last executing test programs: 33.665972832s ago: executing program 2: r0 = getpid() r1 = perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400000000000000731132000000000016000000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7", @ANYRES64=r2, @ANYRESOCT=r0, @ANYRES64=r1], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) 33.573140457s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) mkdir(&(0x7f0000000380)='./file0\x00', 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6de}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='xen_mmu_flush_tlb_one_user\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0xffffffffffffff4a) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xff, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x6, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xff, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1f, 0x1, 0x7, 0x88}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000061122c00000000009500000700000000b5489443f8565fdc88e253687bcee0108695efb7ca1d7c21051407be9a97a58bbf646074c2e62bc6c02eb8af9c3d2e10b5e6cd057b9b7817057f105b360e33f79c48891fff79d89954651d827cb7e5186dd7da163bd647eed796a02b4b68c2961b1979756d00000000000000422ce392c6ff64f7819a3e145b8130ab0c84cdd59a2cc2e86cc4b35c8c2cab27eb9c751f20a479260ca8d146e35088fec1ec41b99068927ec3d3f2106b80bda88c9df011145ab44e592fb76159c53e95eca50d541ac62acbb8d8a46c85d047abf281b89aec0845de5943a4fe0b72331d762f9bda4ce0cf871a6cd49382c41b323414b7a25f153230f577485bbe4f378b8714a742429f24d5ddc016a563488ec5b9cde5ed3eaf492eef6d7767595c23"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000040500000000c40000008500000023000000670000002a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$kcm(0x10, 0x2, 0x0) 33.042773259s ago: executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2f}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x16, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x4, 0x1, 0x4, 0x3, 0x9, 0x2, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x4, 0x3, 0x5, 0xffffffffffffffe0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x73, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x8, 0x9, 0xfff}, 0x10, 0x0, r1, 0x0, &(0x7f0000000380)=[r2, r2, r2, r2], 0x0, 0x10, 0x5}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000180)='./file0\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r5, 0x2}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x7f) 32.913357045s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpu.stat\x00', 0x0, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000001340)=r1, 0x12) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1}}, r1, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="14ffec0017000b63d25a80648c2594f94ea3c92a", 0x14}], 0x1}, 0xc004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) write$cgroup_int(r0, &(0x7f0000000140)=0x8, 0x12) socket$kcm(0x29, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90224fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.self_freezing\x00', 0x80040, 0x0) 18.675040438s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpu.stat\x00', 0x0, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000001340)=r1, 0x12) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1}}, r1, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="14ffec0017000b63d25a80648c2594f94ea3c92a", 0x14}], 0x1}, 0xc004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) write$cgroup_int(r0, &(0x7f0000000140)=0x8, 0x12) socket$kcm(0x29, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90224fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.self_freezing\x00', 0x80040, 0x0) 4.367798005s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000000850000003300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000eef000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x40086602, &(0x7f0000000540)={'\x00', @dev}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_pid(r10, &(0x7f0000000340), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='cpuacct.usage_sys\x00', 0x100002, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=@raw=[@generic={0x3f, 0x9, 0x7, 0xd8, 0xcef}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0xfc, &(0x7f0000000580)=""/252, 0x41100, 0x45, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x5, 0xfffffff7, 0xab5}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r1, r0, r11], &(0x7f0000000400)=[{0x2, 0x1, 0xb, 0x9}, {0x2, 0x1, 0x9}, {0x3, 0x2, 0xa, 0xb}], 0x10, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r13, 0x0, 0x1000, 0x5d, &(0x7f0000001980)="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", &(0x7f0000000740)=""/93, 0x3ff, 0x0, 0xf2, 0xe0, &(0x7f00000007c0)="0dac63cd368b9bf10987c43068b9bec87d134d77df9e7281f786a6e9b8072deecae3af44505783df8f78ac3e3f4b5018f5a31a7a3903ecdd60cf0299d1f86c81707beaa06fc2bd8dbdb2a4f7ab21e1e0c8d80d8afe3fa217ce1185154c45de9374c17786d1e6f2fedbe4a1ff1079662f3672683a71584f4ffc0765962599c46660ade261030eeba08dac24a2ce00ccb63af447a7862f010df9b61d32402052e4ae3fd47f6f06eb3975421f5f6ad344440edae498407eb9dec4f99e1b64812642eb4aea6ce557ecb98265f82726a7bf4b246ac492813ab00d80856ec262ebf4dc03d535f26013bfb7e152db96e12063ecd90f", &(0x7f00000008c0)="fff432b61e287d177fa6245aab594b91a1a5ac46837be4712d835e4922769b39a7d3bf5281cf7df2c85e4bed49fe7a44c37bcc4ae394304d21cc9821cd0aa0270f398fc8ac00b564d03712c593ff666ce3adac5ac87971e49ffdee9700b17ae79698866b82d99e8ca839092932ef372db627bfc9949263ec2fcd08d41ca286d55ebc43003a5dbb1e19ec25213d06964aff4db1f76ea4d318491002a24f54ebb8206bb0069a9dd029b34597c42a8f4754a5457979ccab6ec695a51bf6a835bd78271580fc1766e0343579b8492da3c4a869a7c4717c565c60bf7aefa72cee2a66", 0x1, 0x0, 0xfa}, 0x50) write$cgroup_int(r12, &(0x7f0000000200), 0x43451) 4.150833881s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpu.stat\x00', 0x0, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000001340)=r1, 0x12) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1}}, r1, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="14ffec0017000b63d25a80648c2594f94ea3c92a", 0x14}], 0x1}, 0xc004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) write$cgroup_int(r0, &(0x7f0000000140)=0x8, 0x12) socket$kcm(0x29, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90224fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.self_freezing\x00', 0x80040, 0x0) 4.109409938s ago: executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002480)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e080081", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0xfffffffffff7bbfb, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x6, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x11, 0x0, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x891c, &(0x7f0000000800)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe5f, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0x58, &(0x7f0000001580)}, 0x10) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000001140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000500)="dc80bffdf3bead8c3ccc53fec9dc38333cf1a6d2435ec0ee667ebe00a7917399dfa8ab08252eafb5f678b68d8ce87f30926358374919d79f2680a2c7ac5ba55d5c3836f8e57e5a19057d8925e8bb51d974", 0x51}, {&(0x7f0000000440)="b1c9", 0x2}, {0x0}], 0x3}, 0x40001) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93d3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608024c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = getpid() perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r6, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x3, 0x56, 0x2, 0x20, 0x0, 0x81e9, 0x1, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x101}, 0x6200, 0xd7ee, 0x3, 0x3, 0x7a8, 0x5569, 0xfff7, 0x0, 0x9, 0x0, 0x4}, r6, 0xa, r5, 0x3) write$cgroup_pid(r3, &(0x7f00000001c0)=r6, 0x12) 3.086754622s ago: executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100000001}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff03142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000d24000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x4}, 0x48) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x3, &(0x7f0000000640)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xafc}, 0x90) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x4, 0x9, 0x7, 0x0, 0x6, 0x8010, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x250, 0xffffffffffffffff}, 0x4001, 0x4369, 0x800004, 0x4, 0x3, 0x81, 0x0, 0x0, 0x8001}, 0x0, 0x80000001, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000040000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000150000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x40006003) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) 2.941867493s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x9061fcc86fbbcb12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_fd}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu\t>0|&\t') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'rose0\x00', @random="0500000f0200"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b0c000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x66}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 2.361061586s ago: executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)="f40000ffffff88", 0x7}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000000000600f37538e486dd630080fc5c082c00"], 0xfdef) 2.348401618s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e0019000d000000ba8000001201", 0x2e}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b40200000000000061114c0000000000850000001c0000009500000000000000f235e55a4ea103f0afc12d72a61d9fc3aaa444cf35aabf1551c0b779382ee49b9975564988149d3ddd42c457e24cce82b8c03f1ba883840c00c17d9162ae1b7d3d78decad0ab05a9923bdc0ea7d773bf3eab6070ac6a156f8f8ec17ae925907c15f32bdb9130576dfb1e26963f7acfbffaadc040749b004d21e337319d745f9b68838e63cf851ab605662c969b8eb7e1b6a5aa70d6bacfdac391bc6193c792537bf41069d7da411001b234e1790430a92b32aa87ff50cd47e236e7038b7f4ab0e4961f3fe663cc64fc0c50a4e7e3be38c4d8c9c49548509257fb4bc5e4600d30b89cb3b22c14ce59090262c46b25efd27c"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='vnet_rx_stopped_ack\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth0_to_bridge\x00', @random="cc68f5be245d"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8913, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}}) gettid() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={r6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4a}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x14, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @generic={0x20, 0x0, 0x0, 0x0, 0xffffffff}, @generic={0x1, 0x8, 0x7, 0xfe01, 0x10000}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0165ec6fa22e8e9b9bed00", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b7030000000000008500000031000000b7000000000000009500000000000000943f147e685ef4da94361efed39f8f70289e9525cdb2e7b231379900f84707e374ae0a44f3e94989f5d9ee7abbe834503dec15e95aefd365c5ad6f1a89f6f14837879c2f45982a4beef3f094f0fdb9ef0e9f4c125e3fa6dcb4c1298b1949de7f8f9c85569fb4a862e2c2499c03c3fd03ad91c45768f38b1d23c6fd12b69286cfc94ebaf8b8eb46e14398b862ddbd521dd282de2b6852d05bf836d60fcfbd044498"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000090061143c0000000000040000000000000095006c0000000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x7}, 0x90) perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TUNGETFEATURES(r8, 0x5452, &(0x7f0000001740)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) 2.245648577s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000000000957b72fb9900010045"], 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0x7, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000000000000000000e37ec448a3423cb2f6ed172d9588083fadefc7c96775b9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f00000003c0)="2549ffe15151a639d6fdcb59594a9c274af71ebf413f57dffb8ead3c3179b023d5e1be98c13d03daef88ae", &(0x7f0000000280)=""/239}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 2.170589831s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0005007ea60864160af36514001ac00400030008000200000001000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.038603977s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x4, 0x0, 0x1}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1b41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$kcm(0x29, 0x0, 0x0) close(r1) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) 1.952746303s ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="000000000e000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.921629647s ago: executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000340)=@hci={0x1f, 0x289, 0x31}, 0x80, &(0x7f0000002540)=[{&(0x7f00000002c0)="b8b20b7f00800000000005bae32f", 0xe}], 0x1, 0x0, 0x73000000}, 0x0) 1.84198172s ago: executing program 0: perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) 1.808941184s ago: executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0x8, 0x3, 0x6, 0x7, 0xffffffc0}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x3b, &(0x7f0000000140)=""/59, 0x41000, 0x1, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x5, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x1, 0x5, 0xa, 0xb}, {0x1, 0x1, 0x9}, {0x2, 0x1, 0x2, 0x7}], 0x10, 0x4}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 1.639770924s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600628f00000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xa2, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.639253425s ago: executing program 3: socket$kcm(0x10, 0x0, 0x10) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="24000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.539661657s ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff02, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f97e24fc60070212010a740102051882c137153e370248018000f01725d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) 1.349410504s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB="3cdaed3635ce7d664101a743fdd89842599fb8b1e800d4083136c2ade7433867fa8b15ab87cf2a3349d6699332a9f668d3eef86585fbde0fb498f8a81b191922d00f5f619d19a4a6da9c609fc414c8dd28efe9d048bb82ea6873e7c7fbaf9e22a24a53048c9cbbfbd1120199af0ad61cb0ed48f07577ab97e2", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="660a0000000000006111ac0000470000001800000000000000000000000000000095000000000000006f"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x8}, {0x0}], 0x9}, 0x20001) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x18, 0x0, 0x4, 0xff, 0x0, r1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) close(r7) 999.488024ms ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open$cgroup(&(0x7f0000000500)={0x4, 0x80, 0x20, 0x1, 0x81, 0xfd, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380), 0x2}, 0x15040, 0x8, 0x101, 0x0, 0x3, 0xe6c7d5a, 0x0, 0x0, 0x8000}, r3, 0x4, r2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x7, 0x9, 0x101, 0xa18, r3, 0x8, '\x00', r4, r1, 0x0, 0x0, 0x3}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87043000000000000000160af365040014", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000003e0081064e81f782db44b9040a1d08040300000000070aa11800150006f7", 0x22}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500), 0xc) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES64=r4, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)=""/123, 0x7b}, {&(0x7f00000016c0)=""/4110, 0x100e}], 0x2}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x10001}, 0x8) recvmsg$kcm(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x0) 