last executing test programs: 10.652062402s ago: executing program 3 (id=598): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r0}, 0x8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0x4, 0x3, 0x0, 0x1, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.numa_stat\x00', 0x0, 0x0) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1e, 0x9, 0x3, 0x3, 0x400, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) (async, rerun: 32) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0000000071105300001600009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000805"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 64) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r9, r9, 0x2f}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r11, r7, 0x4, r9}, 0x10) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x401c5820, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x5, 0x401, 0x2, 0x8002, 0xffffffffffffffff, 0xa28, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x80000005, 0x0, @value=r3}, 0x50) (async) r14 = socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) (async) sendmsg$inet(r14, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x37, 0x7f, 0x7f, 0x1, 0x1, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r15}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r15, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (async, rerun: 64) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r17}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x27, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000006000000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008d30e0ff0800000018350000050000000000000000000000180100002020752500000000002020207b9af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000099e60000850000000600000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081df00008500000006000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xfb, &(0x7f00000003c0)=""/251, 0x41100, 0x48, '\x00', 0x0, @fallback=0x19, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0x0, 0x800}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000700)=[r4, r5, r6, r8, 0xffffffffffffffff, r13, r15, r16, r17], 0x0, 0x10, 0x1}, 0x94) (rerun: 64) 10.523744069s ago: executing program 0 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async, rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x22, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0xdc27863f4f723bea, 0x4, 0x3, 0x0, 0x8, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) 9.47506526s ago: executing program 0 (id=603): r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r5], 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x1, 0x2, 0x6, 0x5, 0x1, 0xc, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 9.446284192s ago: executing program 3 (id=604): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500005ca2bf5dd18d05e4b10000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2}, 0x90) 9.091485153s ago: executing program 2 (id=605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d78000850000009a00000095000000000000000000b14654c39d9b28"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40fff, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffda1, &(0x7f0000000080)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000101ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4008010) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffda1, &(0x7f0000000080)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000101ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4008010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x4}, 0x50) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x4}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x1, 0x1, 0x947, 0x200, 0x1, 0x7, '\x00', 0x0, r1, 0x2, 0x4, 0x5}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x5, 0x20}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000640), &(0x7f00000007c0)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f00000007c0)='%pS \x00'}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x3, 0x4, 0x2, 0x400, 0x1, 0x4000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0xb}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x2, 0x20}, 0xc) (async) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x2, 0x20}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x88d68306f468ace2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xbc, &(0x7f0000000580)=""/188, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xf, 0x8, 0x8}, 0x10, 0x4a33, r0, 0x2, &(0x7f0000000900)=[r4, r6, r7, r8, r9, r10, r11, r12], &(0x7f0000000a00)=[{0x4, 0x5, 0x8, 0x2}, {0x3, 0x1, 0x8, 0x1}], 0x10, 0xb927}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) (async) sendmsg$kcm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) r14 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10009, 0x200a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x6c10, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r15) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x12, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000e0c59cf1509bc5e95e44628ba38ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000faffffff18500000000000000000000000000000bf91000000000000b7020000020000008500000084000000b700"], &(0x7f0000000740)='GPL\x00', 0xfffffff7, 0x89, &(0x7f0000000d80)=""/137, 0x41100, 0x14, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000010c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x3, 0x5, 0xdd7e, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001140)=[r3, r10], &(0x7f0000001180)=[{0x3, 0x3, 0xc, 0xa}, {0x5, 0x1, 0x8, 0x2}, {0x2, 0x1, 0xa, 0x8}, {0x2, 0x2, 0xa, 0x4}], 0x10, 0xf}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48054) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48054) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b80)={r5, r12}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b80)={r5, r12}, 0xc) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c31, 0x5420c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x6}, 0x1090da, 0x0, 0x9, 0x4, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 9.073065794s ago: executing program 1 (id=606): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x14200, 0x35, 0x43a1bd76, 0x7, 0x2, 0x6, 0x4, 0x0, 0x9, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x2, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)="97", 0x1}], 0x1}, 0x4008000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r9, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r10) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1881003a112c532bab728445ad90a409c993164285260b01ba9c383195102e34011186e1eb5898c13195767ad098215f9490f6ff2b8dfbe0b055920405e5498b4d942f6ebd78", @ANYRESDEC], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.698485295s ago: executing program 3 (id=607): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x20) socket$kcm(0x2, 0x922000000001, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2400008b058552e0bf07000000890704ac000000000008ac1414aa65cbe192feea15"], 0x28}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015001800142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="b9274f995c434d173c80dbd7fb146dbf98c4eb11a25dc02e1157ab89b3f2923da9decd10f1d738125aca6403984c349d1df0149269a41b8ffb85a78537da941c7827bab14490cd28313f8ef0cfbb0776ec504724f97d394feca34d094a5e6c1bfa6b981efbe35d5fd181e46bff86fe348ebe5162c3f271011e8d87c5820bf1c3007a9ca3df1ba865c012b64e5550732667ecc02dce567a377d32b49a0600cd8925261abbfc3fe4bd9c6db55de30fbb35e32d86c6520312d66017609cea2fd83898dcf975e1c8bc8cb12f783bc098249dca70", 0xd2}], 0x1, &(0x7f0000000340)="0b9d47e715a1ecd754e9acc9b82ebb263724498a9e38cda9beb961118a204f562174048ecb7cab8c02d23a626d2b7fa4696acb839a6a8842f4d568af875e3f957970bb8cb3274d924d326085c45694171aaec61c55fd4559272f481f83f299ed7748c3e168dfc5394ecb8720b13442d044298513fbf54eef05296dc8255e510f0f1db340cd71fd8c3d203829be8bcb6d810a03656cdc430018445e166b19061a609582c57cb839d46043e57edda5eb9f03a32cf24a051d4181df77deb0461c268f14fd3f747ab54199d5ecb649d42bf5c709ab10483ba86dc2ef", 0xda, 0x2000c080}, 0x4000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x1, 0xaf, 0xb5a0, 0x3000, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c"], 0x0, 0x56}, 0x28) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r6, 0x58, &(0x7f0000000440)}, 0x10) 8.323790357s ago: executing program 2 (id=608): socket$kcm(0x10, 0x2, 0x0) (async) syz_clone(0x2a020600, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff03316845268cb89614f0080073", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18100000", @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x13bb711e) (async) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r8, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r9 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) (async) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) r11 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r11, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xfd3) 7.882065642s ago: executing program 0 (id=609): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYRES16=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 7.796574138s ago: executing program 2 (id=610): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x0, @perf_config_ext={0x10000, 0x3}, 0x9a, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 7.675626445s ago: executing program 1 (id=611): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xff, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x8}], 0x10}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xad8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r9, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x97}, 0x44004) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 7.123465517s ago: executing program 2 (id=612): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c"], 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, 0x50) socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&'], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&'], 0xfe33) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000780)=""/274, 0x112}, {&(0x7f0000001d00)=""/4067, 0xfe3}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000000180)=""/173, 0xad}], 0x7}, 0x10182) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) 7.120189857s ago: executing program 3 (id=613): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x1000, 0x1, 0x9, 0x2, 0x10000, 0x9, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x541b, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) 5.723479878s ago: executing program 1 (id=614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000063"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) close(0x3) socket$kcm(0xa, 0x5, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="140000004f007f99de0dc892e8935b64ae384bac", 0x14}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000800)={r6, r5}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x30, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x232ec, r5, 0xa, &(0x7f0000000640)=[r7, r7, 0x1, r7, r7, r7], &(0x7f0000000680)=[{0x2, 0x2, 0x9, 0x1}, {0x1, 0x3, 0xa, 0x2}, {0x2, 0x2, 0x4, 0x1}, {0x2, 0x3, 0x3, 0x7}, {0x2, 0x2, 0x8, 0x5}, {0x0, 0x3, 0xc, 0xb}, {0x4, 0x2, 0xd}, {0x5, 0x1, 0xa, 0x7}, {0x0, 0x5, 0xb, 0x9}, {0x4, 0x3, 0x1, 0xc}], 0x10, 0x5}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40086602, &(0x7f0000000180)=0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="03000000030000000400"/28], 