last executing test programs: 4.311558421s ago: executing program 2 (id=2112): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) 3.487065804s ago: executing program 3 (id=2116): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r2}, 0xc) 3.330463707s ago: executing program 2 (id=2118): r0 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x14125, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xff, 0xc0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80}, 0x4182, 0x2000000000000001, 0xfffffffd, 0xb, 0xfffffffffff7bbfe, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x4000000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.592057164s ago: executing program 2 (id=2119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000110000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r4}, 0x10) close(r1) close(r5) 1.591775964s ago: executing program 3 (id=2120): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/111, 0x6f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r2) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 1.482988436s ago: executing program 1 (id=2122): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x6a) 1.482539686s ago: executing program 3 (id=2123): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe38, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x40488c4) sendmsg$inet(r1, 0x0, 0x52cc) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.364177038s ago: executing program 1 (id=2125): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0xb47, r1}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x510, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000080)={'wlan1\x00'}) 1.363950348s ago: executing program 2 (id=2126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x7, 0x1, 0x7c, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.22424378s ago: executing program 2 (id=2127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x3, 0x7fe2, 0x5, 0x140}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000200)={0x3, 0x2b, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free_batched\x00', r2}, 0x18) 1.22405306s ago: executing program 3 (id=2128): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc000) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) 1.21655036s ago: executing program 0 (id=2129): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r2}, 0xc) 1.153008361s ago: executing program 1 (id=2130): r0 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x14125, 0x2e, 0xfffffbff, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xff, 0xc0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80}, 0x4182, 0x2000000000000001, 0xfffffffd, 0xb, 0xfffffffffff7bbfe, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x4000000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 862.910976ms ago: executing program 1 (id=2131): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10320, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000003c0)=ANY=[]) 755.664898ms ago: executing program 0 (id=2132): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 507.632911ms ago: executing program 2 (id=2133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xffbf) 504.894201ms ago: executing program 1 (id=2141): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r2}, 0xc) 504.389881ms ago: executing program 0 (id=2134): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x6a) 371.644354ms ago: executing program 0 (id=2135): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x12}, 0x0) 296.952145ms ago: executing program 3 (id=2136): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x14442, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) 131.061008ms ago: executing program 0 (id=2137): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x8c, 0x1}, 0x48) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000c5ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000a95e9af8be00bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 69.697098ms ago: executing program 3 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080)) 1.1337ms ago: executing program 0 (id=2139): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0xb47, r1}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x510, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000080)={'wlan1\x00'}) 0s ago: executing program 1 (id=2148): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r2}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. syzkaller login: [ 76.381115][ T5775] cgroup: Unknown subsys name 'net' [ 76.546918][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.207752][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.896651][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.907551][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.915579][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.925322][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.935379][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.951194][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.965529][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.969635][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.982507][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.990517][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.997773][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.998114][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.012853][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.028221][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.039571][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.044957][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.077152][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.084396][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.092626][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.102781][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.103335][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.111718][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.125189][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.133816][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.485410][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 80.718911][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 80.760372][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.767606][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.775099][ T5785] bridge_slave_0: entered allmulticast mode [ 80.782178][ T5785] bridge_slave_0: entered promiscuous mode [ 80.796722][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.803964][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.811431][ T5785] bridge_slave_1: entered allmulticast mode [ 80.818394][ T5785] bridge_slave_1: entered promiscuous mode [ 80.839548][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 80.933573][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.942957][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 80.967656][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.028294][ T5785] team0: Port device team_slave_0 added [ 81.080882][ T5785] team0: Port device team_slave_1 added [ 81.132135][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.139800][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.146960][ T5794] bridge_slave_0: entered allmulticast mode [ 81.154351][ T5794] bridge_slave_0: entered promiscuous mode [ 81.162835][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.170129][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.177261][ T5784] bridge_slave_0: entered allmulticast mode [ 81.184794][ T5784] bridge_slave_0: entered promiscuous mode [ 81.214135][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.221743][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.228996][ T5794] bridge_slave_1: entered allmulticast mode [ 81.235995][ T5794] bridge_slave_1: entered promiscuous mode [ 81.243122][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.250603][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.257778][ T5784] bridge_slave_1: entered allmulticast mode [ 81.265236][ T5784] bridge_slave_1: entered promiscuous mode [ 81.295148][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.302432][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.328549][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.343583][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.350633][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.378359][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.446761][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.462784][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.470287][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.477444][ T5788] bridge_slave_0: entered allmulticast mode [ 81.485027][ T5788] bridge_slave_0: entered promiscuous mode [ 81.493911][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.501658][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.508864][ T5788] bridge_slave_1: entered allmulticast mode [ 81.517697][ T5788] bridge_slave_1: entered promiscuous mode [ 81.540295][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.552029][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.587784][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.638143][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.651856][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.693549][ T5784] team0: Port device team_slave_0 added [ 81.728349][ T5794] team0: Port device team_slave_0 added [ 81.740015][ T5785] hsr_slave_0: entered promiscuous mode [ 81.747076][ T5785] hsr_slave_1: entered promiscuous mode [ 81.757711][ T5784] team0: Port device team_slave_1 added [ 81.766661][ T5788] team0: Port device team_slave_0 added [ 81.776230][ T5788] team0: Port device team_slave_1 added [ 81.783958][ T5794] team0: Port device team_slave_1 added [ 81.863755][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.872181][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.898241][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.921938][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.928918][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.955425][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.968585][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.975767][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.001705][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.019989][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.027040][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.053231][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.065004][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.072299][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.098251][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.111127][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.118107][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.144987][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.145087][ T5802] Bluetooth: hci0: command tx timeout [ 82.161307][ T50] Bluetooth: hci1: command tx timeout [ 82.220582][ T50] Bluetooth: hci2: command tx timeout [ 82.222806][ T5802] Bluetooth: hci3: command tx timeout [ 82.316518][ T5784] hsr_slave_0: entered promiscuous mode [ 82.323439][ T5784] hsr_slave_1: entered promiscuous mode [ 82.330783][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.338743][ T5784] Cannot create hsr debugfs directory [ 82.348980][ T5794] hsr_slave_0: entered promiscuous mode [ 82.355777][ T5794] hsr_slave_1: entered promiscuous mode [ 82.362946][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.370668][ T5794] Cannot create hsr debugfs directory [ 82.392585][ T5788] hsr_slave_0: entered promiscuous mode [ 82.399257][ T5788] hsr_slave_1: entered promiscuous mode [ 82.405546][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.413308][ T5788] Cannot create hsr debugfs directory [ 82.791967][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.803091][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.818355][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.830819][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.916265][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.945272][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.956567][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.967051][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.055729][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.066286][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.079542][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.096244][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.214972][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.226745][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.248452][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.267745][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.282988][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.347872][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.382261][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.389634][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.413486][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.420772][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.455950][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.520032][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.553075][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.583056][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.597455][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.604683][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.614208][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.621415][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.673833][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.695123][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.702364][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.761822][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.769065][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.804513][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.863192][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.902049][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.909384][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.953304][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.961047][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.101721][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.174783][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.234978][ T5802] Bluetooth: hci0: command tx timeout [ 84.234989][ T50] Bluetooth: hci1: command tx timeout [ 84.299380][ T50] Bluetooth: hci3: command tx timeout [ 84.300035][ T5802] Bluetooth: hci2: command tx timeout [ 84.322762][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.414299][ T5785] veth0_vlan: entered promiscuous mode [ 84.465115][ T5785] veth1_vlan: entered promiscuous mode [ 84.488821][ T5788] veth0_vlan: entered promiscuous mode [ 84.533532][ T5788] veth1_vlan: entered promiscuous mode [ 84.572202][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.610879][ T5785] veth0_macvtap: entered promiscuous mode [ 84.645378][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.656454][ T5785] veth1_macvtap: entered promiscuous mode [ 84.718406][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.736450][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.760992][ T5788] veth0_macvtap: entered promiscuous mode [ 84.784849][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.796784][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.806561][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.815538][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.826523][ T5784] veth0_vlan: entered promiscuous mode [ 84.838133][ T5788] veth1_macvtap: entered promiscuous mode [ 84.866071][ T5794] veth0_vlan: entered promiscuous mode [ 84.883888][ T5784] veth1_vlan: entered promiscuous mode [ 84.904562][ T5794] veth1_vlan: entered promiscuous mode [ 84.943581][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.964388][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.976350][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.034392][ T5784] veth0_macvtap: entered promiscuous mode [ 85.076797][ T5784] veth1_macvtap: entered promiscuous mode [ 85.084423][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.095770][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.109507][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.123043][ T2901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.149415][ T2901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.159827][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.168561][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.178660][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.190821][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.212617][ T5794] veth0_macvtap: entered promiscuous mode [ 85.266908][ T5794] veth1_macvtap: entered promiscuous mode [ 85.277694][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.288679][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.299680][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.313208][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.324847][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.342482][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.348546][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.362239][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.366960][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.372534][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.391669][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.403062][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.446713][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.456154][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.468102][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.477582][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.562371][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.573891][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.586055][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.600588][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.611003][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.632789][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.662144][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.675425][ C0] hrtimer: interrupt took 56013 ns [ 85.706343][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.718553][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.730340][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.744618][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.757374][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.768258][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.781041][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.920697][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.930225][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.939803][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.948557][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.962875][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.985950][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.112652][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.128721][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.237770][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.258843][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.299660][ T5802] Bluetooth: hci1: command tx timeout [ 86.299974][ T50] Bluetooth: hci0: command tx timeout [ 86.380270][ T50] Bluetooth: hci3: command tx timeout [ 86.381579][ T5802] Bluetooth: hci2: command tx timeout [ 88.379981][ T5802] Bluetooth: hci0: command tx timeout [ 88.385477][ T5802] Bluetooth: hci1: command tx timeout [ 88.459178][ T5802] Bluetooth: hci3: command tx timeout [ 88.465100][ T5802] Bluetooth: hci2: command tx timeout [ 91.140087][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.149369][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.157241][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.159050][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.252821][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.278003][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.153187][ T54] cfg80211: failed to load regulatory.db [ 92.495441][ T5918] netlink: 'syz.2.18': attribute type 5 has an invalid length. [ 92.714601][ T5924] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 92.806495][ T5930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.844767][ T5802] Bluetooth: hci0: Malformed LE Event: 0x0d [ 93.575333][ T5950] sock: sock_timestamping_bind_phc: sock not bind to device [ 96.690140][ T5973] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.43'. [ 96.700064][ T5973] netlink: 6116 bytes leftover after parsing attributes in process `syz.2.43'. [ 96.709430][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 96.718384][ T5974] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 96.728431][ T5974] netlink: 'syz.3.44': attribute type 4 has an invalid length. [ 96.741512][ T5974] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.44'. [ 97.598320][ T5991] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.49'. [ 98.620890][ T6026] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.65'. [ 101.514775][ T6115] warning: `syz.3.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.542314][ T6117] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.109'. [ 102.607708][ T6140] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.121'. [ 103.101883][ T6144] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 110.128518][ T6254] syz.2.165: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 110.185499][ T6254] CPU: 1 PID: 6254 Comm: syz.2.165 Not tainted 6.6.99-syzkaller #0 [ 110.193520][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.203625][ T6254] Call Trace: [ 110.206941][ T6254] [ 110.209912][ T6254] dump_stack_lvl+0x16c/0x230 [ 110.214655][ T6254] ? show_regs_print_info+0x20/0x20 [ 110.219897][ T6254] ? load_image+0x3b0/0x3b0 [ 110.224456][ T6254] ? __rcu_read_unlock+0x7c/0xd0 [ 110.229635][ T6254] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 110.236106][ T6254] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 110.242662][ T6254] warn_alloc+0x210/0x300 [ 110.247063][ T6254] ? stack_trace_save+0x9c/0xe0 [ 110.251963][ T6254] ? zone_watermark_ok_safe+0x230/0x230 [ 110.257575][ T6254] ? kasan_set_track+0x5f/0x70 [ 110.262382][ T6254] ? kasan_set_track+0x4e/0x70 [ 110.267191][ T6254] ? __kasan_kmalloc+0x8f/0xa0 [ 110.271986][ T6254] ? xsk_init_queue+0xb0/0x110 [ 110.276794][ T6254] ? xsk_setsockopt+0x4db/0x6f0 [ 110.281787][ T6254] ? do_sock_setsockopt+0x175/0x1a0 [ 110.287031][ T6254] ? __x64_sys_setsockopt+0x184/0x200 [ 110.292455][ T6254] __vmalloc_node_range+0x126/0x1320 [ 110.297861][ T6254] ? free_vm_area+0x50/0x50 [ 110.302425][ T6254] vmalloc_user+0x74/0x80 [ 110.306811][ T6254] ? xskq_create+0xbf/0x170 [ 110.311350][ T6254] xskq_create+0xbf/0x170 [ 110.315734][ T6254] xsk_init_queue+0xb0/0x110 [ 110.320396][ T6254] xsk_setsockopt+0x4db/0x6f0 [ 110.325135][ T6254] ? xsk_poll+0x670/0x670 [ 110.329528][ T6254] ? __fget_files+0x28/0x4d0 [ 110.334166][ T6254] ? aa_sock_opt_perm+0x74/0x100 [ 110.339157][ T6254] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 110.344756][ T6254] ? security_socket_setsockopt+0x7e/0xa0 [ 110.350519][ T6254] ? xsk_poll+0x670/0x670 [ 110.354901][ T6254] do_sock_setsockopt+0x175/0x1a0 [ 110.359985][ T6254] ? __fdget+0x180/0x210 [ 110.364272][ T6254] __x64_sys_setsockopt+0x184/0x200 [ 110.369524][ T6254] do_syscall_64+0x55/0xb0 [ 110.373992][ T6254] ? clear_bhb_loop+0x40/0x90 [ 110.378703][ T6254] ? clear_bhb_loop+0x40/0x90 [ 110.383421][ T6254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.389365][ T6254] RIP: 0033:0x7f8e4398e9a9 [ 110.393822][ T6254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.413472][ T6254] RSP: 002b:00007f8e448a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.421951][ T6254] RAX: ffffffffffffffda RBX: 00007f8e43bb5fa0 RCX: 00007f8e4398e9a9 [ 110.429958][ T6254] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 110.437976][ T6254] RBP: 00007f8e43a10d69 R08: 0000000000000004 R09: 0000000000000000 [ 110.445987][ T6254] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 110.453995][ T6254] R13: 0000000000000000 R14: 00007f8e43bb5fa0 R15: 00007ffe42050ac8 [ 110.462036][ T6254] [ 110.596140][ T6254] Mem-Info: [ 110.600296][ T6254] active_anon:5887 inactive_anon:0 isolated_anon:0 [ 110.600296][ T6254] active_file:842 inactive_file:39831 isolated_file:0 [ 110.600296][ T6254] unevictable:768 dirty:129 writeback:0 [ 110.600296][ T6254] slab_reclaimable:9758 slab_unreclaimable:94598 [ 110.600296][ T6254] mapped:23998 shmem:1689 pagetables:556 [ 110.600296][ T6254] sec_pagetables:0 bounce:0 [ 110.600296][ T6254] kernel_misc_reclaimable:0 [ 110.600296][ T6254] free:1360527 free_pcp:8754 free_cma:0 [ 110.673282][ T6254] Node 0 active_anon:23648kB inactive_anon:0kB active_file:3368kB inactive_file:159120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:95992kB