last executing test programs: 1m26.403896493s ago: executing program 2 (id=2784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x40000) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x43, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 1m25.227250538s ago: executing program 0 (id=777): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 1m8.741925614s ago: executing program 2 (id=2784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x40000) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x43, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 1m8.323356366s ago: executing program 0 (id=2992): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000000)=@ethernet={0x6, @link_local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="e189ddf0033ddde0146697707bc49d70296a2e08e3434a03547c0ca72d977789245d04405bcf5fcf1f325a1db781bb997abbc0b6a62d8265365ce959c344c4b7f13d206b5dea86a302741ee7ea1ab3c22c41a2cd8be12eea67d5b8e6fcc2384ec7043349aac86ee673a9b604fb00ab132b5f5089d41d9c2ea3dd0f5ac2d727ae2343606154f95fc94663d62a4c85ac9b79d6d7f0918975ed9360248fb6df778e1ab56a", 0xa3}, {&(0x7f0000000140)}, {&(0x7f0000000180)="17412776ba3a21cbc3168c1e385083b6271d465a5b5ae58368148d03fb3a83622172e9340df97d298ce87f8c8e", 0x2d}, {&(0x7f00000001c0)="bd58f320c2ff563937af83f49ce72d61b31e8ed102b01be349fa48c02152dc75850ee48689878fef126b968874460d", 0x2f}, {&(0x7f0000000300)="5163b12bd2cb9630839ce4bd0efe9ac74bf7a03590197c2980ff79d83be0369a86659537930847879ffefacd54e992bc6f6517da252b470ed935c0c040e34ada977baddef825afb2db02d89fd7900cc48c505463e6108dc8134924e307bdb03119e9142e905e0ce92c83c82ed4ce42256635f28c77900ffd0e4706aa3a3a23bf1d18028dd745c6368f34b84e794d9fcc1b7ce2a9fa6ca1c75c69d41fbc261216f034c5f6164797fd957b73118f75180aa349ff67070c27ca9fb48c8d6b806cc41f4f", 0xc2}, {&(0x7f0000000400)="64595f9a89d02a180b945a478f4ae74cbc75075b4588ab99fffb89edab73b10e14808da771e29ecc22335d6da169fad390d04696c3c301a79df2df3fa875fd30798f22a1c6a7ba07bfeaddf0c57a9ef6747e33625774d6521bdc5b3ff0a7747c1f843eaf625acebfc11989bb2fbc51baf5aaea3fa3a43c698c6253b3d3fb3dd40a0f664e889c1b704a9887cf722f50c082029fb619dfb9b43e287d3f50edc48c503f96ab5793283883c9585eb0619d53ee634c45fbe3974d07285fdde8f08b063251c6", 0xc3}], 0x6, &(0x7f0000000700)=[{0x90, 0x10a, 0x8, "1565319379ba5b51ee6b86b63530a5d53b0e6e533e97be8691dff912b36d13bd1a7be0a85dea5984382b1d06a4f41292675cb19ebd51ba31498fc786f677eef807c5bab493e999717be1bfa7cd3be56123936699e4bb753ff9248b3fcc2301ccc47e0b196dde1dcbe3645ad327db8bc596a75c64ce1446b7cfbb39399a025b"}, {0xe8, 0x107, 0xe, "12febff8c7825dfec0f0d992060f73cf7c01f0feadb3cf08334b4a883072dfa85bbde0d73503f0f2aa61f581b1ef9b46da3c5a8b2de776a6efc2cfaae18f0de9eb819d011b56b2863b9ad6eeb74e067474df857edd0979c095252fce086e1e50bef4e7f4a59b76024a3fc93781dfc397c5f4c315b74e412bfb63fd0a4f2b70bbf83140d6df2ec841346c1992ec5db3f8d60a9916b6620322b777229f7c37c3f8e226e2fe72ca04a763708cbf27c65d9252f9306ba3a1646bf8a4678bf45409ade088844f33be3d55ee6ce263e61047fc3c8976"}, {0x28, 0x102, 0x515, "c005c3394963c214878c7e6d92e4ee08a4d28ee397"}], 0x1a0}, 0x4054) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000016c0)="fb", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)='^', 0x1}], 0x1}, 0x448c0) 53.37525137s ago: executing program 2 (id=2784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x40000) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x43, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 53.102462305s ago: executing program 0 (id=2992): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000000)=@ethernet={0x6, @link_local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="e189ddf0033ddde0146697707bc49d70296a2e08e3434a03547c0ca72d977789245d04405bcf5fcf1f325a1db781bb997abbc0b6a62d8265365ce959c344c4b7f13d206b5dea86a302741ee7ea1ab3c22c41a2cd8be12eea67d5b8e6fcc2384ec7043349aac86ee673a9b604fb00ab132b5f5089d41d9c2ea3dd0f5ac2d727ae2343606154f95fc94663d62a4c85ac9b79d6d7f0918975ed9360248fb6df778e1ab56a", 0xa3}, {&(0x7f0000000140)}, {&(0x7f0000000180)="17412776ba3a21cbc3168c1e385083b6271d465a5b5ae58368148d03fb3a83622172e9340df97d298ce87f8c8e", 0x2d}, {&(0x7f00000001c0)="bd58f320c2ff563937af83f49ce72d61b31e8ed102b01be349fa48c02152dc75850ee48689878fef126b968874460d", 0x2f}, {&(0x7f0000000300)="5163b12bd2cb9630839ce4bd0efe9ac74bf7a03590197c2980ff79d83be0369a86659537930847879ffefacd54e992bc6f6517da252b470ed935c0c040e34ada977baddef825afb2db02d89fd7900cc48c505463e6108dc8134924e307bdb03119e9142e905e0ce92c83c82ed4ce42256635f28c77900ffd0e4706aa3a3a23bf1d18028dd745c6368f34b84e794d9fcc1b7ce2a9fa6ca1c75c69d41fbc261216f034c5f6164797fd957b73118f75180aa349ff67070c27ca9fb48c8d6b806cc41f4f", 0xc2}, {&(0x7f0000000400)="64595f9a89d02a180b945a478f4ae74cbc75075b4588ab99fffb89edab73b10e14808da771e29ecc22335d6da169fad390d04696c3c301a79df2df3fa875fd30798f22a1c6a7ba07bfeaddf0c57a9ef6747e33625774d6521bdc5b3ff0a7747c1f843eaf625acebfc11989bb2fbc51baf5aaea3fa3a43c698c6253b3d3fb3dd40a0f664e889c1b704a9887cf722f50c082029fb619dfb9b43e287d3f50edc48c503f96ab5793283883c9585eb0619d53ee634c45fbe3974d07285fdde8f08b063251c6", 0xc3}], 0x6, &(0x7f0000000700)=[{0x90, 0x10a, 0x8, "1565319379ba5b51ee6b86b63530a5d53b0e6e533e97be8691dff912b36d13bd1a7be0a85dea5984382b1d06a4f41292675cb19ebd51ba31498fc786f677eef807c5bab493e999717be1bfa7cd3be56123936699e4bb753ff9248b3fcc2301ccc47e0b196dde1dcbe3645ad327db8bc596a75c64ce1446b7cfbb39399a025b"}, {0xe8, 0x107, 0xe, "12febff8c7825dfec0f0d992060f73cf7c01f0feadb3cf08334b4a883072dfa85bbde0d73503f0f2aa61f581b1ef9b46da3c5a8b2de776a6efc2cfaae18f0de9eb819d011b56b2863b9ad6eeb74e067474df857edd0979c095252fce086e1e50bef4e7f4a59b76024a3fc93781dfc397c5f4c315b74e412bfb63fd0a4f2b70bbf83140d6df2ec841346c1992ec5db3f8d60a9916b6620322b777229f7c37c3f8e226e2fe72ca04a763708cbf27c65d9252f9306ba3a1646bf8a4678bf45409ade088844f33be3d55ee6ce263e61047fc3c8976"}, {0x28, 0x102, 0x515, "c005c3394963c214878c7e6d92e4ee08a4d28ee397"}], 0x1a0}, 0x4054) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000016c0)="fb", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)='^', 0x1}], 0x1}, 0x448c0) 39.140436407s ago: executing program 2 (id=2784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x40000) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec472db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc626b424da1e8c825357861aa50054686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf4d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b0100000000000000b0255f347160ac83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff7020000eea2ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072913152c845cf572cf39310d522a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8abafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e5251aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b6588f6008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda34536020000fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bf8d9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177c16810fae053349609000000000000009a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f8100257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a4d5adfb58306164cc7d870b881f8084a3d185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0a0ace879b0a0a95cd07b66fbbc73d0945beebe87a21dd46fd5804cd63c01199c78b1d774b17686fe3aeadebc4f3d2e6af1110466fecf41384f1b5c96531700db5aefa1a5c17a9ebcaf334110ed582999208cc7ef977ceb2f8a5aa7d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x43, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 38.441527207s ago: executing program 0 (id=2992): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000000)=@ethernet={0x6, @link_local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="e189ddf0033ddde0146697707bc49d70296a2e08e3434a03547c0ca72d977789245d04405bcf5fcf1f325a1db781bb997abbc0b6a62d8265365ce959c344c4b7f13d206b5dea86a302741ee7ea1ab3c22c41a2cd8be12eea67d5b8e6fcc2384ec7043349aac86ee673a9b604fb00ab132b5f5089d41d9c2ea3dd0f5ac2d727ae2343606154f95fc94663d62a4c85ac9b79d6d7f0918975ed9360248fb6df778e1ab56a", 0xa3}, {&(0x7f0000000140)}, {&(0x7f0000000180)="17412776ba3a21cbc3168c1e385083b6271d465a5b5ae58368148d03fb3a83622172e9340df97d298ce87f8c8e", 0x2d}, {&(0x7f00000001c0)="bd58f320c2ff563937af83f49ce72d61b31e8ed102b01be349fa48c02152dc75850ee48689878fef126b968874460d", 0x2f}, {&(0x7f0000000300)="5163b12bd2cb9630839ce4bd0efe9ac74bf7a03590197c2980ff79d83be0369a86659537930847879ffefacd54e992bc6f6517da252b470ed935c0c040e34ada977baddef825afb2db02d89fd7900cc48c505463e6108dc8134924e307bdb03119e9142e905e0ce92c83c82ed4ce42256635f28c77900ffd0e4706aa3a3a23bf1d18028dd745c6368f34b84e794d9fcc1b7ce2a9fa6ca1c75c69d41fbc261216f034c5f6164797fd957b73118f75180aa349ff67070c27ca9fb48c8d6b806cc41f4f", 0xc2}, {&(0x7f0000000400)="64595f9a89d02a180b945a478f4ae74cbc75075b4588ab99fffb89edab73b10e14808da771e29ecc22335d6da169fad390d04696c3c301a79df2df3fa875fd30798f22a1c6a7ba07bfeaddf0c57a9ef6747e33625774d6521bdc5b3ff0a7747c1f843eaf625acebfc11989bb2fbc51baf5aaea3fa3a43c698c6253b3d3fb3dd40a0f664e889c1b704a9887cf722f50c082029fb619dfb9b43e287d3f50edc48c503f96ab5793283883c9585eb0619d53ee634c45fbe3974d07285fdde8f08b063251c6", 0xc3}], 0x6, &(0x7f0000000700)=[{0x90, 0x10a, 0x8, "1565319379ba5b51ee6b86b63530a5d53b0e6e533e97be8691dff912b36d13bd1a7be0a85dea5984382b1d06a4f41292675cb19ebd51ba31498fc786f677eef807c5bab493e999717be1bfa7cd3be56123936699e4bb753ff9248b3fcc2301ccc47e0b196dde1dcbe3645ad327db8bc596a75c64ce1446b7cfbb39399a025b"}, {0xe8, 0x107, 0xe, "12febff8c7825dfec0f0d992060f73cf7c01f0feadb3cf08334b4a883072dfa85bbde0d73503f0f2aa61f581b1ef9b46da3c5a8b2de776a6efc2cfaae18f0de9eb819d011b56b2863b9ad6eeb74e067474df857edd0979c095252fce086e1e50bef4e7f4a59b76024a3fc93781dfc397c5f4c315b74e412bfb63fd0a4f2b70bbf83140d6df2ec841346c1992ec5db3f8d60a9916b6620322b777229f7c37c3f8e226e2fe72ca04a763708cbf27c65d9252f9306ba3a1646bf8a4678bf45409ade088844f33be3d55ee6ce263e61047fc3c8976"}, {0x28, 0x102, 0x515, "c005c3394963c214878c7e6d92e4ee08a4d28ee397"}], 0x1a0}, 0x4054) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000016c0)="fb", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)='^', 0x1}], 0x1}, 0x448c0) 19.857700845s ago: executing program 2 (id=2784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x40000) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x43, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 19.397331014s ago: executing program 0 (id=2992): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000000)=@ethernet={0x6, @link_local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="e189ddf0033ddde0146697707bc49d70296a2e08e3434a03547c0ca72d977789245d04405bcf5fcf1f325a1db781bb997abbc0b6a62d8265365ce959c344c4b7f13d206b5dea86a302741ee7ea1ab3c22c41a2cd8be12eea67d5b8e6fcc2384ec7043349aac86ee673a9b604fb00ab132b5f5089d41d9c2ea3dd0f5ac2d727ae2343606154f95fc94663d62a4c85ac9b79d6d7f0918975ed9360248fb6df778e1ab56a", 0xa3}, {&(0x7f0000000140)}, {&(0x7f0000000180)="17412776ba3a21cbc3168c1e385083b6271d465a5b5ae58368148d03fb3a83622172e9340df97d298ce87f8c8e", 0x2d}, {&(0x7f00000001c0)="bd58f320c2ff563937af83f49ce72d61b31e8ed102b01be349fa48c02152dc75850ee48689878fef126b968874460d", 0x2f}, {&(0x7f0000000300)="5163b12bd2cb9630839ce4bd0efe9ac74bf7a03590197c2980ff79d83be0369a86659537930847879ffefacd54e992bc6f6517da252b470ed935c0c040e34ada977baddef825afb2db02d89fd7900cc48c505463e6108dc8134924e307bdb03119e9142e905e0ce92c83c82ed4ce42256635f28c77900ffd0e4706aa3a3a23bf1d18028dd745c6368f34b84e794d9fcc1b7ce2a9fa6ca1c75c69d41fbc261216f034c5f6164797fd957b73118f75180aa349ff67070c27ca9fb48c8d6b806cc41f4f", 0xc2}, {&(0x7f0000000400)="64595f9a89d02a180b945a478f4ae74cbc75075b4588ab99fffb89edab73b10e14808da771e29ecc22335d6da169fad390d04696c3c301a79df2df3fa875fd30798f22a1c6a7ba07bfeaddf0c57a9ef6747e33625774d6521bdc5b3ff0a7747c1f843eaf625acebfc11989bb2fbc51baf5aaea3fa3a43c698c6253b3d3fb3dd40a0f664e889c1b704a9887cf722f50c082029fb619dfb9b43e287d3f50edc48c503f96ab5793283883c9585eb0619d53ee634c45fbe3974d07285fdde8f08b063251c6", 0xc3}], 0x6, &(0x7f0000000700)=[{0x90, 0x10a, 0x8, "1565319379ba5b51ee6b86b63530a5d53b0e6e533e97be8691dff912b36d13bd1a7be0a85dea5984382b1d06a4f41292675cb19ebd51ba31498fc786f677eef807c5bab493e999717be1bfa7cd3be56123936699e4bb753ff9248b3fcc2301ccc47e0b196dde1dcbe3645ad327db8bc596a75c64ce1446b7cfbb39399a025b"}, {0xe8, 0x107, 0xe, "12febff8c7825dfec0f0d992060f73cf7c01f0feadb3cf08334b4a883072dfa85bbde0d73503f0f2aa61f581b1ef9b46da3c5a8b2de776a6efc2cfaae18f0de9eb819d011b56b2863b9ad6eeb74e067474df857edd0979c095252fce086e1e50bef4e7f4a59b76024a3fc93781dfc397c5f4c315b74e412bfb63fd0a4f2b70bbf83140d6df2ec841346c1992ec5db3f8d60a9916b6620322b777229f7c37c3f8e226e2fe72ca04a763708cbf27c65d9252f9306ba3a1646bf8a4678bf45409ade088844f33be3d55ee6ce263e61047fc3c8976"}, {0x28, 0x102, 0x515, "c005c3394963c214878c7e6d92e4ee08a4d28ee397"}], 0x1a0}, 0x4054) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000016c0)="fb", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)='^', 0x1}], 0x1}, 0x448c0) 4.682980359s ago: executing program 2 (id=2784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='tlb_flush\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x40000) sendmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x43, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 3.416926559s ago: executing program 0 (id=2992): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000000)=@ethernet={0x6, @link_local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="e189ddf0033ddde0146697707bc49d70296a2e08e3434a03547c0ca72d977789245d04405bcf5fcf1f325a1db781bb997abbc0b6a62d8265365ce959c344c4b7f13d206b5dea86a302741ee7ea1ab3c22c41a2cd8be12eea67d5b8e6fcc2384ec7043349aac86ee673a9b604fb00ab132b5f5089d41d9c2ea3dd0f5ac2d727ae2343606154f95fc94663d62a4c85ac9b79d6d7f0918975ed9360248fb6df778e1ab56a", 0xa3}, {&(0x7f0000000140)}, {&(0x7f0000000180)="17412776ba3a21cbc3168c1e385083b6271d465a5b5ae58368148d03fb3a83622172e9340df97d298ce87f8c8e", 0x2d}, {&(0x7f00000001c0)="bd58f320c2ff563937af83f49ce72d61b31e8ed102b01be349fa48c02152dc75850ee48689878fef126b968874460d", 0x2f}, {&(0x7f0000000300)="5163b12bd2cb9630839ce4bd0efe9ac74bf7a03590197c2980ff79d83be0369a86659537930847879ffefacd54e992bc6f6517da252b470ed935c0c040e34ada977baddef825afb2db02d89fd7900cc48c505463e6108dc8134924e307bdb03119e9142e905e0ce92c83c82ed4ce42256635f28c77900ffd0e4706aa3a3a23bf1d18028dd745c6368f34b84e794d9fcc1b7ce2a9fa6ca1c75c69d41fbc261216f034c5f6164797fd957b73118f75180aa349ff67070c27ca9fb48c8d6b806cc41f4f", 0xc2}, {&(0x7f0000000400)="64595f9a89d02a180b945a478f4ae74cbc75075b4588ab99fffb89edab73b10e14808da771e29ecc22335d6da169fad390d04696c3c301a79df2df3fa875fd30798f22a1c6a7ba07bfeaddf0c57a9ef6747e33625774d6521bdc5b3ff0a7747c1f843eaf625acebfc11989bb2fbc51baf5aaea3fa3a43c698c6253b3d3fb3dd40a0f664e889c1b704a9887cf722f50c082029fb619dfb9b43e287d3f50edc48c503f96ab5793283883c9585eb0619d53ee634c45fbe3974d07285fdde8f08b063251c6", 0xc3}], 0x6, &(0x7f0000000700)=[{0x90, 0x10a, 0x8, "1565319379ba5b51ee6b86b63530a5d53b0e6e533e97be8691dff912b36d13bd1a7be0a85dea5984382b1d06a4f41292675cb19ebd51ba31498fc786f677eef807c5bab493e999717be1bfa7cd3be56123936699e4bb753ff9248b3fcc2301ccc47e0b196dde1dcbe3645ad327db8bc596a75c64ce1446b7cfbb39399a025b"}, {0xe8, 0x107, 0xe, "12febff8c7825dfec0f0d992060f73cf7c01f0feadb3cf08334b4a883072dfa85bbde0d73503f0f2aa61f581b1ef9b46da3c5a8b2de776a6efc2cfaae18f0de9eb819d011b56b2863b9ad6eeb74e067474df857edd0979c095252fce086e1e50bef4e7f4a59b76024a3fc93781dfc397c5f4c315b74e412bfb63fd0a4f2b70bbf83140d6df2ec841346c1992ec5db3f8d60a9916b6620322b777229f7c37c3f8e226e2fe72ca04a763708cbf27c65d9252f9306ba3a1646bf8a4678bf45409ade088844f33be3d55ee6ce263e61047fc3c8976"}, {0x28, 0x102, 0x515, "c005c3394963c214878c7e6d92e4ee08a4d28ee397"}], 0x1a0}, 0x4054) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f00000016c0)="fb", 0x1}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)='^', 0x1}], 0x1}, 0x448c0) 2.138882104s ago: executing program 3 (id=3732): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="b2", 0x34000}], 0x4}, 0x0) 2.031643617s ago: executing program 3 (id=3733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x6a, 0x1}, 0x48) (async, rerun: 32) r1 = socket$kcm(0xa, 0x2, 0x3a) (rerun: 32) recvmsg(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000001380)=ANY=[@ANYRESDEC, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES16=r0, @ANYRESDEC=r0], &(0x7f00000011c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) socket$kcm(0x11, 0x7, 0x300) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0xad8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0xba, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a906d2e6ee89e2803ad47e24dfe1c2474d08285f8b3c199e3c1c4f300a371310000000000000000000000000000000000382358fcd90209d3513da7aefc4e3f350ae2d4618c9d545d7ef22d1b1a77e3e160c7c16db34fe5c9a59ec7b48dddf5177f23339654a5545a1529386307e4b7083e552e0ffa7f297a0987a1fb8024f134b5bb0fdb77640d08d276a465e3903ba3a698bfee229f5d41960bf2ab0ca4139185", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x18, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 64) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x40, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc00e, 0x0, @perf_config_ext={0x950, 0x3ff}, 0x0, 0x9, 0x8, 0x0, 0x0, 0xb1ea, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xc, r3, 0x2) (async, rerun: 64) r4 = socket$kcm(0xa, 0x5, 0x0) (rerun: 64) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x4}}, &(0x7f00000005c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00'}, 0x80) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89ff, &(0x7f0000000080)) (async) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="2005010000cad7c99bf9e2091f040000004f35bc71da00"/33], 0x38}, 0x0) (async) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000980)=ANY=[@ANYBLOB='JUet_cls +io +freezer +cpuacc> '], 0x1f) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) socket$kcm(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000008d00000000004b64ffec850000007d000000040000000500000895"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x35}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.942521963s ago: executing program 3 (id=3734): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x126, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRESOCT=r3, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2}, 0x90) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb9041c1d0800f6007c05e8fe55a108000100ff0016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e665725cfa693c53fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d4ee6ccd40dd6e4edef3d93452a92954b43370ed7778b10136e8eb585", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1da3, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb790700112bf37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) 