951.539316ms ago: executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="e039547ed387dbe9aba4793ccc69", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) 849.557368ms ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab5560000fffffff000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 626.152895ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1", 0x20}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="61a000fe0000000069108a000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff02, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f97e24fc60070212010a740100051882c137153e370248018000f01725d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000140), 0x9) 513.133014ms ago: executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000fc0000000000000000000085000000170000001801007e9f53c32500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = gettid() sendmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}], 0x20}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='tlb_flush\x00', r5}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x30, 0x36, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6, 0x7b, 0xa, 0xff00}, [@call={0x1d}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x10, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r10, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0xfffffffffffffed8, 0xbf, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x101, '\x00', r11, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x20}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8910, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) 198.172655ms ago: executing program 0: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000100)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, 0x0}, 0x90) getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000040)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0x104, 0x2000000, 0x3e, 0x0, &(0x7f0000000000)="1347856cd6ad8fa820cffd276a2be97d92b96f361286cc7e5db83e1f6e474226dbc5112371709e943601db8a70c346aaacbde838ded64c273066f7184cbb", &(0x7f0000000000), 0x0, 0x0, 0xfffffffc}, 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@initr0]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90824fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@rc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000380)=""/141, 0x8d}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/105, 0x69}, {&(0x7f0000000700)=""/89, 0x59}, {&(0x7f0000000840)=""/95, 0x5f}, {&(0x7f00000008c0)=""/170, 0xaa}, {&(0x7f00000001c0)=""/58, 0x3a}], 0xa, &(0x7f0000000a40)=""/88, 0x58}, 0x2) 0s ago: executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e0000000e008188040f80ec59acbc0413a1810141000000001fffffff0000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='cachefiles_prep_read\x00', r4}, 0x10) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x80, 0x0}, 0x4008044) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1}, 0x12100) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc7}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)={@cgroup, 0xffffffffffffffff, 0x14, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) kernel console output (not intermixed with test programs): e type 29 has an invalid length. [ 81.176616][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.254025][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.269645][ T5783] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 81.404292][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.478634][ T5626] team0: Port device team_slave_0 added [ 81.497359][ T5626] team0: Port device team_slave_1 added [ 81.898228][ T5116] Bluetooth: hci0: command tx timeout [ 81.926693][ T5633] team0: Port device team_slave_0 added [ 81.946837][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.953801][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.057116][ T5116] Bluetooth: hci2: command tx timeout [ 82.104470][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.133536][ T5633] team0: Port device team_slave_1 added [ 82.143990][ T5806] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.161738][ T5810] netlink: 40227 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.179666][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.205214][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.297970][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.363887][ T5820] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.593613][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.619139][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.677664][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.721610][ T5626] hsr_slave_0: entered promiscuous mode [ 82.743994][ T5626] hsr_slave_1: entered promiscuous mode [ 82.777745][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.791738][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.822268][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.831896][ T5835] sctp: [Deprecated]: syz-executor.1 (pid 5835) Use of int in max_burst socket option deprecated. [ 82.831896][ T5835] Use struct sctp_assoc_value instead [ 83.008982][ T5633] hsr_slave_0: entered promiscuous mode [ 83.020799][ T5633] hsr_slave_1: entered promiscuous mode [ 83.029539][ T5633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.038489][ T5633] Cannot create hsr debugfs directory [ 83.062079][ T5840] netlink: 40227 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.121581][ T2485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.225586][ T5841] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 83.251923][ T5841] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 83.295433][ T5841] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.308072][ T2485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.538878][ T2485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.779871][ T2485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.977613][ T5116] Bluetooth: hci0: command tx timeout [ 84.134846][ T5116] Bluetooth: hci2: command tx timeout [ 84.328328][ T5875] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 84.426743][ T5879] __nla_validate_parse: 1 callbacks suppressed [ 84.426764][ T5879] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.477934][ T5879] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 84.518026][ T5879] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.686167][ T5886] netlink: 'syz-executor.2': attribute type 274 has an invalid length. [ 84.720920][ T5886] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.892804][ T5886] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.914576][ T5886] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 84.949789][ T2485] bridge_slave_1: left allmulticast mode [ 84.983838][ T2485] bridge_slave_1: left promiscuous mode [ 84.997343][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.020185][ T2485] bridge_slave_0: left allmulticast mode [ 85.032608][ T2485] bridge_slave_0: left promiscuous mode [ 85.039199][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.457621][ T2485]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.497609][ T2485]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.522780][ T2485]  (unregistering): Released all slaves [ 86.370763][ T5915] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 86.441731][ T5915] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.452757][ T5915] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 86.463075][ T5915] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 86.598893][ T2485] hsr_slave_0: left promiscuous mode [ 86.614251][ T2485] hsr_slave_1: left promiscuous mode [ 86.639167][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.650266][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.700557][ T2485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.726755][ T2485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.838793][ T2485] veth1_macvtap: left promiscuous mode [ 86.844419][ T2485] veth0_macvtap: left promiscuous mode [ 86.895586][ T2485] veth1_vlan: left promiscuous mode [ 86.921031][ T2485] veth0_vlan: left promiscuous mode [ 87.902462][ T2485] team0 (unregistering): Port device team_slave_1 removed [ 87.932407][ T2485] team0 (unregistering): Port device team_slave_0 removed [ 88.248974][ T5936] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 88.675615][ T5964] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 88.740702][ T5964] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 88.782545][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.846405][ T5968] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 88.886089][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.907035][ T5968] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.956283][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.989188][ T5968] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 89.033319][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.041675][ T5968] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 89.314235][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.390459][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.439825][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.498257][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.523057][ T5984] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 89.679712][ T5990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 89.764838][ T5990] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.873435][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.990079][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.019005][ T6000] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 90.034663][ T6000] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 90.062745][ T6002] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.076580][ T5996] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.183996][ T6008] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 90.241483][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.248787][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.250093][ T6012] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.320725][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.327998][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.358236][ T6012] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 90.392120][ T6012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 90.938942][ T5115] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 91.144498][ T6025] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 91.212261][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.320880][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.406755][ T6036] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.440445][ T6036] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 91.468595][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.475788][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.522704][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.529898][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.879436][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.969514][ T6060] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 92.338388][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.557601][ T5626] veth0_vlan: entered promiscuous mode [ 92.583231][ T6091] bridge0: port 3(veth0_to_bond) entered blocking state [ 92.627250][ T6091] bridge0: port 3(veth0_to_bond) entered disabled state [ 92.665461][ T6091] veth0_to_bond: entered allmulticast mode [ 92.697861][ T6091] veth0_to_bond: entered promiscuous mode [ 92.720543][ T6091] bridge0: port 3(veth0_to_bond) entered blocking state [ 92.728353][ T6091] bridge0: port 3(veth0_to_bond) entered forwarding state [ 92.817538][ T5626] veth1_vlan: entered promiscuous mode [ 92.862702][ T6102] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.356245][ T6098] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.403359][ T5633] veth0_vlan: entered promiscuous mode [ 94.571794][ T5633] veth1_vlan: entered promiscuous mode [ 94.633974][ T5626] veth0_macvtap: entered promiscuous mode [ 94.696786][ T5626] veth1_macvtap: entered promiscuous mode [ 94.778127][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.812249][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.846165][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.870222][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.880763][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.892941][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.912667][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.941967][ T6125] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 94.969067][ T6120] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.047703][ T6120] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 95.095231][ T6120] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.230219][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.353437][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.381045][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.420671][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.451152][ T5626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.463396][ T5626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.486079][ T6142] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 95.505157][ T6142] netlink: 210876 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.518665][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.582939][ T5626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.624740][ T5626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.633494][ T5626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.664546][ T5626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.698151][ T5633] veth0_macvtap: entered promiscuous mode [ 95.758874][ T5633] veth1_macvtap: entered promiscuous mode [ 95.852737][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.873244][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.883329][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.899595][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.911415][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.930183][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.940310][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.955890][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.969762][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.092559][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.112267][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.122358][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.133617][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.152691][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.163537][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.185654][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.197144][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.208438][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.242039][ T6157] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.267547][ T5633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.295865][ T5633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.324517][ T5633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.344616][ T5633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.401920][ T6155] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.468971][ T5609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.503607][ T5609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.596697][ T6166] netlink: 105120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.637939][ T6166] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 96.645350][ T5597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.686984][ T5597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.739577][ T6166] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 96.760990][ T6166] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 96.770113][ T6166] netlink: 128512 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.798285][ T2485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.822727][ T6166] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 96.833738][ T2485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.851888][ T6166] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 96.865648][ T6166] netlink: 128384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.940641][ T6167] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 96.969901][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.977903][ T6173] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 96.988079][ T6167] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 96.992363][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.074516][ T6173] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.085660][ T6167] netlink: 190580 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.106541][ T6173] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 97.134888][ T6173] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.366271][ T5609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.681643][ T6193] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.758444][ T5609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.186326][ T5609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.581513][ T5609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.823237][ T6207] pim6reg1: entered promiscuous mode [ 98.927751][ T6241] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 98.944781][ T6241] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.969115][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.982546][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.995102][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.008299][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.021633][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.035233][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.283369][ T6235] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 100.291880][ T6239] __nla_validate_parse: 3 callbacks suppressed [ 100.291895][ T6239] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.568385][ T5609] bridge_slave_1: left allmulticast mode [ 100.574061][ T5609] bridge_slave_1: left promiscuous mode [ 100.621414][ T6255] netlink: 202920 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.629320][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.722028][ T5609] bridge_slave_0: left allmulticast mode [ 100.738317][ T5609] bridge_slave_0: left promiscuous mode [ 100.774814][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.095070][ T5126] Bluetooth: hci0: command tx timeout [ 101.326202][ T6277] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.342853][ T6277] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 101.356043][ T6277] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 101.549438][ T5609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.588616][ T5609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.621769][ T5609] bond0 (unregistering): Released all slaves [ 101.731691][ T6264] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 101.759265][ T6264] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 101.831963][ T6276] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 102.670384][ T6240] chnl_net:caif_netlink_parms(): no params data found [ 103.127627][ T6314] syz-executor.3[6314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.127771][ T6314] syz-executor.3[6314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.175433][ T5126] Bluetooth: hci0: command tx timeout [ 103.305765][ T6312] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 103.348281][ T6312] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 103.385359][ T6312] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.403676][ T6316] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 103.422320][ T6316] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.434827][ T6316] ipvlan1: entered promiscuous mode [ 103.456746][ T6316] ipvlan1: entered allmulticast mode [ 103.485235][ T6316] veth0_vlan: entered allmulticast mode [ 103.534832][ T6316] bridge0: port 3(ipvlan1) entered blocking state [ 103.542465][ T6316] bridge0: port 3(ipvlan1) entered disabled state [ 103.687020][ T6324] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 103.784106][ T6338] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.845816][ T6338] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 103.879494][ T6338] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.152560][ T5609] hsr_slave_0: left promiscuous mode [ 104.180065][ T5609] hsr_slave_1: left promiscuous mode [ 104.206919][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.244702][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.260689][ T5609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.297887][ T5609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.376187][ T5609] veth1_macvtap: left promiscuous mode [ 104.389387][ T5609] veth0_macvtap: left promiscuous mode [ 104.407444][ T5609] veth1_vlan: left promiscuous mode [ 104.422686][ T5609] veth0_vlan: left promiscuous mode [ 105.162062][ T5609] team0 (unregistering): Port device team_slave_1 removed [ 105.198758][ T5609] team0 (unregistering): Port device team_slave_0 removed [ 105.240831][ T6362] netlink: 13951 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.263349][ T5126] Bluetooth: hci0: command tx timeout [ 105.534710][ T6337] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 105.543586][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.552586][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.560331][ T6240] bridge_slave_0: entered allmulticast mode [ 105.583912][ T6240] bridge_slave_0: entered promiscuous mode [ 105.600804][ T6344] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.616783][ T6357] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 105.636789][ T6361] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 105.658255][ T6364] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 105.731860][ T6364] team0: Port device vlan0 added [ 105.758224][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.784612][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.791869][ T6240] bridge_slave_1: entered allmulticast mode [ 105.812439][ T6364] syz-executor.2 (6364) used greatest stack depth: 17856 bytes left [ 105.847442][ T6240] bridge_slave_1: entered promiscuous mode [ 105.979385][ T6374] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.099627][ T6240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.146011][ T6240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.353231][ T6240] team0: Port device team_slave_0 added [ 106.366483][ T6388] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 106.398217][ T6390] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.412607][ T6240] team0: Port device team_slave_1 added [ 106.473187][ T6388] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.495091][ T6388] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 106.503483][ T6388] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 107.011283][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.025104][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.070849][ T6405] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 107.078780][ T6240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.114688][ T6405] netlink: 154788 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.137888][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.172011][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.225206][ T6240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.335052][ T5126] Bluetooth: hci0: command tx timeout [ 107.439536][ T6420] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 107.476113][ T6420] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.612468][ T6240] hsr_slave_0: entered promiscuous mode [ 107.703553][ T6240] hsr_slave_1: entered promiscuous mode [ 108.443792][ T6448] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.457196][ T6441] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 108.488536][ T6448] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 108.516370][ T6448] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.108079][ T6461] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 109.122452][ T6461] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.221623][ T6463] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.478195][ T6476] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 109.489671][ T6476] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.101926][ T6240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.501234][ T6240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.515287][ T6510] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 110.527862][ T6510] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.590358][ T6240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.613317][ T6240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.651190][ T6513] validate_nla: 4 callbacks suppressed [ 110.651209][ T6513] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 110.948209][ T6240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.999233][ T6240] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.067349][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.074577][ T5217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.121601][ T6533] tap0: tun_chr_ioctl cmd 1074025677 [ 111.136695][ T6533] tap0: linktype set to 769 [ 111.175010][ T6532] __nla_validate_parse: 4 callbacks suppressed [ 111.175028][ T6532] netlink: 35347 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.233755][ T6526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.276021][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.283178][ T5217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.565343][ T6548] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 111.620028][ T6548] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.704657][ T6548] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 111.753413][ T6548] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 112.082668][ T6564] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 112.184969][ T6571] Â: renamed from pim6reg1 [ 112.257413][ T6240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.531139][ T6240] veth0_vlan: entered promiscuous mode [ 112.548109][ T6590] netlink: 'syz-executor.4': attribute type 274 has an invalid length. [ 112.610302][ T6590] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.678320][ T6240] veth1_vlan: entered promiscuous mode [ 112.698528][ T6590] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 112.734483][ T6590] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 112.759007][ T6240] veth0_macvtap: entered promiscuous mode [ 112.786630][ T6240] veth1_macvtap: entered promiscuous mode [ 112.808132][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.841897][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.873413][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.911625][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.954433][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.972354][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.983100][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.994151][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.013598][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.084820][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.140331][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.188335][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.216698][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.237982][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.263010][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.284506][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.296354][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.313363][ T6615] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.325115][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.333970][ T6612] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 113.346774][ T6615] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 113.356173][ T6615] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 113.382171][ T6240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.426131][ T6240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.465120][ T6240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.488184][ T6240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.724111][ T2485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.758195][ T2485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.834895][ T6629] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 113.860476][ T6629] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.962888][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.987609][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.612888][ T6669] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 114.685269][ T6669] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.756290][ T6669] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 114.783263][ T6669] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 115.014109][ T6681] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.360161][ T6698] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 115.372121][ T6698] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.745305][ T6713] netlink: 194200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.064767][ T6722] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 116.129869][ T6722] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.173329][ T6722] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 116.226272][ T6724] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 116.236769][ T6722] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 116.258521][ T6724] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.352070][ T6730] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 116.372574][ T6730] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.968315][ T6750] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.125591][ T6760] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 117.150063][ T6760] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.196004][ T6760] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 117.226198][ T6760] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 117.695926][ T6774] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.539596][ T6800] rose0: tun_chr_ioctl cmd 1074025673 [ 118.592390][ T6800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.232306][ T6824] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 119.633467][ T6838] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.595042][ T6842] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.663195][ T6842] netlink: 3064 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.032868][ T6880] netlink: 399 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.395004][ T6897] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 121.707945][ T6899] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.541576][ T6921] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 122.615583][ T6929] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.625977][ T6921] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.677724][ T6929] openvswitch: netlink: Key type 29 is not supported [ 122.687297][ T6921] team0: entered promiscuous mode [ 122.726730][ T6921] team_slave_0: entered promiscuous mode [ 122.773721][ T6921] team_slave_1: entered promiscuous mode [ 122.818828][ T6921] team0: entered allmulticast mode [ 122.846913][ T6921] team_slave_0: entered allmulticast mode [ 122.875045][ T6921] team_slave_1: entered allmulticast mode [ 122.889853][ T6921] bridge0: port 4(team0) entered blocking state [ 122.896422][ T6921] bridge0: port 4(team0) entered disabled state [ 122.906494][ T6921] bridge0: port 4(team0) entered blocking state [ 122.913881][ T6921] bridge0: port 4(team0) entered forwarding state [ 123.146504][ T6944] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.435680][ T6964] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 123.464942][ T6964] bridge0: port 3(macsec0) entered blocking state [ 123.493199][ T6964] bridge0: port 3(macsec0) entered disabled state [ 123.522712][ T6964] macsec0: entered allmulticast mode [ 123.537399][ T6964] veth1_macvtap: entered allmulticast mode [ 123.553894][ T6964] macsec0: entered promiscuous mode [ 123.575924][ T6964] bridge0: port 3(macsec0) entered blocking state [ 123.582553][ T6964] bridge0: port 3(macsec0) entered forwarding state [ 123.607848][ T6961] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 123.958149][ T6978] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 123.979837][ T6978] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.017158][ T6978] team0: entered promiscuous mode [ 124.047608][ T6978] team_slave_0: entered promiscuous mode [ 124.067465][ T6978] team_slave_1: entered promiscuous mode [ 124.095000][ T6978] team0: entered allmulticast mode [ 124.110664][ T6978] team_slave_0: entered allmulticast mode [ 124.130479][ T6978] team_slave_1: entered allmulticast mode [ 124.170686][ T6978] bridge0: port 3(team0) entered blocking state [ 124.189767][ T6978] bridge0: port 3(team0) entered disabled state [ 124.234150][ T6978] bridge0: port 3(team0) entered blocking state [ 124.240721][ T6978] bridge0: port 3(team0) entered forwarding state [ 124.320966][ T7000] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 124.345218][ T7000] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.942390][ T7027] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 124.985209][ T7027] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.035179][ T7027] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 125.086423][ T7027] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 125.157959][ T7033] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.623137][ T7051] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 125.656582][ T7051] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.691629][ T7051] ipvlan1: entered promiscuous mode [ 125.699962][ T7051] ipvlan1: entered allmulticast mode [ 125.713967][ T7051] veth0_vlan: entered allmulticast mode [ 125.746981][ T7056] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 125.762198][ T7051] bridge0: port 4(ipvlan1) entered blocking state [ 125.772204][ T7056] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.777053][ T7051] bridge0: port 4(ipvlan1) entered disabled state [ 125.843607][ T7051] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 125.916772][ T7069] syz_tun: default FDB implementation only supports local addresses [ 126.093648][ T7072] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 126.128883][ T7073] netlink: zone id is out of range [ 126.145908][ T7073] netlink: zone id is out of range [ 126.193911][ T7073] netlink: zone id is out of range [ 126.274738][ T7073] netlink: zone id is out of range [ 126.280088][ T7073] netlink: zone id is out of range [ 126.389203][ T7073] netlink: zone id is out of range [ 126.949151][ T7092] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 126.961450][ T7099] netlink: 'syz-executor.1': attribute type 274 has an invalid length. [ 127.001377][ T7099] __nla_validate_parse: 4 callbacks suppressed [ 127.001397][ T7099] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.161689][ T7092] team0: Device veth1_macvtap failed to register rx_handler [ 127.287965][ T8] bridge0: port 3(macsec0) entered disabled state [ 127.312593][ T7099] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 127.329362][ T7099] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 128.418474][ T7143] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.530151][ T7147] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.547840][ T7148] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.570497][ T7152] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 128.606029][ T7152] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 128.651712][ T7153] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 128.948138][ T7165] netlink: 129384 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.126016][ T7174] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 129.134145][ T7174] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.562754][ T7193] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 129.682469][ T7197] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 129.711480][ T7197] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.513721][ T7219] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 130.711564][ T7227] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 131.001175][ T7247] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 131.017099][ T7247] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 131.035411][ T7247] netlink: 176412 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.281648][ T7260] veth0_macvtap: left promiscuous mode [ 131.531789][ T7272] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.671473][ T7281] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.687472][ T7281] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 131.700773][ T7281] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 131.849268][ T7290] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.108161][ T29] audit: type=1804 audit(1717987623.142:2): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2173269633/syzkaller.QEa4XT/74/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 132.159879][ T29] audit: type=1800 audit(1717987623.142:3): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 132.441623][ T7317] __nla_validate_parse: 1 callbacks suppressed [ 132.441643][ T7317] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.448471][ T7315] validate_nla: 10 callbacks suppressed [ 132.448514][ T7315] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 132.482904][ T7315] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.033669][ T7350] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.048899][ T7350] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.098064][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.104586][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.111344][ T7350] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.125737][ T7350] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.207960][ T7364] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 133.227399][ T7362] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.240450][ T7364] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.254911][ T7365] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 133.285021][ T7350] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.324226][ T7350] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 133.382746][ T7368] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.597057][ T7362] netlink: 203452 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.932219][ T7391] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.986117][ T7393] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.752420][ T7426] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.883784][ T7435] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.983768][ T7439] netlink: 1010 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.005963][ T7439] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 135.130853][ T7446] net_ratelimit: 22 callbacks suppressed [ 135.130872][ T7446] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 135.190679][ T7450] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.194228][ T7446] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.211903][ T7450] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 135.240385][ T7450] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 135.407159][ T7465] syz-executor.0[7465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.407289][ T7465] syz-executor.0[7465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.293204][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.313494][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.516551][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.524508][ T7502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.534189][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.542059][ T7502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.570507][ T7502] bridge0: entered promiscuous mode [ 136.576241][ T7502] bridge0: entered allmulticast mode [ 136.735109][ T7518] veth1_macvtap: left promiscuous mode [ 136.759232][ T7518] bridge0: port 4(macsec0) entered blocking state [ 136.807376][ T7518] bridge0: port 4(macsec0) entered disabled state [ 136.814234][ T7518] macsec0: entered allmulticast mode [ 136.837148][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.846809][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.856699][ T7518] macsec0: entered promiscuous mode [ 136.862359][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.872473][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.878791][ T7529] bridge0: port 3(syz_tun) entered blocking state [ 136.899267][ T5116] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.906878][ T7529] bridge0: port 3(syz_tun) entered disabled state [ 136.913514][ T7529] syz_tun: entered allmulticast mode [ 136.919566][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.930195][ T7529] syz_tun: entered promiscuous mode [ 136.953375][ T7529] bridge0: port 3(syz_tun) entered blocking state [ 136.959965][ T7529] bridge0: port 3(syz_tun) entered forwarding state [ 137.184575][ T7543] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 137.328622][ T7527] chnl_net:caif_netlink_parms(): no params data found [ 137.512653][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.536703][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.556183][ T7527] bridge_slave_0: entered allmulticast mode [ 137.565183][ T5126] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 137.578390][ T7527] bridge_slave_0: entered promiscuous mode [ 137.622946][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.644256][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.651746][ T7527] bridge_slave_1: entered allmulticast mode [ 137.668968][ T7527] bridge_slave_1: entered promiscuous mode [ 137.754002][ T7527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.786562][ T7527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.809708][ T7568] can: request_module (can-proto-0) failed. [ 137.863116][ T7527] team0: Port device team_slave_0 added [ 137.888381][ T7527] team0: Port device team_slave_1 added [ 137.970079][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.981933][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.016708][ T7527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.028474][ T7578] validate_nla: 16 callbacks suppressed [ 138.028489][ T7578] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 138.053979][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.061536][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.087743][ T7527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.115519][ T7583] __nla_validate_parse: 5 callbacks suppressed [ 138.115537][ T7583] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.155575][ T7583] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 138.163945][ T7583] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.212975][ T7582] netlink: 209728 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.285519][ T7527] hsr_slave_0: entered promiscuous mode [ 138.307533][ T7527] hsr_slave_1: entered promiscuous mode [ 138.334414][ T7527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.342001][ T7527] Cannot create hsr debugfs directory [ 138.352601][ T7594] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.506718][ T7603] netlink: 'syz-executor.0': attribute type 274 has an invalid length. [ 138.525931][ T7603] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.576394][ T7605] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 138.582111][ T7603] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.586517][ T7605] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 138.602676][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.618408][ T7603] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 138.703870][ T7602] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 138.712699][ T7602] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 138.722325][ T7602] netlink: 11406 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.739076][ T7606] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 138.754327][ T7606] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 138.770794][ T7606] netlink: 11406 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.878132][ T7527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.938692][ T7615] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 138.977390][ T7527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.995770][ T7615] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.006193][ T7615] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 139.015072][ T5126] Bluetooth: hci1: command tx timeout [ 139.027799][ T7615] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.133836][ T7527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.148707][ T7620] FAULT_INJECTION: forcing a failure. [ 139.148707][ T7620] name failslab, interval 1, probability 0, space 0, times 0 [ 139.161847][ T7620] CPU: 0 PID: 7620 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 [ 139.172280][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 139.182332][ T7620] Call Trace: [ 139.185607][ T7620] [ 139.188551][ T7620] dump_stack_lvl+0x241/0x360 [ 139.193246][ T7620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.198444][ T7620] ? __pfx__printk+0x10/0x10 [ 139.203038][ T7620] ? __pfx___might_resched+0x10/0x10 [ 139.208321][ T7620] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 139.214311][ T7620] should_fail_ex+0x3b0/0x4e0 [ 139.218996][ T7620] ? __d_alloc+0x31/0x700 [ 139.223324][ T7620] should_failslab+0x9/0x20 [ 139.227827][ T7620] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 139.233584][ T7620] __d_alloc+0x31/0x700 [ 139.237736][ T7620] ? __down_write_common+0x162/0x200 [ 139.243036][ T7620] d_alloc+0x4b/0x190 [ 139.247024][ T7620] lookup_one_qstr_excl+0xce/0x260 [ 139.252141][ T7620] filename_create+0x297/0x540 [ 139.257002][ T7620] ? __pfx_filename_create+0x10/0x10 [ 139.262285][ T7620] ? __pfx_lock_release+0x10/0x10 [ 139.267325][ T7620] do_mkdirat+0xbd/0x3a0 [ 139.271565][ T7620] ? __might_fault+0xc6/0x120 [ 139.276254][ T7620] ? __pfx_do_mkdirat+0x10/0x10 [ 139.281110][ T7620] ? getname_flags+0x1fe/0x4f0 [ 139.285881][ T7620] __x64_sys_mkdir+0x6e/0x80 [ 139.290471][ T7620] do_syscall_64+0xf3/0x230 [ 139.294973][ T7620] ? clear_bhb_loop+0x35/0x90 [ 139.299652][ T7620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.305541][ T7620] RIP: 0033:0x7f143587cf69 [ 139.309954][ T7620] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 139.329565][ T7620] RSP: 002b:00007f14365bf0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 139.337985][ T7620] RAX: ffffffffffffffda RBX: 00007f14359b3f80 RCX: 00007f143587cf69 [ 139.345956][ T7620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 139.354009][ T7620] RBP: 00007f14365bf120 R08: 0000000000000000 R09: 0000000000000000 [ 139.361973][ T7620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.369942][ T7620] R13: 000000000000000b R14: 00007f14359b3f80 R15: 00007fffa6f747e8 [ 139.377936][ T7620] [ 139.499272][ T7527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.819703][ T7644] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 139.846985][ T7646] netlink: 153644 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.884120][ T7646] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 139.895804][ T7644] netlink: 210880 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.907491][ T7646] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.949573][ T7527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 139.993587][ T7527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 140.030198][ T7527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 140.172633][ T7527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 140.426166][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.499552][ T7527] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.577653][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.584832][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.604374][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.611558][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.712055][ T7527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.073915][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.095400][ T5126] Bluetooth: hci1: command tx timeout [ 141.251565][ T7527] veth0_vlan: entered promiscuous mode [ 141.339595][ T7527] veth1_vlan: entered promiscuous mode [ 141.434518][ T7527] veth0_macvtap: entered promiscuous mode [ 141.459747][ T7527] veth1_macvtap: entered promiscuous mode [ 141.508128][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.531157][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.562717][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.584619][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.608154][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.628077][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.647387][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.664248][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.676602][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.703119][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.719810][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.731735][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.742693][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.780060][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.792270][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.802819][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.825328][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.839574][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.850477][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.862489][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.892715][ T7527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.911905][ T7527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.922296][ T7527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.947585][ T7527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.359427][ T5586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.401666][ T7730] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 142.404700][ T5586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.415437][ T7730] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 142.490312][ T7733] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 142.502673][ T7733] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 142.547988][ T5594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.587348][ T5594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.647997][ T5123] bridge0: port 3(syz_tun) entered disabled state [ 142.672529][ T5123] syz_tun (unregistering): left allmulticast mode [ 142.689417][ T5123] syz_tun (unregistering): left promiscuous mode [ 142.703111][ T5123] bridge0: port 3(syz_tun) entered disabled state [ 142.761940][ T7741] syz-executor.0[7741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.161945][ T7756] validate_nla: 9 callbacks suppressed [ 143.161965][ T7756] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 143.174830][ T5126] Bluetooth: hci1: command tx timeout [ 143.193684][ T7756] __nla_validate_parse: 3 callbacks suppressed [ 143.193701][ T7756] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.476612][ T7763] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 143.499656][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.513635][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.522507][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.537148][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.557526][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 143.565870][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.703722][ T7773] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 143.730593][ T7773] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.836650][ T7781] FAULT_INJECTION: forcing a failure. [ 143.836650][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 143.862440][ T7784] netlink: 199828 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.925533][ T7781] CPU: 1 PID: 7781 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 [ 143.935989][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 143.946060][ T7781] Call Trace: [ 143.949340][ T7781] [ 143.952273][ T7781] dump_stack_lvl+0x241/0x360 [ 143.956956][ T7781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.962151][ T7781] ? __pfx__printk+0x10/0x10 [ 143.966734][ T7781] ? __asan_memset+0x23/0x50 [ 143.971318][ T7781] ? lockdep_init_map_type+0xa1/0x910 [ 143.976685][ T7781] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 143.982486][ T7781] should_fail_ex+0x3b0/0x4e0 [ 143.987161][ T7781] ? slab_build_skb+0x52/0x450 [ 143.991922][ T7781] should_failslab+0x9/0x20 [ 143.996422][ T7781] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 144.001797][ T7781] slab_build_skb+0x52/0x450 [ 144.006387][ T7781] bpf_prog_test_run_skb+0x3b6/0x13a0 [ 144.011752][ T7781] ? __pfx_lock_release+0x10/0x10 [ 144.016782][ T7781] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 144.022582][ T7781] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 144.028379][ T7781] bpf_prog_test_run+0x33a/0x3b0 [ 144.033315][ T7781] __sys_bpf+0x48d/0x810 [ 144.037555][ T7781] ? __pfx___sys_bpf+0x10/0x10 [ 144.042318][ T7781] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.048357][ T7781] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.054689][ T7781] ? do_syscall_64+0x100/0x230 [ 144.059462][ T7781] __x64_sys_bpf+0x7c/0x90 [ 144.063876][ T7781] do_syscall_64+0xf3/0x230 [ 144.068374][ T7781] ? clear_bhb_loop+0x35/0x90 [ 144.073048][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.078946][ T7781] RIP: 0033:0x7fed1407cf69 [ 144.083352][ T7781] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 144.102971][ T7781] RSP: 002b:00007fed14ecd0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.111377][ T7781] RAX: ffffffffffffffda RBX: 00007fed141b3f80 RCX: 00007fed1407cf69 [ 144.119342][ T7781] RDX: 0000000000000048 RSI: 00000000200002c0 RDI: 000000000000000a [ 144.127303][ T7781] RBP: 00007fed14ecd120 R08: 0000000000000000 R09: 0000000000000000 [ 144.135265][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.143226][ T7781] R13: 000000000000000b R14: 00007fed141b3f80 R15: 00007ffef34a1a88 [ 144.151199][ T7781] [ 144.224050][ T7788] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 144.291968][ T7793] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.337611][ T7793] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.390772][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.471929][ T7802] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.492833][ T7798] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.534006][ T7766] chnl_net:caif_netlink_parms(): no params data found [ 144.797535][ T7823] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 144.826911][ T7823] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.866450][ T7829] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 144.867360][ T7823] bridge0: port 3(team0) entered disabled state [ 144.883762][ T7829] netlink: 154788 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.898898][ T7823] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 144.929119][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.943615][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.965626][ T7766] bridge_slave_0: entered allmulticast mode [ 145.001748][ T7766] bridge_slave_0: entered promiscuous mode [ 145.027362][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.049198][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.063276][ T7766] bridge_slave_1: entered allmulticast mode [ 145.078701][ T7766] bridge_slave_1: entered promiscuous mode [ 145.114146][ T7842] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 145.162931][ T7766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.180264][ T7766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.256946][ T5126] Bluetooth: hci1: command tx timeout [ 145.269417][ T7766] team0: Port device team_slave_0 added [ 145.291559][ T7766] team0: Port device team_slave_1 added [ 145.406382][ T7851] wg2: entered allmulticast mode [ 145.539883][ T7766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.555787][ T7766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.590653][ T7766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.605030][ T7766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.612540][ T7766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.656076][ T5126] Bluetooth: hci4: command tx timeout [ 145.663360][ T7766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.690977][ T7867] netlink: 'syz-executor.3': attribute type 274 has an invalid length. [ 145.837504][ T7766] hsr_slave_0: entered promiscuous mode [ 145.851865][ T7766] hsr_slave_1: entered promiscuous mode [ 145.859648][ T7766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.903867][ T7766] Cannot create hsr debugfs directory [ 145.916593][ T7870] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 145.938844][ T7870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.198531][ T7881] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 146.482212][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.493032][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.506414][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.521239][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.530161][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.551323][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.587604][ T5586] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.639383][ T7766] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.673342][ T5586] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.693516][ T7894] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 146.713053][ T7894] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 146.765720][ T7766] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.802940][ T5586] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.858241][ T7766] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.910766][ T5586] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.984171][ T7766] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.199567][ T7903] mac80211_hwsim hwsim18 wlan1: left promiscuous mode [ 147.210507][ T7903] mac80211_hwsim hwsim18 wlan1: left allmulticast mode [ 147.317878][ T7909] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1877706575 (only 8 groups) [ 147.333764][ T5586] macsec0: left allmulticast mode [ 147.350606][ T5586] veth1_macvtap: left allmulticast mode [ 147.357223][ T5586] macsec0: left promiscuous mode [ 147.362828][ T5586] bridge0: port 3(macsec0) entered disabled state [ 147.372351][ T5586] bridge_slave_1: left allmulticast mode [ 147.379330][ T5586] bridge_slave_1: left promiscuous mode [ 147.385331][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.395614][ T5586] bridge_slave_0: left allmulticast mode [ 147.401403][ T5586] bridge_slave_0: left promiscuous mode [ 147.407487][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.735419][ T5126] Bluetooth: hci4: command tx timeout [ 147.891635][ T5586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.905450][ T5586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.921675][ T5586] bond0 (unregistering): Released all slaves [ 148.170391][ T7935] validate_nla: 6 callbacks suppressed [ 148.170429][ T7935] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 148.210029][ T7935] __nla_validate_parse: 7 callbacks suppressed [ 148.210065][ T7935] netlink: 212412 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.252921][ T7766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 148.282193][ T7935] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 148.422695][ T7766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 148.614951][ T5126] Bluetooth: hci2: command tx timeout [ 148.806319][ T5586] hsr_slave_0: left promiscuous mode [ 148.814020][ T5586] hsr_slave_1: left promiscuous mode [ 148.839098][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.855187][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.863368][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.871608][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.898672][ T5586] veth1_vlan: left promiscuous mode [ 148.913054][ T5586] veth0_vlan: left promiscuous mode [ 149.106401][ T29] audit: type=1804 audit(1717987640.132:4): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1670913827/syzkaller.B6jx7y/225/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 149.115056][ T7963] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 149.154578][ T7963] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.670217][ T5586] team0 (unregistering): Port device team_slave_1 removed [ 149.727489][ T5586] team0 (unregistering): Port device team_slave_0 removed [ 149.815051][ T5126] Bluetooth: hci4: command tx timeout [ 149.843343][ T7967] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 150.102055][ T7766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.112511][ T7766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.122325][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 150.216448][ T7967] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 150.283005][ T7970] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 150.292445][ T7970] hsr0: entered promiscuous mode [ 150.321742][ T7970] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.338578][ T7970] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 150.349473][ T7970] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 150.362133][ T7970] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 150.369146][ T7968] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 150.506009][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.516306][ T7984] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 150.532300][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.539630][ T7984] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.539652][ T7984] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 150.571474][ T7889] bridge_slave_0: entered allmulticast mode [ 150.581648][ T7889] bridge_slave_0: entered promiscuous mode [ 150.612893][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.622504][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.632457][ T7889] bridge_slave_1: entered allmulticast mode [ 150.641321][ T7889] bridge_slave_1: entered promiscuous mode [ 150.668903][ T7986] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 150.677856][ T7984] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 150.694899][ T5126] Bluetooth: hci2: command tx timeout [ 150.701242][ T7984] veth0_macvtap: left promiscuous mode [ 151.100879][ T7889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.144315][ T7889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.307398][ T7889] team0: Port device team_slave_0 added [ 151.349699][ T7889] team0: Port device team_slave_1 added [ 151.367608][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.377152][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 151.390633][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 151.406557][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 151.425128][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 151.432502][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.492929][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.529420][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.555698][ T7889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.575194][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.582153][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.608433][ T7889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.832267][ T8023] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.856615][ T8023] openvswitch: netlink: ufid size 3079 bytes exceeds the range (1, 16) [ 151.876894][ T8023] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 151.892287][ T7889] hsr_slave_0: entered promiscuous mode [ 151.899961][ T5116] Bluetooth: hci4: command tx timeout [ 151.907074][ T7889] hsr_slave_1: entered promiscuous mode [ 151.913935][ T7889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.921965][ T7889] Cannot create hsr debugfs directory [ 152.060296][ T8031] netlink: 199840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.128492][ T7766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.210534][ T8037] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.256357][ T8033] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.256968][ T8039] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.293549][ T8039] netlink: 8438 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.311876][ T7766] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.399666][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.406844][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.424284][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.431472][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.503297][ T8048] netlink: 191384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.507045][ T8008] chnl_net:caif_netlink_parms(): no params data found [ 152.719401][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.728412][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.736608][ T8008] bridge_slave_0: entered allmulticast mode [ 152.744710][ T8008] bridge_slave_0: entered promiscuous mode [ 152.753801][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.762473][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.769902][ T8008] bridge_slave_1: entered allmulticast mode [ 152.784687][ T5116] Bluetooth: hci2: command tx timeout [ 152.785870][ T8008] bridge_slave_1: entered promiscuous mode [ 152.851363][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.883841][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.978843][ T8008] team0: Port device team_slave_0 added [ 153.003710][ T8008] team0: Port device team_slave_1 added [ 153.118678][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.125737][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.151907][ T8008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.187587][ T7889] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.206480][ T7889] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.229001][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.240758][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.290642][ T8008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.316132][ T7889] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.329510][ T7889] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.360733][ T7766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.494669][ T5116] Bluetooth: hci5: command tx timeout [ 153.526933][ T8008] hsr_slave_0: entered promiscuous mode [ 153.533639][ T8008] hsr_slave_1: entered promiscuous mode [ 153.551488][ T8008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.559793][ T8008] Cannot create hsr debugfs directory [ 153.835701][ T8082] netlink: 173820 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.108063][ T8084] netlink: 88432 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.131570][ T7766] veth0_vlan: entered promiscuous mode [ 154.208547][ T7766] veth1_vlan: entered promiscuous mode [ 154.290070][ T8094] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.311040][ T8094] openvswitch: netlink: Key type 29 is not supported [ 154.561515][ T8008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.606651][ T8099] validate_nla: 4 callbacks suppressed [ 154.606670][ T8099] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 154.668666][ T7766] veth0_macvtap: entered promiscuous mode [ 154.725173][ T8008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.749979][ T7766] veth1_macvtap: entered promiscuous mode [ 154.781467][ T8097] syzkaller0: entered allmulticast mode [ 154.849788][ T8008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.868966][ T5116] Bluetooth: hci2: command tx timeout [ 154.891288][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.008278][ T7889] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.067684][ T8008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.096197][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.110452][ T8106] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 155.123181][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.143186][ T8108] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.144031][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.155469][ T8108] openvswitch: netlink: Key type 29 is not supported [ 155.163611][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.181275][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.192167][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.204028][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.216054][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.227320][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.237899][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.249961][ T7766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.265972][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.285252][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.292348][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.308212][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.320184][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.330781][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.342726][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.352637][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.363338][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.373467][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.383948][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.393871][ T7766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.405048][ T7766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.429374][ T7766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.472686][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.479946][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.505872][ T8111] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.544176][ T7766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.568133][ T7766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.584527][ T5116] Bluetooth: hci5: command tx timeout [ 155.604775][ T7766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.613530][ T7766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.821264][ T8008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 155.860193][ T7889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.888077][ T8008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 155.914460][ T8008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 155.950581][ T8008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 156.001892][ T8123] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 156.088760][ T2485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.125358][ T2485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.219402][ T5591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.244926][ T5591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.323115][ T7889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.522582][ T8138] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 156.557057][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.566784][ T8138] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.627712][ T8008] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.663592][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.670803][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.736749][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.744005][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.928328][ T5597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.048376][ T8158] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.094733][ T8156] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 157.103048][ T8156] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.226282][ T8162] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 157.239788][ T5597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.264835][ T8162] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.442803][ T5597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.666628][ T5116] Bluetooth: hci5: command tx timeout [ 157.681855][ T5597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.790703][ T7889] veth0_vlan: entered promiscuous mode [ 157.846309][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.855331][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.863423][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.872741][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.881699][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.889927][ T7889] veth1_vlan: entered promiscuous mode [ 157.898677][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.067617][ T8176] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 158.120086][ T8176] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 158.289220][ T5597] bridge_slave_1: left allmulticast mode [ 158.300709][ T5597] bridge_slave_1: left promiscuous mode [ 158.312146][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.326079][ T5597] bridge_slave_0: left allmulticast mode [ 158.331743][ T5597] bridge_slave_0: left promiscuous mode [ 158.338192][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.742442][ T5597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.753849][ T5597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.764535][ T5597] bond0 (unregistering): Released all slaves [ 158.787321][ T8188] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 158.836229][ T7889] veth0_macvtap: entered promiscuous mode [ 158.877810][ T7889] veth1_macvtap: entered promiscuous mode [ 158.916520][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.928339][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.938904][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.949804][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.963931][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.975194][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.985076][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.996532][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.008768][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.020002][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.029962][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.041527][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.053739][ T7889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.132071][ T8197] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 159.142505][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.154186][ T8197] __nla_validate_parse: 4 callbacks suppressed [ 159.154201][ T8197] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.170415][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.179142][ T8199] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.190646][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.190666][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.190677][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.190691][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.190708][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.190720][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.190734][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.190748][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.190761][ T7889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.190774][ T7889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.192217][ T7889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.223896][ T8199] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.317204][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.387539][ T7889] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.430621][ T7889] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.439493][ T7889] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.448593][ T7889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.486124][ T8203] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.504923][ T8203] tc_dump_action: action bad kind [ 159.512325][ T8204] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.542204][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 