last executing test programs: 8.393635871s ago: executing program 3 (id=1739): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x500}, 0x2d) 8.243218115s ago: executing program 3 (id=1743): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x1, 0x0, 0xc000000, 0x2921, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100104, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x4, 0x4}, 0x50) r1 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x4, 0x0, @loopback}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000040c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000280000000000000000000000070000009404000744", @ANYRES8=r2], 0x48, 0xffff0000}, 0x0) 8.089414011s ago: executing program 3 (id=1744): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a0000000400000004"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x10102, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=0xffffffffffffffff, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x18, &(0x7f0000000000), 0x8) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x4018}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x7e3, 0x6, 0xfffe, 0x0, 0x6, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000ffc000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x161) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00'], 0x20}, 0x0) 6.722967354s ago: executing program 3 (id=1746): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="600000004e007f049e", 0x9}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd75, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000067f2722e5fbfe78d413a0f2484a50096cecc7ece0c38e90ef22ff65ce4da8e4ce0f23a7fc496bb2e912ea850f60fc9"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xa, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xd79}, [@tail_call, @jmp={0x5, 0x0, 0x7, 0x4, 0x7, 0x50, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000000040), 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000740)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x2, @remote, 0x17}, 0x80, 0x0}, 0x6000084) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b"], 0x0, 0x4a}, 0x28) (async) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x5, 0x81, 0x7, 0x6, 0x0, 0x8, 0x108, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbbd, 0x0, @perf_config_ext={0xab, 0xff0000}, 0x80, 0x4, 0xe9be, 0x1, 0x32, 0x39db, 0xa, 0x0, 0x10, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x9, 0x0, 0x20, 0x0, 0x2, 0x8000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x3542, 0x1ff, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffefffffff, r5, 0xa) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000d500000085100000ffffffff18000000870000000000000008000000180100002020702500000000002020207b1af8feffeb0000bf8100000000000007010000f8ffffffb702000008000000b7030000d78000008500000006000000950000000000000085200000020000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0xd, 0x64, &(0x7f00000001c0)=""/100, 0x41000, 0x8, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x6, 0xc66a, 0x25bc}, 0x10, 0x38df, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x5, 0x0, 0x4}, {0x4, 0x2, 0x6, 0x3}, {0x2, 0x4, 0x3}, {0x1, 0x1, 0x7, 0x8}, {0x5, 0x1, 0xa, 0x2}], 0x10, 0x80000001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="090000000400"], 0x50) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000600)={r6}) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x110, 0x2, 0xfffffffe}}], 0x30}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) (async) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) 6.581003568s ago: executing program 3 (id=1749): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="ffd9035e71d0284ad32a5f49f175", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_type(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x10, &(0x7f0000000700)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0xfffffefb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x900}, 0x54) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x4, &(0x7f0000000000), 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.367287686s ago: executing program 3 (id=1754): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000180)) close(r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r4, 0x29, 0x31, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.928078664s ago: executing program 0 (id=1776): r0 = socket$kcm(0x10, 0x5, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x12, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5a89}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xb, &(0x7f0000000300)=""/11, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x7fff, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x4, 0x5, 0x7, 0xc}, {0x0, 0x5, 0x4, 0xc}, {0x4, 0x3, 0x4, 0x2}, {0x2, 0x2, 0x7, 0xc}, {0x5, 0x2, 0x5, 0x2}, {0x4, 0x2, 0xb, 0x9}, {0x2, 0x2, 0x5, 0xc}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000085000000131f000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030000000000000001000000", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x2f, &(0x7f0000000000)="06", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0xb, 0x2, 0x2}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.057138554s ago: executing program 0 (id=1778): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000040000000000000000950000000000000047030000100000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x76f}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(r3, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r10, r7}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1000000000000000000000000000b38eb229391e8b213726be230edfa0b17abb27a3b0229550190f7a8ef9819e225f1845a4fc064a1d89c61b4e1da4934c9a2d25f9b948d646d7284a5a7a6f71974d2e998b72fd5a9ff2a2b268b407809680b1bbd0b7c3ceee3879bb8b6a9cf386040b6c3d66e5198f17bdb11e00"/133], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r12, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 2.006140366s ago: executing program 1 (id=1780): gettid() (async) r0 = gettid() r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x40, 0x56, 0x5, 0x10, 0x0, 0x3, 0x0, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x5, @perf_config_ext={0x4, 0xc300000000000}, 0x14014, 0x3, 0xd8, 0x7, 0x3, 0x2, 0x5, 0x0, 0x1, 0x0, 0x7}, r0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x143}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='^,^)]\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='^,^)]\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x3, 0xe, 0x2, 0x40, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x8e, &(0x7f00000001c0)=""/142, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x6d11, 0xffffffffffffffff, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x5, 0xf, 0x7}, {0x2, 0x4, 0x8, 0x1}, {0x2, 0x5, 0x10, 0x4}, {0x1, 0x2, 0xc, 0x9}, {0x5, 0x1, 0xb, 0x1}], 0x10, 0x1}, 0x94) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4d, 0x0, 0x0, 0x0, 0x4ed}, [@jmp={0x5, 0x1, 0xb, 