0x50) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r12, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2) close(0x3) 5.711539049s ago: executing program 2 (id=615): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 5.69212721s ago: executing program 0 (id=616): socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async, rerun: 64) socket$kcm(0x2, 0x1, 0x84) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x40000) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x1, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) (async, rerun: 32) close(r5) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0x2, 0x1, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x400000000a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) (rerun: 64) 5.434652985s ago: executing program 3 (id=617): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="18000000a279b50a312dd93ff968007f089eddeebfa6c33fe8e872db3075f2cf05d30300dd1370006f0ea6e9c0338c272c991d5f86f110e5ef02", 0x3a}, {&(0x7f0000000640)="68cabf2dfb58fcf05d000000000000", 0xf}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)="d800000018007b18e00212ba0d8105040a871100fe0f040b06990300000015000500fe800000000100000300014002000c59c266cd3e72d30901a8040098007f6f9400717ce06bbace8017cbec4c2ee5a7cef4090080001fb791643a5ee4b11602b2a10c11ce1b14d6d130dfe1d9d322fe04fba8cae8c9010000734d7a50f4fa61ee8362969ad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6cdd40dd60105e9f16e9cb58000000000000000000000000000beefc58a3ef93fcbb2f125f6644dc7998a0009cbc4d0a0", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0xa9, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x80086601, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0x4, '\x00', r3, r4, 0x2, 0x0, 0x4}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="8510000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f0000850000000600000018180000", @ANYRES32=0x1, @ANYBLOB="62b56da65b2e1be002206900003c8665dd260a2ee539e6b4d748d45369f9900824934e554d1cfd0591a7a8945bffbb7d8dfaa83a44b1cbfac48a2c6fd1156631121c0155d4591da1f8f52ede3a10e20f683cb7a1f769a6a9293774b251d7fed6e4222f086bcb1f076dba3557960cb039137ae5f4e1a4ca5a"], &(0x7f0000000200)='GPL\x00', 0x8, 0xdb, &(0x7f0000000300)=""/219, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xc, 0x81, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x4, 0x2, 0x3, 0x8}, {0x3, 0x4, 0xc, 0x9}]}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r5, r6}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r7, 0x8913, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000a80)) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000006c0)=r6, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8993, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)}, 0x10) 3.287558949s ago: executing program 0 (id=618): socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/pid\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000a40)='ns/pid\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000024000000000000000a0000008500000027000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000024000000000000000a0000008500000027000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f, 0x24, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc8996f5becbca1484853cb613f913c0d166a09528bbe7e70be1fff", 0x0, 0x400a5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f, 0x24, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc8996f5becbca1484853cb613f913c0d166a09528bbe7e70be1fff", 0x0, 0x400a5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 3.255312851s ago: executing program 1 (id=619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x8}, {0x10000002}]}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16=r6], 0x0, 0x4, 0x5f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2.115237447s ago: executing program 1 (id=620): socket$kcm(0x2a, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000580)}, 0x20008041) r1 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r3, 0x0, 0x40000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.771901698s ago: executing program 1 (id=621): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="e03f030033000b35d25a81000a000200053582c137153e79a3659aea4c96e86020a68aaac33037000c0680058802", 0x2e}, {&(0x7f0000000180)="6207322d369385a5d8f1146dbb143947c6dc10af03548cc906e40481709052b3dbd4c85aee496caeb30b2e19e75b8b3fb9881b19cdd9bc9dffcb8292e9979b52985b8053b33effe6cb36f1d2f9b081742918bfb9e54c92be007458b5", 0x5c}, {&(0x7f00000000c0)="cd77bdd314fe8e47d3a4974541373946c81626b0dfc0fbd82f95e0db3cd0be0fd80fd0f40ab1a9399b63c97998c4a4a272b05f2fe0ebc37390435bde322e0ac82c330c01ae13b3c0706a14cbbf7d860da8309345ddd291d84226b0430893fb3789c3f9ebc7965b45d6227272b235f5dc3b609948428e2cc8a00f54b49d8d2a8f5c3f8c024af198db6a387c565c56f579370a21274a00039639b54a5abdc3d261a30101a266c6d7ac4a", 0xa9}, {&(0x7f0000000240)="3b99edc29b6fe1c18ee6fa8135776bf6565b1ab07b545371fe9fdfbbd05040df78f73fa41c631bdd156c70f19429e463eb058f4c386657a0", 0x38}, {&(0x7f0000000400)="0baa68e47149656b28d39ae6c3e1139dd4e3cc2a3206c07d312a349403350eb7fa8b18265635dd102cdab0fc0400000000000000b370e35670c442b5669abe5286cc6cd6309b41d373b8d983d5cace61cf3f6109c1665a779fa71e015e7cdd7868a7f1", 0x63}, {&(0x7f0000000300)="3f8c459c1a9de2cdd427aba05a3ce255afc1859f753d83234602e192cced14507349a38b1213a3f719751f01b2ba4d7d084e2155803021a74af54f8a", 0x3c}, {&(0x7f0000000480)="1f3f559bf0f68fc6991638e269675d9e6fc091de57e6d48996cf8e3bdeb96eeaff53d2e9251bb3196650dbb81e752e04e59d794d9dbf1f5ca8cd7bfbac66004a467e3def66ce80e863ced93cb3270c646dfcc6b66ef559b49f88e67129712d95a982a145bf0281a0019a64426057", 0x6e}, {&(0x7f0000000380)="e59ba0f3d870fdfdfbef40e223dcbf5ed4229e51a8cc922018ee4ef5ec39ca", 0x1f}], 0x8}, 0x8011) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000005c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='cgq\xfb'}, 0x30) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60402, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000100000000b702000014000000b7030000000000008500000083000000bf09000000000000550901080000000095000000000000008510000001000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0xd) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0xfffffffe, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000001000023a00300000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1800, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r4, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x10000000000, 0x0, 0x200}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000200), 0x4) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x10, 0x0, 0xc) 132.431902ms ago: executing program 3 (id=622): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 81.193935ms ago: executing program 0 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000100000000000080530000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x2, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="83be6bf1fb0ac70c"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000000840)=""/4153, 0x1039}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f00000005c0)=""/172, 0xac}], 0x5}, 0x10100) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000100)={r5}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24009080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000380), 0x2, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000002b00), 0x2, 0x0) close(r7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000940)={'batadv_slave_1\x00', @local}) r10 = socket$kcm(0x29, 0x6, 0x0) sendmsg$sock(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="e4bac9c6a6f81ea53ac5ebc85fcb0ddf21765905e911e9a3a286186a5953b4915a379dc68d14a6659749006acb6c86e544fef1f3bac2d607f2d0aaefdfa338b6b8281fc1a715a9a254fd055fe6", 0x4d}, {&(0x7f0000000200)="a981347c34ef4f9310654927177ffc4092a52b78a8130927b1d7869396ce5450d24984baa44e9b0c", 0x28}, {&(0x7f0000000240)="b4afe9bc66a380c375e9e0400dbeab30cab6c8847a456747bf809facb6941e78dafedb2f11f4b3956fff94fe3611786da64b63f7f1eb0457b4ccd2c352f774fe739ed0e352754cc6f4dc73df562dfb53acedef43075b99f530907a8389600a8b9995cf289e9415a404113a951854b75f8a3f6cd9af317f77cd97102a228dff81dbd16c1d45c576ad818edf4540bf868718168f6a662b5c62a016294d534154bbbb66b5d09ca6a1fc544e4f6ca3b37317cbaaf92963fdd9998f39", 0xba}, {&(0x7f0000000380)="f9c651f111d298f0a2d89a94da34ae8cd52bd954fe558014bad439aeb245e1b521e068639e0d74361928eaeaab23b6e1e01c0036c5d007d337360fbc47f00cabc5553f4448ff72fa3f478cf5be0c479836914f99407847c4e56147962b898b33ec1d503a67a1b5caed8c60462c136aa4ba9df02b2f02a483bcca5620", 0x7c}, {&(0x7f0000000500)="ccbf1ed0e8efc9651ba14db8470d1b110df749f55ae1593bb59bc2bfd9c9520fa0e2c378223771e8bfcd40925be94663bf861607a1f5b67006c0a825e7b3318074370825e8a52f9df981cc92cedad389369844cbcc26e2d2554be1c1276c202c9720d20747f631cd417a6415e0b7a5fadce24db86ee6bb7b31865fd11b188b4411b4a7cc7bc82314f8c34664aecb9a8f5c12", 0x92}, {&(0x7f00000006c0)="440d6f05f29e2e7948d4fb756a7dcbe530e8a364cf839ae0a7d0eb1c7b0ca8c72facec96ad732ed4fc95c75968f8865a897962610bd4fd9dd1ee56a3f5c6c00bb1cfe5b7f8313a46b794133a68e0802e3c782f00ec0522efabd42bdf30f17d378a28c95f4c210994367ba67a0a03c407aa2b433629e843fe33d63143a346b166b6441a386426075d95a928e893b2fea4439dbfde355e38a8b90a60cd4b128d2feabbec2d27150012fb95fdf8defef0067c24c864b95618257cb26892eca4ae714b9d2188fdd9815fa09d2680aa97b86a9d093547a111d69d9b4b765a9374", 0xde}, {&(0x7f0000000300)="393829da7095a65b3a2e5be76ee74e3e0f5a0f472b63e356aea399c814320ce7a2d245773b13fcbef5bd1c5b946a154b6253347b9f1fbd", 0x37}, {&(0x7f0000000400)="bafbf195e1759b4ecec03224b109f4242d7137c8", 0x14}, {&(0x7f0000000b80)="dcc833d61bdb56", 0x7}, {&(0x7f00000007c0)="aac77c2368397acd7fc43153b3dd5f3ba5633761a76a506a47b7d2dd49bf878f93c6157b6621e86642357f84bc8ce9d425b4d5358d8a4d", 0x37}], 0xa, &(0x7f0000000a80)=[@timestamping={{0x14, 0x1, 0x25, 0x5d}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x9c}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xcc}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0xe365}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}, 0x4001) r11 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xf28, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r9], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r3, @ANYRES8=r5, @ANYRES8=r3, @ANYRES16=r12, @ANYRESHEX=r5], 0x68}, 0x0) 0s ago: executing program 2 (id=624): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x15, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xf, 0xc, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x46}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x5, 0xb6, &(0x7f00000002c0)=""/182, 0x41000, 0x2, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xb, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 82.460895][ T5755] cgroup: Unknown subsys name 'net' [ 82.625403][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.422014][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.096579][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.113095][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.119047][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.128202][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.136673][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.137832][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.152817][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.161500][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.169386][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.177412][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.184913][ T5769] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.192346][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.210776][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.219547][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.228840][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.245512][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.254585][ T5769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.262721][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.298652][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.307987][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.317101][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.329935][ T5769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.356047][ T5769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.366403][ T5769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.834390][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 86.853706][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 86.962589][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.089985][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.112981][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.120432][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.129040][ T5771] bridge_slave_0: entered allmulticast mode [ 87.136894][ T5771] bridge_slave_0: entered promiscuous mode [ 87.146639][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.153889][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.161932][ T5771] bridge_slave_1: entered allmulticast mode [ 87.170014][ T5771] bridge_slave_1: entered promiscuous mode [ 87.226994][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.234342][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.243174][ T5767] bridge_slave_0: entered allmulticast mode [ 87.256280][ T5767] bridge_slave_0: entered promiscuous mode [ 87.343209][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.351537][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.360352][ T5776] bridge_slave_0: entered allmulticast mode [ 87.369144][ T5776] bridge_slave_0: entered promiscuous mode [ 87.379158][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.388100][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.397414][ T5767] bridge_slave_1: entered allmulticast mode [ 87.407357][ T5767] bridge_slave_1: entered promiscuous mode [ 87.434148][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.460214][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.473801][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.482371][ T5776] bridge_slave_1: entered allmulticast mode [ 87.490226][ T5776] bridge_slave_1: entered promiscuous mode [ 87.512776][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.588780][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.607933][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.661023][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.732684][ T5767] team0: Port device team_slave_0 added [ 87.762631][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.791370][ T5771] team0: Port device team_slave_0 added [ 87.809661][ T5771] team0: Port device team_slave_1 added [ 87.820525][ T5767] team0: Port device team_slave_1 added [ 87.920116][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.927502][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.935115][ T5778] bridge_slave_0: entered allmulticast mode [ 87.945988][ T5778] bridge_slave_0: entered promiscuous mode [ 87.957424][ T5776] team0: Port device team_slave_0 added [ 87.978550][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.986495][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.013376][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.026754][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.035197][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.042765][ T5778] bridge_slave_1: entered allmulticast mode [ 88.050621][ T5778] bridge_slave_1: entered promiscuous mode [ 88.059604][ T5776] team0: Port device team_slave_1 added [ 88.078350][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.085351][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.114844][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.130787][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.138294][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.164960][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.210622][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.217767][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.244414][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.249072][ T5769] Bluetooth: hci0: command tx timeout [ 88.260733][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.260789][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.260813][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.308397][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.321753][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.331703][ T51] Bluetooth: hci1: command tx timeout [ 88.337622][ T5769] Bluetooth: hci2: command tx timeout [ 88.338312][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.351299][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.379118][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.405944][ T5769] Bluetooth: hci3: command tx timeout [ 88.509444][ T5767] hsr_slave_0: entered promiscuous mode [ 88.517482][ T5767] hsr_slave_1: entered promiscuous mode [ 88.528122][ T5778] team0: Port device team_slave_0 added [ 88.542259][ T5776] hsr_slave_0: entered promiscuous mode [ 88.548778][ T5776] hsr_slave_1: entered promiscuous mode [ 88.555079][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.564717][ T5776] Cannot create hsr debugfs directory [ 88.577614][ T5771] hsr_slave_0: entered promiscuous mode [ 88.584409][ T5771] hsr_slave_1: entered promiscuous mode [ 88.591731][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.599492][ T5771] Cannot create hsr debugfs directory [ 88.620733][ T5778] team0: Port device team_slave_1 added [ 88.714790][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.722557][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.749268][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.763186][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.770615][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.798103][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.961518][ T5778] hsr_slave_0: entered promiscuous mode [ 88.968319][ T5778] hsr_slave_1: entered promiscuous mode [ 88.976361][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.984093][ T5778] Cannot create hsr debugfs directory [ 89.295343][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.310804][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.322348][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.334252][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.409323][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.435516][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.445809][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.484370][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.558955][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.577135][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.588377][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.599070][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.700007][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.711108][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.722639][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.739243][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.758415][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.839987][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.884063][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.891602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.967399][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.974755][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.007575][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.058131][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.075366][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.098448][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.105994][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.135287][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.182359][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.189570][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.204554][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.211803][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.254152][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.261412][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.282505][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.328049][ T5769] Bluetooth: hci0: command tx timeout [ 90.361777][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.404133][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.411425][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.418392][ T5769] Bluetooth: hci2: command tx timeout [ 90.424700][ T5769] Bluetooth: hci1: command tx timeout [ 90.481787][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.496445][ T51] Bluetooth: hci3: command tx timeout [ 90.522442][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.529696][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.980487][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.084289][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.119391][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.210456][ T5767] veth0_vlan: entered promiscuous mode [ 91.233656][ T5767] veth1_vlan: entered promiscuous mode [ 91.303080][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.320609][ T5771] veth0_vlan: entered promiscuous mode [ 91.342646][ T5776] veth0_vlan: entered promiscuous mode [ 91.354277][ T5771] veth1_vlan: entered promiscuous mode [ 91.394965][ T5767] veth0_macvtap: entered promiscuous mode [ 91.414973][ T5767] veth1_macvtap: entered promiscuous mode [ 91.426041][ T5776] veth1_vlan: entered promiscuous mode [ 91.526480][ T5776] veth0_macvtap: entered promiscuous mode [ 91.542115][ T5776] veth1_macvtap: entered promiscuous mode [ 91.561008][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.569942][ T5771] veth0_macvtap: entered promiscuous mode [ 91.581354][ T5778] veth0_vlan: entered promiscuous mode [ 91.588476][ T5771] veth1_macvtap: entered promiscuous mode [ 91.614600][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.632064][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.641643][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.651328][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.660812][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.689800][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.701162][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.713827][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.725392][ T5778] veth1_vlan: entered promiscuous mode [ 