159.619182][ T8209] sctp: [Deprecated]: syz-executor.3 (pid 8209) Use of int in maxseg socket option. [ 159.619182][ T8209] Use struct sctp_assoc_value instead [ 159.655966][ T5597] hsr_slave_0: left promiscuous mode [ 159.678524][ T8208] validate_nla: 1 callbacks suppressed [ 159.678560][ T8208] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 159.704417][ T5597] hsr_slave_1: left promiscuous mode [ 159.715378][ T5597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.715471][ T8208] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.735807][ T5597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.740173][ T5126] Bluetooth: hci5: command tx timeout [ 159.781596][ T5597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.806357][ T5597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.844191][ T5597] veth1_macvtap: left promiscuous mode [ 159.851645][ T5597] veth0_macvtap: left promiscuous mode [ 159.859238][ T5597] veth1_vlan: left promiscuous mode [ 159.864896][ T5597] veth0_vlan: left promiscuous mode [ 159.927358][ T8217] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 159.945056][ T8217] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 159.964693][ T8217] netlink: 114168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.976015][ T5126] Bluetooth: hci3: command tx timeout [ 160.440849][ T5597] team0 (unregistering): Port device team_slave_1 removed [ 160.481681][ T5597] team0 (unregistering): Port device team_slave_0 removed [ 160.863386][ T8222] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.032364][ T8008] veth0_vlan: entered promiscuous mode [ 161.118816][ T8235] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.169469][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.185101][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.205359][ T8172] bridge_slave_0: entered allmulticast mode [ 161.220087][ T8172] bridge_slave_0: entered promiscuous mode [ 161.233826][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.253609][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.263581][ T8172] bridge_slave_1: entered allmulticast mode [ 161.280933][ T8172] bridge_slave_1: entered promiscuous mode [ 161.288706][ T8241] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.292941][ T8008] veth1_vlan: entered promiscuous mode [ 161.437612][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.485376][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.493230][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.517367][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.547056][ T8008] veth0_macvtap: entered promiscuous mode [ 161.630385][ T8008] veth1_macvtap: entered promiscuous mode [ 161.641198][ T8250] FAULT_INJECTION: forcing a failure. [ 161.641198][ T8250] name failslab, interval 1, probability 0, space 0, times 0 [ 161.654133][ T8250] CPU: 0 PID: 8250 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 [ 161.662762][ T5586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.664625][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 161.664691][ T8250] Call Trace: [ 161.664701][ T8250] [ 161.664709][ T8250] dump_stack_lvl+0x241/0x360 [ 161.664739][ T8250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.664761][ T8250] ? __pfx__printk+0x10/0x10 [ 161.664781][ T8250] ? __pfx_lock_acquire+0x10/0x10 [ 161.664803][ T8250] ? __sigqueue_alloc+0x2f/0x540 [ 161.664833][ T8250] should_fail_ex+0x3b0/0x4e0 [ 161.664860][ T8250] ? __sigqueue_alloc+0x42e/0x540 [ 161.664883][ T8250] should_failslab+0x9/0x20 [ 161.664906][ T8250] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 161.664937][ T8250] __sigqueue_alloc+0x42e/0x540 [ 161.664967][ T8250] __send_signal_locked+0x22f/0xdc0 [ 161.664993][ T8250] ? __lock_task_sighand+0x29/0x2d0 [ 161.665021][ T8250] group_send_sig_info+0x292/0x310 [ 161.665049][ T8250] ? __pfx_group_send_sig_info+0x10/0x10 [ 161.665085][ T8250] bpf_send_signal_common+0x2dd/0x430 [ 161.665109][ T8250] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 161.665140][ T8250] ? bpf_trace_run4+0x244/0x590 [ 161.665164][ T8250] bpf_send_signal_thread+0x16/0x20 [ 161.665187][ T8250] bpf_prog_7bb747c56a8bcba8+0x1d/0x25 [ 161.665206][ T8250] bpf_trace_run4+0x334/0x590 [ 161.665238][ T8250] ? __pfx_bpf_trace_run4+0x10/0x10 [ 161.665283][ T8250] ? get_mm_memcg_path+0x36c/0x600 [ 161.665304][ T8250] ? get_mm_memcg_path+0x4e6/0x600 [ 161.665329][ T8250] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 161.665351][ T8250] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 161.665374][ T8250] upgrade_mmap_lock_carefully+0x159/0x160 [ 161.665403][ T8250] lock_mm_and_find_vma+0x107/0x2f0 [ 161.665432][ T8250] exc_page_fault+0x1bf/0x8c0 [ 161.665460][ T8250] asm_exc_page_fault+0x26/0x30 [ 161.665479][ T8250] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 161.665503][ T8250] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 161.665567][ T8250] RSP: 0018:ffffc900030a76f8 EFLAGS: 00050202 [ 161.665589][ T8250] RAX: ffff88807ef5a201 RBX: 00007ff4d5260d72 RCX: 0000000000000d72 [ 161.665604][ T8250] RDX: 0000000000000001 RSI: 00007ff4d5260000 RDI: ffff88807ef5a28e [ 161.665616][ T8250] RBP: ffffc900030a7868 R08: ffff88807ef5afff R09: 1ffff1100fdeb5ff [ 161.665631][ T8250] R10: dffffc0000000000 R11: ffffed100fdeb600 R12: dffffc0000000000 [ 161.665643][ T8250] R13: 1ffff92000614ef4 R14: 0000000000000d72 R15: ffff88807ef5a28e [ 161.665675][ T8250] _copy_from_iter+0x4c0/0x1960 [ 161.665718][ T8250] ? __pfx__copy_from_iter+0x10/0x10 [ 161.665741][ T8250] ? __pfx__copy_from_iter+0x10/0x10 [ 161.665772][ T8250] ? page_copy_sane+0x154/0x260 [ 161.665796][ T8250] copy_page_from_iter+0x7a/0x100 [ 161.665822][ T8250] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 161.665859][ T8250] unix_stream_sendmsg+0x62a/0xf80 [ 161.665906][ T8250] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 161.665927][ T8250] ? iovec_from_user+0x1b0/0x240 [ 161.665956][ T8250] ? aa_sock_msg_perm+0x91/0x160 [ 161.665979][ T8250] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 161.665999][ T8250] ? security_socket_sendmsg+0x87/0xb0 [ 161.666027][ T8250] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 161.666047][ T8250] __sock_sendmsg+0x221/0x270 [ 161.666073][ T8250] ____sys_sendmsg+0x525/0x7d0 [ 161.673861][ T5586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.683919][ T8250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.683969][ T8250] __sys_sendmsg+0x2b0/0x3a0 [ 161.683991][ T8250] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.684008][ T8250] ? vfs_write+0x7c4/0xc90 [ 161.684074][ T8250] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.684097][ T8250] ? do_syscall_64+0x100/0x230 [ 162.026556][ T8250] ? do_syscall_64+0xb6/0x230 [ 162.031237][ T8250] do_syscall_64+0xf3/0x230 [ 162.035733][ T8250] ? clear_bhb_loop+0x35/0x90 [ 162.040406][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.046291][ T8250] RIP: 0033:0x7f3be3e7cf69 [ 162.050697][ T8250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 162.070299][ T8250] RSP: 002b:00007f3be4b310c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.078712][ T8250] RAX: ffffffffffffffda RBX: 00007f3be3fb3f80 RCX: 00007f3be3e7cf69 [ 162.086678][ T8250] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000005 [ 162.094640][ T8250] RBP: 00007f3be4b31120 R08: 0000000000000000 R09: 0000000000000000 [ 162.102602][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.110562][ T8250] R13: 000000000000000b R14: 00007f3be3fb3f80 R15: 00007ffee8cc02c8 [ 162.118538][ T8250] [ 162.140025][ T8172] team0: Port device team_slave_0 added [ 162.148012][ T5126] Bluetooth: hci3: command tx timeout [ 162.165524][ T8172] team0: Port device team_slave_1 added [ 162.246546][ T8252] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 162.275913][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.294158][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.342256][ T8172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.360321][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.373611][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.406115][ T8172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.433918][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.466514][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.478892][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.491558][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.501426][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.511865][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.521751][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.535281][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.545418][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.558451][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.569352][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.579978][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.597064][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.627246][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.638367][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.648428][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.662160][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.676993][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.687518][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.699829][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.710797][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.720862][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.731636][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.741849][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.752442][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.765430][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.776040][ T8268] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 162.883290][ T8008] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.913389][ T8008] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.922788][ T8274] FAULT_INJECTION: forcing a failure. [ 162.922788][ T8274] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 162.944418][ T8008] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.944837][ T8274] CPU: 0 PID: 8274 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 [ 162.953117][ T8008] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.963497][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 162.963510][ T8274] Call Trace: [ 162.963518][ T8274] [ 162.963526][ T8274] dump_stack_lvl+0x241/0x360 [ 162.963554][ T8274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.963574][ T8274] ? __pfx__printk+0x10/0x10 [ 162.963605][ T8274] should_fail_ex+0x3b0/0x4e0 [ 162.963628][ T8274] _copy_from_iter+0x43a/0x1960 [ 162.963663][ T8274] ? __pfx__copy_from_iter+0x10/0x10 [ 163.017667][ T8274] ? __pfx__copy_from_iter+0x10/0x10 [ 163.022957][ T8274] ? page_copy_sane+0x154/0x260 [ 163.027804][ T8274] copy_page_from_iter+0x7a/0x100 [ 163.032823][ T8274] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 163.038630][ T8274] unix_stream_sendmsg+0x62a/0xf80 [ 163.043749][ T8274] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 163.049378][ T8274] ? iovec_from_user+0x1b0/0x240 [ 163.054314][ T8274] ? aa_sock_msg_perm+0x91/0x160 [ 163.059251][ T8274] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 163.064524][ T8274] ? security_socket_sendmsg+0x87/0xb0 [ 163.069977][ T8274] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 163.075602][ T8274] __sock_sendmsg+0x221/0x270 [ 163.080274][ T8274] ____sys_sendmsg+0x525/0x7d0 [ 163.085035][ T8274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.090320][ T8274] __sys_sendmsg+0x2b0/0x3a0 [ 163.094905][ T8274] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.100007][ T8274] ? __hrtimer_run_queues+0xcdc/0xd50 [ 163.105414][ T8274] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 163.111584][ T8274] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.117913][ T8274] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.124248][ T8274] ? __irq_exit_rcu+0x100/0x1c0 [ 163.129102][ T8274] ? do_syscall_64+0xb6/0x230 [ 163.133781][ T8274] do_syscall_64+0xf3/0x230 [ 163.138280][ T8274] ? clear_bhb_loop+0x35/0x90 [ 163.142958][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.148844][ T8274] RIP: 0033:0x7f3be3e7cf69 [ 163.153259][ T8274] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 163.172853][ T8274] RSP: 002b:00007f3be4b310c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.181265][ T8274] RAX: ffffffffffffffda RBX: 00007f3be3fb3f80 RCX: 00007f3be3e7cf69 [ 163.189233][ T8274] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000005 [ 163.197199][ T8274] RBP: 00007f3be4b31120 R08: 0000000000000000 R09: 0000000000000000 [ 163.205165][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.213128][ T8274] R13: 000000000000000b R14: 00007f3be3fb3f80 R15: 00007ffee8cc02c8 [ 163.221110][ T8274] [ 163.256855][ T8172] hsr_slave_0: entered promiscuous mode [ 163.268601][ T8172] hsr_slave_1: entered promiscuous mode [ 163.284858][ T8172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.292435][ T8172] Cannot create hsr debugfs directory [ 163.640961][ T29] audit: type=1800 audit(1717987654.672:5): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 163.646054][ T5591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.668313][ T8287] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 163.676933][ T8287] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 163.690970][ T5591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.710551][ T8283] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 163.824629][ T29] audit: type=1804 audit(1717987654.852:6): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2044627971/syzkaller.tiKRcC/135/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 163.867871][ T5597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.881577][ T5597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.919072][ T29] audit: type=1804 audit(1717987654.952:7): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2044627971/syzkaller.tiKRcC/135/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 164.071993][ T8296] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 164.214662][ T5126] Bluetooth: hci3: command tx timeout [ 164.308229][ T8298] __nla_validate_parse: 6 callbacks suppressed [ 164.308249][ T8298] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.487139][ T8305] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 164.563805][ T8305] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 164.636548][ T8305] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 164.678828][ T8305] team0: Port device wlan1 added [ 164.689249][ T8309] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.717287][ T8312] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 164.749642][ T8312] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.919150][ T8172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.962341][ T8172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.992944][ T8172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.995006][ T8322] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 165.011687][ T8172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.035133][ T8322] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.062438][ T8324] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 165.088601][ T8324] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.138876][ T8328] netlink: 