0x4, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x1, 0x8, 0x100, 0x10}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}]}, &(0x7f0000000580)='GPL\x00', 0x3, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x14, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0)={0x3, 0x10, 0x1, 0x6}, 0x10, 0x23799, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001600)=[{0x1, 0x5, 0x8, 0x2}, {0x2, 0x3, 0x0, 0xa}, {0x2, 0x3, 0xb, 0xa}, {0x1, 0x3, 0x7, 0x3}, {0x3, 0x4, 0x8, 0xb}, {0x3, 0x4, 0x5, 0x2}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, r2, 0x1e, 0xc, r3, @void, @value=r4}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, r2, 0x1e, 0xc, r3, @void, @value=r4}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001740)='{$\x00') r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={r5, 0x20, &(0x7f0000001980)={&(0x7f00000017c0)=""/201, 0xc9, 0x0, &(0x7f00000018c0)=""/182, 0xb6}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000019c0)={r5, 0x20, &(0x7f0000001980)={&(0x7f00000017c0)=""/201, 0xc9, 0x0, &(0x7f00000018c0)=""/182, 0xb6}}, 0x10) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001a00)='tasks\x00', 0x2, 0x0) r8 = getpid() write$cgroup_pid(r7, &(0x7f0000001a40)=r8, 0x12) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000001a80)=@raw=[@alu={0x4, 0x0, 0x9, 0x2, 0x5, 0x254}], &(0x7f0000001ac0)='syzkaller\x00', 0x14eb, 0x4d, &(0x7f0000001b00)=""/77, 0x0, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x4, 0xd, 0x2, 0xf}, 0x10, 0x160a7, r3, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_clone(0x6004000, &(0x7f0000001c80)="255bf700f1dc81", 0x7, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)="2506bb53a0662c81efc812d3f299227387ec8942bb6f019f61721ee432236ba8293f7719f46f556978bab516b2150739d749abf0ef69653ef1f4887e6559da0d5477ab88227ba4ec8388414899102b4bbf7a8d3ad4ad92d6d91e02fd0a87baf5375591a206bd2780bfcad1d60d9bb97fc5fc771446731e8bdc4663fbd728cae4aca4b152611aa85d3a6ae3127b") r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x14, 0x39, &(0x7f0000001e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcaf8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@jmp={0x5, 0x1, 0x4, 0x1, 0x8, 0xffffffffffffffff, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x4, 0x4, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002000)='GPL\x00', 0x3, 0x6b, &(0x7f0000002040)=""/107, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, r5, 0x8, &(0x7f00000020c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002100)={0x2, 0x9, 0x1, 0x1}, 0x10, r6, r4, 0x2, 0x0, &(0x7f0000002140)=[{0x2, 0x4, 0xb, 0x7}, {0x1, 0x3, 0x10, 0x1}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002340)={@cgroup, 0x5, 0x1, 0x7, &(0x7f0000002240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002280)=[0x0], &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002680)={r9, 0xe0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000002400)=[0x0, 0x0], &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000002480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000024c0), &(0x7f0000002500), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000002540)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002680)={r9, 0xe0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000002400)=[0x0, 0x0], &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000002480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000024c0), &(0x7f0000002500), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000002540)}}, 0x10) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000026c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002380)={@ifindex=r12, r10, 0x22, 0x2000, r2, @value=r13, @void, @void, @void, r11}, 0x20) write$cgroup_pid(r7, &(0x7f0000002700)=r8, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002840)={@ifindex=r12, 0x16, 0x1, 0x400, &(0x7f0000002740)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002780)=[0x0, 0x0, 0x0], &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002800)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002840)={@ifindex=r12, 0x16, 0x1, 0x400, &(0x7f0000002740)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002780)=[0x0, 0x0, 0x0], &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002800)=[0x0, 0x0], 0x0}, 0x40) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000028c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10001, '\x00', r12, r5, 0x5, 0x1, 0x4}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002980)={r0, r1, 0x0, 0x3, &(0x7f0000002940)='{$\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002980)={r0, r1, 0x0, 0x3, &(0x7f0000002940)='{$\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002880)={@map=r16, r10, 0x9, 0x22, r3, @void, @void, @void, @value=r17, r15}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000029c0)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000029c0)={r4}, 0x4) mkdir(&(0x7f0000002a00)='./file0/file0\x00', 0x119) (async) mkdir(&(0x7f0000002a00)='./file0/file0\x00', 0x119) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002a40)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r18, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000002a80)="acde0653ad3ff2110e290a0d49bad98a1f1e34889d6a9664f5a8a198c06cfcf7e9fa28bf6ea867a1e4bec34ba101a236e102c81ff99ecaa8235ed7334fd1c988bbd3e0f71084a172e9a463603e5305e93c435cb9c008a8b9ffa7fcc1de09e783b11f2dd9d58bec284ea94cb9bf8853cb57a8362e4c4e7d0f17b40149524696404f2c05edeb0e9497d9dc7f267ee936fcfbe672b18c5be339e2dc173cd4ab2b3d8e9b7dac87535240f9", 0xa9}, {&(0x7f0000002b40)="c69773bca5097ac56304ad9cc6acc24f491336f307ea7f2db381cda9bb57dfcf88b70340286c2dab2066949b38f536ee2c0e3e6eeb95bf0c740c4f4e6b9a460032df9cdb99983b810b9f400f6f99a4215c4e00ec5fb364beaa1f1a5c0e8d24d013217c77d7a146afe4216ab8a6da289bffb05b8338dd817a29832c17930189516e7b9ce933d2735d1a09202292b572504a4d2eb45033edd2e0c5c1d951ebe9a82c036089936efc5e8accb9bf7382ead56928093882ac1e8072e176f7ec0a464afce5cbe2034fc60b185b78166098a9a803d04fc01a57dd6e10cb691be7295ddf0b50143c1ac9c7c88fe73a39eb2b0845c4b36244e64de728b2708a54cb7b30c29eee01a6f73a3980727d57cb4589c065d0933c51dca6cda51b22c7f6c5747ef778d479e3ed99e2ea19c2f392a508f6beb4f8c1dd68798be5d2e40c6df557889f8a59bf77caf4445c55a1b4e2b4321bb9088f380951cae9c9d0d1d180ac8dbdb412609e17bdc6474de1a9223c90cbbe8fdbfaff18263ea81b9f7f778148273f93e85d9364b4b7cde8910a6b62972136f0ab356b3c074d2a21e14fbe78198dd9da050afe89d0002579adc5fe5d96b44ee644e1ac0d6799c1aa9d7ddec7e87d90339042b22856b635bbeb09456b9f8ea307b6f8dcb5dc2b0f35b480fd5dd423e44ba9a60731c3e376d70cdb738c7abf5dadb1d4d8cf10fbc1d84d315923dd4f8b4799c99d9e874307a8315a2a89fcc83c0ecc8572b3c525140e0b5ea6a67592427fed245e94fa13d51af39931dfaac6bdd03d0f14c90ff386cdf8ad59cc6e242e75a7eaf5bdc4db2a1741b51dee490c945d4ab5974d1347a0ccb0a8e2ad6cffa8e1507c4cde12cc904cce7d6e972d6edc06c84953a6023df3fbceae52dd94709b4647de3a278454eac882331bb0767f156ca127cc7ef974c342f5e158d6fddd2269d0471104d543ce36c1215f2e12beae352806f75d3c34bfcf98c7220ceaba856108c15884aeae49a6cc083684a211198fe4ebc6eb06d7315f3f1721d96d29e0118