1.563369392s ago: executing program 4 (id=3737): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socket$kcm(0x11, 0xa, 0x300) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x7, 0x5}, 0x48) (async, rerun: 32) socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x7, 0x3, 0x14}, 0x48) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4b}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) (async) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000380)=0x7fff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x80000004, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000000000e0400000000000000000000000000000d00000000060000000000000f0400000000000000000000020300000000005f615f"], 0x0, 0x58, 0x0, 0x4}, 0x20) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) 1.530100157s ago: executing program 3 (id=3738): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602120000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="18040000000000000000000000000000180000000000000000000000000000003c4401000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x58}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 1.42947904s ago: executing program 1 (id=3739): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0xe}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1c, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5, 0x9, 0x5, 0x7f, 0x401}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @alu={0xa4282a09e875094, 0x1, 0xb, 0x67381f1a2a6a319b, 0x7, 0x2, 0x10}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0xbc4, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000003c0)=[{0x4, 0x1, 0x2, 0x2}, {0x5, 0x2, 0x0, 0x2}, {0x1, 0x1, 0xe, 0x9}], 0x10, 0x400}, 0x90) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x5, 0x0, 0xfea5) 1.350951802s ago: executing program 1 (id=3740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="cadbe9bdc8271ff2c10000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x50) 1.337502065s ago: executing program 4 (id=3741): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x71, 0x0, 0x0) 1.25967336s ago: executing program 3 (id=3742): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b7541, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa, 0x1, 0x0, 0x0, 0x0, 0x5ac, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0xb7, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x9, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) close(r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000009}, 0x90) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x2, &(0x7f0000000000), 0x4) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) 1.208770593s ago: executing program 1 (id=3743): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.events.local\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180800", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7090000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfc00}, 0x80, 0x0}, 0x240528b8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x800}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x919}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 1.165071405s ago: executing program 4 (id=3744): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x11, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000580)=""/101, 0x65}, 0x2043) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) 983.384905ms ago: executing program 4 (id=3745): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000005000000000000000000f06c7000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xb, &(0x7f0000000080)=""/11}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000001800)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095eb4b7167d7572cd10857cfc0bbff800356be2adb97023b4e66b4904ea6b2b9fdfc636266d0678eb0fdff0a265c80085024906615b2b9a6ef422d3fc7b223916b8201096c0e946f27bd049887aac901610c597a1c8c3e48238fbb94b4af1186e97ecfbdf975870dcf171eb5ba56df09e563567a4a63fe4f0afb86d81ce375e1c58c72a61d163151415f27e6ac4c4836e91a451829c961b6a5e783b2ee4150a3c156fd0d6416eb23808890080f9f4297f69319e589901bd4b7617226398901e16e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000800)='='}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x11, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xff01, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002ac0)='cpuacct.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0c0583b, &(0x7f0000000040)) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a80), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x202f, 0xf0, 0x7, 0x0, 0xffffffffffffffff, 0x25f0000}, 0x48) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x8, &(0x7f00000000c0), 0xd8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000200), 0xcf4, r5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000780)="f6", 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x0, &(0x7f0000001900), &(0x7f00000017c0)='syzkaller\x00', 0x2, 0x0, &(0x7f0000001980), 0x41000, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000019c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001a00)={0x2, 0xf, 0x6d562a4, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[r4, r2, r2, r5, r2, r3, r3]}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x7, &(0x7f0000002b00)=ANY=[@ANYBLOB="8500"/12, @ANYRES32=r2, @ANYBLOB="0000000000000100850000002a0000009500000000000000181d0000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000002b40)='syzkaller\x00', 0x2, 0x4, &(0x7f0000002b80)=""/4, 0x41100, 0x14, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000002bc0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002c00)={0x3, 0x0, 0x4, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002c40)=[0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r1, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r7}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000800)='='}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r0, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001340), &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001400)=[{}], 0x8, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xf46, 0x40e42, 0x1, 0x1, 0xffffffffffffffff, 0x81, '\x00', r9, r10, 0x0, 0x3, 0x2, 0x5}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r12, &(0x7f0000000c40)={&(0x7f00000000c0)=@phonet={0x23, 0x50, 0x6, 0x79}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000140)="691dd823ab1803ce1c732d91ffde21363f0168a620c5041cf9392af5ab5d2e3f4916c351c034546a381494cda463f62a30093392ba9410cdd8855b56f4a7ecb0f3f9f37b83932cef7b9f9328e89e722f3fb461f534e478ef69c0fc2313ea86b783c41c26878da02dcc9c454ca047bb631039a94c719cc6af2b3c79749501eba260da634e6a217544fbbb47cd58fb7d64f2e2ef6dbd2e8b8adac5dcfd3a7b2981d9954fa35149b4088c020af2fbc088779af21a14b6ff9056f84402b88d767cc5be73fb956ab09617a8f028c3b328e40747df0ea704ab5042cf9c08992436701609e8030d7213c202cda8cca079f5", 0xee}, {&(0x7f00000003c0)="9e13dd3a67cde4b2cfaac442e593cf51867caec12a29f5218b7005208fdf70847fc1d1f9209bc2a6b0bd46ba5cdd97651b1a6d878b45b5eaa9f4073d2b6afbbc7e898b939671196568cb9eb258f7b4e8e8510de443671800173988b5bf52f47f3b4261d986c54884f611205131433ff0a4b6d34f2b9ea601253e1bf2adff3b7af3b6235fe1d4162a766343f0ad3f871d5cf4e12d40972ca9f25db99dc61f655ef9f8755ce5c08bfdc86cfbb93f3fd628f6d3aae1a3d6c5720ae6a3add002592bd89cf784376d5e6c09fe4771c5ee75c3b086d869ad", 0xd5}, {&(0x7f0000000280)="cff1b90419f90f4f557a7acdc0f62b507180205fb5fb074690426fd26b7cb6fb717286e36f985022c38a45319f6dafa454a397c1d46a73a949b9778bc761d9e896ecf7c9c8f1774bbd9c46a9e8066d5c860377d03fcebf62c0b0aa28efe3e64d1671fc5240f56349dfba76da", 0x6c}, {&(0x7f00000004c0)="1f0b0475e46a0172a8da125418d695777fecfd947250af76e1950d618445ed31592c5e296342adbc12575eed79dc54e2bbb28811ff73678341594ad799534798df2b1aea7820ec49523d457758b44b0d2abe4408a7e7d76f9150eeae753d0d70b1044852608976135f52747b0989d43b2a91f1549a2c6e7f8a8aec088e5a933f866e2efa8e3388851d48fe2485246439fbb1559e8f2c29ffae6dfdf874305da7a0e54487baf0bc5aeab2a4e49c4304f1e7983ed91cdd19eeea35fd009e5df6567bd86fad010df171e67266db8fe5a8fab1ae469f57494b0566c35e6f771b1d5a1dea4e7a6e", 0xe5}, {&(0x7f00000005c0)="eb465306f73f00af5e844ab69fb546159e7068b5557832b28356af9632c356fe4b4dec2c899cadb88debab7d6a65add710bcb74dbce5bb484629b14079061f00fc5e43ce8cad3b0ebdc9327eb943b2313bd329570e149ffb9378f9436ddc0acd9e5bc7d263df093241d4325815e21ba9c7dbc9d80ec9cdb076f65df6609e9cbf57e25ed3f2dd550e87ea8cfe11b37ef64ea1b34d01cfd259323cb24285de6b5e23415d3b332c009465c58a20a78e6f", 0xaf}, {&(0x7f0000000680)="6b5e05593a8eb05ef5464bceb3465ca24f2a380c5c0699fe9ee24dd9561b53e22701c95ccf01ba5394f8185cb342e4bddfdfa475236861627c1c7d04671c49836aeb12fc431403aff5b76546be0fb5ed9cc81df37f8a2a0fa353946855dd0565c020c7ed6b5120dea5aa6c9abc8ca6e1e03b20d22e2d24f5dd9205cb1479c2d5921eccf74b510d31836d52d5d95621c93443141ebfa3de33217b096b7e6abd99a5edb7931a9795c04002be880214f2ec7d5146f1fbed1105754b83633f54ac58d1a17d4ec4283d454916c31755c484da30e2afa3", 0xd4}, {&(0x7f0000000780)="748ad0460f147e556544e219e00eaf3ae614f040be6f904eac8f2d2a56b28e0bba4db1b5ed61acb86e18f78e7bc5e0c07faf034193d7c140be4cc4125166654df4669d2d233e44974b51c568467c0d0ae250ff6cc4edb56dc75d308b9e97f993aba82e2486db3eccd0c66d3a37b5aad68f5c0b500589856448a7ef0f77353fc6584e84e48e466c7db3e611f87a9a206f6e965d4451c23f90aa4a5d64cb", 0x9d}, {&(0x7f0000000840)="5eb8c1878588a6c2a4e17f991728aa0693a3de9ff63cfaeb29b0220374f1fdff53d0dbb69eda3f1a7f39ab5f3278dc8d2dae8fc1971b6ab1109f9d2db842781ce077e0b7049ea1855ba1d3c978a47e43c09ba80fd9628ba199855b3e2a075214e9c3b47c70ef65803c28edc76aeb88764fb404d6660f11dd9833d18f54efcb786c65cd33f3f0ab6477049d42c951460604febb8dc0ba00087f407bd797ae06b4f3d8c5e55d3d9f9d0a975a8ee002dd5caaebc73cc9e29627f61e44a2be5404f897e061b2ebba3b5721155f005df7c93645ed2e0c90e5fe7f2a0bf99a3acc1a6f61b00399bf080359d0", 0xe9}], 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], 0x258}, 0x20000010) 766.027348ms ago: executing program 4 (id=3746): perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id, 0x80, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00', 0x2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4) socket$kcm(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x34, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 405.85447ms ago: executing program 4 (id=3747): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0xfc, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="b2", 0x34000}], 0x4}, 0x0) 347.708554ms ago: executing program 3 (id=3748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x2}, 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a2", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b03000000d86e6c1d0002847ea622fb3e1e9681822be3f58e8744dacff32c6e020075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 241.436325ms ago: executing program 1 (id=3749): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x126, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x5, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRESOCT=r3, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2}, 0x90) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb9041c1d0800f6007c05e8fe55a108000100ff0016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e665725cfa693c53fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d4ee6ccd40dd6e4edef3d93452a92954b43370ed7778b10136e8eb585", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1da3, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb790700112df37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) 104.915214ms ago: executing program 1 (id=3750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) 0s ago: executing program 1 (id=3751): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000000)="b9ff06", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000b00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x1d, 0x0, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r2 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40000000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc000b7300db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r2, 0x0, 0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xa, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@alu={0x7, 0x0, 0x2, 0x7, 0xb, 0x6, 0xfffffffffffffff0}, @ringbuf_query, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}]}, &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x7d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x4, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000740)=[{0x3, 0x3, 0xa, 0x8}, {0x1, 0x2, 0xc, 0x7}], 0x10, 0x6}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@ifindex, 0x33, 0x0, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@ifindex=r6, r0, 0x8, 0x16, r0, @prog_fd=r7, r8}, 0x20) kernel console output (not intermixed with test programs): exists on: batadv_slave_1 [ 382.367281][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.377401][T14555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.395604][T14555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.419248][T14555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.429332][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'. [ 382.463774][T14618] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.483435][T14618] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.496220][T14618] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.505236][T14618] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.536377][T14555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.547757][T14896] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.3089'. [ 382.558058][T14555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.558093][T14555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.558120][T14555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.606905][T14898] veth0_macvtap: left promiscuous mode [ 382.613340][T14898] macvtap0: entered promiscuous mode [ 382.791020][ T8725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.805529][ T8725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.813489][T14905] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3092'. [ 382.850073][T14900] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3092'. [ 382.939095][ T8755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.957709][ T8755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.044713][ T8725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.071715][ T8725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.092051][ T8732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.123451][ T8732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.133349][ T8725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.162833][ T8725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.260864][ T8725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.268724][ T8725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.829983][T14933] __nla_validate_parse: 2 callbacks suppressed [ 383.830002][T14933] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3102'. [ 383.867871][T14931] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3102'. [ 384.281929][T14941] validate_nla: 9 callbacks suppressed [ 384.281950][T14941] netlink: 'syz.4.3104': attribute type 10 has an invalid length. [ 384.312147][T14941] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3104'. [ 384.520873][T14947] netlink: 208552 bytes leftover after parsing attributes in process `syz.1.3108'. [ 384.545375][T14947] netlink: zone id is out of range [ 384.551442][T14947] netlink: zone id is out of range [ 384.559230][T14948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 384.566031][T14948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 384.588316][T14949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 384.594804][T14949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 384.738687][ T8725] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.813755][T14952] netlink: 'syz.3.3109': attribute type 3 has an invalid length. [ 385.119933][T14960] Dead loop on virtual device ip6_vti0, fix it urgently! [ 385.543077][T14967] netlink: 'syz.4.3113': attribute type 2 has an invalid length. [ 385.672032][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.678888][ T8725] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.693887][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.703221][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.710993][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.721719][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.732697][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.742303][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.750495][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.757584][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.765235][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.775070][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 385.784846][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 385.828243][ T8725] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.944171][ T8725] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.386336][T14977] chnl_net:caif_netlink_parms(): no params data found [ 386.805349][T14976] chnl_net:caif_netlink_parms(): no params data found [ 387.002453][T14977] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.009679][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.027106][T14977] bridge_slave_0: entered allmulticast mode [ 387.045058][T14977] bridge_slave_0: entered promiscuous mode [ 387.136574][T14977] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.144150][T14977] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.152041][T14977] bridge_slave_1: entered allmulticast mode [ 387.159436][T14977] bridge_slave_1: entered promiscuous mode [ 387.412339][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.426623][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.437647][T14976] bridge_slave_0: entered allmulticast mode [ 387.459101][T14976] bridge_slave_0: entered promiscuous mode [ 387.499929][T15031] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3132'. [ 387.521065][T15031] netlink: 'syz.1.3132': attribute type 3 has an invalid length. [ 387.544545][T14977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.584459][T14977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.629334][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.651608][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.681965][T14976] bridge_slave_1: entered allmulticast mode [ 387.697411][T14976] bridge_slave_1: entered promiscuous mode [ 387.720472][ T8725] bridge_slave_1: left allmulticast