dirty:516kB writeback:0kB shmem:5220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11292kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no [ 110.721539][ T6254] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 110.762175][ T6254] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.826555][ T6254] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 110.832666][ T6254] Node 0 DMA32 free:1543612kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:22204kB inactive_anon:0kB active_file:3368kB inactive_file:157796kB unevictable:1536kB writepending:516kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:12572kB local_pcp:1888kB free_cma:0kB [ 110.959626][ T6254] lowmem_reserve[]: 0 0 1 1 1 [ 110.979516][ T6254] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 111.070916][ T6254] lowmem_reserve[]: 0 0 0 0 0 [ 111.075895][ T6254] Node 1 Normal free:3882652kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25012kB local_pcp:13012kB free_cma:0kB [ 111.118217][ T6254] lowmem_reserve[]: 0 0 0 0 0 [ 111.123466][ T6254] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.137436][ T6254] Node 0 DMA32: 1513*4kB (UE) 1123*8kB (UME) 630*16kB (UME) 133*32kB (UME) 52*64kB (UME) 20*128kB (UME) 6*256kB (UM) 7*512kB (M) 2*1024kB (UM) 1*2048kB (M) 366*4096kB (M) = 1543612kB [ 111.165806][ T6254] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 111.233932][ T6254] Node 1 Normal: 219*4kB (UME) 54*8kB (UME) 42*16kB (UME) 51*32kB (UME) 12*64kB (UE) 5*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 945*4096kB (M) = 3882652kB [ 111.253710][ T6254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.263736][ T6254] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.273468][ T6254] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.283371][ T6254] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.293042][ T6254] 42034 total pagecache pages [ 111.298643][ T6254] 0 pages in swap cache [ 111.312961][ T6254] Free swap = 124996kB [ 111.317260][ T6254] Total swap = 124996kB [ 111.321943][ T6254] 2097051 pages RAM [ 111.325792][ T6254] 0 pages HighMem/MovableOnly [ 111.335604][ T6254] 416137 pages reserved [ 111.345019][ T6254] 0 pages cma reserved [ 114.054954][ T6306] syzkaller0: entered promiscuous mode [ 114.063211][ T6306] syzkaller0: entered allmulticast mode [ 114.080100][ T6306] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 117.807289][ T6374] syzkaller0: entered promiscuous mode [ 117.819199][ T6374] syzkaller0: entered allmulticast mode [ 120.889241][ T6407] warn_alloc: 1 callbacks suppressed [ 120.889261][ T6407] syz.0.217: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 120.917287][ T6407] CPU: 0 PID: 6407 Comm: syz.0.217 Not tainted 6.6.99-syzkaller #0 [ 120.925249][ T6407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.935343][ T6407] Call Trace: [ 120.938641][ T6407] [ 120.941591][ T6407] dump_stack_lvl+0x16c/0x230 [ 120.946302][ T6407] ? show_regs_print_info+0x20/0x20 [ 120.951512][ T6407] ? load_image+0x3b0/0x3b0 [ 120.956062][ T6407] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 120.962496][ T6407] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 120.969022][ T6407] warn_alloc+0x210/0x300 [ 120.973406][ T6407] ? stack_trace_save+0x9c/0xe0 [ 120.978308][ T6407] ? zone_watermark_ok_safe+0x230/0x230 [ 120.983885][ T6407] ? kasan_set_track+0x5f/0x70 [ 120.988663][ T6407] ? kasan_set_track+0x4e/0x70 [ 120.993438][ T6407] ? __kasan_kmalloc+0x8f/0xa0 [ 120.998221][ T6407] ? xsk_init_queue+0xb0/0x110 [ 121.003003][ T6407] ? xsk_setsockopt+0x4db/0x6f0 [ 121.007909][ T6407] ? do_sock_setsockopt+0x175/0x1a0 [ 121.013131][ T6407] ? __x64_sys_setsockopt+0x184/0x200 [ 121.018529][ T6407] __vmalloc_node_range+0x126/0x1320 [ 121.023882][ T6407] ? free_vm_area+0x50/0x50 [ 121.028421][ T6407] vmalloc_user+0x74/0x80 [ 121.032769][ T6407] ? xskq_create+0xbf/0x170 [ 121.037286][ T6407] xskq_create+0xbf/0x170 [ 121.041634][ T6407] xsk_init_queue+0xb0/0x110 [ 121.046255][ T6407] xsk_setsockopt+0x4db/0x6f0 [ 121.050962][ T6407] ? xsk_poll+0x670/0x670 [ 121.055320][ T6407] ? __fget_files+0x28/0x4d0 [ 121.059937][ T6407] ? aa_sock_opt_perm+0x74/0x100 [ 121.064904][ T6407] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 121.070475][ T6407] ? security_socket_setsockopt+0x7e/0xa0 [ 121.076204][ T6407] ? xsk_poll+0x670/0x670 [ 121.080559][ T6407] do_sock_setsockopt+0x175/0x1a0 [ 121.085604][ T6407] ? __fdget+0x180/0x210 [ 121.089864][ T6407] __x64_sys_setsockopt+0x184/0x200 [ 121.095086][ T6407] do_syscall_64+0x55/0xb0 [ 121.099517][ T6407] ? clear_bhb_loop+0x40/0x90 [ 121.104207][ T6407] ? clear_bhb_loop+0x40/0x90 [ 121.108992][ T6407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.114914][ T6407] RIP: 0033:0x7f75c058e9a9 [ 121.119343][ T6407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.138962][ T6407] RSP: 002b:00007f75c14ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 121.147401][ T6407] RAX: ffffffffffffffda RBX: 00007f75c07b5fa0 RCX: 00007f75c058e9a9 [ 121.155380][ T6407] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 121.163383][ T6407] RBP: 00007f75c0610d69 R08: 0000000000000004 R09: 0000000000000000 [ 121.171367][ T6407] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 121.179344][ T6407] R13: 0000000000000000 R14: 00007f75c07b5fa0 R15: 00007ffd131b9be8 [ 121.187341][ T6407] [ 121.240219][ T6407] Mem-Info: [ 121.266222][ T6407] active_anon:9815 inactive_anon:0 isolated_anon:0 [ 121.266222][ T6407] active_file:842 inactive_file:39835 isolated_file:0 [ 121.266222][ T6407] unevictable:768 dirty:172 writeback:0 [ 121.266222][ T6407] slab_reclaimable:9782 slab_unreclaimable:95935 [ 121.266222][ T6407] mapped:24048 shmem:1361 pagetables:562 [ 121.266222][ T6407] sec_pagetables:0 bounce:0 [ 121.266222][ T6407] kernel_misc_reclaimable:0 [ 121.266222][ T6407] free:1354520 free_pcp:9103 free_cma:0 [ 121.365740][ T6407] Node 0 active_anon:40060kB inactive_anon:0kB active_file:3368kB inactive_file:159136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96192kB dirty:684kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11400kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no [ 121.406546][ T6407] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 121.491032][ T6407] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.538402][ T6407] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 121.560256][ T6407] Node 0 DMA32 free:1518772kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:36016kB inactive_anon:0kB active_file:3368kB inactive_file:157812kB unevictable:1536kB writepending:684kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:14416kB local_pcp:7876kB free_cma:0kB [ 121.719050][ T6407] lowmem_reserve[]: 0 0 1 1 1 [ 121.756304][ T6407] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 121.790526][ T6407] lowmem_reserve[]: 0 0 0 0 0 [ 121.795327][ T6407] Node 1 Normal free:3883184kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24576kB local_pcp:12032kB free_cma:0kB [ 121.835653][ T6407] lowmem_reserve[]: 0 0 0 0 0 [ 121.856121][ T6407] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.881434][ T6407] Node 0 DMA32: 883*4kB (UME) 1091*8kB (U) 569*16kB (UM) 4*32kB (UME) 15*64kB (UME) 4*128kB (ME) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 364*4096kB (M) = 1518772kB [ 121.941530][ T6407] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 121.986809][ T6407] Node 1 Normal: 224*4kB (UME) 54*8kB (UME) 42*16kB (UME) 57*32kB (UME) 15*64kB (UE) 6*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 945*4096kB (M) = 3883184kB [ 122.049490][ T6407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.092631][ T6407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.142594][ T6407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.153571][ T6407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.163586][ T6407] 42040 total pagecache pages [ 122.173494][ T6407] 0 pages in swap cache [ 122.177687][ T6407] Free swap = 124996kB [ 122.182813][ T6407] Total swap = 124996kB [ 122.187006][ T6407] 2097051 pages RAM [ 122.196186][ T6407] 0 pages HighMem/MovableOnly [ 122.224015][ T6407] 416137 pages reserved [ 122.235939][ T6407] 0 pages cma reserved [ 123.719449][ T6433] sock: sock_timestamping_bind_phc: sock not bind to device [ 124.422366][ T6453] sock: sock_timestamping_bind_phc: sock not bind to device [ 124.931332][ T6460] netlink: 'syz.1.242': attribute type 2 has an invalid length. [ 