91.745086][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.756444][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.770653][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.781465][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.793681][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.817846][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.834366][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.848126][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.857997][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.869299][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.882693][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.896601][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.908888][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.937661][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.948221][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.958613][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.968155][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.988043][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.000283][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.010685][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.021220][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.130924][ T5778] veth0_macvtap: entered promiscuous mode [ 92.183101][ T5778] veth1_macvtap: entered promiscuous mode [ 92.214781][ T1303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.235987][ T1303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.286541][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.294570][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.329265][ T787] cfg80211: failed to load regulatory.db [ 92.351935][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.366593][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.378629][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.391134][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.401278][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.412574][ T51] Bluetooth: hci0: command tx timeout [ 92.419930][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.432461][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.456293][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.471987][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.490722][ T1303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.499830][ T51] Bluetooth: hci1: command tx timeout [ 92.505350][ T51] Bluetooth: hci2: command tx timeout [ 92.514544][ T1303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.524736][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.550463][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.560550][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.571261][ T51] Bluetooth: hci3: command tx timeout [ 92.577439][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.587821][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.605011][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.622124][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.692460][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.701646][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.720730][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.729940][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.753983][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.793181][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.942534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.970683][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.052408][ C0] hrtimer: interrupt took 402284 ns [ 93.140929][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.188985][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.487399][ T51] Bluetooth: hci0: command tx timeout [ 94.578120][ T5769] Bluetooth: hci1: command tx timeout [ 94.583980][ T51] Bluetooth: hci2: command tx timeout [ 94.657256][ T51] Bluetooth: hci3: command tx timeout [ 96.272874][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.300812][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.675173][ T5878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7'. [ 96.760018][ T5875] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5'. [ 97.006510][ T5883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.032292][ T5883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.135169][ T5886] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.236627][ T5883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.707306][ T5880] syz.0.1 (5880) used greatest stack depth: 19624 bytes left [ 97.868770][ T5892] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.8'. [ 97.978706][ T5892] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.8'. [ 100.214069][ T5894] hsr0: entered promiscuous mode [ 100.219579][ T5894] hsr0: entered allmulticast mode [ 100.224878][ T5894] hsr_slave_0: entered allmulticast mode [ 100.231644][ T5894] hsr_slave_1: entered allmulticast mode [ 100.241326][ T5897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10'. [ 100.721389][ T5901] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11'. [ 101.460197][ T5914] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.547805][ T5920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.998128][ T5925] hsr0: entered promiscuous mode [ 102.035984][ T5925] hsr0: entered allmulticast mode [ 102.056000][ T5925] hsr_slave_0: entered allmulticast mode [ 102.061839][ T5925] hsr_slave_1: entered allmulticast mode [ 102.944109][ T5937] __nla_validate_parse: 1 callbacks suppressed [ 102.944130][ T5937] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.25'. [ 103.032867][ T5937] debugfs: Directory '!' with parent 'ieee80211' already present! [ 103.332083][ T5951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.28'. [ 103.519196][ T5954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.29'. [ 103.554456][ T5956] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 104.729062][ T5978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.43'. [ 104.810241][ T5978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.43'. [ 104.930726][ T5976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.43'. [ 104.943410][ T5977] hsr0: entered promiscuous mode [ 104.953329][ T5977] hsr0: entered allmulticast mode [ 104.963625][ T5977] hsr_slave_0: entered allmulticast mode [ 104.986497][ T5977] hsr_slave_1: entered allmulticast mode [ 105.332531][ T5987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.46'. [ 106.059787][ T5988] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37'. [ 106.349414][ T5988] debugfs: Directory '!' with parent 'ieee80211' already present! [ 106.522390][ T6000] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.39'. [ 106.571194][ T6000] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.39'. [ 107.714972][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 107.818202][ T6017] netlink: 'syz.1.45': attribute type 3 has an invalid length. [ 107.973092][ T6017] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 108.135395][ T6023] Zero length message leads to an empty skb [ 108.721290][ T6032] __nla_validate_parse: 1 callbacks suppressed [ 108.721310][ T6032] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.58'. [ 109.106707][ T6046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'. [ 109.196377][ T6046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'. [ 109.256927][ T6048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'. [ 109.340000][ T6038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.50'. [ 112.391156][ T6087] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.66'. [ 113.287259][ T6104] netlink: 64 bytes leftover after parsing attributes in process `syz.2.70'. [ 113.480044][ T6111] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.72'. [ 113.521883][ T6111] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.72'. [ 113.603593][ T6118] netlink: 'syz.3.75': attribute type 9 has an invalid length. [ 113.639754][ T6118] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.75'. [ 114.484012][ T6137] netlink: 176 bytes leftover after parsing attributes in process `syz.1.81'. [ 115.238193][ T6149] netlink: 'syz.3.85': attribute type 4 has an invalid length. [ 115.286426][ T6149] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.85'. [ 115.767080][ T6163] delete_channel: no stack [ 115.919755][ T6168] netlink: 'syz.3.91': attribute type 9 has an invalid length. [ 116.003347][ T6168] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.91'. [ 119.765000][ T6211] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.102'. [ 120.154171][ T6233] netlink: 'syz.0.108': attribute type 3 has an invalid length. [ 120.195212][ T6233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.108'. [ 120.424755][ T6237] netlink: 'syz.2.111': attribute type 10 has an invalid length. [ 120.459778][ T6244] netlink: 'syz.2.111': attribute type 3 has an invalid length. [ 120.468079][ T6244] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.111'. [ 120.608912][ T6237] team0: Device veth1_macvtap failed to register rx_handler [ 121.037466][ T6237] syz.2.111 (6237) used greatest stack depth: 18120 bytes left [ 121.212795][ T6251] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 121.226029][ T6251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.114'. [ 121.235427][ T6251] team0: entered promiscuous mode [ 121.261310][ T6251] team_slave_0: entered promiscuous mode [ 121.283138][ T6251] team_slave_1: entered promiscuous mode [ 121.346210][ T6251] team0: entered allmulticast mode [ 121.351432][ T6251] team_slave_0: entered allmulticast mode [ 121.455795][ T6251] team_slave_1: entered allmulticast mode [ 121.476682][ T6251] bridge0: port 3(team0) entered blocking state [ 121.484001][ T6260] netlink: 'syz.3.115': attribute type 29 has an invalid length. [ 121.503907][ T6251] bridge0: port 3(team0) entered disabled state [ 121.540138][ T6251] bridge0: port 3(team0) entered blocking state [ 121.546917][ T6251] bridge0: port 3(team0) entered forwarding state [ 121.597473][ T6260] netlink: 'syz.3.115': attribute type 29 has an invalid length. [ 121.868748][ T6269] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.118'. [ 122.128823][ T6278] netlink: 'syz.1.121': attribute type 3 has an invalid length. [ 122.165986][ T6278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.121'. [ 122.243321][ T6278] tap0: tun_chr_ioctl cmd 1074025677 [ 122.251632][ T6278] tap0: linktype set to 773 [ 122.325792][ T6289] netlink: 'syz.2.123': attribute type 5 has an invalid length. [ 122.386757][ T6289] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 122.394602][ T6289] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.123'. [ 122.570088][ T6299] netlink: 763 bytes leftover after parsing attributes in process `syz.1.125'. [ 122.955283][ T6310] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.127'. [ 123.335139][ T6326] netlink: 14 bytes leftover after parsing attributes in process `syz.0.133'. [ 124.767764][ T6388] netlink: 'syz.2.148': attribute type 29 has an invalid length. [ 125.106913][ T6394] __nla_validate_parse: 3 callbacks suppressed [ 125.106950][ T6394] netlink: 55 bytes leftover after parsing attributes in process `syz.3.149'. [ 125.781617][ T6399] validate_nla: 2 callbacks suppressed [ 125.781638][ T6399] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 125.798767][ T6401] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 126.549244][ T6426] netlink: 'syz.2.158': attribute type 3 has an invalid length. [ 126.561817][ T6426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.158'. [ 126.817590][ T6436] netlink: 'syz.2.163': attribute type 9 has an invalid length. [ 126.830331][ T6436] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.163'. [ 126.922931][ T6436] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.163'. [ 128.399671][ T6461] netlink: 'syz.3.167': attribute type 3 has an invalid