mode [ 387.730686][ T8725] bridge_slave_1: left promiscuous mode [ 387.746434][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.768993][ T8725] bridge_slave_0: left allmulticast mode [ 387.784868][ T8725] bridge_slave_0: left promiscuous mode [ 387.797515][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.851982][ T5102] Bluetooth: hci2: command tx timeout [ 387.858634][ T5101] Bluetooth: hci1: command tx timeout [ 388.365935][ T8725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.378001][ T8725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.388759][ T8725] bond0 (unregistering): Released all slaves [ 388.505501][T14977] team0: Port device team_slave_0 added [ 388.544310][T14976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.563169][T15050] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3140'. [ 388.637263][T14977] team0: Port device team_slave_1 added [ 388.681552][T14976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.852514][T14977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.867841][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.906939][T14977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.937818][T14976] team0: Port device team_slave_0 added [ 388.964205][T14977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.976168][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.003007][T14977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.016928][T14976] team0: Port device team_slave_1 added [ 389.125739][ T8725] hsr_slave_0: left promiscuous mode [ 389.159581][ T8725] hsr_slave_1: left promiscuous mode [ 389.176210][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.194167][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.207447][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.219589][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.253597][ T8725] veth1_macvtap: left promiscuous mode [ 389.259940][ T8725] veth0_macvtap: left promiscuous mode [ 389.269102][ T8725] veth1_vlan: left promiscuous mode [ 389.286630][T15088] netlink: 'syz.4.3153': attribute type 3 has an invalid length. [ 389.310081][T15088] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3153'. [ 389.320091][ T8725] veth0_vlan: left promiscuous mode [ 389.930505][ T5102] Bluetooth: hci2: command tx timeout [ 389.936036][ T5101] Bluetooth: hci1: command tx timeout [ 390.104151][ T8725] team0 (unregistering): Port device team_slave_1 removed [ 390.145893][ T8725] team0 (unregistering): Port device team_slave_0 removed [ 390.539393][T15085] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3152'. [ 390.642460][T14976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.649746][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.695169][T14976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.792978][T14977] hsr_slave_0: entered promiscuous mode [ 390.807792][T14977] hsr_slave_1: entered promiscuous mode [ 390.841071][T14976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.848057][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.885187][T14976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.085753][T14976] hsr_slave_0: entered promiscuous mode [ 391.105176][T14976] hsr_slave_1: entered promiscuous mode [ 391.120072][T14976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.128003][T14976] Cannot create hsr debugfs directory [ 391.173615][T15131] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3168'. [ 391.206620][T15128] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3168'. [ 391.236906][T15128] netlink: 'syz.3.3168': attribute type 3 has an invalid length. [ 391.320510][T15133] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3169'. [ 391.412083][T15135] netlink: 'syz.3.3170': attribute type 3 has an invalid length. [ 391.428387][T15135] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3170'. [ 391.532679][ T8725] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.718601][ T8725] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.905735][ T8725] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.984763][T15152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.017198][ T5101] Bluetooth: hci1: command tx timeout [ 392.023020][ T5101] Bluetooth: hci2: command tx timeout [ 392.056945][ T8725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.218465][ T8725] bridge_slave_1: left allmulticast mode [ 392.224664][ T8725] bridge_slave_1: left promiscuous mode [ 392.231783][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.241178][ T8725] bridge_slave_0: left allmulticast mode [ 392.246887][ T8725] bridge_slave_0: left promiscuous mode [ 392.255428][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.443318][T15167] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3180'. [ 392.616506][ T8725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.628514][ T8725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.639162][ T8725] bond0 (unregistering): Released all slaves [ 392.664563][T15166] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3180'. [ 392.675074][T15166] netlink: 'syz.4.3180': attribute type 3 has an invalid length. [ 392.777698][T15169] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3181'. [ 392.957440][ T8725] hsr_slave_0: left promiscuous mode [ 392.996702][T15175] netlink: 'syz.4.3184': attribute type 3 has an invalid length. [ 393.015309][ T8725] hsr_slave_1: left promiscuous mode [ 393.016550][T15175] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3184'. [ 393.032751][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.059306][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.068104][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.080342][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.137822][ T8725] veth1_macvtap: left promiscuous mode [ 393.146188][ T8725] veth0_macvtap: left promiscuous mode [ 393.152172][ T8725] veth1_vlan: left promiscuous mode [ 393.158007][ T8725] veth0_vlan: left promiscuous mode [ 393.676392][ T8725] team0 (unregistering): Port device team_slave_1 removed [ 393.736032][ T8725] team0 (unregistering): Port device team_slave_0 removed [ 394.008931][T15183] delete_channel: no stack [ 394.021664][T15183] syz.1.3187[15183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.021805][T15183] syz.1.3187[15183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.092890][ T5102] Bluetooth: hci2: command tx timeout [ 394.098110][ T5101] Bluetooth: hci1: command tx timeout [ 394.439815][T14977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.509240][T14977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.537449][T14977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.599684][T15195] __nla_validate_parse: 1 callbacks suppressed [ 394.599704][T15195] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3191'. [ 394.631185][T15193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3191'. [ 394.641268][T15193] netlink: 'syz.1.3191': attribute type 3 has an invalid length. [ 394.649674][T14977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.665946][T15197] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3192'. [ 394.678381][T14976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.694848][T14976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.714704][T14976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.763474][T14976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.886493][T15206] netlink: 184472 bytes leftover after parsing attributes in process `syz.3.3196'. [ 394.983696][T15211] netlink: 'syz.3.3198': attribute type 3 has an invalid length. [ 395.000529][T15211] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3198'. [ 395.043039][T14977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.123173][T14977] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.152927][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.160099][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.176348][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.183544][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.234951][T14976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.334254][T14976] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.386410][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.393610][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.510887][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.518059][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.992435][T15226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.198969][T14977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.223283][T14976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.265446][T15240] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3204'. [ 396.366916][T14977] veth0_vlan: entered promiscuous mode [ 396.399269][T14977] veth1_vlan: entered promiscuous mode [ 396.409502][T14976] veth0_vlan: entered promiscuous mode [ 396.434041][T14976] veth1_vlan: entered promiscuous mode [ 396.445595][T15249] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3205'. [ 396.495039][T15242] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3205'. [ 396.521787][T15242] netlink: 'syz.1.3205': attribute type 3 has an invalid length. [ 396.559369][T14977] veth0_macvtap: entered promiscuous mode [ 396.570960][T14976] veth0_macvtap: entered promiscuous mode [ 396.583713][T14977] veth1_macvtap: entered promiscuous mode [ 396.624620][T15254] netlink: 'syz.4.3209': attribute type 3 has an invalid length. [ 396.630633][T14976] veth1_macvtap: entered promiscuous mode [ 396.652035][T15254] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3209'. [ 396.721997][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.750460][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.769523][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.781602][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.792277][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.803878][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.824752][T14977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.876127][T15264] sit0: entered allmulticast mode [ 396.894647][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.920856][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.945154][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.955218][T15266] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.3214'. [ 396.960989][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.976944][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.989251][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.999380][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.009861][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.022331][T14976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.036176][T15264] sit0: entered promiscuous mode [ 397.144093][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.166187][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.181632][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.192183][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.202342][T14976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.214152][T14976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.225817][T14976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.239365][T15270] netlink: 'syz.4.3215': attribute type 12 has an invalid length. [ 397.266654][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.300312][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.310177][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.331586][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.343117][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.354597][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.367398][T14977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.378999][T14977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.394843][T14977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.443469][T14977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.463076][T14977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.474687][T14977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.485953][T14977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.500058][T15279] netlink: 'syz.4.3219': attribute type 5 has an invalid length. [ 397.523938][T14976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.540856][T14976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.550031][T14976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.586946][T14976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.759668][T15291] netlink: 'syz.3.3224': attribute type 3 has an invalid length. [ 397.816632][T15295] tap0: tun_chr_ioctl cmd 1074025673 [ 397.849507][ T8740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.872075][ T8740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.915959][ T8725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.936833][ T8725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.997776][ T8753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.009137][ T8753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.119087][ T8725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.158389][ T8725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.688531][T15374] netlink: 'syz.4.3252': attribute type 12 has an invalid length. [ 399.698549][T15374] __nla_validate_parse: 7 callbacks suppressed [ 399.698566][T15374] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3252'. [ 399.876798][T15380] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3255'. [ 399.891633][T15378] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 399.901802][T15378] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 399.961814][T15382] netlink: 'syz.1.3257': attribute type 21 has an invalid length. [ 399.969738][T15382] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3257'. [ 399.986143][T15384] netlink: 'syz.4.3256': attribute type 3 has an invalid length. [ 400.002240][T15384] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3256'. [ 400.061116][T15385] netlink: 'syz.4.3256': attribute type 3 has an invalid length. [ 400.068885][T15385] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3256'. [ 400.099071][ T8732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.313447][ T5101] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 400.709791][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.737300][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.745407][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.764110][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 400.772077][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 400.788962][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.797654][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.806222][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.815123][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.824176][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.831937][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 400.856124][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 401.413756][ T8732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.446083][T15418] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3264'. [ 401.627717][ T8732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.833388][ T8732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.964384][T15436] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3266'. [ 402.048745][T15403] chnl_net:caif_netlink_parms(): no params data found [ 402.174557][T15446] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3268'. [ 402.214455][ T53] Bluetooth: hci4: ISO packet for unknown connection handle 1854 [ 402.227676][T15441] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3268'. [ 402.254944][T15441] netlink: 'syz.4.3268': attribute type 3 has an invalid length. [ 402.353117][ T8732] bridge_slave_1: left allmulticast mode [ 402.361352][ T8732] bridge_slave_1: left promiscuous mode [ 402.367116][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.382069][ T8732] bridge_slave_0: left allmulticast mode [ 402.387741][ T8732] bridge_slave_0: left promiscuous mode [ 402.393728][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.785040][ T8732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.802032][ T8732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.817388][ T8732] bond0 (unregistering): Released all slaves [ 402.849781][T15403] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.857803][T15403] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.869780][T15403] bridge_slave_0: entered allmulticast mode [ 402.879845][T15403] bridge_slave_0: entered promiscuous mode [ 402.900724][ T53] Bluetooth: hci1: command tx timeout [ 402.911112][T15403] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.918899][T15403] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.958192][T15403] bridge_slave_1: entered allmulticast mode [ 402.970521][ T53] Bluetooth: hci2: command tx timeout [ 402.996665][T15403] bridge_slave_1: entered promiscuous mode [ 403.216139][T15457] mac80211_hwsim hwsim55 wlan0: left promiscuous mode [ 403.227302][T15457] mac80211_hwsim hwsim55 wlan0: left allmulticast mode [ 403.238706][T15462] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 403.245935][T15462] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 403.260675][T15459] veth1_macvtap: left promiscuous mode [ 403.275830][T15464] veth1_macvtap: entered promiscuous mode [ 403.300798][T15464] macsec0: entered promiscuous mode [ 403.309577][T15464] macsec0: entered allmulticast mode [ 403.315608][T15464] veth1_macvtap: entered allmulticast mode [ 403.335284][T15405] chnl_net:caif_netlink_parms(): no params data found [ 403.455393][T15403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.507601][T15403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.607197][T15476] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3278'. [ 403.626731][T15403] team0: Port device team_slave_0 added [ 403.636656][T15403] team0: Port device team_slave_1 added [ 403.652094][ T8732] hsr_slave_0: left promiscuous mode [ 403.661026][ T8732] hsr_slave_1: left promiscuous mode [ 403.679716][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.688497][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.701645][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.709061][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.736437][ T8732] veth1_macvtap: left promiscuous mode [ 403.742269][ T8732] veth0_macvtap: left promiscuous mode [ 403.748007][ T8732] veth1_vlan: left promiscuous mode [ 403.753491][ T8732] veth0_vlan: left