252e210874f892a3ed5a3901247732e98d85b5765b1b5579dcdb4c57863688ab0125d6b3d0c594ca506f0cda6c825f570a2021f4ba5c47a8aa8521694421239f4976875038c312c6a8475063f1f3a46503ce479ecd781e6e65db5190808a6c820514b2f92d7bc16b532e645f8776af228092edc0aac04dc88cb0ae96979cf324c4c5c8f884cc81249077427372d6578758dcd2985e071ab6f9673340bab6655db412d4140e4280cbdc141f8e68a2e4f3e09bca3a01039bdad8ea11008ff1e9fc5619e96723ed119e4a9c40d0918962af9095163cfbe0d9f0792a10bbbd072c196c71eb4248481a078ba03b2d8a84a605c07da7ec357cae82544897eabe1a402ed774f7ba2d4c0c369ab79b8faa4198b47ed8fea5db1716a79fd4ebc1dec21793897612b588a2a621d9b2b4b79c64aad6b5d1fc505feb7f7ca83ced84b36fcb53822ca58d68161af83cf14f2a4374ac932d14c45a012c1e6ad67e14a2a236ae3ec576ea75c63ae8ec159ea2fd866b6579df9215b2a54af09470f56c49484bf03bcc5a8b61f12543637b25407b2a6889bb8beff22b49c5bd371f0adeaba79ad529cd421c73c5afa6545a0751efbc97ca464f00a3d34c6b220ba168eb01c14ffd63a34c6817fca287a73cb7dea1d9c5c69555dafb2de120a81c2c657310db1f9e7a745e7632f5f0bdc1c762acf7997d63a0ae96d20f2187f504fcb98982373ef913f972e5fd3ad204d1c40f400fdc14d4629b9f549ef6616b5a4c28276961d0dead358f2642d2ce7328bd82b617acb224a802ff59e60175ac2293fa81505ff28526fc3e1ce744ea484ff000870e965c6e0a0fe0dd03007e0a1c6a5a8811b8448cc1c14e2d395293c00bb50f7f3919e5103bc47aed35912ba4b5c751e629340f0676afa655e6884a0551037dcfc8cb9792fa5bee5f35ce38cdede89c9e94ac4e07d32203302aee6c9c557e6f6ec09f5bffd8f814d0d9fbd40e0c2fab97e27a1919cf6af1f9d14f0dd6753a15c8627860628e06910d12d83a7b0467eb5e764eccfa8b6b1ed37fea625548837ee8f5e72296f74756f6c43a00b7a7290aa357adfecb27c382aad051a253c1190c37e2251c32e9bfb3bcf6f0d6bcddbbd51fdff1c6113a7c84f6887c080fb5f68cf8b8f2d4706f324bbc1233bcbefc52de3e631ed8cb8119ee41a23e2b7d27d2df281be4f60845a4942a5263f37cac8897eb3528d67b358f079b0a4f0ca494c3f5ea326351090baabfe3f850693b6fd0a0d14e0b217899a1d72065d8375d8e787c09829ddee5bc48ac06a5d207c6ad8de102833886eb1526f17bc75be9310aef27b6d20948e124f7f65d31470cc762c3930200f73d9ac54fe29aa704e4b013aac2992e4ddf92f96170b4af1c4fa2476a965f00be789c3ee881f2fe382bade629b85678eed888766b5d3a2d3597996443621a8080bc5c543963dabc63e05501be7afa6fff68351a286755e74b83bdf53a040e0932228fd62617dba999787de9859a86f9a5b86b671567a2e7a924143c1b799dd3c8915ee4cdb88eb212e17e866effc5d7e082897a17ebfd632a232069e16c515f4ade19f1b89a81653468c540bbd897c759fd4916d4e3a6817bba66f0ccfb6f4c03320e3e8ac102c6c6d391f8e286b88e002fc97b890bcd31db7469e178f9cc69851305d1fa65835b902a47c6ae04ff98df9690faf604047c4555f59b5577496f26960aa273153fafd517088c6242cc1bf607695f303d182bc2b99a877590fbcd2d444632afb7574cf92190a5c53a6f2a984162f81d47c7c13706198672c84cf2c6e6abba79ab782889d1fd17c3a222b9ec809554791a3dc69071fc84ad465d64791937900c124894f51208f81af276866994b08667233aa3e4047ce5d4d400c5c69043c685e8e79d49fe6c97aaf46f84f66f88963bb47cc8b2ca989791025773d6bbaa4cfcc2cc4f158df43976195e867b8db7c9b56581723be1368115cba8898d6b37b5abdb6c22897b606d7dc5a4522083a1308a46e3367385cff4d720f9d756dba0d369caadfb5d58ac4cc0a105a16f8d68ba6624b7f74f1cc6c05e994a187f5adc1002810e5378f9fac9913fb9acc02f91b562670d90191076d92d4390c74d6ea11b366092e053104812f38f2399ac13009edea66d3944bfdf2e96c7bd97a1836699f9890f13aa7810f8be299a463ba81b93a0d6ecbf354134c0bad5b329e77745d53703b142ab508597574664ab440c02a910c0c164e49769639e7a03250f05d399086a2172cf81faa69e2b5cefae4f16bf13b0162d34e362aff9c584f04152c3b1fa0670e0a917cc47128b7246ec0bc5c2a442aa07d2c3833e4d841280b90b63dde1811f2aeaa9dacc1bacb54e41f8c25d2d4eb315469da78bd71b997ce37f787ef90908f627f20c2ee4acf8da59d045b8cf573dd82e7dc28da92200508f798f2144e789ec50045d7298e6509415b861a0f3b9127a0defeab7b5008bbceece6e2c76652dd463bb19696fe5c190f706ea3a1703927e64bd01b10ccfe8a8bcb1e50b0462020d538c767d2396608d3e328e6c9dfdf54479a003667ff798c0dc464a9ea8d086b1d63dcda70376e1a93150c686125f2f840c45d7fb38430391ef9a4ea250780dba86854d2eadfd94ab7661fde0e0d02b6878d9086d6edb2e13d649f9805a9be89fff320b26522c7f6170d6b73cdc37dd0162a5ac799d7fffeb5023abd1e4fce7af29dbbb9e30b40a8c256981cb011c34f33f679fafa01c727bee85cf483604ebfd13b335528046909fdc7c15a43375c1cbc0c099ad314c10df86042d427b8ba6435612a7489707b88bde37333496c669b5dd9695734e417fee0f5d7e0d8c5fdb9bf57e4d688d6962bc40900ee87369aba15a33afe08a59cd287c97ea4404c50eefd700f9d26212614826156c4b3fbc59411a1a5cd5067daedfd81a4280fdac417e4e7479a4a629a468e07dfbbcf5b6609fd24d16faeaa44e2f17d27bfcf6b53f82a44458cb8a5becbfb4f0292d58cda1427a55a3e3f65b95362edd0be779efe3d5d089d1c697092159bbe1ed9a67375b1de123f2b5fc154666d8c6bbee308d8a7851e84cf3b0021b43f752ccbc92b651dc46834f4a0833d91981f9029a35228f04752a1e2dcafd0c10caf534d3085c2220d076533f280536d1f2902e0fbaa4667ad39d07bc28a3830cdb4bd6d19525937906d950f4ccb9886187421514c5a5f1546fa852a110038fb1d6c1aa9b5c3f752239ad0a247416d6463bb90ef7e17c6fd3a36662848d832416f8b240a99b329d2d5da99ea3046272f0c1a546a132b9a8a955679cf5cb6711c49849cb463a00265f5e293c3ea531d693274e9a7222239ad45aeba676e0ac453535f20c82f09923a43fa605658b62f499619a0b2d8f5acaf4dee0d2c77a56e8d378ad4999e57f346d75e3f041be3fca0da00670967aedf9215baedb063cedbe77c7af5cce4d600196be39e37546c3a40ade46052d349060d85193b1ed47acdf4f7b8fe9e36a609af7ed8d978d08f900d26ab4859f6ef0ec1152db9ca56ba776b7b8a9dcfa4787b5c9208006a52c289ee320871dcbce8cd4bd54c26781a8d735bdcb090d1620faa920bbff4802cd828f7e47a619e090483c88d57f0f8a6b14a6b2c2415d426da33820943d03a3c0ae52ba2b1604cc354175f34004e225aabcee5127f4e9dd779c7f863feadadb473b451112065747a615ac1bdd9b91b99817ee172336271debcdd4e507facc30d0adc4b1dd10460157ff890aa539886787fcbb1abecde53ae9d8abd51f3bc5d9452926c0edcb3e373626ed72d1ef98a67b6298ba7b9bb3764ceb8dcb6e62a9b5aa8b1cd65a33ac53737ce2b5db17056dd12373590b07635dead5e2db3df587a848ecd30e2c877763d35e366b81bf442e862a42ccc4485eecc6ba0ecd45459198baa21e5f8e64981d87c20007b16d73c6a7477c9645fd43a07210591b40941c7fc571e0c7a6dda34248b00f1e4ada1d12ffd9934a638c79223cc2791cff38ae279fa1f69952f05117e6d42e1bcdabe93c5753ab3df5f1e799f1d8ba8ccc9109aeef331e75934d19af8368e0df2e929beaded6fd2be2cca1b3871b47d5c8d7c005c07e6e19c0323e188a4ba1785b7a8f59b404c4cd742dc9e143f52ce6a433ec8cd9fafd7ccff56f17e49281f14cac31814056fdcf1aa90178475c864bac0e1e4dd841f5c009161dd599d7cfd8b704e98a61ffc052d856c69ceca721225be07c90d0c5bcd4e30634e2a8a5cac1cc00cd020f21b05bab66116cd307bbbc5f8201026e5037f2c344ded9dabfeb5a7c105bce867929d5feeb32d57d9958ce4194e2ca8a5b424adc4b1a7840d2f8aaaf0271541c94c16c4790b10da2d3b7ec9be257261c00bbfe0ee91be82328d3cbf89bde09cf0669af432ffa98af9c9d4e9bd4411564e636dbc503bdb616c6960f4f3422a28614e0e98e90534aaa2c99acde7695697d5e4544c20cad31fbb3942d44c8623b2a7721206b2d74abcbb27c35a56f1e5ff816beefe378ea0f22b9e86cfb86699739c84c1571a9d2e6b46418c1ec277778bc95681fc561e0a78de37853e73db7b655b66919063023f9a36eccd7c37335ba3836a19d631e681e9c65b1c66be458048d9be06ba2d8412ecb448ada0d81ea022b35f29e16e9ad5783c08a8dabe8287c64f71ab38e86cb2bc5588b49cd25d60649a35f74099b3eb652604f33d54702b3ee0da45d523f98f54e33be26a026baca40ffa2fde3cef49", 0x1000}, {&(0x7f0000003b40)="f399be000ed405ecd70465dd5d2a221f619118a2498bbdd65f813db3d725aafa44ebc1f9af85cd18c8cc918b42fc67fd1d6a36ba3e82466dc97b721e2abfaa94ae476fb99953310a8a8c14b2ed9f464c08355f2eff1dd11107410bc456b7fe9de39d19eab65a39344a4d1db12ebd7ed46a50df53548da583ddf629b59564f953347548812564fb9b14adc671577c2d5b9313ba73", 