length. [ 128.478517][ T6461] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.167'. [ 128.997704][ T6475] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.158340][ T6479] netlink: 830 bytes leftover after parsing attributes in process `syz.1.172'. [ 129.500385][ T6486] netlink: 164 bytes leftover after parsing attributes in process `syz.2.174'. [ 129.589699][ T6488] netlink: 'syz.3.173': attribute type 19 has an invalid length. [ 130.679076][ T6519] sctp: [Deprecated]: syz.2.182 (pid 6519) Use of int in max_burst socket option deprecated. [ 130.679076][ T6519] Use struct sctp_assoc_value instead [ 131.820676][ T51] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 133.205381][ T6553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.192'. [ 133.270172][ T6556] netlink: 830 bytes leftover after parsing attributes in process `syz.2.194'. [ 133.305874][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.312851][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.636872][ T6570] veth1_to_bond: entered allmulticast mode [ 133.796308][ T6577] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 133.803740][ T6577] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 133.865927][ T6583] Illegal XDP return value 4294967274 on prog (id 183) dev N/A, expect packet loss! [ 134.068918][ T6589] netlink: 'syz.0.202': attribute type 10 has an invalid length. [ 134.321862][ T6589] hsr0: left promiscuous mode [ 134.353825][ T6589] hsr0: left allmulticast mode [ 134.386083][ T6589] hsr_slave_0: left allmulticast mode [ 134.410235][ T6589] hsr_slave_1: left allmulticast mode [ 134.469810][ T6589] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 134.709878][ T6611] netlink: 112 bytes leftover after parsing attributes in process `syz.2.208'. [ 134.742865][ T6609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.206'. [ 134.766419][ T6609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.206'. [ 134.787267][ T6603] netlink: 60 bytes leftover after parsing attributes in process `syz.1.206'. [ 135.947482][ T6637] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 136.615056][ T6656] ip6_vti0: mtu greater than device maximum [ 136.861862][ T6664] netlink: 14 bytes leftover after parsing attributes in process `syz.1.224'. [ 136.881015][ T6661] netlink: 156 bytes leftover after parsing attributes in process `syz.3.222'. [ 137.804879][ T6664] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 138.143960][ T6664] macvlan0: entered allmulticast mode [ 138.186224][ T6664] veth1_vlan: entered allmulticast mode [ 138.235423][ T6664] team0: Port device macvlan0 added [ 138.333802][ T6676] netlink: 'syz.0.225': attribute type 2 has an invalid length. [ 138.343898][ T6676] netlink: 'syz.0.225': attribute type 8 has an invalid length. [ 138.383818][ T6676] netlink: 132 bytes leftover after parsing attributes in process `syz.0.225'. [ 140.840309][ T6743] netlink: 176 bytes leftover after parsing attributes in process `syz.1.242'. [ 143.750783][ T6783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.254'. [ 143.760144][ T6784] netlink: 60 bytes leftover after parsing attributes in process `syz.2.254'. [ 146.937468][ T6807] netlink: 'syz.1.260': attribute type 9 has an invalid length. [ 146.945380][ T6807] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.260'. [ 147.402926][ T6818] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.263'. [ 147.430598][ T6818] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.935783][ T6837] sctp: [Deprecated]: syz.2.269 (pid 6837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.935783][ T6837] Use struct sctp_sack_info instead [ 148.222433][ T6844] netlink: 830 bytes leftover after parsing attributes in process `syz.2.271'. [ 148.514811][ T6856] macsec0: entered promiscuous mode [ 148.523443][ T6856] macsec0: entered allmulticast mode [ 148.542476][ T6856] veth1_macvtap: entered allmulticast mode [ 148.994868][ T6865] netlink: 'syz.2.279': attribute type 29 has an invalid length. [ 149.056542][ T6865] netlink: 'syz.2.279': attribute type 29 has an invalid length. [ 149.106300][ T6867] netlink: 'syz.2.279': attribute type 29 has an invalid length. [ 149.117473][ T6865] netlink: 'syz.2.279': attribute type 29 has an invalid length. [ 149.886100][ T6878] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.282'. [ 150.219464][ T6883] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.284'. [ 150.241732][ T6883] openvswitch: netlink: IP tunnel dst address not specified [ 151.399308][ T6919] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.294'. [ 153.055083][ T6945] netlink: 'syz.2.300': attribute type 3 has an invalid length. [ 153.109752][ T6945] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 153.193039][ T6945] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.300'. [ 153.486965][ T6957] netlink: 144 bytes leftover after parsing attributes in process `syz.1.304'. [ 153.659109][ T6965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.307'. [ 154.030491][ T6967] syzkaller0: entered promiscuous mode [ 154.040641][ T6967] syzkaller0: entered allmulticast mode [ 154.051283][ T6971] netlink: 'syz.3.309': attribute type 6 has an invalid length. [ 156.623574][ T6984] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.312'. [ 158.223550][ T6984] debugfs: Directory '!' with parent 'ieee80211' already present! [ 158.238501][ T6996] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.489951][ T7004] netlink: 'syz.2.317': attribute type 3 has an invalid length. [ 158.516703][ T7004] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.317'. [ 158.532605][ T7006] netlink: 67 bytes leftover after parsing attributes in process `syz.0.319'. [ 158.975085][ T7019] netlink: 144 bytes leftover after parsing attributes in process `syz.2.321'. [ 162.360629][ T7027] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.324'. [ 163.408801][ T7060] netlink: 'syz.1.333': attribute type 11 has an invalid length. [ 163.483139][ T7060] netlink: 153480 bytes leftover after parsing attributes in process `syz.1.333'. [ 163.596565][ T7073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.336'. [ 163.621902][ T7073] netlink: 60 bytes leftover after parsing attributes in process `syz.2.336'. [ 163.970931][ T51] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 164.249871][ T7078] netlink: 60 bytes leftover after parsing attributes in process `syz.2.336'. [ 166.522441][ T7078] netlink: 60 bytes leftover after parsing attributes in process `syz.2.336'. [ 166.531907][ T7090] netlink: 'syz.0.340': attribute type 10 has an invalid length. [ 166.565181][ T7090] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 166.593206][ T7096] netlink: 'syz.3.342': attribute type 10 has an invalid length. [ 166.663806][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.672307][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.729985][ T7096] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.737288][ T7096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.744955][ T7096] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.752261][ T7096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.819150][ T7096] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 166.951541][ T7105] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 166.970372][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.345'. [ 167.014782][ T7105] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 167.039051][ T7105] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.095130][ T7105] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 167.197192][ T7102] delete_channel: no stack [ 167.331089][ T7118] IPv6: pim6reg1: Disabled Multicast RS [ 169.096042][ T7146] : renamed from pim6reg1 [ 169.402622][ T7154] netlink: 'syz.0.361': attribute type 21 has an invalid length. [ 169.488186][ T7163] tap0: tun_chr_ioctl cmd 1074025681 [ 171.426766][ T7196] syz.1.373[7196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.426923][ T7196] syz.1.373[7196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.497754][ T7200] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 171.535825][ T7200] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.374'. [ 171.545297][ T7200] netlink: 9 bytes leftover after parsing attributes in process `syz.2.374'. [ 171.572828][ T7196] netlink: 'syz.1.373': attribute type 21 has an invalid length. [ 172.992933][ T7224] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 173.004230][ T7224] netlink: 156 bytes leftover after parsing attributes in process `syz.1.380'. [ 173.035642][ T7222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.379'. [ 173.241468][ T7222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.379'. [ 173.446721][ T7228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.379'. [ 173.471203][ T7231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.379'. [ 174.156050][ T7245] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.385'. [ 174.186262][ T7246] netlink: 'syz.3.384': attribute type 4 has an invalid length. [ 174.237281][ T7246] netlink: 152 bytes leftover after parsing attributes in process `syz.3.384'. [ 174.306734][ T7246] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 174.383002][ T7248] Q6`Ҙ: renamed from lo (while UP) [ 174.772396][ T7257] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.388'. [ 174.816440][ T7257] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 175.046483][ T7262] syzkaller0: entered promiscuous mode [ 175.052202][ T7262] syzkaller0: entered allmulticast mode [ 175.533463][ T7269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.580473][ T7262] netlink: 'syz.1.389': attribute type 10 has an invalid length. [ 175.692698][ T7262] team0: Port device geneve1 added [ 176.360675][ T7311] netlink: 'syz.1.398': attribute type 39 has an invalid length. [ 176.556840][ T7311] hsr_slave_1 (unregistering): left promiscuous mode [ 177.428500][ T7321] netlink: 'syz.2.401': attribute type 39 has an invalid length. [ 177.929846][ T7340] -: renamed from syzkaller0 [ 179.379068][ T7380] netlink: 'syz.3.419': attribute type 9 has an invalid length. [ 179.391954][ T7380] __nla_validate_parse: 1 callbacks suppressed [ 179.391969][ T7380] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.419'. [ 179.480329][ T7381] netlink: 'syz.2.418': attribute type 3 has an invalid length. [ 179.496132][ T7365] netlink: 'syz.1.413': attribute type 33 has an invalid length. [ 179.504262][ T7365] netlink: 152 bytes leftover after parsing attributes in process `syz.1.413'. [ 179.516553][ T7381] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.418'. [ 179.531432][ T7365] `: renamed from team0 (while UP) [ 179.748631][ T7391] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.421'. [ 180.825338][ T7411] netlink: 'syz.3.426': attribute type 10 has an invalid length. [ 180.890302][ T7411] team0: Cannot enslave team device to itself [ 181.017503][ T7411] netlink: 'syz.3.426': attribute type 10 has an invalid length. [ 184.048918][ T7411] team0: Device vxcan1 is of different type [ 184.146253][ T7421] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.428'. [ 184.424975][ T7434] netlink: 'syz.1.432': attribute type 10 has an invalid length. [ 184.445752][ T7434] netlink: 55 bytes leftover after parsing attributes in process `syz.1.432'. [ 185.235830][ T7454] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 185.642822][ T7466] syz.0.442[7466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.643031][ T7466] syz.0.442[7466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.696120][ T7464] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.441'. [ 185.906980][ T7466] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 185.915307][ T7466] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.442'. [ 186.298149][ T7485] netlink: 'syz.2.445': attribute type 21 has an invalid length. [ 186.851422][ T7501] netlink: 'syz.2.449': attribute type 21 has an invalid length. [ 186.878412][ T7501] netlink: 'syz.2.449': attribute type 6 has an invalid length. [ 186.911055][ T7501] netlink: 132 bytes leftover after parsing attributes in process `syz.2.449'. [ 186.962795][ T7510] FAULT_INJECTION: forcing a failure. [ 186.962795][ T7510] name failslab, interval 1, probability 0, space 0, times 1 [ 186.983082][ T7510] CPU: 1 PID: 7510 Comm: syz.3.452 Not tainted syzkaller #0 [ 186.991003][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.001320][ T7510] Call Trace: [ 187.004803][ T7510] [ 187.007785][ T7510] dump_stack_lvl+0x18c/0x250 [ 187.012556][ T7510] ? show_regs_print_info+0x20/0x20 [ 187.017933][ T7510] ? load_image+0x400/0x400 [ 187.022601][ T7510] ? __might_sleep+0xe0/0xe0 [ 187.027451][ T7510] ? __lock_acquire+0x7d40/0x7d40 [ 187.032669][ T7510] should_fail_ex+0x39d/0x4d0 [ 187.037541][ T7510] should_failslab+0x9/0x20 [ 187.042125][ T7510] slab_pre_alloc_hook+0x59/0x310 [ 187.047238][ T7510] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 187.053215][ T7510] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 187.059016][ T7510] __kmem_cache_alloc_node+0x53/0x250 [ 187.064468][ T7510] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 187.070333][ T7510] __kmalloc+0xa4/0x230 [ 187.074561][ T7510] tomoyo_realpath_from_path+0xe3/0x5d0 [ 187.080766][ T7510] tomoyo_path_number_perm+0x248/0x620 [ 187.086481][ T7510] ? tomoyo_path_number_perm+0x217/0x620 [ 187.092475][ T7510] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 187.098089][ T7510] ? trace_call_bpf+0xc3/0x6c0 [ 187.102962][ T7510] ? trace_call_bpf+0xc3/0x6c0 [ 187.107960][ T7510] ? trace_call_bpf+0x5e9/0x6c0 [ 187.112984][ T7510] ? __fget_files+0x28/0x4b0 [ 187.117634][ T7510] ? __fget_files+0x28/0x4b0 [ 187.122375][ T7510] security_file_ioctl+0x70/0xa0 [ 187.127893][ T7510] __se_sys_ioctl+0x48/0x170 [ 187.132880][ T7510] do_syscall_64+0x55/0xa0 [ 187.137422][ T7510] ? clear_bhb_loop+0x40/0x90 [ 187.142151][ T7510] ? clear_bhb_loop+0x40/0x90 [ 187.146912][ T7510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.152887][ T7510] RIP: 0033:0x7f389279bf79 [ 187.157441][ T7510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.177976][ T7510] RSP: 002b:00007f389367f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.186469][ T7510] RAX: ffffffffffffffda RBX: 00007f3892a15fa0 RCX: 00007f389279bf79 [ 187.194670][ T7510] RDX: 0000200000000000 RSI: 00000000000089ef RDI: 0000000000000003 [ 187.202875][ T7510] RBP: 00007f389367f090 R08: 0000000000000000 R09: 0000000000000000 [ 187.210883][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.219100][ T7510] R13: 00007f3892a16038 R14: 00007f3892a15fa0 R15: 00007ffce24277a8 [ 187.227541][ T7510] [ 187.285261][ T7510] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.776728][ T7513] pimreg: tun_chr_ioctl cmd 1074025677 [ 187.796110][ T7513] pimreg: linktype set to 1 [ 187.872711][ T7513] netlink: 176 bytes leftover after parsing attributes in process `syz.0.454'. [ 187.946263][ T7519] netlink: 31587 bytes leftover after parsing attributes in process `syz.0.454'. [ 190.748574][ T7566] netlink: 'syz.3.468': attribute type 8 has an invalid length. [ 190.758061][ T7566] netlink: 174260 bytes leftover after parsing attributes in process `syz.3.468'. [ 191.184922][ T7570] netlink: 'syz.0.469': attribute type 3 has an invalid length. [ 191.195745][ T7570] netlink: 'syz.0.469': attribute type 1 has an invalid length. [ 191.236235][ T7570] netlink: 197476 bytes leftover after parsing attributes in process `syz.0.469'. [ 191.677514][ T7597] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.477'. [ 191.713928][ T7597] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.477'. [ 191.742028][ T7597] netlink: 2 bytes leftover after parsing attributes in process `syz.0.477'. [ 191.823802][ T7605] syz.2.479[7605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.823951][ T7605] syz.2.479[7605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.904969][ T7605] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 191.996631][ T7605] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.479'. [ 192.711149][ T7615] delete_channel: no stack [ 192.917021][ T7623] netlink: 22 bytes leftover after parsing attributes in process `syz.3.485'. [ 193.011475][ T7627] FAULT_INJECTION: forcing a failure. [ 193.011475][ T7627] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 193.046201][ T7627] CPU: 1 PID: 7627 Comm: syz.2.486 Not tainted syzkaller #0 [ 193.053786][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.064143][ T7627] Call Trace: [ 193.067487][ T7627] [ 193.070730][ T7627] dump_stack_lvl+0x18c/0x250 [ 193.075503][ T7627] ? show_regs_print_info+0x20/0x20 [ 193.080890][ T7627] ? load_image+0x400/0x400 [ 193.085549][ T7627] ? __lock_acquire+0x7d40/0x7d40 [ 193.090839][ T7627] ? snprintf+0xe9/0x140 [ 193.095158][ T7627] should_fail_ex+0x39d/0x4d0 [ 193.100018][ T7627] _copy_to_user+0x2f/0xa0 [ 193.104506][ T7627] simple_read_from_buffer+0xe7/0x150 [ 193.109972][ T7627] proc_fail_nth_read+0x1e8/0x260 [ 193.115111][ T7627] ? proc_fault_inject_write+0x360/0x360 [ 193.121608][ T7627] ? fsnotify_perm+0x271/0x5e0 [ 193.126772][ T7627] ? proc_fault_inject_write+0x360/0x360 [ 193.133110][ T7627] vfs_read+0x28b/0x970 [ 193.137336][ T7627] ? kernel_read+0x1e0/0x1e0 [ 193.142093][ T7627] ? __fget_files+0x28/0x4b0 [ 193.146746][ T7627] ? __fget_files+0x28/0x4b0 [ 193.151401][ T7627] ? __fget_files+0x43d/0x4b0 [ 193.156273][ T7627] ? __fdget_pos+0x2a3/0x330 [ 193.160996][ T7627] ? ksys_read+0x75/0x260 [ 193.165392][ T7627] ksys_read+0x150/0x260 [ 193.169710][ T7627] ? vfs_write+0x990/0x990 [ 193.174195][ T7627] ? lockdep_hardirqs_on+0x98/0x150 [ 193.179631][ T7627] do_syscall_64+0x55/0xa0 [ 193.184102][ T7627] ? clear_bhb_loop+0x40/0x90 [ 193.188818][ T7627] ? clear_bhb_loop+0x40/0x90 [ 193.193626][ T7627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.199902][ T7627] RIP: 0033:0x7f3620d5c84e [ 193.204359][ T7627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.224209][ T7627] RSP: 002b:00007f3621c31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.232943][ T7627] RAX: ffffffffffffffda RBX: 00007f3621c326c0 RCX: 00007f3620d5c84e [ 193.241134][ T7627] RDX: 000000000000000f RSI: 00007f3621c320a0 RDI: 0000000000000004 [ 193.249175][ T7627] RBP: 00007f3621c32090 R08: 0000000000000000 R09: 0000000000000000 [ 193.257373][ T7627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.265469][ T7627] R13: 00007f3621016038 R14: 00007f3621015fa0 R15: 00007ffe78dd8bf8 [ 193.273872][ T7627] [ 193.354678][ T7625] netlink: 'syz.1.487': attribute type 33 has an invalid length. [ 193.381029][ T7625] netlink: 152 bytes leftover after parsing attributes in process `syz.1.487'. [ 193.494833][ T7625] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 193.516194][ T7630] netlink: 59443 bytes leftover after parsing attributes in process `syz.1.487'. [ 193.553135][ T7632] netlink: 164 bytes leftover after parsing attributes in process `syz.0.488'. [ 194.034238][ T7652] sctp: [Deprecated]: syz.3.496 (pid 7652) Use of int in maxseg socket option. [ 194.034238][ T7652] Use struct sctp_assoc_value instead [ 194.638362][ T7665] netlink: 'syz.1.500': attribute type 12 has an invalid length. [ 194.766411][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.772821][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.923320][ T7661] syzkaller0: entered promiscuous mode [ 194.929387][ T7661] syzkaller0: entered allmulticast mode [ 196.946804][ T7690] veth0_macvtap: left promiscuous mode [ 196.966284][ T7690] macvtap0: entered allmulticast mode [ 197.235097][ T7702] netlink: 'syz.2.508': attribute type 21 has an invalid length. [ 197.256290][ T7702] __nla_validate_parse: 4 callbacks suppressed [ 197.256309][ T7702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.508'. [ 197.740880][ T7714] : port 1(macsec0) entered blocking state [ 197.753756][ T7714] : port 1(macsec0) entered disabled state [ 197.760964][ T7714] macsec0: entered allmulticast mode [ 197.773086][ T7714] veth1_macvtap: entered allmulticast mode [ 197.796440][ T7714] macsec0: entered promiscuous mode [ 198.019295][ T7715] netlink: 'syz.3.513': attribute type 33 has an invalid length. [ 198.078341][ T7715] netlink: 152 bytes leftover after parsing attributes in process `syz.3.513'. [ 198.193787][ T7715] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 198.217359][ T7716] netlink: 59443 bytes leftover after parsing attributes in process `syz.3.513'. [ 198.701897][ T7730] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.518'. [ 198.763987][ T7730] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.518'. [ 198.874012][ T7733] bridge_slave_1: left allmulticast mode [ 198.881799][ T7733] bridge_slave_1: left promiscuous mode [ 198.896593][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.039184][ T7733] bridge_slave_0: left promiscuous mode [ 199.045753][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.381726][ T7733] bond0: (slave bridge0): Releasing backup interface [ 199.410665][ T7747] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.522'. [ 199.529943][ T7746] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.522'. [ 199.624809][ T7748] netlink: 'syz.0.522': attribute type 21 has an invalid length. [ 199.633065][ T7748] netlink: 15462 bytes leftover after parsing attributes in process `syz.0.522'. [ 199.812422][ T7753] netlink: 'syz.3.523': attribute type 2 has an invalid length. [ 200.125004][ T7764] : port 1(macsec0) entered blocking state [ 200.131744][ T7764] : port 1(macsec0) entered disabled state [ 200.173720][ T7764] macsec0: entered allmulticast mode [ 200.231486][ T7764] veth1_macvtap: entered allmulticast mode [ 200.287093][ T7764] macsec0: entered promiscuous mode [ 201.160464][ T7779] netlink: 'syz.0.530': attribute type 21 has an invalid length. [ 201.206061][ T7779] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.866568][ T7801] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.534'. [ 201.972198][ T7801] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.534'. [ 202.118779][ T7804] syzkaller0: entered promiscuous mode [ 202.124364][ T7804] syzkaller0: entered allmulticast mode [ 202.329047][ T7815] : port 1(macsec0) entered blocking state [ 202.336029][ T7815] : port 1(macsec0) entered disabled state [ 202.342840][ T7815] macsec0: entered allmulticast mode [ 202.355720][ T7815] veth1_macvtap: entered allmulticast mode [ 202.399536][ T7815] macsec0: entered promiscuous mode [ 202.584302][ T7822] __nla_validate_parse: 2 callbacks suppressed [ 202.584343][ T7822] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.542'. [ 202.602087][ T7824] netlink: 64019 bytes leftover after parsing attributes in process `syz.2.541'. [ 202.992998][ T7845] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.546'. [ 203.018454][ T7845] netlink: 'syz.3.546': attribute type 6 has an invalid length. [ 203.032143][ T7845] netlink: 168 bytes leftover after parsing attributes in process `syz.3.546'. [ 204.472473][ T7882] netlink: 44 bytes leftover after