promiscuous mode [ 404.207710][ T8732] team0 (unregistering): Port device team_slave_1 removed [ 404.242964][ T8732] team0 (unregistering): Port device team_slave_0 removed [ 404.597966][T15480] veth0_vlan: entered allmulticast mode [ 404.643808][T15483] netlink: 'syz.4.3279': attribute type 8 has an invalid length. [ 404.718888][T15403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.726749][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.753300][T15403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.835873][T15495] __nla_validate_parse: 2 callbacks suppressed [ 404.835929][T15495] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3283'. [ 404.874161][T15403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.887588][T15403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.915256][T15403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.927233][T15495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3283'. [ 404.939350][T15495] netlink: 'syz.4.3283': attribute type 3 has an invalid length. [ 404.953134][T15405] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.969009][T15405] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.970966][ T53] Bluetooth: hci1: command tx timeout [ 404.977900][T15405] bridge_slave_0: entered allmulticast mode [ 404.992085][T15405] bridge_slave_0: entered promiscuous mode [ 405.018918][T15405] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.027279][T15405] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.035299][T15405] bridge_slave_1: entered allmulticast mode [ 405.042952][T15405] bridge_slave_1: entered promiscuous mode [ 405.059271][ T53] Bluetooth: hci2: command tx timeout [ 405.180189][T15405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.211393][T15405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.229124][T15510] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3290'. [ 405.252727][T15403] hsr_slave_0: entered promiscuous mode [ 405.277240][T15403] hsr_slave_1: entered promiscuous mode [ 405.406331][T15405] team0: Port device team_slave_0 added [ 405.432999][T15405] team0: Port device team_slave_1 added [ 405.616671][T15405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.629816][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.727775][T15405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.007392][T15405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.027426][T15405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.117871][T15405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.248784][ T8722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.551367][ T8722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.693163][T15405] hsr_slave_0: entered promiscuous mode [ 406.711078][T15405] hsr_slave_1: entered promiscuous mode [ 406.717305][T15405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.728003][T15405] Cannot create hsr debugfs directory [ 406.754149][ T8722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.855530][ T8722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.917691][T15538] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3298'. [ 406.959706][T15535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3298'. [ 406.988935][T15535] netlink: 'syz.1.3298': attribute type 3 has an invalid length. [ 407.051148][ T53] Bluetooth: hci1: command tx timeout [ 407.138906][ T53] Bluetooth: hci2: command tx timeout [ 407.226099][ T8722] bridge_slave_1: left allmulticast mode [ 407.232992][ T8722] bridge_slave_1: left promiscuous mode [ 407.238817][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.249756][ T8722] bridge_slave_0: left allmulticast mode [ 407.260052][ T8722] bridge_slave_0: left promiscuous mode [ 407.276149][ T8722] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.356714][T15549] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 407.597507][ T8722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.608924][ T8722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.619221][ T8722] bond0 (unregistering): Released all slaves [ 407.643467][T15545] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3302'. [ 407.759492][T15551] netlink: 184472 bytes leftover after parsing attributes in process `syz.1.3304'. [ 407.807472][T15403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.847682][T15403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.873110][T15403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.940185][T15403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 408.009111][ T8722] hsr_slave_0: left promiscuous mode [ 408.023305][ T8722] hsr_slave_1: left promiscuous mode [ 408.029611][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.048565][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.056762][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.070987][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.117482][ T8722] veth1_macvtap: left promiscuous mode [ 408.129896][ T8722] veth0_macvtap: left promiscuous mode [ 408.135726][ T8722] veth1_vlan: left promiscuous mode [ 408.148078][ T8722] veth0_vlan: left promiscuous mode [ 408.914845][ T8722] team0 (unregistering): Port device team_slave_1 removed [ 408.953601][ T8722] team0 (unregistering): Port device team_slave_0 removed [ 409.131595][ T53] Bluetooth: hci1: command tx timeout [ 409.210656][ T53] Bluetooth: hci2: command tx timeout [ 409.329533][T15558] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3307'. [ 409.594106][T15403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.657702][T15405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.676892][T15403] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.686305][T15405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 409.703102][T15405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.718675][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.725864][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.734223][T15405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.791845][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.799006][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.905629][T15403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.981734][T15579] tun0: tun_chr_ioctl cmd 1074025677 [ 410.000757][T15579] tun0: linktype set to 805 [ 410.015175][T15405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.079881][T15405] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.095890][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.103093][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.132919][T15587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3317'. [ 410.137682][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.149034][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.292105][T15403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.450476][T15403] veth0_vlan: entered promiscuous mode [ 410.503260][T15403] veth1_vlan: entered promiscuous mode [ 410.535852][T15599] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3320'. [ 410.635157][T15595] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3320'. [ 410.679046][T15595] netlink: 'syz.3.3320': attribute type 3 has an invalid length. [ 410.744445][T15403] veth0_macvtap: entered promiscuous mode [ 410.787663][T15403] veth1_macvtap: entered promiscuous mode [ 410.899351][T15405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.919090][T15403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.937957][T15403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.957641][T15403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.002677][T15403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.019583][T15403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.034491][T15403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.056242][T15403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.149840][T15403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.169844][T15403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.184555][T15403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.198896][T15403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.208823][T15403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.219836][T15403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.253414][T15403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.361800][T15403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.405468][T15403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.425415][T15403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.450737][T15403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.468998][T15618] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3327'. [ 411.484246][T15618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 411.535487][T15405] veth0_vlan: entered promiscuous mode [ 411.615035][T15622] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3329'. [ 411.657773][T15405] veth1_vlan: entered promiscuous mode [ 411.711434][T15625] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3330'. [ 411.760459][ T8740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.792485][ T8740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.807394][T15405] veth0_macvtap: entered promiscuous mode [ 411.842814][T15405] veth1_macvtap: entered promiscuous mode [ 411.915028][ T8755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.946095][ T8755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.993329][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.009578][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.025208][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.035869][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.045885][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.056944][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.066815][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.077244][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.090143][T15405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.124985][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.137197][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.165538][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.183999][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.195946][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.207016][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.219574][T15405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.230490][T15405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.273188][T15405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.348912][T15405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.358388][T15405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.367253][T15405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.382258][T15405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.521794][ T8725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.546075][ T8725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.634583][ T8755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.645622][ T8755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.389171][T15701] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3356'. [ 413.586803][T15711] netlink: 'syz.1.3360': attribute type 16 has an invalid length. [ 413.846901][T15724] netlink: 'syz.4.3364': attribute type 10 has an invalid length. [ 413.866288][T15724] team0: Device hsr_slave_0 failed to register rx_handler [ 413.980388][T15740] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3370'. [ 414.027632][T15743] netlink: 'syz.1.3371': attribute type 1 has an invalid length. [ 414.039503][T15743] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3371'. [ 414.053293][T15743] netlink: 'syz.1.3371': attribute type 39 has an invalid length. [ 414.121576][T15749] netlink: 'syz.3.3373': attribute type 1 has an invalid length. [ 414.138321][T15749] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.3373'. [ 414.149954][T15749] block nbd10: not configured, cannot reconfigure [ 414.246447][ T8740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.331866][T15761] sctp: [Deprecated]: syz.1.3375 (pid 15761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.331866][T15761] Use struct sctp_sack_info instead [ 415.113057][T15770] netlink: 'syz.4.3379': attribute type 12 has an invalid length. [ 415.140331][T15770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3379'. [ 415.297303][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.332651][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.355636][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.374315][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.376233][T15786] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3383'. [ 415.399764][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 415.405879][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.412765][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.423671][ T5089] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.433653][ T5089] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.444295][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.454057][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 415.463194][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.480371][ T8740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.595241][ T8740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.743940][T15784] syzkaller0: entered promiscuous mode [ 415.749428][T15784] syzkaller0: entered allmulticast mode [ 415.755765][T15800] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3387'. [ 415.827166][ T8740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.145236][T15804] netlink: 'syz.3.3390': attribute type 5 has an invalid length. [ 417.153644][T15805] netlink: 'syz.1.3389': attribute type 10 has an invalid length. [ 417.178642][T15805] team0: Device hsr_slave_0 failed to register rx_handler [ 417.340602][T15817] netlink: 'syz.1.3394': attribute type 3 has an invalid length. [ 417.358683][T15817] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3394'. [ 417.451032][ T5101] Bluetooth: hci1: command tx timeout [ 417.531256][ T5101] Bluetooth: hci2: command tx timeout [ 417.545499][T15827] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3398'. [ 417.630467][ T8740] bridge_slave_1: left allmulticast mode [ 417.643337][ T8740] bridge_slave_1: left promiscuous mode [ 417.649156][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.663856][ T8740] bridge_slave_0: left allmulticast mode [ 417.669862][ T8740] bridge_slave_0: left promiscuous mode [ 417.676174][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.717332][T15835] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 418.073485][ T8740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.086062][ T8740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.098006][ T8740] bond0 (unregistering): Released all slaves [ 418.119508][T15834] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3399'. [ 418.150705][T15837] netlink: 'syz.4.3401': attribute type 9 has an invalid length. [ 418.170888][T15837] netlink: 'syz.4.3401': attribute type 1 has an invalid length. [ 418.225260][T15780] chnl_net:caif_netlink_parms(): no params data found [ 418.572258][T15858] nbd: must specify a device to reconfigure [ 418.585575][T15858] nbd: must specify a device to reconfigure [ 418.693504][T15785] chnl_net:caif_netlink_parms(): no params data found [ 418.801213][T15872] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3412'. [ 418.825624][T15872] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 418.866668][T15878] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3413'. [ 418.895513][ T8740] hsr_slave_0: left promiscuous mode [ 418.926528][ T8740] hsr_slave_1: left promiscuous mode [ 418.948548][ T8740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.971833][ T8740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.981902][ T8740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.989333][ T8740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.014779][T15886] netlink: 'syz.4.3416': attribute type 46 has an invalid length. [ 419.053085][ T8740] veth1_macvtap: left promiscuous mode [ 419.058659][ T8740] veth0_macvtap: left promiscuous mode [ 419.082805][ T8740] veth1_vlan: left promiscuous mode [ 419.089621][ T8740] veth0_vlan: left promiscuous mode [ 419.459317][T15909] netlink: 'syz.3.3423': attribute type 5 has an invalid length. [ 419.467308][T15909] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3423'. [ 419.530715][ T5101] Bluetooth: hci1: command tx timeout [ 419.612655][ T5101] Bluetooth: hci2: command tx timeout [ 419.669471][ T8740] team0 (unregistering): Port device team_slave_1 removed [ 419.710934][ T8740] team0 (unregistering): Port device team_slave_0 removed [ 420.079362][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.086774][T15780] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.098757][T15780] bridge_slave_0: entered allmulticast mode [ 420.108986][T15780] bridge_slave_0: entered promiscuous mode [ 420.117722][T15886] netlink: 'syz.4.3416': attribute type 46 has an invalid length. [ 420.178399][T15914] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3425'. [ 420.187942][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.205056][T15780] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.212716][T15780] bridge_slave_1: entered allmulticast mode [ 420.220953][T15780] bridge_slave_1: entered promiscuous mode [ 420.262117][T15917] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 420.297482][T15916] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3424'. [ 420.328003][T15923] FAULT_INJECTION: forcing a failure. [ 420.328003][T15923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.342319][T15919] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3426'. [ 420.360436][T15785] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.379397][T15923] CPU: 1 PID: 15923 Comm: syz.4.3426 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 420.389595][T15923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 420.390352][T15785] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.399640][T15923] Call Trace: [ 420.409935][T15923] [ 420.412873][T15923] dump_stack_lvl+0x241/0x360 [ 420.413341][T15785] bridge_slave_0: entered allmulticast mode [ 420.417558][T15923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.417588][T15923] ? __pfx__printk+0x10/0x10 [ 420.433203][T15923] ? __pfx_lock_release+0x10/0x10 [ 420.438224][T15923] should_fail_ex+0x3b0/0x4e0 [ 420.442901][T15923] _copy_from_iter+0x1f6/0x1960 [ 420.447749][T15923] ? __virt_addr_valid+0x183/0x520 [ 420.452850][T15923] ? skb_set_owner_w+0x238/0x3e0 [ 420.457781][T15923] ? __pfx__copy_from_iter+0x10/0x10 [ 420.463064][T15923] ? __pfx__copy_from_iter+0x10/0x10 [ 420.468343][T15923] ? page_copy_sane+0x154/0x260 [ 420.473190][T15923] copy_page_from_iter+0x7a/0x100 [ 420.478204][T15923] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 420.484013][T15923] tun_get_user+0xe9e/0x4560 [ 420.488614][T15923] ? __pfx_tun_get_user+0x10/0x10 [ 420.493631][T15923] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 420.499084][T15923] ? tun_get+0x1e/0x2f0 [ 420.503242][T15923] ? tun_get+0x1e/0x2f0 [ 420.507386][T15923] ? tun_get+0x27d/0x2f0 [ 420.511618][T15923] tun_chr_write_iter+0x113/0x1f0 [ 420.516634][T15923] vfs_write+0xa72/0xc90 [ 420.520870][T15923] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 420.526406][T15923] ? __pfx_vfs_write+0x10/0x10 [ 420.531173][T15923] ksys_write+0x1a0/0x2c0 [ 420.535493][T15923] ? __pfx_ksys_write+0x10/0x10 [ 420.540332][T15923] ? do_syscall_64+0x100/0x230 [ 420.545098][T15923] ? do_syscall_64+0xb6/0x230 [ 420.549766][T15923] do_syscall_64+0xf3/0x230 [ 420.554261][T15923] ? clear_bhb_loop+0x35/0x90 [ 420.558931][T15923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.564816][T15923] RIP: 0033:0x7f0a57d75bd9 [ 420.569220][T15923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.588990][T15923] RSP: 002b:00007f0a58bd4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.597403][T15923] RAX: ffffffffffffffda RBX: 00007f0a57f04038 RCX: 00007f0a57d75bd9 [ 420.605364][T15923] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 420.613321][T15923] RBP: 00007f0a58bd40a0 R08: 0000000000000000 R09: 0000000000000000 [ 420.621277][T15923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.629321][T15923] R13: 000000000000006e R14: 00007f0a57f04038 R15: 00007ffce305e688 [ 420.637294][T15923] [ 420.661788][T15785] bridge_slave_0: entered promiscuous mode [ 420.691804][T15785] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.699815][T15785] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.707116][T15785] bridge_slave_1: entered allmulticast mode [ 420.714781][T15785] bridge_slave_1: entered promiscuous mode [ 420.797442][T15780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.961260][T15780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.992337][T15785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.006110][T15785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.152738][T15780] team0: Port device team_slave_0 added [ 421.164067][T15780] team0: Port device team_slave_1 added [ 421.240016][T15785] team0: Port device team_slave_0 added [ 421.273865][T15785] team0: Port device team_slave_1 added [ 421.407560][T15954] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 421.466963][T15780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.479506][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.508872][T15780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.520678][T15949] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3436'. [ 421.536580][T15785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.549328][T15785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.579854][T15785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.611761][ T5101] Bluetooth: hci1: command tx timeout [ 421.640930][T15780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.660792][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.688137][T15780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.698873][ T5101] Bluetooth: hci2: command tx timeout [ 421.746487][T15785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.769252][T15785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.796403][T15785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.874188][T15780] hsr_slave_0: entered promiscuous mode [ 421.882573][T15780] hsr_slave_1: entered promiscuous mode [ 422.056002][ T8740] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.083601][T15785] hsr_slave_0: entered promiscuous mode [ 422.096500][T15785] hsr_slave_1: entered promiscuous mode [ 422.113974][T15785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.128335][T15785] Cannot create hsr debugfs directory [ 422.224786][ T8740] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.278139][T15993] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3453'. [ 422.299241][T15993] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 422.404872][ T8740] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.496696][ T8740] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.676795][T16014] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3461'. [ 423.101714][ T8740] bridge_slave_1: left allmulticast mode [ 423.107495][ T8740] bridge_slave_1: left promiscuous mode [ 423.128975][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.160819][ T8740] bridge_slave_0: left allmulticast mode [ 423.166501][ T8740] bridge_slave_0: left promiscuous mode [ 423.190543][ T8740] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.231433][T16041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 423.691284][ T5101] Bluetooth: hci1: command tx timeout [ 423.770672][ T5101] Bluetooth: hci2: command tx timeout [ 423.992655][ T8740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.008133][ T8740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.019787][ T8740] bond0 (unregistering): Released all slaves [ 424.043016][T16038] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3468'. [ 424.069455][T16054] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3476'. [ 424.643878][ T8740] hsr_slave_0: left promiscuous mode [ 424.693841][ T8740] hsr_slave_1: left promiscuous mode [ 424.723355][ T8740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.738952][ T8740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.752136][ T8740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.771266][ T8740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.827215][ T8740] veth1_macvtap: left promiscuous mode [ 424.845938][ T8740] veth0_macvtap: left promiscuous mode [ 424.866327][ T8740] veth1_vlan: left promiscuous mode [ 424.880807][ T8740] veth0_vlan: left promiscuous mode [ 425.952720][T16084] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3487'. [ 426.342970][ T8740] team0 (unregistering): Port device team_slave_1 removed [ 426.419482][ T8740] team0 (unregistering): Port device team_slave_0 removed [ 426.570701][T16091] netlink: 'syz.1.3489': attribute type 1 has an invalid length. [ 426.591681][T16091] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3489'. [ 427.100149][T16088] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3488'. [ 427.310706][T15780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.360762][T15780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.410353][T15780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.439672][T15780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.552867][T15785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.585642][T15785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.613835][T15785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.621441][T16123] netlink: 'syz.3.3499': attribute type 3 has an invalid length. [ 427.638650][T15785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.647724][T16123] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3499'. [ 427.683316][T16133] netlink: 'syz.4.3505': attribute type 3 has an invalid length. [ 427.684916][T16118] pim6reg1: entered promiscuous mode [ 427.701507][T16133] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 427.709430][T16118] pim6reg1: entered allmulticast mode [ 427.728213][T16133] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3505'. [ 428.004114][T15780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.055075][T15780] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.108434][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.115626][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.174986][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.182286][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.224069][T15785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.359857][T15785] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.402301][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.409500][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.463153][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.470347][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.605655][T15785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.659400][T16167] netlink: 'syz.4.3518': attribute type 3 has an invalid length. [ 428.682406][T16164] netlink: 'syz.1.3517': attribute type 10 has an invalid length. [ 428.709689][T16167] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3518'. [ 428.720763][T16164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3517'. [ 428.720858][T16164] bridge_slave_0: left promiscuous mode [ 428.721285][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.957694][T15780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.110166][T15780] veth0_vlan: entered promiscuous mode [ 429.127545][T15785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.145670][T16190] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3523'. [ 429.167868][T15780] veth1_vlan: entered promiscuous mode [ 429.286524][T15780] veth0_macvtap: entered promiscuous mode [ 429.307324][T15785] veth0_vlan: entered promiscuous mode [ 429.337787][T15780] veth1_macvtap: entered promiscuous mode [ 429.349093][T15785] veth1_vlan: entered promiscuous mode [ 429.420953][T16211] netlink: 'syz.4.3528': attribute type 39 has an invalid length. [ 429.619269][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.645413][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.655986][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.667219][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.677368][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.694868][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.717216][T15780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.742986][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.753873][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.767378][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.784653][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.796851][T15780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.808152][T15780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.820368][T15780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.832484][T16219] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3532'. [ 429.844905][T15785] veth0_macvtap: entered promiscuous mode [ 429.865584][T15780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.901092][T15780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.909819][T15780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.938162][T15780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.971176][T15785] veth1_macvtap: entered promiscuous mode [ 430.048377][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.072054][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.081633][T16237] netlink: 'syz.4.3538': attribute type 29 has an invalid length. [ 430.082058][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.109776][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.119674][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.130173][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.140327][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.150902][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.162949][T15785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.232471][T16243] netlink: 'syz.3.3539': attribute type 64 has an invalid length. [ 430.252021][T16243] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3539'. [ 430.265063][T16243] netlink: 'syz.3.3539': attribute type 1 has an invalid length. [ 430.278967][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.290160][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.300010][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.315166][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.325195][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.340481][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.350540][T15785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.361034][T15785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.387967][T15785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.478113][T15785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.489151][T15785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.509625][T15785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.519247][T15785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.633873][ T8755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.652118][ T8755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.680055][T16257] FAULT_INJECTION: forcing a failure. [ 430.680055][T16257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.699602][T16257] CPU: 1 PID: 16257 Comm: syz.3.3544 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 430.709784][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 430.719843][T16257] Call Trace: [ 430.723128][T16257] [ 430.726058][T16257] dump_stack_lvl+0x241/0x360 [ 430.730737][T16257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.735934][T16257] ? __pfx__printk+0x10/0x10 [ 430.740531][T16257] ? __pfx_lock_release+0x10/0x10 [ 430.745556][T16257] should_fail_ex+0x3b0/0x4e0 [ 430.750240][T16257] _copy_from_iter+0x1f6/0x1960 [ 430.755107][T16257] ? __virt_addr_valid+0x183/0x520 [ 430.760217][T16257] ? skb_set_owner_w+0x238/0x3e0 [ 430.765152][T16257] ? __pfx__copy_from_iter+0x10/0x10 [ 430.770434][T16257] ? __pfx__copy_from_iter+0x10/0x10 [ 430.775720][T16257] ? page_copy_sane+0x154/0x260 [ 430.780658][T16257] copy_page_from_iter+0x7a/0x100 [ 430.785675][T16257] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 430.791490][T16257] tun_get_user+0xe9e/0x4560 [ 430.796106][T16257] ? __pfx_tun_get_user+0x10/0x10 [ 430.801129][T16257] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 430.806583][T16257] ? tun_get+0x1e/0x2f0 [ 430.810742][T16257] ? tun_get+0x1e/0x2f0 [ 430.814899][T16257] ? tun_get+0x27d/0x2f0 [ 430.819132][T16257] tun_chr_write_iter+0x113/0x1f0 [ 430.824151][T16257] vfs_write+0xa72/0xc90 [ 430.828388][T16257] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 430.833930][T16257] ? __pfx_vfs_write+0x10/0x10 [ 430.838698][T16257] ksys_write+0x1a0/0x2c0 [ 430.843024][T16257] ? __pfx_ksys_write+0x10/0x10 [ 430.847862][T16257] ? do_syscall_64+0x100/0x230 [ 430.852621][T16257] ? do_syscall_64+0xb6/0x230 [ 430.857291][T16257] do_syscall_64+0xf3/0x230 [ 430.861787][T16257] ? clear_bhb_loop+0x35/0x90 [ 430.866457][T16257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.872339][T16257] RIP: 0033:0x7fb033975bd9 [ 430.876745][T16257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.896335][T16257] RSP: 002b:00007fb034690048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.904744][T16257] RAX: ffffffffffffffda RBX: 00007fb033b03f60 RCX: 00007fb033975bd9 [ 430.912703][T16257] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 430.920660][T16257] RBP: 00007fb0346900a0 R08: 0000000000000000 R09: 0000000000000000 [ 430.928618][T16257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.936574][T16257] R13: 000000000000000b R14: 00007fb033b03f60 R15: 00007ffdec87d5e8 [ 430.944545][T16257] [ 430.979933][ T8755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.990244][ T8755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.021455][ T8722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.062635][ T8722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.195189][ T8722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.225997][ T8722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.287136][T16278] __nla_validate_parse: 4 callbacks suppressed [ 431.287184][T16278] netlink: 184472 bytes leftover after parsing attributes in process `syz.1.3551'. [ 431.522566][T16287] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3555'. [ 431.699349][T16298] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3559'. [ 431.717203][T16298] FAULT_INJECTION: forcing a failure. [ 431.717203][T16298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.736705][T16298] CPU: 1 PID: 16298 Comm: syz.1.3559 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 431.746886][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 431.756957][T16298] Call Trace: [ 431.760248][T16298] [ 431.763189][T16298] dump_stack_lvl+0x241/0x360 [ 431.767896][T16298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.773125][T16298] ? __pfx__printk+0x10/0x10 [ 431.777730][T16298] ? __pfx_lock_release+0x10/0x10 [ 431.782755][T16298] should_fail_ex+0x3b0/0x4e0 [ 431.787431][T16298] _copy_from_iter+0x1f6/0x1960 [ 431.792283][T16298] ? __virt_addr_valid+0x183/0x520 [ 431.797387][T16298] ? skb_set_owner_w+0x238/0x3e0 [ 431.802322][T16298] ? __pfx__copy_from_iter+0x10/0x10 [ 431.807601][T16298] ? __pfx__copy_from_iter+0x10/0x10 [ 431.812884][T16298] ? page_copy_sane+0x154/0x260 [ 431.817732][T16298] copy_page_from_iter+0x7a/0x100 [ 431.822747][T16298] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 431.828551][T16298] tun_get_user+0xe9e/0x4560 [ 431.833145][T16298] ? __pfx_tun_get_user+0x10/0x10 [ 431.838162][T16298] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 431.843612][T16298] ? tun_get+0x1e/0x2f0 [ 431.847770][T16298] ? tun_get+0x1e/0x2f0 [ 431.851921][T16298] ? tun_get+0x27d/0x2f0 [ 431.856156][T16298] tun_chr_write_iter+0x113/0x1f0 [ 431.861172][T16298] vfs_write+0xa72/0xc90 [ 431.865405][T16298] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 431.870939][T16298] ? __pfx_vfs_write+0x10/0x10 [ 431.875702][T16298] ksys_write+0x1a0/0x2c0 [ 431.880024][T16298] ? __pfx_ksys_write+0x10/0x10 [ 431.884862][T16298] ? do_syscall_64+0x100/0x230 [ 431.889621][T16298] ? do_syscall_64+0xb6/0x230 [ 431.894294][T16298] do_syscall_64+0xf3/0x230 [ 431.898786][T16298] ? clear_bhb_loop+0x35/0x90 [ 431.903457][T16298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.909342][T16298] RIP: 0033:0x7f19c9375bd9 [ 431.913743][T16298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.933345][T16298] RSP: 002b:00007f19ca181048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.941756][T16298] RAX: ffffffffffffffda RBX: 00007f19c9503f60 RCX: 00007f19c9375bd9 [ 431.949720][T16298] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 431.957685][T16298] RBP: 