124.973833][ T6460] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.242'. [ 125.455953][ T6462] sock: sock_timestamping_bind_phc: sock not bind to device [ 129.140568][ T6488] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.252'. [ 129.719481][ T6507] netlink: 'syz.3.262': attribute type 5 has an invalid length. [ 130.903738][ T6521] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.266'. [ 131.167046][ T6528] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.278'. [ 133.037615][ T6566] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.285'. [ 133.217503][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.234651][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.197203][ T5802] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 141.016970][ T6649] sit0: entered allmulticast mode [ 141.368866][ T6679] syzkaller0: entered promiscuous mode [ 141.403099][ T6679] syzkaller0: entered allmulticast mode [ 142.546706][ T5802] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 143.837429][ T6710] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 144.092872][ T6715] sit0: entered allmulticast mode [ 145.651309][ T6730] sit0: entered allmulticast mode [ 145.871638][ T6739] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 145.958604][ T6733] syzkaller0: entered promiscuous mode [ 145.964509][ T6733] syzkaller0: entered allmulticast mode [ 146.140679][ T2911] wlan1: Trigger new scan to find an IBSS to join [ 148.768404][ T5802] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 148.768453][ T5802] Bluetooth: unknown link type 88 [ 148.782600][ T5802] Bluetooth: hci1: connection err: -111 [ 149.100556][ T48] wlan1: Trigger new scan to find an IBSS to join [ 149.112964][ T59] wlan1: Trigger new scan to find an IBSS to join [ 150.690548][ T6763] sit0: entered allmulticast mode [ 151.109312][ T2952] wlan1: Creating new IBSS network, BSSID 9a:24:cd:ff:c5:d7 [ 153.189485][ T2901] wlan1: Trigger new scan to find an IBSS to join [ 155.032368][ T6836] netlink: 'syz.3.393': attribute type 3 has an invalid length. [ 155.054804][ T6836] netlink: 'syz.3.393': attribute type 4 has an invalid length. [ 155.073152][ T6836] netlink: 'syz.3.393': attribute type 7 has an invalid length. [ 155.086565][ T6836] netlink: 'syz.3.393': attribute type 8 has an invalid length. [ 155.096537][ T6836] netlink: 'syz.3.393': attribute type 7 has an invalid length. [ 155.108197][ T6836] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.393'. [ 155.180251][ T2911] wlan1: Creating new IBSS network, BSSID 96:30:ed:fc:84:50 [ 157.751900][ T6876] netlink: 'syz.1.406': attribute type 3 has an invalid length. [ 157.783707][ T6876] netlink: 'syz.1.406': attribute type 4 has an invalid length. [ 157.839098][ T6876] netlink: 'syz.1.406': attribute type 7 has an invalid length. [ 157.876043][ T6876] netlink: 'syz.1.406': attribute type 8 has an invalid length. [ 157.908169][ T6876] netlink: 'syz.1.406': attribute type 7 has an invalid length. [ 157.936576][ T6876] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.406'. [ 159.200717][ T5802] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 159.200760][ T5802] Bluetooth: unknown link type 88 [ 159.214034][ T5802] Bluetooth: hci3: connection err: -111 [ 163.546520][ T6945] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 163.553414][ T6945] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 163.791475][ T5802] Bluetooth: hci3: Malformed LE Event: 0x0d [ 166.096629][ T6971] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.103183][ T6971] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.314264][ T5802] Bluetooth: hci2: Malformed LE Event: 0x0d [ 173.358963][ T7062] syzkaller0: entered promiscuous mode [ 173.364766][ T7062] syzkaller0: entered allmulticast mode [ 176.932886][ T7145] syzkaller0: entered promiscuous mode [ 176.956453][ T7145] syzkaller0: entered allmulticast mode [ 177.850927][ T7184] syzkaller0: entered promiscuous mode [ 177.857086][ T7184] syzkaller0: entered allmulticast mode [ 179.840730][ T7200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.550'. [ 181.845673][ T7233] syzkaller0: entered promiscuous mode [ 181.868567][ T7233] syzkaller0: entered allmulticast mode [ 182.288690][ T7251] syzkaller0: entered promiscuous mode [ 182.308211][ T7251] syzkaller0: entered allmulticast mode [ 182.843566][ T7271] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.578'. [ 183.067981][ T7281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.589'. [ 184.011344][ T7290] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.583'. [ 184.024750][ T7290] netlink: del zone limit has 8 unknown bytes [ 184.381651][ T7300] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 184.412941][ T7300] bridge0: port 3(netdevsim0) entered blocking state [ 184.434150][ T7300] bridge0: port 3(netdevsim0) entered disabled state [ 184.446186][ T7300] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 184.456511][ T7300] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 184.471632][ T7300] bridge0: port 3(netdevsim0) entered blocking state [ 184.479624][ T7300] bridge0: port 3(netdevsim0) entered forwarding state [ 186.812119][ T7321] netlink: 132 bytes leftover after parsing attributes in process `syz.2.598'. [ 187.376329][ T7345] syzkaller0: entered allmulticast mode [ 187.466478][ T7351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.608'. [ 187.785972][ T48] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 187.801295][ T48] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 190.336152][ T7387] sock: sock_timestamping_bind_phc: sock not bind to device [ 190.344506][ T7384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.619'. [ 190.369662][ T7380] syzkaller0: entered allmulticast mode [ 192.123935][ T7404] syzkaller0: entered allmulticast mode [ 192.410033][ T7410] IPv6: Can't replace route, no match found [ 194.553535][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.560158][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.275746][ T7422] syz.0.638[7422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.275898][ T7422] syz.0.638[7422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.083876][ T7457] syz.3.653[7457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.084134][ T7457] syz.3.653[7457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.123372][ T7457] syz.3.653[7457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.164195][ T7457] syz.3.653[7457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.397080][ T7497] syz.0.669[7497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.425057][ T7497] syz.0.669[7497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.458627][ T7497] syz.0.669[7497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.489259][ T7497] syz.0.669[7497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.750343][ T7510] IPv6: Can't replace route, no match found [ 202.596732][ T7531] syz.1.684[7531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.603841][ T7531] syz.1.684[7531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.624710][ T7531] syz.1.684[7531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.640875][ T7535] syz.3.685[7535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.650751][ T7531] syz.1.684[7531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.663582][ T7535] syz.3.685[7535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.826640][ T7543] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.695'. [ 202.867161][ T7543] netlink: zone id is out of range [ 202.899181][ T7543] netlink: zone id is out of range [ 202.906042][ T7543] netlink: zone id is out of range [ 202.922667][ T7543] netlink: zone id is out of range [ 202.949836][ T7543] netlink: zone id is out of range [ 202.965060][ T7543] netlink: zone id is out of range [ 202.974256][ T7543] netlink: zone id is out of range [ 202.982889][ T7543] netlink: zone id is out of range [ 202.999069][ T7543] netlink: zone id is out of range [ 203.004288][ T7543] netlink: zone id is out of range [ 203.176100][ T7550] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.701'. [ 203.449991][ T7565] syz.2.696[7565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.450133][ T7565] syz.2.696[7565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.682477][ T7575] syz.2.699[7575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.706185][ T7575] syz.2.699[7575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.230996][ T7589] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.708'. [ 205.887095][ T7610] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 206.865588][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 206.881396][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 206.881422][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 206.887448][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 211.662379][ T5789] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 211.669034][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 214.348257][ T7754] bpf_get_probe_write_proto: 8 callbacks suppressed [ 214.348276][ T7754] syz.3.786[7754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.355659][ T7754] syz.3.786[7754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.952780][ T7772] netlink: 'syz.0.785': attribute type 10 has an invalid length. [ 218.299174][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 218.306600][ T5800] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 219.965320][ T7896] netlink: 'syz.3.843': attribute type 2 has an invalid length. [ 219.974584][ T7896] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.843'. [ 222.750655][ T7908] netlink: 140 bytes leftover after parsing attributes in process `syz.0.847'. [ 222.761468][ T7927] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.857'. [ 230.284863][ T5800] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 230.568661][ T8055] syzkaller0: entered promiscuous mode [ 230.576717][ T8055] syzkaller0: entered allmulticast mode [ 234.246311][ T5800] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 234.603703][ T8087] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.921'. [ 234.718005][ T8089] syzkaller0: entered promiscuous mode [ 234.723957][ T8089] syzkaller0: entered allmulticast mode [ 234.735299][ T8091] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 234.743553][ T8091] netlink: 'syz.3.923': attribute type 4 has an invalid length. [ 234.760274][ T8091] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.923'. [ 234.794168][ T8093] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 234.824542][ T8093] netlink: 'syz.3.923': attribute type 4 has an invalid length. [ 234.834276][ T8093] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.923'. [ 235.045960][ T5800] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 237.065396][ T8104] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.929'. [ 237.076884][ T8113] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.933'. [ 237.324928][ T8123] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.945'. [ 238.081466][ T8152] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.950'. [ 238.089648][ T8153] syz.3.952[8153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.102784][ T8153] syz.3.952[8153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.255188][ T8159] syz.1.964[8159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.286029][ T8159] syz.1.964[8159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.014155][ T8192] syz.2.969[8192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.029327][ T8192] syz.2.969[8192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.431027][ T8214] syz.0.981[8214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.443768][ T8214] syz.0.981[8214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.579405][ T8215] syzkaller0: entered promiscuous mode [ 241.597897][ T8215] syzkaller0: entered allmulticast mode [ 243.229658][ T8220] netlink: 'syz.2.984': attribute type 17 has an invalid length. [ 243.237497][ T8220] netlink: 'syz.2.984': attribute type 16 has an invalid length. [ 243.245519][ T8220] netlink: 152 bytes leftover after parsing attributes in process `syz.2.984'. [ 243.536727][ T8234] syzkaller0: entered promiscuous mode [ 243.544645][ T8234] syzkaller0: entered allmulticast mode [ 247.167559][ T8259] syzkaller0: entered promiscuous mode [ 247.177058][ T8259] syzkaller0: entered allmulticast mode [ 247.190822][ T8265] netlink: 'syz.1.1001': attribute type 17 has an invalid length. [ 247.203011][ T8265] netlink: 'syz.1.1001': attribute type 16 has an invalid length. [ 247.229549][ T8265] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1001'. [ 249.356800][ T8299] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1021'. [ 249.374376][ T8299] net_ratelimit: 149 callbacks suppressed [ 249.374418][ T8299] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 251.113511][ T8306] netlink: 'syz.3.1015': attribute type 17 has an invalid length. [ 251.121753][ T8306] netlink: 'syz.3.1015': attribute type 16 has an invalid length. [ 251.129728][ T8306] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1015'. [ 251.494906][ T8321] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1020'. [ 252.346756][ T8359] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1039'. [ 253.561816][ T8401] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1057'. [ 254.917691][ T8433] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1081'. [ 254.929921][ T8434] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1071'. [ 255.983787][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.990563][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.685470][ T8468] netlink: 'syz.2.1089': attribute type 3 has an invalid length. [ 256.710606][ T8468] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1089'. [ 258.963082][ T8495] netlink: 'syz.0.1102': attribute type 3 has an invalid length. [ 258.989911][ T8495] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1102'. [ 261.793179][ T5800] Bluetooth: hci0: Unknown advertising packet type: 0x70 [ 261.793242][ T5800] Bluetooth: hci0: Malformed LE Event: 0x0d [ 262.609426][ T8560] netlink: 'syz.1.1131': attribute type 21 has an invalid length. [ 262.618437][ T8560] netlink: 'syz.1.1131': attribute type 12 has an invalid length. [ 262.632741][ T8560] netlink: 'syz.1.1131': attribute type 13 has an invalid length. [ 262.645936][ T5800] Bluetooth: hci1: Unknown advertising packet type: 0x70 [ 262.645977][ T5800] Bluetooth: hci1: Malformed LE Event: 0x0d [ 262.661527][ T8560] netlink: 'syz.1.1131': attribute type 14 has an invalid length. [ 262.670157][ T8560] netlink: 'syz.1.1131': attribute type 15 has an invalid length. [ 262.678156][ T8560] netlink: 'syz.1.1131': attribute type 16 has an invalid length. [ 262.686705][ T8560] netlink: 'syz.1.1131': attribute type 19 has an invalid length. [ 262.695046][ T8560] netlink: 'syz.1.1131': attribute type 21 has an invalid length. [ 262.703465][ T8560] netlink: 'syz.1.1131': attribute type 22 has an invalid length. [ 262.711946][ T8560] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.1131'. [ 263.020826][ T5800] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 264.070891][ T8602] netlink: 'syz.3.1146': attribute type 21 has an invalid length. [ 264.097397][ T8602] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.1146'. [ 267.561820][ T8691] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 267.589059][ T8691] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 267.601645][ T8691] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 267.629039][ T8691] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 269.077552][ T8724] validate_nla: 9 callbacks suppressed [ 269.077572][ T8724] netlink: 'syz.2.1196': attribute type 10 has an invalid length. [ 269.136304][ T8724] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.182928][ T8724] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 269.211101][ T8724] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 269.237642][ T8724] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 270.304371][ T8762] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 270.326477][ T8762] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 270.358967][ T8762] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 270.369683][ T8762] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 270.382508][ T8762] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 271.841412][ T8797] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1222'. [ 274.855540][ T8855] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1245'. [ 277.218022][ T8885] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1255'. [ 277.524670][ T8902] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 277.556745][ T8902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1263'. [ 277.590482][ T8902] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 277.607337][ T8902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1263'. [ 277.617321][ T8899] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 277.629990][ T8899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1263'. [ 277.930326][ T8914] netlink: 'syz.3.1270': attribute type 39 has an invalid length. [ 278.760313][ T8926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1275'. [ 279.230429][ T8951] netlink: 'syz.2.1285': attribute type 39 has an invalid length. [ 280.074268][ T8975] veth1_macvtap: left promiscuous mode [ 280.140773][ T8975] veth1_macvtap: entered promiscuous mode [ 280.174668][ T8975] macsec0: entered promiscuous mode [ 280.195739][ T8975] macsec0: entered allmulticast mode [ 280.217290][ T8975] veth1_macvtap: entered allmulticast mode [ 281.342008][ T8983] netlink: 'syz.1.1300': attribute type 39 has an invalid length. [ 281.641199][ T8992] netlink: 'syz.0.1302': attribute type 10 has an invalid length. [ 281.691391][ T8992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1302'. [ 281.721333][ T8992] netlink: 'syz.0.1302': attribute type 10 has an invalid length. [ 281.757961][ T8992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1302'. [ 281.789040][ T8991] netlink: 'syz.0.1302': attribute type 10 has an invalid length. [ 281.829044][ T8991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1302'. [ 282.395834][ T9008] syzkaller0: entered promiscuous mode [ 282.421290][ T5800] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 282.422832][ T9008] syzkaller0: entered allmulticast mode [ 283.230881][ T5800] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 283.403274][ T9032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1319'. [ 283.441746][ T9042] veth1_macvtap: left promiscuous mode [ 283.499667][ T9042] veth1_macvtap: entered promiscuous mode [ 283.517405][ T9042] macsec0: entered promiscuous mode [ 283.523123][ T9042] macsec0: entered allmulticast mode [ 283.528648][ T9042] veth1_macvtap: entered allmulticast mode [ 283.636679][ T9044] syzkaller0: entered promiscuous mode [ 283.653729][ T9044] syzkaller0: entered allmulticast mode [ 284.162832][ T5800] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 284.459066][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 285.157757][ T9083] syzkaller0: entered promiscuous mode [ 285.179402][ T9083] syzkaller0: entered allmulticast mode [ 285.269359][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 285.627177][ T5800] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 286.219342][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 286.998800][ T9121] syzkaller0: entered promiscuous mode [ 287.004413][ T9121] syzkaller0: entered allmulticast mode [ 287.659230][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 291.745143][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.753887][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.765608][ T9156] bridge0: entered allmulticast mode [ 291.787594][ T9160] bridge_slave_1: left allmulticast mode [ 291.804053][ T9160] bridge_slave_1: left promiscuous mode [ 291.813061][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.830146][ T9160] bridge_slave_0: left allmulticast mode [ 291.836102][ T9160] bridge_slave_0: left promiscuous mode [ 291.842186][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.152023][ T9182] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1378'. [ 292.720668][ T9206] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1389'. [ 293.039026][ T9211] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 293.126073][ T9211] syzkaller0: entered promiscuous mode [ 293.148356][ T9211] syzkaller0: entered allmulticast mode [ 295.043055][ T9219] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1395'. [ 295.232321][ T9235] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1401'. [ 295.430827][ T9238] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 295.484828][ T9238] syzkaller0: entered promiscuous mode [ 295.499254][ T9238] syzkaller0: entered allmulticast mode [ 298.447332][ T9264] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1413'. [ 298.473275][ T9269] netlink: 'syz.3.1416': attribute type 10 has an invalid length. [ 298.487067][ T9269] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1416'. [ 299.015661][ T9287] netlink: 'syz.1.1423': attribute type 21 has an invalid length. [ 299.026339][ T9284] syz.2.1422 (9284) used obsolete PPPIOCDETACH ioctl [ 299.729418][ T9303] syzkaller0: entered allmulticast mode [ 301.160897][ T9334] syzkaller0: entered allmulticast mode [ 302.097297][ T9371] syzkaller0: entered allmulticast mode [ 302.409508][ T9382] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1462'. [ 303.090310][ T5800] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 303.470857][ T9406] netlink: 'syz.2.1474': attribute type 10 has an invalid length. [ 303.478805][ T9406] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1474'. [ 304.441871][ T5789] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 304.677077][ T9416] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1478'. [ 306.111605][ T9445] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1491'. [ 306.134048][ T9443] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 306.154799][ T9443] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1490'. [ 306.372898][ T9453] __sock_release: fasync list not empty! [ 307.014294][ T9470] syzkaller0: entered promiscuous mode [ 307.025162][ T9470] syzkaller0: entered allmulticast mode [ 307.143874][ T9480] __sock_release: fasync list not empty! [ 311.743975][ T9535] __sock_release: fasync list not empty! [ 313.446689][ T9574] netlink: 'syz.3.1544': attribute type 4 has an invalid length. [ 313.463696][ T9574] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1544'. [ 315.967413][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 317.424699][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439584][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.447742][ T9653] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1576'. [ 320.029567][ T9653] syz.1.1576 (9653) used greatest stack depth: 20008 bytes left [ 321.301581][ T9681] syzkaller0: entered promiscuous mode [ 321.307252][ T9681] syzkaller0: entered allmulticast mode [ 321.434720][ T9690] netlink: 'syz.2.1590': attribute type 4 has an invalid length. [ 321.458281][ T9690] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1590'. [ 323.576866][ T9702] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1596'. [ 323.586400][ T9700] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1595'. [ 324.807522][ T9724] syzkaller0: entered promiscuous mode [ 324.813318][ T9724] syzkaller0: entered allmulticast mode [ 325.110781][ T5789] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 328.686010][ T9750] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1623'. [ 332.466692][ T9794] netlink: 'syz.1.1630': attribute type 2 has an invalid length. [ 332.491313][ T9794] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1630'. [ 335.100302][ T9825] netlink: 'syz.2.1644': attribute type 2 has an invalid length. [ 335.109905][ T9825] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1644'. [ 340.405250][ T5789] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 345.722985][ T9983] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1712'. [ 346.270810][ T5789] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 347.936577][T10025] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1720'. [ 348.277762][ T5789] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 351.751298][ T5789] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 352.315618][T10128] syzkaller0: entered promiscuous mode [ 352.335137][T10128] syzkaller0: entered allmulticast mode [ 356.247721][T10192] syzkaller0: entered promiscuous mode [ 356.259069][T10192] syzkaller0: entered allmulticast mode [ 356.293044][ T5800] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 358.017023][T10200] pim6reg1: entered promiscuous mode [ 358.026886][T10200] pim6reg1: entered allmulticast mode [ 359.315775][T10223] syzkaller0: entered promiscuous mode [ 359.325568][T10223] syzkaller0: entered allmulticast mode [ 362.563661][T10240] pim6reg1: entered promiscuous mode [ 362.581336][T10240] pim6reg1: entered allmulticast mode [ 