0x94}, {&(0x7f0000003c00)="3d0395b3448be4544d7284252dcf9befd0425bb3d0fac03c94c560a586131ff7b18a06101e025b14d45d7863f032a5928f50d372851e4a41a0c269bca25f0ce5ac713c9ac6c55038521325", 0x4b}], 0x4, &(0x7f0000003d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @loopback, @rand_addr=0x64010100}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x86, 0x10, "f3d784190c52537a0928d8c62396"}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x47, 0x0, 0x2, [0x5, 0x0, 0x4, 0x4, 0x1ff, 0x70f, 0x3]}, @timestamp_addr={0x44, 0x4, 0x3b, 0x1, 0x5}, @noop, @rr={0x7, 0x7, 0x59, [@multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7b3}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x70, 0x3, 0x3, [{@empty, 0x1000}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x3, [{@multicast2, 0xde}, {@loopback, 0x8001}]}, @cipso={0x86, 0x26, 0xffffffffffffffff, [{0x0, 0xc, "ce79ea53c2265ec2637e"}, {0x7, 0xd, "a4a33f8a489da0f31fefda"}, {0x5, 0x7, "7dfefd82c7"}]}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x51, [@loopback, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0x28, 0x1, 0x3, [{@loopback, 0x47}, {@multicast1, 0xa7}, {@remote, 0x400}, {@empty, 0xee4}, {@multicast2, 0x5}, {@broadcast, 0x4}, {@broadcast, 0x386}]}, @end, @generic={0x86, 0x6, "cf31b5ae"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x1d0}, 0x80) 1.893534369s ago: executing program 2 (id=1781): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10001, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000112001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) 1.666718347s ago: executing program 1 (id=1782): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x1000000}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r0, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@map_fd={0x18, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000040), &(0x7f0000000340)='%pI4 \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.590194969s ago: executing program 2 (id=1783): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x3, [{0x9, 0x1, 0x3}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000000540)=""/250, 0x37, 0xfa, 0xd}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33) 1.393292355s ago: executing program 1 (id=1784): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000005000000000000000000008500000017000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8001, 0x4, 0x81, 0x10020, r1, 0xffff, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xa, @void, @value, @value=r4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32, @ANYBLOB="c70000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085003746b10000230000009500000000000000000000a1c5d4540c38d277d680e12e3720851895"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="5c00000000008c9e8324a9774aaf1831cdd83e9f4d000000000000070000004404dc634402440c96b0c6640f8feda5312e00440cf1130a01010100000004831b50e0000001ac1414bbac1e0101e0000001ac14140aac1414bb830fd9ac14141a0a0101020a010100000000000000001100007ab586df37d1dd0000000000290000000400000000000000000000001c0000000000000000000000080000006832886d1b96421580ea4f5b7cfda964e56c873d8594122f544d28e0ce2c89b59b027ed681cac4dd3cd9517a3bea", @ANYRES32=0x0, @ANYBLOB="ffffffffac14142100000000"], 0x98}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0) recvmsg$unix(r8, 0x0, 0x10060) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x7, 0x0, 0x2, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x4, 0x9, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.390566635s ago: executing program 0 (id=1785): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x1, 0x0, 0xc000000, 0x2921, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100104, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x4, 0x4}, 0x50) r1 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x4, 0x0, @loopback}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000040c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000280000000000000000000000070000009404000744", @ANYRES8=r2], 0x48}, 0x2c) 1.235150291s ago: executing program 2 (id=1786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x94) 1.060625196s ago: executing program 2 (id=1787): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0xff, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_bp={0x0, 0x5}, 0x100042, 0x80000000, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x15, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) socketpair(0x22, 0x2147143a0d819f59, 0xa0a, &(0x7f0000000140)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x2, &(0x7f0000000680)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x240000, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x15, &(0x7f0000000100), 0x3d) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600000004000000"], 0x48) socket$kcm(0xa, 0x2, 0x0) (async) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r6, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x3, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x8) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x3, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r6, 0x8) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/102, 0x66}], 0x1, &(0x7f0000000940)}, 0x40) socket$kcm(0xa, 0x5, 0x0) (async) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x36, &(0x7f0000000100), 0x120) (async) setsockopt$sock_attach_bpf(r7, 0x29, 0x36, &(0x7f0000000100), 0x120) 905.178711ms ago: executing program 0 (id=1788): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="ffd9035e71d0284ad32a5f49f175", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_type(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x10, &(0x7f0000000700)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0xfffffefb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x54) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x4, &(0x7f0000000000), 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 771.482245ms ago: executing program 1 (id=1789): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0f"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 641.02679ms ago: executing program 2 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x2000}, 0x2d) 544.436103ms ago: executing program 1 (id=1791): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x3, 0x3, 0x7, 0x4, 0x0, 0x4, 0x810, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8000, 0xfffffffffffffffa, 0x1, 0x1, 0x1, 0x4, 0xfffc, 0x0, 0x4, 0x0, 0xc3}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x86}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x0) 377.202008ms ago: executing program 2 (id=1792): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000010000006d0500000400000042000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000052ed63b29131d79c000000000000000000000000ff000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES16=r9], 0xfe33) 376.957868ms ago: executing program 0 (id=1793): r0 = socket$kcm(0x2, 0x3, 