00007f19ca1810a0 R08: 0000000000000000 R09: 0000000000000000 [ 431.965649][T16298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.973610][T16298] R13: 000000000000000b R14: 00007f19c9503f60 R15: 00007fff769bde18 [ 431.981588][T16298] [ 432.382363][T16314] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.3565'. [ 432.747870][T16325] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3570'. [ 432.781470][T16325] FAULT_INJECTION: forcing a failure. [ 432.781470][T16325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.785868][T16327] validate_nla: 9 callbacks suppressed [ 432.785883][T16327] netlink: 'syz.1.3571': attribute type 10 has an invalid length. [ 432.807263][T16325] CPU: 1 PID: 16325 Comm: syz.4.3570 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 432.818450][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 432.828519][T16325] Call Trace: [ 432.831819][T16325] [ 432.834767][T16325] dump_stack_lvl+0x241/0x360 [ 432.839480][T16325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.844702][T16325] ? __pfx__printk+0x10/0x10 [ 432.849331][T16325] ? __pfx_lock_release+0x10/0x10 [ 432.854387][T16325] should_fail_ex+0x3b0/0x4e0 [ 432.859092][T16325] _copy_from_iter+0x1f6/0x1960 [ 432.863975][T16325] ? __virt_addr_valid+0x183/0x520 [ 432.869109][T16325] ? skb_set_owner_w+0x238/0x3e0 [ 432.874075][T16325] ? __pfx__copy_from_iter+0x10/0x10 [ 432.879385][T16325] ? __pfx__copy_from_iter+0x10/0x10 [ 432.884694][T16325] ? page_copy_sane+0x154/0x260 [ 432.889549][T16325] copy_page_from_iter+0x7a/0x100 [ 432.894576][T16325] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 432.900397][T16325] tun_get_user+0xe9e/0x4560 [ 432.905027][T16325] ? __pfx_tun_get_user+0x10/0x10 [ 432.910074][T16325] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 432.915545][T16325] ? tun_get+0x1e/0x2f0 [ 432.919701][T16325] ? tun_get+0x1e/0x2f0 [ 432.923844][T16325] ? tun_get+0x27d/0x2f0 [ 432.928084][T16325] tun_chr_write_iter+0x113/0x1f0 [ 432.933117][T16325] vfs_write+0xa72/0xc90 [ 432.937349][T16325] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 432.942882][T16325] ? __pfx_vfs_write+0x10/0x10 [ 432.947646][T16325] ksys_write+0x1a0/0x2c0 [ 432.951990][T16325] ? __pfx_ksys_write+0x10/0x10 [ 432.956853][T16325] ? do_syscall_64+0x100/0x230 [ 432.961611][T16325] ? do_syscall_64+0xb6/0x230 [ 432.966301][T16325] do_syscall_64+0xf3/0x230 [ 432.970831][T16325] ? clear_bhb_loop+0x35/0x90 [ 432.975524][T16325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.981425][T16325] RIP: 0033:0x7f0a57d75bd9 [ 432.985827][T16325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.005429][T16325] RSP: 002b:00007f0a58bf5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.013850][T16325] RAX: ffffffffffffffda RBX: 00007f0a57f03f60 RCX: 00007f0a57d75bd9 [ 433.021807][T16325] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 433.029765][T16325] RBP: 00007f0a58bf50a0 R08: 0000000000000000 R09: 0000000000000000 [ 433.037722][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.045677][T16325] R13: 000000000000000b R14: 00007f0a57f03f60 R15: 00007ffce305e688 [ 433.053668][T16325] [ 433.059537][T16327] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.111165][T16327] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.118404][T16327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.143263][T16327] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 433.288831][T16339] netlink: 'syz.1.3576': attribute type 3 has an invalid length. [ 433.310490][T16339] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3576'. [ 433.386220][T16344] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.3578'. [ 433.466708][T16349] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3579'. [ 433.557020][ T8732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.079119][ T8732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.079676][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.104820][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.113205][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.121888][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.129531][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 434.140949][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.159248][ T8732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.241967][ T8732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.363065][T16354] chnl_net:caif_netlink_parms(): no params data found [ 434.565093][T16370] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3586'. [ 434.606846][ T8732] bridge_slave_1: left allmulticast mode [ 434.617676][T16370] FAULT_INJECTION: forcing a failure. [ 434.617676][T16370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.632818][ T8732] bridge_slave_1: left promiscuous mode [ 434.638559][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.656811][T16370] CPU: 1 PID: 16370 Comm: syz.1.3586 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 434.666989][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 434.677051][T16370] Call Trace: [ 434.680337][T16370] [ 434.683271][T16370] dump_stack_lvl+0x241/0x360 [ 434.687971][T16370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.690401][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 434.693168][T16370] ? __pfx__printk+0x10/0x10 [ 434.693201][T16370] ? __pfx_lock_release+0x10/0x10 [ 434.693231][T16370] should_fail_ex+0x3b0/0x4e0 [ 434.709585][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 434.709831][T16370] _copy_from_iter+0x1f6/0x1960 [ 434.716956][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 434.721397][T16370] ? __virt_addr_valid+0x183/0x520 [ 434.721426][T16370] ? skb_set_owner_w+0x238/0x3e0 [ 434.721454][T16370] ? __pfx__copy_from_iter+0x10/0x10 [ 434.721481][T16370] ? __pfx__copy_from_iter+0x10/0x10 [ 434.721513][T16370] ? page_copy_sane+0x154/0x260 [ 434.721542][T16370] copy_page_from_iter+0x7a/0x100 [ 434.721565][T16370] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 434.721602][T16370] tun_get_user+0xe9e/0x4560 [ 434.721651][T16370] ? __pfx_tun_get_user+0x10/0x10 [ 434.734876][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 434.738587][T16370] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 434.738620][T16370] ? tun_get+0x1e/0x2f0 [ 434.749408][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 434.754085][T16370] ? tun_get+0x1e/0x2f0 [ 434.754113][T16370] ? tun_get+0x27d/0x2f0 [ 434.754137][T16370] tun_chr_write_iter+0x113/0x1f0 [ 434.754164][T16370] vfs_write+0xa72/0xc90 [ 434.754191][T16370] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 434.754215][T16370] ? __pfx_vfs_write+0x10/0x10 [ 434.754257][T16370] ksys_write+0x1a0/0x2c0 [ 434.754283][T16370] ? __pfx_ksys_write+0x10/0x10 [ 434.839776][T16370] ? do_syscall_64+0x100/0x230 [ 434.844542][T16370] ? do_syscall_64+0xb6/0x230 [ 434.849213][T16370] do_syscall_64+0xf3/0x230 [ 434.853709][T16370] ? clear_bhb_loop+0x35/0x90 [ 434.858383][T16370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.864268][T16370] RIP: 0033:0x7f19c9375bd9 [ 434.868671][T16370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.888265][T16370] RSP: 002b:00007f19ca181048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.896669][T16370] RAX: ffffffffffffffda RBX: 00007f19c9503f60 RCX: 00007f19c9375bd9 [ 434.904628][T16370] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 434.912586][T16370] RBP: 00007f19ca1810a0 R08: 0000000000000000 R09: 0000000000000000 [ 434.920553][T16370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.928523][T16370] R13: 000000000000000b R14: 00007f19c9503f60 R15: 00007fff769bde18 [ 434.936515][T16370] [ 434.953008][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.963391][ T8732] bridge_slave_0: left allmulticast mode [ 434.970072][ T8732] bridge_slave_0: left promiscuous mode [ 434.976601][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.481888][ T8732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.495626][ T8732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.507084][ T8732] bond0 (unregistering): Released all slaves [ 435.588140][T16354] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.601586][T16354] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.608801][T16354] bridge_slave_0: entered allmulticast mode [ 435.661824][T16354] bridge_slave_0: entered promiscuous mode [ 435.685365][T16354] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.698960][T16354] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.706276][T16354] bridge_slave_1: entered allmulticast mode [ 435.720666][T16354] bridge_slave_1: entered promiscuous mode [ 435.874112][T16354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.937051][T16354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.029654][T16408] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3600'. [ 436.051488][T16413] FAULT_INJECTION: forcing a failure. [ 436.051488][T16413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.075170][T16413] CPU: 1 PID: 16413 Comm: syz.3.3600 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 436.077138][T16354] team0: Port device team_slave_0 added [ 436.085332][T16413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 436.085347][T16413] Call Trace: [ 436.085356][T16413] [ 436.085364][T16413] dump_stack_lvl+0x241/0x360 [ 436.085397][T16413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.085422][T16413] ? __pfx__printk+0x10/0x10 [ 436.085449][T16413] ? __pfx_lock_release+0x10/0x10 [ 436.085478][T16413] should_fail_ex+0x3b0/0x4e0 [ 436.085509][T16413] _copy_from_iter+0x1f6/0x1960 [ 436.085542][T16413] ? __virt_addr_valid+0x183/0x520 [ 436.085565][T16413] ? skb_set_owner_w+0x238/0x3e0 [ 436.085594][T16413] ? __pfx__copy_from_iter+0x10/0x10 [ 436.085619][T16413] ? __pfx__copy_from_iter+0x10/0x10 [ 436.085650][T16413] ? page_copy_sane+0x154/0x260 [ 436.101504][T16354] team0: Port device team_slave_1 added [ 436.104600][T16413] copy_page_from_iter+0x7a/0x100 [ 436.104630][T16413] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 436.179731][T16413] tun_get_user+0xe9e/0x4560 [ 436.184338][T16413] ? __pfx_tun_get_user+0x10/0x10 [ 436.189359][T16413] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 436.194814][T16413] ? tun_get+0x1e/0x2f0 [ 436.198975][T16413] ? tun_get+0x1e/0x2f0 [ 436.203123][T16413] ? tun_get+0x27d/0x2f0 [ 436.207361][T16413] tun_chr_write_iter+0x113/0x1f0 [ 436.212381][T16413] vfs_write+0xa72/0xc90 [ 436.216626][T16413] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 436.222167][T16413] ? __pfx_vfs_write+0x10/0x10 [ 436.226935][T16413] ksys_write+0x1a0/0x2c0 [ 436.231263][T16413] ? __pfx_ksys_write+0x10/0x10 [ 436.236102][T16413] ? do_syscall_64+0x100/0x230 [ 436.240862][T16413] ? do_syscall_64+0xb6/0x230 [ 436.245533][T16413] do_syscall_64+0xf3/0x230 [ 436.250032][T16413] ? clear_bhb_loop+0x35/0x90 [ 436.254710][T16413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.260598][T16413] RIP: 0033:0x7fb033975bd9 [ 436.265003][T16413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.284597][T16413] RSP: 002b:00007fb03466f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.293001][T16413] RAX: ffffffffffffffda RBX: 00007fb033b04038 RCX: 00007fb033975bd9 [ 436.300960][T16413] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 436.308917][T16413] RBP: 00007fb03466f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 436.316876][T16413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.324833][T16413] R13: 000000000000006e R14: 00007fb033b04038 R15: 00007ffdec87d5e8 [ 436.332808][T16413] [ 436.359097][ T5101] Bluetooth: hci1: command tx timeout [ 436.425989][ T8732] hsr_slave_0: left promiscuous mode [ 436.439180][ T8732] hsr_slave_1: left promiscuous mode [ 436.457038][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.482889][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.506286][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.516352][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.557522][ T8732] veth1_macvtap: left promiscuous mode [ 436.578472][ T8732] veth0_macvtap: left promiscuous mode [ 436.596453][ T8732] veth1_vlan: left promiscuous mode [ 436.606451][ T8732] veth0_vlan: left promiscuous mode [ 436.912116][T16442] FAULT_INJECTION: forcing a failure. [ 436.912116][T16442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.926284][T16442] CPU: 1 PID: 16442 Comm: syz.1.3613 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 436.936453][T16442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 436.946496][T16442] Call Trace: [ 436.949759][T16442] [ 436.952686][T16442] dump_stack_lvl+0x241/0x360 [ 436.957378][T16442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.962569][T16442] ? __pfx__printk+0x10/0x10 [ 436.967177][T16442] ? __pfx_lock_release+0x10/0x10 [ 436.972209][T16442] should_fail_ex+0x3b0/0x4e0 [ 436.976896][T16442] _copy_from_iter+0x1f6/0x1960 [ 436.981754][T16442] ? __virt_addr_valid+0x183/0x520 [ 436.986881][T16442] ? skb_set_owner_w+0x238/0x3e0 [ 436.991828][T16442] ? __pfx__copy_from_iter+0x10/0x10 [ 436.997123][T16442] ? __pfx__copy_from_iter+0x10/0x10 [ 437.002417][T16442] ? page_copy_sane+0x154/0x260 [ 437.007268][T16442] copy_page_from_iter+0x7a/0x100 [ 437.012289][T16442] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 437.018112][T16442] tun_get_user+0xe9e/0x4560 [ 437.022725][T16442] ? __pfx_tun_get_user+0x10/0x10 [ 437.027752][T16442] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 437.033210][T16442] ? tun_get+0x1e/0x2f0 [ 437.037383][T16442] ? tun_get+0x1e/0x2f0 [ 437.041539][T16442] ? tun_get+0x27d/0x2f0 [ 437.045784][T16442] tun_chr_write_iter+0x113/0x1f0 [ 437.050809][T16442] vfs_write+0xa72/0xc90 [ 437.055057][T16442] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 437.060603][T16442] ? __pfx_vfs_write+0x10/0x10 [ 437.065383][T16442] ksys_write+0x1a0/0x2c0 [ 437.069705][T16442] ? __pfx_ksys_write+0x10/0x10 [ 437.074545][T16442] ? do_syscall_64+0x100/0x230 [ 437.079304][T16442] ? do_syscall_64+0xb6/0x230 [ 437.083977][T16442] do_syscall_64+0xf3/0x230 [ 437.088467][T16442] ? clear_bhb_loop+0x35/0x90 [ 437.093151][T16442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.099050][T16442] RIP: 0033:0x7f19c9375bd9 [ 437.103449][T16442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.123049][T16442] RSP: 002b:00007f19ca160048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.131478][T16442] RAX: ffffffffffffffda RBX: 00007f19c9504038 RCX: 00007f19c9375bd9 [ 437.139453][T16442] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 437.147415][T16442] RBP: 00007f19ca1600a0 R08: 0000000000000000 R09: 0000000000000000 [ 437.155372][T16442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.163328][T16442] R13: 000000000000006e R14: 00007f19c9504038 R15: 00007fff769bde18 [ 437.171314][T16442] [ 437.175735][ T5101] Bluetooth: hci2: command tx timeout [ 437.398813][ T8732] team0 (unregistering): Port device team_slave_1 removed [ 437.435223][ T8732] team0 (unregistering): Port device team_slave_0 removed [ 437.759702][T16416] netlink: 'syz.4.3601': attribute type 10 has an invalid length. [ 437.815796][T16354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.823637][T16354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.849708][T16354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.900288][T16441] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3613'. [ 437.986162][T16354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.005429][T16354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.038754][T16354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.123750][T16453] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3617'. [ 438.141481][T16459] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3618'. [ 438.251416][T16354] hsr_slave_0: entered promiscuous mode [ 438.260358][T16354] hsr_slave_1: entered promiscuous mode [ 438.274028][T16453] netlink: 'syz.4.3617': attribute type 11 has an invalid length. [ 438.284937][T16453] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3617'. [ 438.311594][T16373] chnl_net:caif_netlink_parms(): no params data found [ 438.409106][T16469] netlink: 184472 bytes leftover after parsing attributes in process `syz.1.3623'. [ 438.428020][ T5102] Bluetooth: hci1: command tx timeout [ 438.481765][T16467] pim6reg1: entered promiscuous mode [ 438.487154][T16467] pim6reg1: entered allmulticast mode [ 438.497651][T16471] FAULT_INJECTION: forcing a failure. [ 438.497651][T16471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.513703][T16471] CPU: 0 PID: 16471 Comm: syz.1.3624 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 438.523891][T16471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 438.533968][T16471] Call Trace: [ 438.537256][T16471] [ 438.540176][T16471] dump_stack_lvl+0x241/0x360 [ 438.544886][T16471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.550120][T16471] ? __pfx__printk+0x10/0x10 [ 438.554757][T16471] ? snprintf+0xda/0x120 [ 438.559041][T16471] should_fail_ex+0x3b0/0x4e0 [ 438.563761][T16471] _copy_to_user+0x2f/0xb0 [ 438.568195][T16471] simple_read_from_buffer+0xca/0x150 [ 438.573591][T16471] proc_fail_nth_read+0x1e9/0x250 [ 438.578647][T16471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.584193][T16471] ? rw_verify_area+0x520/0x6b0 [ 438.589070][T16471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.594626][T16471] vfs_read+0x204/0xbc0 [ 438.598773][T16471] ? __pfx_lock_release+0x10/0x10 [ 438.603803][T16471] ? do_sock_setsockopt+0x3e2/0x720 [ 438.609003][T16471] ? __pfx_vfs_read+0x10/0x10 [ 438.613683][T16471] ? __fget_files+0x29/0x470 [ 438.618282][T16471] ? __fget_files+0x3f6/0x470 [ 438.622982][T16471] ksys_read+0x1a0/0x2c0 [ 438.627237][T16471] ? __pfx_ksys_read+0x10/0x10 [ 438.632015][T16471] ? do_syscall_64+0x100/0x230 [ 438.636783][T16471] ? do_syscall_64+0xb6/0x230 [ 438.641464][T16471] do_syscall_64+0xf3/0x230 [ 438.645969][T16471] ? clear_bhb_loop+0x35/0x90 [ 438.650654][T16471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.656545][T16471] RIP: 0033:0x7f19c93746bc [ 438.660958][T16471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 438.680572][T16471] RSP: 002b:00007f19ca181040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.688983][T16471] RAX: ffffffffffffffda RBX: 00007f19c9503f60 RCX: 00007f19c93746bc [ 438.696952][T16471] RDX: 000000000000000f RSI: 00007f19ca1810b0 RDI: 0000000000000007 [ 438.704916][T16471] RBP: 00007f19ca1810a0 R08: 0000000000000000 R09: 0000000000000000 [ 438.712884][T16471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.720851][T16471] R13: 000000000000000b R14: 00007f19c9503f60 R15: 00007fff769bde18 [ 