368.511970][T10328] pim6reg1: entered promiscuous mode [ 368.524955][T10328] pim6reg1: entered allmulticast mode [ 370.255648][T10367] pim6reg1: entered promiscuous mode [ 370.263708][T10367] pim6reg1: entered allmulticast mode [ 377.108940][T10480] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.1887'. [ 378.899369][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.905846][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.138598][T10548] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.1913'. [ 384.815716][T10627] netlink: 'syz.0.1950': attribute type 21 has an invalid length. [ 384.854461][T10627] IPv6: NLM_F_CREATE should be specified when creating new route [ 384.879175][T10627] IPv6: Can't replace route, no match found [ 386.374950][T10665] netlink: 'syz.1.1957': attribute type 21 has an invalid length. [ 386.391721][T10665] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.417427][T10665] IPv6: Can't replace route, no match found [ 387.450027][T10693] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1968'. [ 387.489725][T10693] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 387.974502][T10701] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1978'. [ 387.984796][T10701] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 388.354626][T10707] netlink: 'syz.3.1972': attribute type 21 has an invalid length. [ 388.381320][T10707] IPv6: NLM_F_CREATE should be specified when creating new route [ 388.405862][T10707] IPv6: Can't replace route, no match found [ 389.191099][ T5800] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 389.846562][T10742] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1985'. [ 389.869783][T10742] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 389.995937][T10747] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 390.005451][T10747] syzkaller0: entered allmulticast mode [ 391.202216][ T5800] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 391.516883][ T5800] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 391.594740][T10784] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 391.610506][T10784] syzkaller0: entered allmulticast mode [ 391.909051][T10795] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 391.919055][T10795] syzkaller0: entered allmulticast mode [ 392.851004][T10821] 7BՍ֕: renamed from syzkaller0 [ 393.078742][T10830] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 393.087623][T10830] syzkaller0: entered allmulticast mode [ 393.437956][ T5800] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 395.792388][T10864] lo: entered allmulticast mode [ 395.856348][T10868] lo: entered promiscuous mode [ 395.863258][T10868] lo: left allmulticast mode [ 395.977345][T10871] syzkaller0: entered promiscuous mode [ 395.984368][T10871] syzkaller0: entered allmulticast mode [ 399.282637][T10937] netlink: 'syz.0.2068': attribute type 33 has an invalid length. [ 399.293177][T10937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2068'. [ 399.306580][T10937] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 399.579608][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 400.441762][T10966] netlink: 'syz.2.2079': attribute type 33 has an invalid length. [ 400.450857][T10966] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2079'. [ 400.461275][T10966] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 401.635645][T11002] netlink: 'syz.1.2092': attribute type 33 has an invalid length. [ 401.654222][T11002] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2092'. [ 401.667558][T11002] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 404.976596][T11038] delete_channel: no stack [ 405.424867][T11056] netlink: 'syz.1.2121': attribute type 29 has an invalid length. [ 405.456919][T11056] netlink: 'syz.1.2121': attribute type 29 has an invalid length. [ 405.486980][T11058] netlink: 'syz.1.2121': attribute type 29 has an invalid length. [ 405.858427][T11056] syzkaller0: entered promiscuous mode [ 405.874543][T11056] syzkaller0: entered allmulticast mode [ 407.907786][T11076] netlink: 'syz.3.2120': attribute type 7 has an invalid length. [ 408.005912][T11079] delete_channel: no stack [ 408.064015][T11082] netlink: 'syz.3.2123': attribute type 19 has an invalid length. [ 408.083588][T11082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2123'. [ 408.839889][ T12] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 408.874060][ T12] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 409.028993][T11105] delete_channel: no stack [ 409.370172][ T5789] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 411.183318][ T2901] wlan1: Trigger new scan to find an IBSS to join [ 411.194284][ T2901] ================================================================================ [ 411.212200][ T2901] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1209:5 [ 411.224476][ T2901] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 411.243218][ T2901] CPU: 1 PID: 2901 Comm: kworker/u4:5 Not tainted 6.6.99-syzkaller #0 [ 411.251464][ T2901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.261653][ T2901] Workqueue: events_unbound cfg80211_wiphy_work [ 411.267970][ T2901] Call Trace: [ 411.271278][ T2901] [ 411.274250][ T2901] dump_stack_lvl+0x16c/0x230 [ 411.278953][ T2901] ? show_regs_print_info+0x20/0x20 [ 411.284187][ T2901] ? load_image+0x3b0/0x3b0 [ 411.288719][ T2901] ? mutex_lock_nested+0x20/0x20 [ 411.293690][ T2901] ubsan_epilogue+0xa/0x30 [ 411.298139][ T2901] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 411.303891][ T2901] ieee80211_request_ibss_scan+0x4eb/0x790 [ 411.309741][ T2901] ieee80211_ibss_work+0xdfd/0x10c0 [ 411.314980][ T2901] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 411.321335][ T2901] ? mark_lock+0x94/0x320 [ 411.325703][ T2901] ? ieee80211_iface_work+0xbca/0xc70 [ 411.331110][ T2901] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.336345][ T2901] cfg80211_wiphy_work+0x225/0x260 [ 411.341494][ T2901] ? process_scheduled_works+0x957/0x15b0 [ 411.347240][ T2901] process_scheduled_works+0xa45/0x15b0 [ 411.352928][ T2901] ? assign_work+0x400/0x400 [ 411.357551][ T2901] ? assign_work+0x39e/0x400 [ 411.362169][ T2901] worker_thread+0xa55/0xfc0 [ 411.366810][ T2901] kthread+0x2fa/0x390 [ 411.370895][ T2901] ? pr_cont_work+0x560/0x560 [ 411.375597][ T2901] ? kthread_blkcg+0xd0/0xd0 [ 411.380204][ T2901] ret_from_fork+0x48/0x80 [ 411.384643][ T2901] ? kthread_blkcg+0xd0/0xd0 [ 411.389297][ T2901] ret_from_fork_asm+0x11/0x20 [ 411.394377][ T2901] [ 411.415940][ T2901] ================================================================================ [ 411.426488][ T2901] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 411.433760][ T2901] CPU: 1 PID: 2901 Comm: kworker/u4:5 Not tainted 6.6.99-syzkaller #0 [ 411.441963][ T2901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.452152][ T2901] Workqueue: events_unbound cfg80211_wiphy_work [ 411.458431][ T2901] Call Trace: [ 411.461729][ T2901] [ 411.464775][ T2901] dump_stack_lvl+0x16c/0x230 [ 411.469478][ T2901] ? show_regs_print_info+0x20/0x20 [ 411.474707][ T2901] ? load_image+0x3b0/0x3b0 [ 411.479282][ T2901] panic+0x2c0/0x710 [ 411.483234][ T2901] ? bpf_jit_dump+0xd0/0xd0 [ 411.487786][ T2901] ? mutex_lock_nested+0x20/0x20 [ 411.492757][ T2901] check_panic_on_warn+0x84/0xa0 [ 411.497726][ T2901] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 411.503479][ T2901] ieee80211_request_ibss_scan+0x4eb/0x790 [ 411.509318][ T2901] ieee80211_ibss_work+0xdfd/0x10c0 [ 411.514575][ T2901] ? ieee80211_ibss_rx_queued_mgmt+0x2ac0/0x2ac0 [ 411.520934][ T2901] ? mark_lock+0x94/0x320 [ 411.525295][ T2901] ? ieee80211_iface_work+0xbca/0xc70 [ 411.530703][ T2901] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.535959][ T2901] cfg80211_wiphy_work+0x225/0x260 [ 411.541098][ T2901] ? process_scheduled_works+0x957/0x15b0 [ 411.546850][ T2901] process_scheduled_works+0xa45/0x15b0 [ 411.552448][ T2901] ? assign_work+0x400/0x400 [ 411.557066][ T2901] ? assign_work+0x39e/0x400 [ 411.561681][ T2901] worker_thread+0xa55/0xfc0 [ 411.566336][ T2901] kthread+0x2fa/0x390 [ 411.570437][ T2901] ? pr_cont_work+0x560/0x560 [ 411.575132][ T2901] ? kthread_blkcg+0xd0/0xd0 [ 411.579751][ T2901] ret_from_fork+0x48/0x80 [ 411.584199][ T2901] ? kthread_blkcg+0xd0/0xd0 [ 411.588810][ T2901] ret_from_fork_asm+0x11/0x20 [ 411.593634][ T2901] [ 411.597039][ T2901] Kernel Offset: disabled [ 411.601554][ T2901] Rebooting in 86400 seconds..