'syz-executor.1': attribute type 274 has an invalid length. [ 165.179301][ T8328] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.222043][ T8328] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.255998][ T8328] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 165.360989][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.393834][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.410282][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.417510][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.438417][ T8340] netlink: 119384 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.471809][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.479034][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.518618][ T8340] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 165.529726][ T8340] tipc: Started in network mode [ 165.546916][ T8340] tipc: Node identity a, cluster identity 4711 [ 165.553120][ T8340] tipc: Node number set to 10 [ 165.623832][ T8349] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 165.646060][ T8349] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.999384][ T8363] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.063480][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.192231][ T8366] syzkaller0: entered promiscuous mode [ 166.198973][ T8366] syzkaller0: entered allmulticast mode [ 166.238352][ T8379] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 166.275183][ T8379] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.295799][ T5126] Bluetooth: hci3: command tx timeout [ 168.396388][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.513040][ T8398] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 168.547793][ T8398] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 168.562248][ T8398] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 168.635827][ T8172] veth0_vlan: entered promiscuous mode [ 168.675356][ T8172] veth1_vlan: entered promiscuous mode [ 168.751677][ T8172] veth0_macvtap: entered promiscuous mode [ 168.762174][ T8408] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 168.773201][ T8172] veth1_macvtap: entered promiscuous mode [ 168.800338][ T8408] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 168.852026][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.889097][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.926905][ T8414] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 168.933352][ T8414] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 168.965061][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.977348][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.988262][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.998807][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.009117][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.019981][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.044442][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.056181][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.074497][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.086902][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.106350][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.148049][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.176275][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.194959][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.210615][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.221693][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.232287][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.251233][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.263753][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.280741][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.306760][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.327668][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.339947][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.357044][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.382198][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.403509][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.431226][ T8172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.440686][ T8172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.462055][ T8172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.472249][ T8172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.836527][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.876684][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.966530][ T8433] __nla_validate_parse: 4 callbacks suppressed [ 169.966573][ T8433] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.982765][ T5586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.982786][ T5586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.466464][ T29] audit: type=1804 audit(1717987661.502:8): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir323590062/syzkaller.QWBise/19/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 170.523775][ T29] audit: type=1800 audit(1717987661.502:9): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 170.814232][ T8460] validate_nla: 1 callbacks suppressed [ 170.814271][ T8460] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 170.871667][ T8458] syz-executor.1 (8458) used greatest stack depth: 17632 bytes left [ 171.082461][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.134862][ T8477] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 171.147383][ T8477] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.222758][ T8482] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 171.248076][ T8482] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 171.267086][ T8482] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.283838][ T8485] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 171.302687][ T8485] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 171.356024][ T8485] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 171.459777][ T5594] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.528652][ T8485] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 172.244482][ T8487] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 172.379932][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.395327][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.434700][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.446027][ T5594] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.464423][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.473066][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.485579][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.587814][ T8507] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 172.611141][ T8509] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.634837][ T8507] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.738399][ T8509] netlink: 203516 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.847805][ T8509] netlink: del zone limit has 8 unknown bytes [ 172.870745][ T5594] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.133114][ T5594] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.250856][ T8520] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.639190][ T5594] bridge_slave_1: left allmulticast mode [ 173.666353][ T5594] bridge_slave_1: left promiscuous mode [ 173.677514][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.711745][ T5594] bridge_slave_0: left allmulticast mode [ 173.727306][ T5594] bridge_slave_0: left promiscuous mode [ 173.741373][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.939050][ T8551] netlink: 134308 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.348418][ T5594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.360963][ T5594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.372879][ T5594] bond0 (unregistering): Released all slaves [ 174.406928][ T8551] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.450522][ T8551] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 174.521566][ T8503] chnl_net:caif_netlink_parms(): no params data found [ 174.535845][ T5116] Bluetooth: hci3: command tx timeout [ 174.554570][ T8557] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.571582][ C0] [ 175.573941][ C0] ================================ [ 175.579104][ C0] WARNING: inconsistent lock state [ 175.584209][ C0] 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 Not tainted [ 175.591318][ C0] -------------------------------- [ 175.596432][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 175.603282][ C0] syz-executor.4/8574 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 175.609954][ C0] ffff8880b9438828 (lock#10){?.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 175.620326][ C0] {HARDIRQ-ON-W} state was registered at: [ 175.626035][ C0] lock_acquire+0x1ed/0x550 [ 175.630625][ C0] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 175.637297][ C0] do_mprotect_pkey+0xdb5/0xe00 [ 175.642238][ C0] __x64_sys_mprotect+0x80/0x90 [ 175.647180][ C0] do_syscall_64+0xf3/0x230 [ 175.651768][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.657749][ C0] irq event stamp: 26 [ 175.661718][ C0] hardirqs last enabled at (25): [] do_syscall_64+0xb6/0x230 [ 175.670735][ C0] hardirqs last disabled at (26): [] sysvec_call_function_single+0xe/0xc0 [ 175.680804][ C0] softirqs last enabled at (0): [] copy_process+0xa03/0x3dc0 [ 175.689822][ C0] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 175.696925][ C0] [ 175.696925][ C0] other info that might help us debug this: [ 175.704975][ C0] Possible unsafe locking scenario: [ 175.704975][ C0] [ 175.712414][ C0] CPU0 [ 175.715687][ C0] ---- [ 175.718954][ C0] lock(lock#10); [ 175.722684][ C0] [ 175.726132][ C0] lock(lock#10); [ 175.730035][ C0] [ 175.730035][ C0] *** DEADLOCK *** [ 175.730035][ C0] [ 175.738169][ C0] 3 locks held by syz-executor.4/8574: [ 175.743615][ C0] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: __fget_files+0x29/0x470 [ 175.752773][ C0] #1: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 175.762185][ C0] #2: ffff888029d3ea18 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x237/0x9d0 [ 175.773068][ C0] [ 175.773068][ C0] stack backtrace: [ 175.778946][ C0] CPU: 0 PID: 8574 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00222-gd30d0e49da71 #0 [ 175.789348][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 175.799397][ C0] Call Trace: [ 175.802671][ C0] [ 175.805515][ C0] dump_stack_lvl+0x241/0x360 [ 175.810203][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.815409][ C0] ? print_usage_bug+0x61a/0x8a0 [ 175.820366][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 175.825659][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 175.830862][ C0] valid_state+0x13a/0x1c0 [ 175.835283][ C0] mark_lock_irq+0xbb/0xc20 [ 175.839786][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 175.844732][ C0] ? __pfx_mark_lock_irq+0x10/0x10 [ 175.849850][ C0] ? stack_trace_save+0x118/0x1d0 [ 175.854872][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 175.860072][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 175.865450][ C0] ? lockdep_lock+0x123/0x2b0 [ 175.870132][ C0] ? save_trace+0x5a/0xb40 [ 175.874563][ C0] mark_lock+0x223/0x350 [ 175.878812][ C0] __lock_acquire+0xb8e/0x1fd0 [ 175.883653][ C0] lock_acquire+0x1ed/0x550 [ 175.888155][ C0] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 175.894929][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 175.899956][ C0] ? trace_call_bpf+0xbc/0x8a0 [ 175.904753][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 175.909967][ C0] ? down_read_trylock+0x24f/0x3c0 [ 175.915078][ C0] ? stack_map_get_build_id_offset+0x237/0x9d0 [ 175.921239][ C0] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 175.927997][ C0] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 175.934581][ C0] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 175.941350][ C0] stack_map_get_build_id_offset+0x9af/0x9d0 [ 175.947339][ C0] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 175.953851][ C0] __bpf_get_stack+0x4ad/0x5a0 [ 175.958628][ C0] ? __pfx___bpf_get_stack+0x10/0x10 [ 175.963909][ C0] ? __pfx_lock_release+0x10/0x10 [ 175.968936][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 175.974136][ C0] bpf_get_stack_raw_tp+0x1a3/0x240 [ 175.979344][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 175.984197][ C0] bpf_prog_e6cf5f9c69743609+0x42/0x46 [ 175.989656][ C0] bpf_trace_run2+0x2ec/0x540 [ 175.994341][ C0] ? __hrtimer_run_queues+0xcdc/0xd50 [ 175.999722][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 176.004926][ C0] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 176.011182][ C0] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 176.017353][ C0] trace_tlb_flush+0x118/0x140 [ 176.022120][ C0] flush_tlb_func+0x4e7/0x630 [ 176.026798][ C0] ? lapic_next_event+0x11/0x20 [ 176.031658][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 176.036855][ C0] ? sched_clock_cpu+0x76/0x490 [ 176.041712][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 176.046913][ C0] __flush_smp_call_function_queue+0x3fc/0x1690 [ 176.053156][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 176.058365][ C0] __sysvec_call_function_single+0xb8/0x430 [ 176.064257][ C0] sysvec_call_function_single+0x9e/0xc0 [ 176.069888][ C0] [ 176.072812][ C0] [ 176.075741][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 176.081718][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 176.087012][ C0] Code: 2b 00 74 08 4c 89 f7 e8 2a 82 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 176.106625][ C0] RSP: 0018:ffffc9000496fcc0 EFLAGS: 00000206 [ 176.112702][ C0] RAX: 0000000000000001 RBX: 1ffff9200092dfa4 RCX: 0000000000000001 [ 176.120668][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1ff380 [ 176.128634][ C0] RBP: ffffc9000496fe20 R08: ffffffff92fab587 R09: 1ffffffff25f56b0 [ 176.136604][ C0] R10: dffffc0000000000 R11: fffffbfff25f56b1 R12: 1ffff9200092dfa0 [ 176.144571][ C0] R13: dffffc0000000000 R14: ffffc9000496fd20 R15: 0000000000000246 [ 176.152565][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.157779][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 176.162799][ C0] ? __set_current_blocked+0x310/0x380 [ 176.168260][ C0] ? __pfx___set_current_blocked+0x10/0x10 [ 176.174065][ C0] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 176.180226][ C0] __fget_files+0x49/0x470 [ 176.184639][ C0] ? __fget_files+0x29/0x470 [ 176.189221][ C0] ? __fget_files+0x29/0x470 [ 176.193821][ C0] __fdget+0x16c/0x1e0 [ 176.197892][ C0] __se_sys_ioctl+0x1f/0x170 [ 176.202481][ C0] do_syscall_64+0xf3/0x230 [ 176.206983][ C0] ? clear_bhb_loop+0x35/0x90 [ 176.211661][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.217551][ C0] RIP: 0033:0x7fef1867cccb [ 176.221966][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 176.241565][ C0] RSP: 002b:00007fef193f50f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.249985][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef1867cccb [ 176.257950][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d8 [ 176.265914][ C0] RBP: 00007fef187b3f80 R08: 0000000000000000 R09: 00007ffe7b48d5c7 [ 176.273880][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: ffffffffffffffb0 [ 176.281846][ C0] R13: 000000000000000b R14: 00007ffe7b48d4e0 R15: 00007ffe7b48d5c8 [ 176.289838][ C0] 2024/06/10 02:47:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 176.494422][ T8503] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 176.635922][ T5116] Bluetooth: hci3: command tx timeout