438.728839][T16471] [ 438.825523][T16373] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.841033][T16373] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.858492][T16373] bridge_slave_0: entered allmulticast mode [ 438.876763][T16373] bridge_slave_0: entered promiscuous mode [ 438.988507][T16373] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.995827][T16373] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.003298][T16373] bridge_slave_1: entered allmulticast mode [ 439.015664][T16373] bridge_slave_1: entered promiscuous mode [ 439.023102][T16485] FAULT_INJECTION: forcing a failure. [ 439.023102][T16485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.038111][T16485] CPU: 0 PID: 16485 Comm: syz.3.3628 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 439.048278][T16485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.058331][T16485] Call Trace: [ 439.061604][T16485] [ 439.064527][T16485] dump_stack_lvl+0x241/0x360 [ 439.069205][T16485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.074398][T16485] ? __pfx__printk+0x10/0x10 [ 439.078984][T16485] ? __pfx_lock_release+0x10/0x10 [ 439.084007][T16485] should_fail_ex+0x3b0/0x4e0 [ 439.088689][T16485] _copy_from_iter+0x1f6/0x1960 [ 439.093548][T16485] ? __virt_addr_valid+0x183/0x520 [ 439.098658][T16485] ? skb_set_owner_w+0x238/0x3e0 [ 439.103597][T16485] ? __pfx__copy_from_iter+0x10/0x10 [ 439.108882][T16485] ? __pfx__copy_from_iter+0x10/0x10 [ 439.114166][T16485] ? page_copy_sane+0x154/0x260 [ 439.119014][T16485] copy_page_from_iter+0x7a/0x100 [ 439.124040][T16485] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 439.129849][T16485] tun_get_user+0xe9e/0x4560 [ 439.134449][T16485] ? __pfx_tun_get_user+0x10/0x10 [ 439.139470][T16485] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 439.144927][T16485] ? tun_get+0x1e/0x2f0 [ 439.149167][T16485] ? tun_get+0x1e/0x2f0 [ 439.153314][T16485] ? tun_get+0x27d/0x2f0 [ 439.157546][T16485] tun_chr_write_iter+0x113/0x1f0 [ 439.162564][T16485] vfs_write+0xa72/0xc90 [ 439.166801][T16485] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 439.172338][T16485] ? __pfx_vfs_write+0x10/0x10 [ 439.177106][T16485] ksys_write+0x1a0/0x2c0 [ 439.181430][T16485] ? __pfx_ksys_write+0x10/0x10 [ 439.186269][T16485] ? do_syscall_64+0x100/0x230 [ 439.191034][T16485] ? do_syscall_64+0xb6/0x230 [ 439.195704][T16485] do_syscall_64+0xf3/0x230 [ 439.200206][T16485] ? clear_bhb_loop+0x35/0x90 [ 439.204879][T16485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.210767][T16485] RIP: 0033:0x7fb033975bd9 [ 439.215174][T16485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.234768][T16485] RSP: 002b:00007fb03466f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.243174][T16485] RAX: ffffffffffffffda RBX: 00007fb033b04038 RCX: 00007fb033975bd9 [ 439.251136][T16485] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 439.259118][T16485] RBP: 00007fb03466f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.267075][T16485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.275121][T16485] R13: 000000000000006e R14: 00007fb033b04038 R15: 00007ffdec87d5e8 [ 439.283116][T16485] [ 439.291071][T16483] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3628'. [ 439.312525][ T5101] Bluetooth: hci2: command tx timeout [ 439.427767][ T8732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.514737][T16496] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3631'. [ 439.536373][T16373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.558856][T16373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.624752][ T8732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.760029][ T8732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.785615][T16373] team0: Port device team_slave_0 added [ 439.815785][T16373] team0: Port device team_slave_1 added [ 439.894189][ T8732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.909001][T16503] netlink: 184472 bytes leftover after parsing attributes in process `syz.3.3634'. [ 439.962136][T16373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.969466][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.016954][T16373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.068142][T16373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.083459][T16373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.117872][T16373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.371580][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.377876][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.491211][ T5101] Bluetooth: hci1: command tx timeout [ 441.093524][T16373] hsr_slave_0: entered promiscuous mode [ 441.108150][T16373] hsr_slave_1: entered promiscuous mode [ 441.114646][T16373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.129821][T16373] Cannot create hsr debugfs directory [ 441.153939][T16518] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3641'. [ 441.198430][T16518] FAULT_INJECTION: forcing a failure. [ 441.198430][T16518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.213489][T16526] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3642'. [ 441.231608][T16518] CPU: 1 PID: 16518 Comm: syz.1.3641 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 441.241799][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 441.251862][T16518] Call Trace: [ 441.255130][T16518] [ 441.258052][T16518] dump_stack_lvl+0x241/0x360 [ 441.262738][T16518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.267934][T16518] ? __pfx__printk+0x10/0x10 [ 441.272523][T16518] ? __pfx_lock_release+0x10/0x10 [ 441.277547][T16518] should_fail_ex+0x3b0/0x4e0 [ 441.282224][T16518] _copy_from_iter+0x1f6/0x1960 [ 441.287076][T16518] ? __virt_addr_valid+0x183/0x520 [ 441.292179][T16518] ? skb_set_owner_w+0x238/0x3e0 [ 441.297111][T16518] ? __pfx__copy_from_iter+0x10/0x10 [ 441.302390][T16518] ? __pfx__copy_from_iter+0x10/0x10 [ 441.307675][T16518] ? page_copy_sane+0x46/0x260 [ 441.312436][T16518] copy_page_from_iter+0x7a/0x100 [ 441.317455][T16518] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 441.323267][T16518] tun_get_user+0xe9e/0x4560 [ 441.327882][T16518] ? __pfx_tun_get_user+0x10/0x10 [ 441.332905][T16518] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 441.338366][T16518] ? tun_get+0x1e/0x2f0 [ 441.342530][T16518] ? tun_get+0x1e/0x2f0 [ 441.346675][T16518] ? tun_get+0x27d/0x2f0 [ 441.350911][T16518] tun_chr_write_iter+0x113/0x1f0 [ 441.355930][T16518] vfs_write+0xa72/0xc90 [ 441.360167][T16518] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 441.365713][T16518] ? __pfx_vfs_write+0x10/0x10 [ 441.370501][T16518] ksys_write+0x1a0/0x2c0 [ 441.374839][T16518] ? __pfx_ksys_write+0x10/0x10 [ 441.379680][T16518] ? do_syscall_64+0x100/0x230 [ 441.384446][T16518] ? do_syscall_64+0xb6/0x230 [ 441.389116][T16518] do_syscall_64+0xf3/0x230 [ 441.393613][T16518] ? clear_bhb_loop+0x35/0x90 [ 441.398285][T16518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.404172][T16518] RIP: 0033:0x7f19c9375bd9 [ 441.408577][T16518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.428174][T16518] RSP: 002b:00007f19ca181048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.436579][T16518] RAX: ffffffffffffffda RBX: 00007f19c9503f60 RCX: 00007f19c9375bd9 [ 441.444539][T16518] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 441.452500][T16518] RBP: 00007f19ca1810a0 R08: 0000000000000000 R09: 0000000000000000 [ 441.460458][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.468414][T16518] R13: 000000000000000b R14: 00007f19c9503f60 R15: 00007fff769bde18 [ 441.476384][T16518] [ 441.490582][ T5101] Bluetooth: hci2: command tx timeout [ 441.624661][T16354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 441.646438][T16354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 441.716671][ T8732] bridge_slave_1: left allmulticast mode [ 441.732129][ T8732] bridge_slave_1: left promiscuous mode [ 441.738151][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.759353][ T8732] bridge_slave_0: left allmulticast mode [ 441.766246][ T8732] bridge_slave_0: left promiscuous mode [ 441.772812][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.173406][ T8732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.184319][ T8732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.195634][ T8732] bond0 (unregistering): Released all slaves [ 442.209954][T16354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.228466][T16554] netlink: 'syz.3.3654': attribute type 1 has an invalid length. [ 442.228479][T16354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.534836][T16571] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 442.580272][ T5101] Bluetooth: hci1: command tx timeout [ 442.780993][T16584] netlink: 'syz.1.3664': attribute type 6 has an invalid length. [ 442.852556][ T8732] hsr_slave_0: left promiscuous mode [ 442.874383][ T8732] hsr_slave_1: left promiscuous mode [ 442.882270][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.889717][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.914979][ T8732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.928259][ T8732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.980622][ T8732] veth1_macvtap: left promiscuous mode [ 442.986873][ T8732] veth0_macvtap: left promiscuous mode [ 442.994831][ T8732] veth1_vlan: left promiscuous mode [ 443.000658][ T8732] veth0_vlan: left promiscuous mode [ 443.531093][ T5101] Bluetooth: hci2: command tx timeout [ 443.686173][ T8732] team0 (unregistering): Port device team_slave_1 removed [ 443.725423][ T8732] team0 (unregistering): Port device team_slave_0 removed [ 444.058638][T16579] netlink: 'syz.1.3664': attribute type 10 has an invalid length. [ 444.083244][T16579] bond0: (slave team0): Releasing backup interface [ 444.094976][T16579] team0: Cannot enslave team device to itself [ 444.259217][T16354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.283376][T16614] __nla_validate_parse: 7 callbacks suppressed [ 444.283413][T16614] netlink: 184472 bytes leftover after parsing attributes in process `syz.3.3678'. [ 444.346442][T16373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.422831][T16621] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3683'. [ 444.442607][T16621] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 444.450456][T16373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.452951][T16621] FAULT_INJECTION: forcing a failure. [ 444.452951][T16621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.475710][T16621] CPU: 0 PID: 16621 Comm: syz.3.3683 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 444.481538][T16373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.485866][T16621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 444.502575][T16621] Call Trace: [ 444.505847][T16621] [ 444.508770][T16621] dump_stack_lvl+0x241/0x360 [ 444.513452][T16621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.518646][T16621] ? __pfx__printk+0x10/0x10 [ 444.523235][T16621] ? __pfx_lock_release+0x10/0x10 [ 444.528248][T16621] ? __lock_acquire+0x1346/0x1fd0 [ 444.533267][T16621] should_fail_ex+0x3b0/0x4e0 [ 444.537970][T16621] _copy_from_user+0x2f/0xe0 [ 444.542552][T16621] kstrtouint_from_user+0xc6/0x190 [ 444.547662][T16621] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 444.553380][T16621] ? __pfx_lock_acquire+0x10/0x10 [ 444.558404][T16621] proc_fail_nth_write+0xaa/0x2d0 [ 444.563426][T16621] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 444.569311][T16621] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 444.574934][T16621] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 444.580554][T16621] vfs_write+0x2a2/0xc90 [ 444.584792][T16621] ? __pfx_vfs_write+0x10/0x10 [ 444.589546][T16621] ? __fget_files+0x29/0x470 [ 444.594127][T16621] ? __fget_files+0x3f6/0x470 [ 444.598802][T16621] ksys_write+0x1a0/0x2c0 [ 444.603124][T16621] ? __pfx_ksys_write+0x10/0x10 [ 444.607962][T16621] ? do_syscall_64+0x100/0x230 [ 444.612719][T16621] ? do_syscall_64+0xb6/0x230 [ 444.617389][T16621] do_syscall_64+0xf3/0x230 [ 444.621888][T16621] ? clear_bhb_loop+0x35/0x90 [ 444.626561][T16621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.632444][T16621] RIP: 0033:0x7fb03397475f [ 444.636847][T16621] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 444.656442][T16621] RSP: 002b:00007fb034690040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 444.664846][T16621] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb03397475f [ 444.672803][T16621] RDX: 0000000000000001 RSI: 00007fb0346900b0 RDI: 0000000000000008 [ 444.680764][T16621] RBP: 00007fb0346900a0 R08: 0000000000000000 R09: 0000000000000000 [ 444.688719][T16621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 444.696675][T16621] R13: 000000000000000b R14: 00007fb033b03f60 R15: 00007ffdec87d5e8 [ 444.704646][T16621] [ 444.713343][T16624] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3681'. [ 444.736404][T16373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.781884][T16354] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.829113][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.836326][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.875824][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.883016][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.078203][T16373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.128767][T16373] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.169699][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.176885][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.207303][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.214500][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.252111][T16641] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3690'. [ 445.347042][T16373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.695745][T16354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.927509][T16354] veth0_vlan: entered promiscuous mode [ 445.962412][T16354] veth1_vlan: entered promiscuous mode [ 446.046655][T16373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.212322][T16354] veth0_macvtap: entered promiscuous mode [ 446.234075][T16658] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3695'. [ 446.253117][T16373] veth0_vlan: entered promiscuous mode [ 446.290339][T16354] veth1_macvtap: entered promiscuous mode [ 446.300039][T16373] veth1_vlan: entered promiscuous mode [ 446.349890][T16354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.371623][T16354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.388331][T16354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.417494][T16354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.428078][T16354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.440370][T16354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.451545][T16663] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3696'. [ 446.482528][T16354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.535657][T16354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.548739][T16354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.560782][T16354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.572060][T16354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.590127][T16354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.603431][T16354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.619508][T16354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.676684][T16354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.687185][T16354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.698518][T16354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.707554][T16354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.740084][T16373] veth0_macvtap: entered promiscuous mode [ 446.905347][T16373] veth1_macvtap: entered promiscuous mode [ 447.002441][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.014057][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.025490][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.036297][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.062536][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.075810][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.093211][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.104558][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.117369][T16373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.125580][T16680] netlink: 'syz.1.3704': attribute type 10 has an invalid length. [ 447.136573][T16680] batman_adv: batadv0: Adding interface: team0 [ 447.143692][T16680] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.169690][T16680] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 447.193081][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.210383][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.221186][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.231909][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.243144][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.254923][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.272348][T16373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.288513][T16373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.317572][T16373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.334173][T16373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.373469][T16373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.392523][T16373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.406071][T16373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.439508][T16686] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3706'. [ 447.530833][ T5102] Bluetooth: hci4: command 0x0406 tx timeout [ 447.551722][T16688] netlink: 'syz.1.3707': attribute type 19 has an invalid length. [ 447.563164][T16688] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3707'. [ 447.614473][ T8755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.624495][ T8755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.660931][ T8722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.678387][ T8722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.745802][ T8722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.767686][ T8722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.809040][ T8755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.827985][ T8755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.737663][ T8722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.762209][T16715] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3719'. [ 448.802427][T16716] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 449.084988][ T8722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.224121][ T8722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.274523][ T8722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.343674][ T8722] bridge_slave_1: left allmulticast mode [ 449.349343][ T8722] bridge_slave_1: left promiscuous mode [ 449.355348][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.364449][ T8722] bridge_slave_0: left allmulticast mode [ 449.370073][ T8722] bridge_slave_0: left promiscuous mode [ 449.376233][ T8722] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.622241][ T8722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.635410][ T8722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.646226][ T8722] bond0 (unregistering): Released all slaves [ 449.795541][T16722] netlink: 'syz.3.3721': attribute type 19 has an invalid length. [ 449.809861][T16722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3721'. [ 450.117085][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 450.127840][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 450.136427][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 450.157026][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 450.165119][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 450.173182][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.302206][ T8722] hsr_slave_0: left promiscuous mode [ 450.308461][ T8722] hsr_slave_1: left promiscuous mode [ 450.320086][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.336968][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.345184][ T8722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.358567][ T8722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.395628][ T8722] veth1_macvtap: left promiscuous mode [ 450.402726][ T8722] veth0_macvtap: left promiscuous mode [ 450.408450][ T8722] veth1_vlan: left promiscuous mode [ 450.419610][ T8722] veth0_vlan: left promiscuous mode [ 451.071219][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.085702][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.093523][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.105493][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.124080][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 451.134462][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.288678][ T8722] team0 (unregistering): Port device team_slave_1 removed [ 451.335782][ T8722] team0 (unregistering): Port device team_slave_0 removed [ 451.486147][T16765] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 451.713763][T16769] netlink: 'syz.1.3736': attribute type 3 has an invalid length. [ 451.721713][T16769] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3736'. [ 451.747460][T16764] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3734'. [ 451.822626][T16770] netlink: 'syz.1.3736': attribute type 3 has an invalid length. [ 451.846202][T16770] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3736'. [ 451.907954][T16783] netlink: 'syz.1.3739': attribute type 21 has an invalid length. [ 451.926373][T16783] netlink: 'syz.1.3739': attribute type 1 has an invalid length. [ 451.935814][T16783] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3739'. [ 451.946013][T16778] netlink: 'syz.3.3738': attribute type 10 has an invalid length. [ 451.955047][T16778] bridge0: port 3(netdevsim0) entered blocking state [ 451.964779][T16778] bridge0: port 3(netdevsim0) entered disabled state [ 451.971698][T16778] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 451.981468][T16778] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 451.989368][T16778] bridge0: port 3(netdevsim0) entered blocking state [ 451.996188][T16778] bridge0: port 3(netdevsim0) entered forwarding state [ 452.117439][T16796] netlink: 'syz.3.3742': attribute type 9 has an invalid length. [ 452.128886][T16738] chnl_net:caif_netlink_parms(): no params data found [ 452.159918][T16796] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3742'. [ 452.256828][ T5102] Bluetooth: hci1: command tx timeout [ 452.541937][T16800] netlink: 'syz.3.3742': attribute type 9 has an invalid length. [ 452.549255][T16738] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.562884][T16800] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3742'. [ 452.580516][T16738] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.591927][T16738] bridge_slave_0: entered allmulticast mode [ 452.607314][T16738] bridge_slave_0: entered promiscuous mode [ 452.689061][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.703557][T16738] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.714471][T16738] bridge_slave_1: entered allmulticast mode [ 452.726040][T16738] bridge_slave_1: entered promiscuous mode [ 452.813858][T16813] netlink: 'syz.4.3746': attribute type 2 has an invalid length. [ 452.826700][T16813] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 452.836978][T16813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.923157][T16738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.986669][T16738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.095479][T16750] chnl_net:caif_netlink_parms(): no params data found [ 453.113865][T16738] team0: Port device team_slave_0 added [ 453.123445][T16738] team0: Port device team_slave_1 added [ 453.156321][ T8722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.185723][T16823] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3749'. [ 453.197606][T16823] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 453.210821][ T5102] Bluetooth: hci2: command tx timeout [ 453.261657][T16738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.271727][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.298435][T16738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.326084][ T8722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.353939][T16738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.361467][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.383116][T16828] ================================================================== [ 453.387659][T16738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.395379][T16828] BUG: KASAN: slab-use-after-free in dev_map_enqueue+0x40/0x3e0 [ 453.395411][T16828] Read of size 8 at addr ffff88806c4a6b00 by task syz.1.3751/16828 [ 453.395428][T16828] [ 453.395436][T16828] CPU: 0 PID: 16828 Comm: syz.1.3751 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 453.395457][T16828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 453.395469][T16828] Call Trace: [ 453.395478][T16828] [ 453.395487][T16828] dump_stack_lvl+0x241/0x360 [ 453.395515][T16828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.395541][T16828] ? __pfx__printk+0x10/0x10 [ 453.395565][T16828] ? _printk+0xd5/0x120 [ 453.395588][T16828] ? __virt_addr_valid+0x183/0x520 [ 453.395612][T16828] ? __virt_addr_valid+0x183/0x520 [ 453.395637][T16828] print_report+0x169/0x550 [ 453.395659][T16828] ? __virt_addr_valid+0x183/0x520 [ 453.395681][T16828] ? __virt_addr_valid+0x183/0x520 [ 453.395704][T16828] ? __virt_addr_valid+0x44e/0x520 [ 453.395727][T16828] ? __phys_addr+0xba/0x170 [ 453.395751][T16828] ? dev_map_enqueue+0x40/0x3e0 [ 453.395777][T16828] kasan_report+0x143/0x180 [ 453.395799][T16828] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 453.395826][T16828] ? dev_map_enqueue+0x40/0x3e0 [ 453.523287][T16828] dev_map_enqueue+0x40/0x3e0 [ 453.527967][T16828] xdp_do_redirect_frame+0x2a6/0x660 [ 453.533250][T16828] bpf_test_run_xdp_live+0xe60/0x1e60 [ 453.538625][T16828] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 453.544160][T16828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 453.549977][T16828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 453.555863][T16828] ? __might_fault+0xaa/0x120 [ 453.560540][T16828] ? __might_fault+0xc6/0x120 [ 453.565220][T16828] ? _copy_from_user+0xa6/0xe0 [ 453.569969][T16828] ? bpf_test_init+0x15a/0x180 [ 453.574721][T16828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 453.580169][T16828] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 453.585540][T16828] ? __pfx_lock_release+0x10/0x10 [ 453.590556][T16828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 453.596349][T16828] ? __fget_files+0x29/0x470 [ 453.600930][T16828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 453.606724][T16828] bpf_prog_test_run+0x33a/0x3b0 [ 453.611649][T16828] __sys_bpf+0x48d/0x810 [ 453.615883][T16828] ? __pfx___sys_bpf+0x10/0x10 [ 453.620639][T16828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 453.626604][T16828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 453.632917][T16828] ? do_syscall_64+0x100/0x230 [ 453.637673][T16828] __x64_sys_bpf+0x7c/0x90 [ 453.642082][T16828] do_syscall_64+0xf3/0x230 [ 453.646574][T16828] ? clear_bhb_loop+0x35/0x90 [ 453.651243][T16828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.657132][T16828] RIP: 0033:0x7f19c9375bd9 [ 453.661543][T16828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.681136][T16828] RSP: 002b:00007f19ca181048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.689532][T16828] RAX: ffffffffffffffda RBX: 00007f19c9503f60 RCX: 00007f19c9375bd9 [ 453.697490][T16828] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 453.705443][T16828] RBP: 00007f19c93e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 453.713400][T16828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.721353][T16828] R13: 000000000000000b R14: 00007f19c9503f60 R15: 00007fff769bde18 [ 453.729315][T16828] [ 453.732316][T16828] [ 453.734621][T16828] Allocated by task 15403: [ 453.739011][T16828] kasan_save_track+0x3f/0x80 [ 453.743677][T16828] __kasan_kmalloc+0x98/0xb0 [ 453.748252][T16828] __kmalloc_node_noprof+0x22a/0x440 [ 453.753526][T16828] kvmalloc_node_noprof+0x72/0x190 [ 453.758625][T16828] nf_hook_entries_grow+0x288/0x720 [ 453.763814][T16828] __nf_register_net_hook+0x278/0x8d0 [ 453.769176][T16828] nf_register_net_hook+0xb0/0x190 [ 453.774280][T16828] nf_register_net_hooks+0x41/0x1a0 [ 453.779489][T16828] brnf_device_event+0x13a/0x1e0 [ 453.784425][T16828] notifier_call_chain+0x19f/0x3e0 [ 453.789529][T16828] register_netdevice+0x1570/0x19e0 [ 453.794714][T16828] br_dev_newlink+0x27/0x100 [ 453.799295][T16828] rtnl_newlink+0x158f/0x20a0 [ 453.803959][T16828] rtnetlink_rcv_msg+0x89b/0x1180 [ 453.808977][T16828] netlink_rcv_skb+0x1e3/0x430 [ 453.813742][T16828] netlink_unicast+0x7ea/0x980 [ 453.818494][T16828] netlink_sendmsg+0x8db/0xcb0 [ 453.823250][T16828] __sock_sendmsg+0x221/0x270 [ 453.827920][T16828] __sys_sendto+0x3a4/0x4f0 [ 453.832412][T16828] __x64_sys_sendto+0xde/0x100 [ 453.837161][T16828] do_syscall_64+0xf3/0x230 [ 453.841655][T16828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.847537][T16828] [ 453.849846][T16828] Freed by task 15925: [ 453.853893][T16828] kasan_save_track+0x3f/0x80 [ 453.858559][T16828] kasan_save_free_info+0x40/0x50 [ 453.863575][T16828] poison_slab_object+0xe0/0x150 [ 453.868501][T16828] __kasan_slab_free+0x37/0x60 [ 453.873250][T16828] kfree+0x149/0x360 [ 453.877135][T16828] rcu_core+0xafd/0x1830 [ 453.881363][T16828] handle_softirqs+0x2c4/0x970 [ 453.886138][T16828] __irq_exit_rcu+0xf4/0x1c0 [ 453.890713][T16828] irq_exit_rcu+0x9/0x30 [ 453.894938][T16828] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 453.900558][T16828] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.906527][T16828] [ 453.908832][T16828] Last potentially related work creation: [ 453.914528][T16828] kasan_save_stack+0x3f/0x60 [ 453.919188][T16828] __kasan_record_aux_stack+0xac/0xc0 [ 453.924547][T16828] call_rcu+0x167/0xa70 [ 453.928686][T16828] nf_unregister_net_hooks+0xd0/0x140 [ 453.934143][T16828] brnf_exit_net+0x6c/0x130 [ 453.938635][T16828] cleanup_net+0x802/0xcc0 [ 453.943052][T16828] process_scheduled_works+0xa2c/0x1830 [ 453.948618][T16828] worker_thread+0x86d/0xd50 [ 453.953208][T16828] kthread+0x2f0/0x390 [ 453.957270][T16828] ret_from_fork+0x4b/0x80 [ 453.961679][T16828] ret_from_fork_asm+0x1a/0x30 [ 453.966439][T16828] [ 453.968748][T16828] The buggy address belongs to the object at ffff88806c4a6b00 [ 453.968748][T16828] which belongs to the cache kmalloc-cg-64 of size 64 [ 453.982877][T16828] The buggy address is located 0 bytes inside of [ 453.982877][T16828] freed 64-byte region [ffff88806c4a6b00, ffff88806c4a6b40) [ 453.996394][T16828] [ 453.998703][T16828] The buggy address belongs to the physical page: [ 454.005189][T16828] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806c4a6f00 pfn:0x6c4a6 [ 454.015236][T16828] memcg:ffff888069ed9e01 [ 454.019465][T16828] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 454.027001][T16828] page_type: 0xffffefff(slab) [ 454.031667][T16828] raw: 00fff00000000000 ffff88801504dc80 0000000000000000 dead000000000001 [ 454.040235][T16828] raw: ffff88806c4a6f00 0000000000200007 00000001ffffefff ffff888069ed9e01 [ 454.048796][T16828] page dumped because: kasan: bad access detected [ 454.055196][T16828] page_owner tracks the page as allocated [ 454.060892][T16828] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5630, tgid 5630 (syz-executor), ts 107769606972, free_ts 107769196907 [ 454.080244][T16828] post_alloc_hook+0x1f3/0x230 [ 454.085003][T16828] get_page_from_freelist+0x2e4c/0x2f10 [ 454.090539][T16828] __alloc_pages_noprof+0x256/0x6c0 [ 454.095725][T16828] alloc_slab_page+0x5f/0x120 [ 454.100388][T16828] allocate_slab+0x5a/0x2f0 [ 454.104876][T16828] ___slab_alloc+0xcd1/0x14b0 [ 454.109535][T16828] __slab_alloc+0x58/0xa0 [ 454.113847][T16828] kmalloc_trace_noprof+0x1d5/0x2c0 [ 454.119034][T16828] alloc_fdtable+0xa1/0x280 [ 454.123523][T16828] dup_fd+0x893/0xce0 [ 454.127489][T16828] copy_files+0x150/0x2a0 [ 454.131804][T16828] copy_process+0x171b/0x3dc0 [ 454.136463][T16828] kernel_clone+0x226/0x8f0 [ 454.140972][T16828] __x64_sys_clone+0x258/0x2a0 [ 454.145722][T16828] do_syscall_64+0xf3/0x230 [ 454.150305][T16828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.156185][T16828] page last free pid 5630 tgid 5630 stack trace: [ 454.162577][T16828] free_unref_page+0xd22/0xea0 [ 454.167327][T16828] vfree+0x186/0x2e0 [ 454.171206][T16828] do_ip6t_get_ctl+0x11eb/0x1820 [ 454.176133][T16828] nf_getsockopt+0x299/0x2c0 [ 454.180710][T16828] ipv6_getsockopt+0x263/0x380 [ 454.185474][T16828] tcp_getsockopt+0x163/0x1c0 [ 454.190137][T16828] do_sock_getsockopt+0x373/0x850 [ 454.195147][T16828] __sys_getsockopt+0x271/0x330 [ 454.199984][T16828] __x64_sys_getsockopt+0xb5/0xd0 [ 454.204993][T16828] do_syscall_64+0xf3/0x230 [ 454.209487][T16828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.215374][T16828] [ 454.217679][T16828] Memory state around the buggy address: [ 454.223286][T16828] ffff88806c4a6a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 454.231332][T16828] ffff88806c4a6a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 454.239374][T16828] >ffff88806c4a6b00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 454.247419][T16828] ^ [ 454.251471][T16828] ffff88806c4a6b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 454.259511][T16828] ffff88806c4a6c00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 454.267551][T16828] ================================================================== [ 454.275722][T16828] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 454.282923][T16828] CPU: 0 PID: 16828 Comm: syz.1.3751 Not tainted 6.10.0-rc6-syzkaller-00158-g0005b2dc43f9 #0 [ 454.293061][T16828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 454.303190][T16828] Call Trace: [ 454.306453][T16828] [ 454.309372][T16828] dump_stack_lvl+0x241/0x360 [ 454.314044][T16828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.319232][T16828] ? __pfx__printk+0x10/0x10 [ 454.323810][T16828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 454.329777][T16828] ? vscnprintf+0x5d/0x90 [ 454.334093][T16828] panic+0x349/0x860 [ 454.337979][T16828] ? check_panic_on_warn+0x21/0xb0 [ 454.343081][T16828] ? __pfx_panic+0x10/0x10 [ 454.347489][T16828] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 454.353366][T16828] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 454.359243][T16828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 454.365555][T16828] check_panic_on_warn+0x86/0xb0 [ 454.370482][T16828] ? dev_map_enqueue+0x40/0x3e0 [ 454.375323][T16828] end_report+0x77/0x160 [ 454.379554][T16828] kasan_report+0x154/0x180 [ 454.384047][T16828] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 454.390024][T16828] ? dev_map_enqueue+0x40/0x3e0 [ 454.394865][T16828] dev_map_enqueue+0x40/0x3e0 [ 454.399532][T16828] xdp_do_redirect_frame+0x2a6/0x660 [ 454.404813][T16828] bpf_test_run_xdp_live+0xe60/0x1e60 [ 454.410194][T16828] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 454.415731][T16828] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 454.421540][T16828] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 454.427425][T16828] ? __might_fault+0xaa/0x120 [ 454.432094][T16828] ? __might_fault+0xc6/0x120 [ 454.436761][T16828] ? _copy_from_user+0xa6/0xe0 [ 454.441513][T16828] ? bpf_test_init+0x15a/0x180 [ 454.446261][T16828] ? xdp_convert_md_to_buff+0x5b/0x330 [ 454.451707][T16828] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 454.457071][T16828] ? __pfx_lock_release+0x10/0x10 [ 454.462083][T16828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 454.467878][T16828] ? __fget_files+0x29/0x470 [ 454.472462][T16828] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 454.478258][T16828] bpf_prog_test_run+0x33a/0x3b0 [ 454.483186][T16828] __sys_bpf+0x48d/0x810 [ 454.487424][T16828] ? __pfx___sys_bpf+0x10/0x10 [ 454.492183][T16828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 454.498146][T16828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 454.504460][T16828] ? do_syscall_64+0x100/0x230 [ 454.509216][T16828] __x64_sys_bpf+0x7c/0x90 [ 454.513623][T16828] do_syscall_64+0xf3/0x230 [ 454.518115][T16828] ? clear_bhb_loop+0x35/0x90 [ 454.522785][T16828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.528667][T16828] RIP: 0033:0x7f19c9375bd9 [ 454.533067][T16828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.552657][T16828] RSP: 002b:00007f19ca181048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 454.561068][T16828] RAX: ffffffffffffffda RBX: 00007f19c9503f60 RCX: 00007f19c9375bd9 [ 454.569024][T16828] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 454.576978][T16828] RBP: 00007f19c93e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 454.584936][T16828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.592891][T16828] R13: 000000000000000b R14: 00007f19c9503f60 R15: 00007fff769bde18 [ 454.600855][T16828] [ 454.604075][T16828] Kernel Offset: disabled [ 454.608382][T16828] Rebooting in 86400 seconds..