0x84) close(r0) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100fe0041"], 0x4c}, 0x20001850) 212.876743ms ago: executing program 1 (id=1794): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='\x00') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f0000001940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc6, 0xc6, 0x8, [@datasec={0x7, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x8, 0x2}, {0x4, 0x6, 0xfffffffd}, {0x5, 0xffffffff, 0x3}, {0x5, 0x3, 0x1}], "a1"}, @datasec={0xb, 0x3, 0x0, 0xf, 0x1, [{0x3, 0x400, 0x6}, {0x2, 0x40, 0x8}, {0x2, 0x1, 0xb}], 'M'}, @union={0x3, 0x4, 0x0, 0x5, 0x1, 0x2c20, [{0x9, 0x0, 0x3}, {0x1, 0x0, 0x1000}, {0xe, 0x1, 0x8924}, {0x9, 0x5, 0xa}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x5, 0x4}, @func={0x7, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x3e, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f0000001a40)=""/70, 0xe8, 0x46, 0x1, 0x9}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x18, 0x23, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xf6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x1e, 0x4, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xd2}, @generic={0xf5, 0xe, 0x2, 0x9, 0x8}, @alu={0x4, 0x0, 0x5, 0x4, 0x4, 0x30, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x43}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001cc0)='syzkaller\x00', 0x2, 0xf3, &(0x7f0000001d00)=""/243, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001e00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001e40)={0x5, 0x1, 0xff, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[r2, r2, r2, r2, 0x1, 0x1, r1], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002000)=@bpf_tracing={0x1a, 0x15, &(0x7f00000003c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb18c}, @generic={0x6, 0x7, 0x3, 0x2, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000580)='GPL\x00', 0xffff, 0x1000, &(0x7f0000000940)=""/4096, 0x41000, 0x8, '\x00', r4, 0x17, r5, 0x8, &(0x7f0000001b00)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001b40)={0x0, 0x6, 0xfffff166, 0x80}, 0x10, 0x1d079, r6, 0x4, &(0x7f0000001f80)=[r1, r1], &(0x7f0000001fc0)=[{0x0, 0x1, 0xb, 0xa}, {0x3, 0x1, 0x3, 0x2}, {0x0, 0x5, 0x2, 0xa}, {0x1, 0x1, 0x4, 0x8}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0xbd49, 0x6, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r10 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9}, &(0x7f0000000080), &(0x7f00000001c0)=r10}, 0x20) close(0x4) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"}) 0s ago: executing program 0 (id=1795): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x17000000}, 0x1}, 0x6d) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 68.298180][ T5760] cgroup: Unknown subsys name 'net' [ 68.429556][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.763875][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.433748][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.440264][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.556960][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.572435][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.580637][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.588681][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.596491][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.604523][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.612120][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.621236][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.629067][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.636533][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.665987][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.677183][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.687031][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.692932][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.701276][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.703138][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.716350][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.717935][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.731437][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.733656][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.738669][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.753661][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.761117][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.768608][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.011554][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 72.181925][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.189836][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.197276][ T5774] bridge_slave_0: entered allmulticast mode [ 72.204155][ T5774] bridge_slave_0: entered promiscuous mode [ 72.229159][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.237063][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.244272][ T5774] bridge_slave_1: entered allmulticast mode [ 72.251011][ T5774] bridge_slave_1: entered promiscuous mode [ 72.258509][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 72.322291][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.356481][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.377404][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 72.404016][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 72.465577][ T5774] team0: Port device team_slave_0 added [ 72.486505][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.493831][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.501080][ T5773] bridge_slave_0: entered allmulticast mode [ 72.508576][ T5773] bridge_slave_0: entered promiscuous mode [ 72.516140][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.523418][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.530822][ T5773] bridge_slave_1: entered allmulticast mode [ 72.537922][ T5773] bridge_slave_1: entered promiscuous mode [ 72.547601][ T5774] team0: Port device team_slave_1 added [ 72.602636][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.609729][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.635768][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.668674][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.675690][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.701646][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.722740][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.735950][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.816405][ T5773] team0: Port device team_slave_0 added [ 72.822456][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.829725][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.836976][ T5770] bridge_slave_0: entered allmulticast mode [ 72.844398][ T5770] bridge_slave_0: entered promiscuous mode [ 72.862330][ T5774] hsr_slave_0: entered promiscuous mode [ 72.868688][ T5774] hsr_slave_1: entered promiscuous mode [ 72.880203][ T5773] team0: Port device team_slave_1 added [ 