parsing attributes in process `syz.1.559'. [ 204.488637][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.558'. [ 204.499927][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.558'. [ 204.541668][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.558'. [ 204.663494][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.558'. [ 206.546271][ T7919] hsr0: entered promiscuous mode [ 206.551451][ T7919] hsr0: entered allmulticast mode [ 206.565836][ T7919] hsr_slave_0: entered allmulticast mode [ 206.571855][ T7919] hsr_slave_1: entered allmulticast mode [ 206.987663][ T7925] delete_channel: no stack [ 206.993778][ T7925] delete_channel: no stack [ 207.187667][ T7934] netlink: 15534 bytes leftover after parsing attributes in process `syz.0.574'. [ 207.628137][ T7945] netlink: 16358 bytes leftover after parsing attributes in process `syz.1.576'. [ 208.009266][ T7949] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.577'. [ 208.074772][ T7949] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 208.119346][ T7949] CPU: 0 PID: 7949 Comm: syz.3.577 Not tainted syzkaller #0 [ 208.127272][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.137477][ T7949] Call Trace: [ 208.140847][ T7949] [ 208.143825][ T7949] dump_stack_lvl+0x18c/0x250 [ 208.148574][ T7949] ? show_regs_print_info+0x20/0x20 [ 208.153921][ T7949] ? load_image+0x400/0x400 [ 208.158508][ T7949] sysfs_warn_dup+0x8e/0xa0 [ 208.163095][ T7949] sysfs_do_create_link_sd+0xc0/0x110 [ 208.168524][ T7949] device_add_class_symlinks+0x1cf/0x240 [ 208.174231][ T7949] device_add+0x507/0xc20 [ 208.178639][ T7949] wiphy_register+0x1dad/0x2ae0 [ 208.183675][ T7949] ? cfg80211_event_work+0x40/0x40 [ 208.188853][ T7949] ? minstrel_ht_alloc+0x88a/0x990 [ 208.194560][ T7949] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 208.200686][ T7949] ieee80211_register_hw+0x3464/0x4250 [ 208.206240][ T7949] ? ieee80211_tasklet_handler+0x20/0x20 [ 208.211931][ T7949] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 208.217909][ T7949] ? __debug_object_init+0xec/0x450 [ 208.223219][ T7949] ? __asan_memset+0x22/0x40 [ 208.227884][ T7949] ? __hrtimer_init+0x186/0x270 [ 208.232813][ T7949] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 208.238723][ T7949] ? mac80211_hwsim_free+0x220/0x220 [ 208.244072][ T7949] ? rcu_is_watching+0x15/0xb0 [ 208.248917][ T7949] ? kstrndup+0xbd/0x140 [ 208.253274][ T7949] hwsim_new_radio_nl+0xdc9/0x1a90 [ 208.258469][ T7949] ? __nla_validate+0x50/0x50 [ 208.263323][ T7949] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 208.269391][ T7949] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 208.275778][ T7949] ? lockdep_hardirqs_on+0x98/0x150 [ 208.281040][ T7949] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 208.287266][ T7949] ? __nla_parse+0x40/0x50 [ 208.291751][ T7949] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 208.298201][ T7949] genl_family_rcv_msg_doit+0x211/0x310 [ 208.303951][ T7949] ? end_current_label_crit_section+0x170/0x170 [ 208.310280][ T7949] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 208.316276][ T7949] ? bpf_lsm_capable+0x9/0x10 [ 208.321023][ T7949] ? security_capable+0x89/0xb0 [ 208.325948][ T7949] genl_rcv_msg+0x619/0x7a0 [ 208.330525][ T7949] ? genl_bind+0x360/0x360 [ 208.335009][ T7949] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 208.341407][ T7949] ? perf_trace_preemptirq_template+0x269/0x330 [ 208.347796][ T7949] ? rcu_read_unlock_special+0xf4/0x470 [ 208.353415][ T7949] netlink_rcv_skb+0x241/0x4d0 [ 208.358254][ T7949] ? genl_bind+0x360/0x360 [ 208.362742][ T7949] ? netlink_ack+0x1180/0x1180 [ 208.367670][ T7949] ? __lock_acquire+0x7d40/0x7d40 [ 208.372786][ T7949] ? down_read+0x1ac/0x2e0 [ 208.377276][ T7949] genl_rcv+0x28/0x40 [ 208.381337][ T7949] netlink_unicast+0x751/0x8d0 [ 208.386172][ T7949] netlink_sendmsg+0x8d0/0xbf0 [ 208.391010][ T7949] ? netlink_getsockopt+0x590/0x590 [ 208.396283][ T7949] ? aa_sock_msg_perm+0x94/0x150 [ 208.401282][ T7949] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 208.406635][ T7949] ? security_socket_sendmsg+0x80/0xa0 [ 208.412167][ T7949] ? netlink_getsockopt+0x590/0x590 [ 208.417472][ T7949] ____sys_sendmsg+0x5ba/0x960 [ 208.422329][ T7949] ? __asan_memset+0x22/0x40 [ 208.427027][ T7949] ? __sys_sendmsg_sock+0x30/0x30 [ 208.432108][ T7949] ? __import_iovec+0x5f2/0x850 [ 208.437214][ T7949] ? import_iovec+0x73/0xa0 [ 208.441802][ T7949] ___sys_sendmsg+0x2a6/0x360 [ 208.446623][ T7949] ? __sys_sendmsg+0x2a0/0x2a0 [ 208.451467][ T7949] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 208.457800][ T7949] __se_sys_sendmsg+0x1c2/0x2b0 [ 208.462714][ T7949] ? __x64_sys_sendmsg+0x80/0x80 [ 208.467712][ T7949] ? lockdep_hardirqs_on+0x98/0x150 [ 208.473013][ T7949] do_syscall_64+0x55/0xa0 [ 208.477570][ T7949] ? clear_bhb_loop+0x40/0x90 [ 208.482297][ T7949] ? clear_bhb_loop+0x40/0x90 [ 208.487019][ T7949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.492955][ T7949] RIP: 0033:0x7f389279bf79 [ 208.497595][ T7949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.517277][ T7949] RSP: 002b:00007f389367f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.525757][ T7949] RAX: ffffffffffffffda RBX: 00007f3892a15fa0 RCX: 00007f389279bf79 [ 208.533869][ T7949] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 208.541889][ T7949] RBP: 00007f38928327e0 R08: 0000000000000000 R09: 0000000000000000 [ 208.549905][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.558043][ T7949] R13: 00007f3892a16038 R14: 00007f3892a15fa0 R15: 00007ffce24277a8 [ 208.566206][ T7949] [ 208.622174][ T7952] netlink: 'syz.1.578': attribute type 64 has an invalid length. [ 208.623222][ T7959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.580'. [ 208.647172][ T7960] netlink: 60 bytes leftover after parsing attributes in process `syz.2.580'. [ 208.761470][ T7959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.580'. [ 209.351000][ T7968] C: renamed from team_slave_0 (while UP) [ 210.036722][ T7968] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 210.044580][ T7968] netlink: 116 bytes leftover after parsing attributes in process `syz.2.582'. [ 210.076920][ T7968] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 210.185778][ T7967] netlink: 'syz.3.581': attribute type 4 has an invalid length. [ 211.139096][ T7992] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 212.169706][ T7983] Bluetooth: hci0: command 0x0406 tx timeout [ 212.176764][ T7983] Bluetooth: hci1: command 0x0406 tx timeout [ 212.183352][ T7983] Bluetooth: hci2: command 0x0406 tx timeout [ 212.196046][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 213.348893][ T8018] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 213.376211][ T8018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.591'. [ 213.416948][ T8018] bridge0: port 4(ipvlan1) entered blocking state [ 213.426162][ T8018] bridge0: port 4(ipvlan1) entered disabled state [ 213.467661][ T8018] ipvlan1: entered allmulticast mode [ 213.486010][ T8018] veth0_vlan: entered allmulticast mode [ 213.515904][ T8018] ipvlan1: left allmulticast mode [ 213.521282][ T8018] veth0_vlan: left allmulticast mode [ 213.547195][ T8018] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 215.277312][ T8037] netlink: 'syz.1.599': attribute type 21 has an invalid length. [ 215.285266][ T8037] netlink: 164 bytes leftover after parsing attributes in process `syz.1.599'. [ 215.677351][ T8050] netlink: 'syz.2.601': attribute type 39 has an invalid length. [ 216.180080][ T8063] netlink: 'syz.1.602': attribute type 21 has an invalid length. [ 216.577470][ T8073] netlink: 'syz.2.605': attribute type 10 has an invalid length. [ 216.656324][ T8073] macvlan0: entered allmulticast mode [ 216.712369][ T8073] veth1_vlan: entered allmulticast mode [ 216.754065][ T8073] macvlan0: entered promiscuous mode [ 216.778923][ T8073] team0: Port device macvlan0 added [ 216.808936][ T8072] netlink: 'syz.2.605': attribute type 10 has an invalid length. [ 216.843190][ T8072] veth1_vlan: left allmulticast mode [ 217.352730][ T8083] netlink: 164 bytes leftover after parsing attributes in process `syz.3.607'. [ 218.068814][ T8092] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 218.549682][ T8092] team0: Device veth1_macvtap failed to register rx_handler [ 218.820954][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.612'. [ 219.475816][ T8097] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.611'. [ 219.489365][ T8100] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.612'. [ 219.507538][ T8101] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.612'. [ 219.527264][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.2.612'. [ 219.551155][ T8104] netlink: 'syz.3.613': attribute type 19 has an invalid length. [ 219.585958][ T8104] netlink: 156 bytes leftover after parsing attributes in process `syz.3.613'. [ 220.927188][ T8120] netlink: 188 bytes leftover after parsing attributes in process `syz.3.617'. [ 221.000401][ T8123] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.617'. [ 221.351180][ T8121] syzkaller0: entered promiscuous mode [ 221.385798][ T8121] syzkaller0: entered allmulticast mode [ 225.488789][ T8144] ================================================================== [ 225.497115][ T8144] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 225.505005][ T8144] Write of size 56 at addr ffff8880766f4010 by task syz.3.622/8144 [ 225.513176][ T8144] [ 225.515738][ T8144] CPU: 0 PID: 8144 Comm: syz.3.622 Not tainted syzkaller #0 [ 225.523162][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.533371][ T8144] Call Trace: [ 225.536707][ T8144] [ 225.539701][ T8144] dump_stack_lvl+0x18c/0x250 [ 225.544463][ T8144] ? read_lock_is_recursive+0x20/0x20 [ 225.549903][ T8144] ? show_regs_print_info+0x20/0x20 [ 225.555163][ T8144] ? load_image+0x400/0x400 [ 225.560070][ T8144] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 225.566493][ T8144] ? __virt_addr_valid+0x18c/0x540 [ 225.571678][ T8144] ? __virt_addr_valid+0x469/0x540 [ 225.576887][ T8144] print_report+0xa8/0x210 [ 225.581377][ T8144] ? __bpf_get_stackid+0x6bf/0x900 [ 225.586565][ T8144] kasan_report+0x117/0x150 [ 225.591236][ T8144] ? __bpf_get_stackid+0x6bf/0x900 [ 225.594437][ T8147] netlink: 132 bytes leftover after parsing attributes in process `syz.2.624'. [ 225.596457][ T8144] kasan_check_range+0x241/0x290 [ 225.596489][ T8144] ? __bpf_get_stackid+0x6bf/0x900 [ 225.596515][ T8144] __asan_memcpy+0x40/0x70 [ 225.596544][ T8144] __bpf_get_stackid+0x6bf/0x900 [ 225.596573][ T8144] bpf_get_stackid_pe+0x343/0x410 [ 225.596603][ T8144] bpf_prog_16fa1569821187d5+0x29/0x39 [ 225.596623][ T8144] bpf_overflow_handler+0x1fc/0x510 [ 225.596652][ T8144] ? tracing_gen_ctx_irq_test+0xbc/0x140 [ 225.596681][ T8144] ? bpf_overflow_handler+0xde/0x510 [ 225.652556][ T8144] ? tp_perf_event_destroy+0x20/0x20 [ 225.657911][ T8144] ? perf_swevent_event+0x5bd/0x630 [ 225.663257][ T8144] ? __perf_event_account_interrupt+0x187/0x280 [ 225.670001][ T8144] __perf_event_overflow+0x447/0x630 [ 225.675458][ T8144] perf_swevent_event+0x324/0x630 [ 225.680766][ T8144] ? perf_tp_event+0x1450/0x1450 [ 225.686148][ T8144] ? perf_tp_event+0x132d/0x1450 [ 225.691171][ T8144] ___perf_sw_event+0x4a7/0x730 [ 225.696186][ T8144] ? ___perf_sw_event+0x199/0x730 [ 225.701275][ T8144] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 225.707759][ T8144] ? strncpy_from_user+0xff/0x2d0 [ 225.712944][ T8144] ? verify_lock_unused+0x140/0x140 [ 225.718211][ T8144] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 225.724265][ T8144] ? lock_chain_count+0x20/0x20 [ 225.729180][ T8144] __perf_sw_event+0x139/0x270 [ 225.734137][ T8144] do_user_addr_fault+0x123e/0x12c0 [ 225.739406][ T8144] ? rcu_is_watching+0x15/0xb0 [ 225.744251][ T8144] exc_page_fault+0x64/0x100 [ 225.748992][ T8144] asm_exc_page_fault+0x26/0x30 [ 225.753913][ T8144] RIP: 0010:strncpy_from_user+0xff/0x2d0 [ 225.759871][ T8144] Code: 4c 89 ee e8 33 1a 2b fd 49 83 fd 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 e4 4c 89 3c 24 49 89 de <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4c 89 fd 48 [ 225.779884][ T8144] RSP: 0018:ffffc9001887fb50 EFLAGS: 00050246 [ 225.786107][ T8144] RAX: ffffffff845bfdad RBX: ffffc9001887fc70 RCX: ffff88802c9b3c00 [ 225.794226][ T8144] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 225.802252][ T8144] RBP: ffffc9001887fd70 R08: ffff88802c9b3c00 R09: 0000000000000003 [ 225.810549][ T8144] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 225.819191][ T8144] R13: 000000000000007f R14: ffffc9001887fc70 R15: 0000000000000000 [ 225.827849][ T8144] ? strncpy_from_user+0xdd/0x2d0 [ 225.832952][ T8144] bpf_prog_load+0xcea/0x1670 [ 225.837717][ T8144] ? map_freeze+0x420/0x420 [ 225.842292][ T8144] ? __might_fault+0xaa/0x120 [ 225.847046][ T8144] ? __might_fault+0xc6/0x120 [ 225.851806][ T8144] ? __might_fault+0xaa/0x120 [ 225.856591][ T8144] ? bpf_lsm_bpf+0x9/0x10 [ 225.860990][ T8144] ? security_bpf+0x7e/0xa0 [ 225.865553][ T8144] __sys_bpf+0x5ba/0x890 [ 225.869869][ T8144] ? bpf_link_show_fdinfo+0x390/0x390 [ 225.875317][ T8144] ? lock_chain_count+0x20/0x20 [ 225.880236][ T8144] __x64_sys_bpf+0x7c/0x90 [ 225.884713][ T8144] do_syscall_64+0x55/0xa0 [ 225.889313][ T8144] ? clear_bhb_loop+0x40/0x90 [ 225.894058][ T8144] ? clear_bhb_loop+0x40/0x90 [ 225.898798][ T8144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.904841][ T8144] RIP: 0033:0x7f389279bf79 [ 225.909322][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.929078][ T8144] RSP: 002b:00007f389367f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.937648][ T8144] RAX: ffffffffffffffda RBX: 00007f3892a15fa0 RCX: 00007f389279bf79 [ 225.945797][ T8144] RDX: 0000000000000090 RSI: 0000200000000280 RDI: 0000000000000005 [ 225.953995][ T8144] RBP: 00007f38928327e0 R08: 0000000000000000 R09: 0000000000000000 [ 225.962021][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.970055][ T8144] R13: 00007f3892a16038 R14: 00007f3892a15fa0 R15: 00007ffce24277a8 [ 225.978120][ T8144] [ 225.981267][ T8144] [ 225.983761][ T8144] Allocated by task 8144: [ 225.988217][ T8144] kasan_set_track+0x4e/0x70 [ 225.992866][ T8144] __kasan_kmalloc+0x8f/0xa0 [ 225.997515][ T8144] __kmalloc_node+0xb4/0x230 [ 226.002187][ T8144] bpf_map_area_alloc+0x5e/0x110 [ 226.007537][ T8144] prealloc_elems_and_freelist+0x86/0x1c0 [ 226.013321][ T8144] stack_map_alloc+0x33a/0x4c0 [ 226.018228][ T8144] map_create+0x877/0x12f0 [ 226.022733][ T8144] __sys_bpf+0x651/0x890 [ 226.027127][ T8144] __x64_sys_bpf+0x7c/0x90 [ 226.031867][ T8144] do_syscall_64+0x55/0xa0 [ 226.036437][ T8144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.042704][ T8144] [ 226.045085][ T8144] The buggy address belongs to the object at ffff8880766f4000 [ 226.045085][ T8144] which belongs to the cache kmalloc-cg-64 of size 64 [ 226.059498][ T8144] The buggy address is located 16 bytes inside of [ 226.059498][ T8144] allocated 40-byte region [ffff8880766f4000, ffff8880766f4028) [ 226.073543][ T8144] [ 226.075910][ T8144] The buggy address belongs to the physical page: [ 226.082381][ T8144] page:ffffea0001d9bd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880766f4580 pfn:0x766f4 [ 226.093906][ T8144] memcg:ffff88807beea801 [ 226.098189][ T8144] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 226.105981][ T8144] page_type: 0xffffffff() [ 226.110391][ T8144] raw: 00fff00000000800 ffff888017c4da00 ffffea0001842800 0000000000000004 [ 226.119116][ T8144] raw: ffff8880766f4580 000000008020001b 00000001ffffffff ffff88807beea801 [ 226.128200][ T8144] page dumped because: kasan: bad access detected [ 226.134678][ T8144] page_owner tracks the page as allocated [ 226.140589][ T8144] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5778, tgid 5778 (syz-executor), ts 101572626437, free_ts 101519533570 [ 226.159613][ T8144] post_alloc_hook+0x1c1/0x200 [ 226.164501][ T8144] get_page_from_freelist+0x1951/0x19e0 [ 226.170206][ T8144] __alloc_pages+0x1f0/0x460 [ 226.174872][ T8144] alloc_slab_page+0x5d/0x160 [ 226.179961][ T8144] new_slab+0x87/0x2d0 [ 226.185409][ T8144] ___slab_alloc+0xc5d/0x12f0 [ 226.190151][ T8144] __kmem_cache_alloc_node+0x19e/0x250 [ 226.195956][ T8144] kmalloc_trace+0x2a/0xe0 [ 226.200896][ T8144] alloc_fdtable+0xca/0x2c0 [ 226.205821][ T8144] dup_fd+0x786/0xa50 [ 226.210243][ T8144] copy_files+0xc3/0x120 [ 226.214714][ T8144] copy_process+0x15ab/0x3d80 [ 226.219635][ T8144] kernel_clone+0x24b/0x8a0 [ 226.224212][ T8144] __x64_sys_clone+0x1b7/0x230 [ 226.229032][ T8144] do_syscall_64+0x55/0xa0 [ 226.233519][ T8144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.239650][ T8144] page last free stack trace: [ 226.244455][ T8144] free_unref_page_prepare+0x7b2/0x8c0 [ 226.249973][ T8144] free_unref_page_list+0xbe/0x860 [ 226.255926][ T8144] release_pages+0x1f7a/0x2200 [ 226.260780][ T8144] tlb_flush_mmu+0x377/0x510 [ 226.265616][ T8144] tlb_finish_mmu+0xc3/0x1d0 [ 226.270377][ T8144] exit_mmap+0x428/0xb90 [ 226.274853][ T8144] __mmput+0x118/0x3c0 [ 226.278955][ T8144] exit_mm+0x1f2/0x2c0 [ 226.283286][ T8144] do_exit+0x8dd/0x2460 [ 226.287487][ T8144] do_group_exit+0x21b/0x2d0 [ 226.292126][ T8144] get_signal+0x12fc/0x13f0 [ 226.296684][ T8144] arch_do_signal_or_restart+0xc2/0x800 [ 226.302371][ T8144] exit_to_user_mode_loop+0x70/0x110 [ 226.307801][ T8144] exit_to_user_mode_prepare+0xee/0x180 [ 226.313588][ T8144] syscall_exit_to_user_mode+0x1a/0x50 [ 226.319323][ T8144] do_syscall_64+0x61/0xa0 [ 226.323809][ T8144] [ 226.326249][ T8144] Memory state around the buggy address: [ 226.331943][ T8144] ffff8880766f3f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 226.340238][ T8144] ffff8880766f3f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 226.348545][ T8144] >ffff8880766f4000: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 226.356872][ T8144] ^ [ 226.362277][ T8144] ffff8880766f4080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 226.370366][ T8144] ffff8880766f4100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 226.378453][ T8144] ================================================================== [ 226.389124][ T8144] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 226.396399][ T8144] CPU: 0 PID: 8144 Comm: syz.3.622 Not tainted syzkaller #0 [ 226.403728][ T8144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.413954][ T8144] Call Trace: [ 226.417275][ T8144] [ 226.420265][ T8144] dump_stack_lvl+0x18c/0x250 [ 226.425102][ T8144] ? show_regs_print_info+0x20/0x20 [ 226.430534][ T8144] ? load_image+0x400/0x400 [ 226.435113][ T8144] panic+0x2dc/0x730 [ 226.439062][ T8144] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.445364][ T8144] ? bpf_jit_dump+0xd0/0xd0 [ 226.449924][ T8144] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 226.455871][ T8144] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 226.461916][ T8144] ? _raw_spin_unlock+0x40/0x40 [ 226.467003][ T8144] ? __bpf_get_stackid+0x6bf/0x900 [ 226.472269][ T8144] check_panic_on_warn+0x84/0xa0 [ 226.477270][ T8144] ? __bpf_get_stackid+0x6bf/0x900 [ 226.482699][ T8144] end_report+0x6f/0x130 [ 226.487010][ T8144] kasan_report+0x128/0x150 [ 226.491581][ T8144] ? __bpf_get_stackid+0x6bf/0x900 [ 226.496852][ T8144] kasan_check_range+0x241/0x290 [ 226.501851][ T8144] ? __bpf_get_stackid+0x6bf/0x900 [ 226.507029][ T8144] __asan_memcpy+0x40/0x70 [ 226.511601][ T8144] __bpf_get_stackid+0x6bf/0x900 [ 226.516609][ T8144] bpf_get_stackid_pe+0x343/0x410 [ 226.521729][ T8144] bpf_prog_16fa1569821187d5+0x29/0x39 [ 226.527435][ T8144] bpf_overflow_handler+0x1fc/0x510 [ 226.532696][ T8144] ? tracing_gen_ctx_irq_test+0xbc/0x140 [ 226.538395][ T8144] ? bpf_overflow_handler+0xde/0x510 [ 226.543738][ T8144] ? tp_perf_event_destroy+0x20/0x20 [ 226.549539][ T8144] ? perf_swevent_event+0x5bd/0x630 [ 226.554791][ T8144] ? __perf_event_account_interrupt+0x187/0x280 [ 226.561539][ T8144] __perf_event_overflow+0x447/0x630 [ 226.567063][ T8144] perf_swevent_event+0x324/0x630 [ 226.572241][ T8144] ? perf_tp_event+0x1450/0x1450 [ 226.577328][ T8144] ? perf_tp_event+0x132d/0x1450 [ 226.582717][ T8144] ___perf_sw_event+0x4a7/0x730 [ 226.587733][ T8144] ? ___perf_sw_event+0x199/0x730 [ 226.592815][ T8144] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 226.599294][ T8144] ? strncpy_from_user+0xff/0x2d0 [ 226.604743][ T8144] ? verify_lock_unused+0x140/0x140 [ 226.610160][ T8144] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 226.616218][ T8144] ? lock_chain_count+0x20/0x20 [ 226.621239][ T8144] __perf_sw_event+0x139/0x270 [ 226.626264][ T8144] do_user_addr_fault+0x123e/0x12c0 [ 226.631618][ T8144] ? rcu_is_watching+0x15/0xb0 [ 226.636570][ T8144] exc_page_fault+0x64/0x100 [ 226.641306][ T8144] asm_exc_page_fault+0x26/0x30 [ 226.646307][ T8144] RIP: 0010:strncpy_from_user+0xff/0x2d0 [ 226.652096][ T8144] Code: 4c 89 ee e8 33 1a 2b fd 49 83 fd 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 e4 4c 89 3c 24 49 89 de <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4c 89 fd 48 [ 226.671948][ T8144] RSP: 0018:ffffc9001887fb50 EFLAGS: 00050246 [ 226.678265][ T8144] RAX: ffffffff845bfdad RBX: ffffc9001887fc70 RCX: ffff88802c9b3c00 [ 226.686476][ T8144] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 226.694627][ T8144] RBP: ffffc9001887fd70 R08: ffff88802c9b3c00 R09: 0000000000000003 [ 226.702761][ T8144] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 226.710780][ T8144] R13: 000000000000007f R14: ffffc9001887fc70 R15: 0000000000000000 [ 226.718805][ T8144] ? strncpy_from_user+0xdd/0x2d0 [ 226.723892][ T8144] bpf_prog_load+0xcea/0x1670 [ 226.728633][ T8144] ? map_freeze+0x420/0x420 [ 226.733193][ T8144] ? __might_fault+0xaa/0x120 [ 226.737948][ T8144] ? __might_fault+0xc6/0x120 [ 226.742656][ T8144] ? __might_fault+0xaa/0x120 [ 226.747466][ T8144] ? bpf_lsm_bpf+0x9/0x10 [ 226.752098][ T8144] ? security_bpf+0x7e/0xa0 [ 226.756657][ T8144] __sys_bpf+0x5ba/0x890 [ 226.761037][ T8144] ? bpf_link_show_fdinfo+0x390/0x390 [ 226.766452][ T8144] ? lock_chain_count+0x20/0x20 [ 226.771339][ T8144] __x64_sys_bpf+0x7c/0x90 [ 226.775792][ T8144] do_syscall_64+0x55/0xa0 [ 226.780244][ T8144] ? clear_bhb_loop+0x40/0x90 [ 226.784956][ T8144] ? clear_bhb_loop+0x40/0x90 [ 226.789666][ T8144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.795592][ T8144] RIP: 0033:0x7f389279bf79 [ 226.800045][ T8144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.819880][ T8144] RSP: 002b:00007f389367f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.828383][ T8144] RAX: ffffffffffffffda RBX: 00007f3892a15fa0 RCX: 00007f389279bf79 [ 226.836399][ T8144] RDX: 0000000000000090 RSI: 0000200000000280 RDI: 0000000000000005 [ 226.844413][ T8144] RBP: 00007f38928327e0 R08: 0000000000000000 R09: 0000000000000000 [ 226.852431][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.860447][ T8144] R13: 00007f3892a16038 R14: 00007f3892a15fa0 R15: 00007ffce24277a8 [ 226.868564][ T8144] [ 226.872294][ T8144] Kernel Offset: disabled [ 226.876818][ T8144] Rebooting in 86400 seconds..