105] worker_thread+0xa55/0xfc0 [ 577.198716][ T5105] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 577.204614][ T5105] ? _raw_spin_unlock+0x40/0x40 [ 577.209471][ T5105] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 577.215400][ T5105] kthread+0x2fa/0x390 [ 577.219468][ T5105] ? pr_cont_work+0x560/0x560 [ 577.224143][ T5105] ? kthread_blkcg+0xd0/0xd0 [ 577.228724][ T5105] ret_from_fork+0x48/0x80 [ 577.233132][ T5105] ? kthread_blkcg+0xd0/0xd0 [ 577.237709][ T5105] ret_from_fork_asm+0x11/0x20 [ 577.242564][ T5105] [ 577.248854][ T5105] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 577.262907][ T5105] Bluetooth: hci3: failed to register connection device [ 577.338519][T10033] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1507'. [ 577.772229][T10056] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.1519'. [ 578.040239][T10071] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1525'. [ 579.323663][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 579.611007][T10136] __nla_validate_parse: 7 callbacks suppressed [ 579.611021][T10136] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1553'. [ 579.784449][T10144] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1557'. [ 580.604495][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 580.610598][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 581.403881][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 581.541706][T10240] syzkaller0: entered promiscuous mode [ 581.547367][T10240] syzkaller0: entered allmulticast mode [ 583.325539][T10243] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1603'. [ 583.338495][T10272] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1616'. [ 583.755061][ T5835] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 583.762677][ T5835] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 583.824345][T10307] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1630'. [ 583.858360][T10309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1632'. [ 584.246394][T10332] netlink: 14601 bytes leftover after parsing attributes in process `syz.6.1643'. [ 584.430005][T10342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1646'. [ 584.484234][T10345] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1647'. [ 585.074526][T10382] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1664'. [ 585.498372][T10404] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1674'. [ 585.943254][ T5842] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 585.950810][ T5842] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 585.997783][ T5842] Bluetooth: hci2: unexpected subevent 0x0e length: 14 < 15 [ 586.015949][T10435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1688'. [ 586.636818][ T5842] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 586.644399][ T5842] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 586.759449][ T5842] Bluetooth: hci1: unexpected subevent 0x0e length: 14 < 15 [ 587.046658][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 587.060893][ T5842] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 587.397102][ T5842] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 587.412601][ T5842] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 588.031213][ T5842] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 588.042714][ T5842] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 588.426851][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 588.442252][ T5842] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 588.481070][T10535] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1734'. [ 588.696907][T10549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1740'. [ 589.409363][ T5835] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 589.417115][ T5835] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 589.457071][T10562] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1745'. [ 589.488092][T10564] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1746'. [ 589.857310][ T5842] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 589.865923][ T5842] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 589.906675][T10588] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1757'. [ 589.975501][T10590] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1758'. [ 590.294929][ T5842] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 590.302384][ T5842] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 590.713568][T10614] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.1769'. [ 590.928815][T10626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1774'. [ 590.938810][ T5842] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 590.948069][ T5842] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 591.145019][T10640] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1780'. [ 591.198595][T10642] netlink: 14345 bytes leftover after parsing attributes in process `syz.6.1781'. [ 591.309622][ T5842] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 591.322634][ T5842] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 591.629898][T10662] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1790'. [ 591.766098][ T5835] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 591.782520][ T5835] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 592.192028][ T5835] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 592.201313][ T5835] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 592.546603][ T5835] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 592.555681][ T5835] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 592.989334][ T5835] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 592.997547][ T5835] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 593.359351][T10764] netlink: 'syz.0.1834': attribute type 2 has an invalid length. [ 593.373644][T10764] netlink: 'syz.0.1834': attribute type 3 has an invalid length. [ 593.381513][T10764] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.1834'. [ 593.788549][T10786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.807002][T10786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.840645][T10786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.870623][T10786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.613098][ T5835] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 594.620626][ T5835] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 594.971579][ T5835] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 594.979341][ T5835] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 595.680016][T10895] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1893'. [ 596.053108][T10917] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1903'. [ 596.451851][T10943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1915'. [ 596.601052][T10948] bond0: left allmulticast mode [ 596.609491][T10948] bond_slave_0: left allmulticast mode [ 596.615412][T10948] bond_slave_1: left allmulticast mode [ 596.621407][T10948] team0: left allmulticast mode [ 596.627060][ T5842] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 596.636949][T10948] team_slave_0: left allmulticast mode [ 596.647127][T10948] team_slave_1: left allmulticast mode [ 596.654608][T10948] bond0: left promiscuous mode [ 596.659882][T10948] bond_slave_0: left promiscuous mode [ 596.667262][T10948] bond_slave_1: left promiscuous mode [ 596.678123][T10948] team0: left promiscuous mode [ 596.683570][T10948] team_slave_0: left promiscuous mode [ 596.690553][T10948] team_slave_1: left promiscuous mode [ 596.700064][T10948] bridge0: port 3(bond0) entered disabled state [ 596.734465][T10948] bridge_slave_1: left allmulticast mode [ 596.740413][T10948] bridge_slave_1: left promiscuous mode [ 596.747301][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.780885][T10948] bridge_slave_0: left allmulticast mode [ 596.791169][T10948] bridge_slave_0: left promiscuous mode [ 596.797852][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.169791][T10967] C: renamed from team_slave_0 [ 597.177614][ T5842] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 597.196915][T10967] netlink: 'syz.6.1927': attribute type 3 has an invalid length. [ 597.205132][T10967] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1927'. [ 597.215704][T10967] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 597.344052][T10976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1930'. [ 597.476270][T10986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1936'. [ 597.698423][ T5842] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 598.061606][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1946'. [ 598.215649][T11024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1950'. [ 598.237265][ T5842] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 598.387790][T11037] netlink: 'syz.5.1956': attribute type 4 has an invalid length. [ 598.400857][T11037] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1956'. [ 598.673435][T11053] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1962'. [ 598.885319][ T5842] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 599.095105][T11066] netlink: 'syz.5.1967': attribute type 4 has an invalid length. [ 599.140153][T11066] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1967'. [ 599.726751][ T5842] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 599.835734][T11098] netlink: 'syz.0.1978': attribute type 4 has an invalid length. [ 600.291230][ T5842] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 600.367561][T11131] netlink: 'syz.6.1989': attribute type 4 has an invalid length. [ 600.408046][T11128] team0: left allmulticast mode [ 600.413528][T11128] team_slave_0: left allmulticast mode [ 600.419318][T11128] team_slave_1: left allmulticast mode [ 600.427115][T11128] bridge0: port 3(team0) entered disabled state [ 600.445437][T11128] bridge_slave_1: left allmulticast mode [ 600.459300][T11128] bridge_slave_1: left promiscuous mode [ 600.472215][T11128] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.501049][T11128] bridge_slave_0: left allmulticast mode [ 600.507086][T11128] bridge_slave_0: left promiscuous mode [ 600.521337][T11128] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.928409][T11159] netlink: 'syz.4.2001': attribute type 4 has an invalid length. [ 600.953495][ T5842] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 601.286774][T11181] __nla_validate_parse: 7 callbacks suppressed [ 601.286789][T11181] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2007'. [ 601.436322][ T5842] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 601.488354][T11191] netlink: 'syz.4.2012': attribute type 4 has an invalid length. [ 601.510620][T11191] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2012'. [ 601.830153][T11206] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2018'. [ 602.107962][ T5842] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 602.451603][T11221] netlink: 'syz.5.2025': attribute type 4 has an invalid length. [ 602.487563][T11221] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2025'. [ 602.745563][T11232] syzkaller0: entered promiscuous mode [ 602.752727][T11232] syzkaller0: entered allmulticast mode [ 602.752857][ T5842] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 602.766140][T11238] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2032'. [ 604.330825][T11254] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2038'. [ 604.340263][T11256] netlink: 'syz.6.2039': attribute type 4 has an invalid length. [ 604.365029][T11257] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2039'. [ 604.446023][ T5842] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 604.509384][T11265] netlink: 'syz.5.2042': attribute type 21 has an invalid length. [ 604.528983][T11266] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2043'. [ 604.722664][T11281] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2049'. [ 604.835220][T11283] syzkaller0: entered promiscuous mode [ 604.840778][T11283] syzkaller0: entered allmulticast mode [ 604.956120][ T5842] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 606.737791][T11291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2054'. [ 607.064014][T11328] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2068'. [ 607.126462][T11330] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2069'. [ 607.254623][T11334] syzkaller0: entered promiscuous mode [ 607.260240][T11334] syzkaller0: entered allmulticast mode [ 615.240359][T11351] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2078'. [ 616.248855][T11384] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2091'. [ 616.387970][T11388] syzkaller0: entered promiscuous mode [ 616.394609][T11388] syzkaller0: entered allmulticast mode Stopping sshd: stopped /usr/sbin/sshd (pid 5547) OK Stopping crond: stopped /usr/sbin/crond (pid 5528) OK Stopping dhcpcd... no /sbin/dhcpcd found; none killed Stopping network: [ 619.172327][T11428] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2102'. OK Stopping iptables: OK Stopping system message bus: [ 620.356076][T11462] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2113'. [ 620.481432][T11466] syzkaller0: entered promiscuous mode [ 620.513393][T11466] syzkaller0: entered allmulticast mode done Stopping klogd: OK Stopping acpid: [ 623.143239][T11502] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2125'. OK [ 623.679684][T11528] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.2136'. Stopping syslogd: stopped /sbin/syslogd (pid 5141) OK umount: can't remount debugfs read-only [ 624.606536][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.613699][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.738236][T11559] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2145'. [ 626.277963][T11586] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2159'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.184 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 628.989767][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.056705][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.142287][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.202530][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.764920][T11612] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 629.778715][T11612] ACPI: PM: Preparing to enter system sleep state S5 [ 629.792581][T11612] kvm: exiting hardware virtualization [ 629.798198][T11612] reboot: Power down serialport: VM disconnected.