72.894371][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.901463][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.908895][ T5770] bridge_slave_1: entered allmulticast mode [ 72.915603][ T5770] bridge_slave_1: entered promiscuous mode [ 72.922177][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.929543][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.936903][ T5781] bridge_slave_0: entered allmulticast mode [ 72.943863][ T5781] bridge_slave_0: entered promiscuous mode [ 72.978195][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.985259][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.011953][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.031588][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.038753][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.048234][ T5781] bridge_slave_1: entered allmulticast mode [ 73.055071][ T5781] bridge_slave_1: entered promiscuous mode [ 73.078477][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.088318][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.095652][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.127178][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.158958][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.191943][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.204254][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.269869][ T5773] hsr_slave_0: entered promiscuous mode [ 73.276139][ T5773] hsr_slave_1: entered promiscuous mode [ 73.282271][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.290110][ T5773] Cannot create hsr debugfs directory [ 73.298797][ T5770] team0: Port device team_slave_0 added [ 73.307387][ T5770] team0: Port device team_slave_1 added [ 73.330001][ T5781] team0: Port device team_slave_0 added [ 73.338390][ T5781] team0: Port device team_slave_1 added [ 73.408905][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.416103][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.442104][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.459992][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.467248][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.493435][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.505094][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.512048][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.538476][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.575613][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.582574][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.609134][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.667481][ T5783] Bluetooth: hci1: command tx timeout [ 73.720862][ T5770] hsr_slave_0: entered promiscuous mode [ 73.728104][ T5770] hsr_slave_1: entered promiscuous mode [ 73.734212][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.741768][ T5770] Cannot create hsr debugfs directory [ 73.809279][ T5781] hsr_slave_0: entered promiscuous mode [ 73.816746][ T5781] hsr_slave_1: entered promiscuous mode [ 73.823273][ T5783] Bluetooth: hci3: command tx timeout [ 73.828892][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.837028][ T5783] Bluetooth: hci2: command tx timeout [ 73.842576][ T5783] Bluetooth: hci0: command tx timeout [ 73.842994][ T5781] Cannot create hsr debugfs directory [ 73.947312][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.961648][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.974747][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.990184][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.102453][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.131635][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.141474][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.165164][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.247007][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.258133][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.269583][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.278847][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.384754][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.395474][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.413266][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.427152][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.437762][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.502535][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.528259][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.535621][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.548423][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.555541][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.579499][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.630317][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.679066][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.686332][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.705513][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.721200][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.750835][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.758002][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.808373][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.826158][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.855823][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.863026][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.874148][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.881334][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.969696][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.976915][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.052359][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.059549][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.160105][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.176635][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.297234][ T5773] veth0_vlan: entered promiscuous mode [ 75.338077][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.367979][ T5773] veth1_vlan: entered promiscuous mode [ 75.435096][ T5773] veth0_macvtap: entered promiscuous mode [ 75.488213][ T5773] veth1_macvtap: entered promiscuous mode [ 75.509923][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.546115][ T5774] veth0_vlan: entered promiscuous mode [ 75.571922][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.594316][ T5774] veth1_vlan: entered promiscuous mode [ 75.610842][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.633104][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.660336][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.669823][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.679500][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.688877][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.726642][ T5770] veth0_vlan: entered promiscuous mode [ 75.743342][ T5783] Bluetooth: hci1: command tx timeout [ 75.769250][ T5770] veth1_vlan: entered promiscuous mode [ 75.796295][ T5774] veth0_macvtap: entered promiscuous mode [ 75.806289][ T5774] veth1_macvtap: entered promiscuous mode [ 75.864729][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.881328][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.892647][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.903820][ T5780] Bluetooth: hci2: command tx timeout [ 75.904858][ T5772] Bluetooth: hci3: command tx timeout [ 75.909318][ T5783] Bluetooth: hci0: command tx timeout [ 75.941747][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.952541][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.963949][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.986323][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.987108][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.007903][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.009695][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.024819][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.036730][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.048440][ T5781] veth0_vlan: entered promiscuous mode [ 76.076097][ T5781] veth1_vlan: entered promiscuous mode [ 76.086355][ T5770] veth0_macvtap: entered promiscuous mode [ 76.126712][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.136480][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.138263][ T5770] veth1_macvtap: entered promiscuous mode [ 76.214871][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.231709][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.242270][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.253008][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.272660][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.299468][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.317053][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.351631][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.362727][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.373603][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.384665][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.396641][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.426727][ T5781] veth0_macvtap: entered promiscuous mode [ 76.439107][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.450019][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.463920][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.466715][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.472631][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.498132][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.522061][ T5781] veth1_macvtap: entered promiscuous mode [ 76.577468][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.588762][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.607748][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.618539][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.638319][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.652898][ C0] hrtimer: interrupt took 116327 ns [ 76.669091][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.686371][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.709888][ T5835] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.728353][ T5783] Bluetooth: hci2: Malformed Event: 0x13 [ 76.780456][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.823947][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.841726][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.853714][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.863903][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.874413][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.886409][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.920492][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.935405][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.947172][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.958147][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.982507][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.016622][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.184042][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.191905][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.254221][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.325631][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.551437][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.578660][ T5846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5'. [ 77.599081][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.825213][ T5783] Bluetooth: hci1: command tx timeout [ 77.983803][ T5852] bridge_slave_1: left allmulticast mode [ 77.991875][ T5783] Bluetooth: hci3: command tx timeout [ 77.997387][ T5772] Bluetooth: hci0: command tx timeout [ 77.997425][ T5772] Bluetooth: hci2: command tx timeout [ 78.016834][ T5852] bridge_slave_1: left promiscuous mode [ 78.075999][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.111939][ T5858] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 78.119914][ T5858] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7'. [ 78.444564][ T5852] bridge_slave_0: left allmulticast mode [ 78.525061][ T5852] bridge_slave_0: left promiscuous mode [ 78.573497][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.161295][ T5866] Zero length message leads to an empty skb [ 79.224984][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 79.242934][ T5861] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 79.251882][ T5868] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 79.253059][ T5861] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7'. [ 79.773602][ T5874] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 79.819293][ T5874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10'. [ 79.862216][ T5874] batadv0: entered promiscuous mode [ 79.888572][ T5874] batadv0: entered allmulticast mode [ 79.906226][ T5783] Bluetooth: hci1: command tx timeout [ 79.925049][ T5874] bridge0: port 3(batadv0) entered blocking state [ 79.932351][ T5874] bridge0: port 3(batadv0) entered disabled state [ 79.957775][ T5874] bridge0: port 3(batadv0) entered blocking state [ 79.965649][ T5874] bridge0: port 3(batadv0) entered forwarding state [ 80.063342][ T5783] Bluetooth: hci2: command tx timeout [ 80.063679][ T5780] Bluetooth: hci0: command tx timeout [ 80.073095][ T5783] Bluetooth: hci3: command tx timeout [ 80.113271][ T5879] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12'. [ 80.172596][ T5879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.200007][ T146] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 80.209607][ T146] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 80.550804][ T5892] delete_channel: no stack [ 80.591607][ T5892] delete_channel: no stack [ 88.533576][ T970] cfg80211: failed to load regulatory.db [ 88.998999][ T5915] bridge0: port 3(batadv0) entered disabled state [ 89.041525][ T5915] bridge_slave_1: left allmulticast mode [ 89.064240][ T5915] bridge_slave_1: left promiscuous mode [ 89.084464][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.161551][ T5915] bridge_slave_0: left allmulticast mode [ 89.181586][ T5915] bridge_slave_0: left promiscuous mode [ 89.196061][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.826102][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 89.913266][ T5915] syz.1.21 (5915) used greatest stack depth: 20008 bytes left [ 90.412387][ T5935] netlink: 128 bytes leftover after parsing attributes in process `syz.1.24'. [ 90.453181][ T5935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.599507][ T5938] netlink: 64 bytes leftover after parsing attributes in process `syz.3.25'. [ 91.629985][ T5947] delete_channel: no stack [ 91.633683][ T5944] netlink: 'syz.2.27': attribute type 10 has an invalid length. [ 91.639619][ T5947] delete_channel: no stack [ 91.686713][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27'. [ 91.700220][ T5944] batadv0: entered promiscuous mode [ 91.706254][ T5944] batadv0: entered allmulticast mode [ 91.731049][ T5944] bridge0: port 3(batadv0) entered blocking state [ 91.739622][ T5944] bridge0: port 3(batadv0) entered disabled state [ 91.803152][ T5944] bridge0: port 3(batadv0) entered blocking state [ 91.810239][ T5944] bridge0: port 3(batadv0) entered forwarding state [ 92.023879][ T2952] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 92.033412][ T2952] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 94.015944][ T5973] syzkaller0: entered promiscuous mode [ 94.021661][ T5973] syzkaller0: entered allmulticast mode [ 94.364259][ T5783] Bluetooth: hci0: Malformed Event: 0x13 [ 95.500144][ T5976] netlink: 128 bytes leftover after parsing attributes in process `syz.3.37'. [ 95.512323][ T5976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.532065][ T5981] netlink: 64 bytes leftover after parsing attributes in process `syz.1.39'. [ 95.793203][ T5991] team0: Port device team_slave_0 removed [ 96.246510][ T6006] netlink: 184 bytes leftover after parsing attributes in process `syz.0.49'. [ 96.742569][ T6013] netlink: 64 bytes leftover after parsing attributes in process `syz.3.54'. [ 97.486217][ T6035] netlink: 26 bytes leftover after parsing attributes in process `syz.3.61'. [ 97.496820][ T6034] netlink: 144 bytes leftover after parsing attributes in process `syz.3.61'. [ 97.548586][ T6034] team0: Port device team_slave_0 removed [ 97.560766][ T6034] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 97.742207][ T6041] delete_channel: no stack [ 97.754997][ T6041] delete_channel: no stack [ 98.496425][ T6057] netlink: 64 bytes leftover after parsing attributes in process `syz.1.67'. [ 99.144348][ T6074] syzkaller0: entered promiscuous mode [ 99.151050][ T6074] syzkaller0: entered allmulticast mode [ 99.774390][ T6096] delete_channel: no stack [ 99.787978][ T6096] delete_channel: no stack [ 101.673794][ T6087] netlink: 64 bytes leftover after parsing attributes in process `syz.0.79'. [ 102.524100][ T6126] delete_channel: no stack [ 102.528698][ T6126] delete_channel: no stack [ 102.850983][ T6128] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.94'. [ 102.967450][ T6128] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 103.133472][ T6134] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 103.569466][ T6138] netlink: 64 bytes leftover after parsing attributes in process `syz.0.96'. [ 104.824696][ T6163] syzkaller0: entered promiscuous mode [ 104.843081][ T6163] syzkaller0: entered allmulticast mode [ 104.941926][ T6165] delete_channel: no stack [ 107.748818][ T6169] netlink: 64 bytes leftover after parsing attributes in process `syz.1.108'. [ 107.759390][ T6184] netlink: 14 bytes leftover after parsing attributes in process `syz.3.113'. [ 107.950067][ T6186] warning: `syz.3.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.886389][ T6209] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 108.895475][ T6209] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.118'. [ 109.118214][ T6214] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.120'. [ 109.367352][ T6214] syz.3.120[6214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.241566][ T6226] netlink: 64 bytes leftover after parsing attributes in process `syz.3.122'. [ 110.385346][ T6228] syzkaller0: entered promiscuous mode [ 110.390893][ T6228] syzkaller0: entered allmulticast mode [ 111.823197][ T6253] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.853768][ T6253] syzkaller0: entered promiscuous mode [ 111.867957][ T6253] syzkaller0: entered allmulticast mode [ 111.920594][ T6253] netlink: 'syz.0.134': attribute type 2 has an invalid length. [ 112.772739][ T5783] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 115.780271][ T6271] netlink: 'syz.1.140': attribute type 10 has an invalid length. [ 115.801230][ T6271] geneve0: entered promiscuous mode [ 115.856496][ T6271] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 116.387406][ T6291] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.146'. [ 116.817504][ T6301] netlink: 192188 bytes leftover after parsing attributes in process `syz.0.150'. [ 116.862423][ T6301] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 117.663844][ T6317] sock: sock_timestamping_bind_phc: sock not bind to device [ 119.233319][ T6381] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 119.316255][ T6381] netlink: 55 bytes leftover after parsing attributes in process `syz.2.178'. [ 119.333517][ T5783] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 120.195117][ T6390] syzkaller0: entered promiscuous mode [ 120.251200][ T6390] syzkaller0: entered allmulticast mode [ 120.570439][ T5783] Bluetooth: hci1: Malformed Event: 0x13 [ 123.063040][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 123.670959][ T6431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.875188][ T5783] Bluetooth: hci0: Malformed Event: 0x13 [ 124.000146][ T6454] delete_channel: no stack [ 124.004853][ T6454] delete_channel: no stack [ 124.797270][ T6473] syzkaller0: entered promiscuous mode [ 124.808750][ T6473] syzkaller0: entered allmulticast mode [ 127.123398][ T5783] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 127.334089][ T6498] netlink: 164 bytes leftover after parsing attributes in process `syz.3.215'. [ 127.432316][ T6504] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.217'. [ 127.461362][ T6504] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 127.653829][ T6508] netlink: 'syz.3.219': attribute type 1 has an invalid length. [ 127.686454][ T6508] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.219'. [ 127.703262][ T6508] netlink: 'syz.3.219': attribute type 1 has an invalid length. [ 128.162956][ T5783] Bluetooth: hci2: Malformed Event: 0x13 [ 128.186822][ T6522] netlink: 'syz.1.224': attribute type 29 has an invalid length. [ 128.215087][ T6522] netlink: 'syz.1.224': attribute type 29 has an invalid length. [ 128.630171][ T6531] syzkaller0: entered promiscuous mode [ 128.642956][ T6531] syzkaller0: entered allmulticast mode [ 129.129513][ T5783] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 129.834958][ T6560] delete_channel: no stack [ 129.853789][ T6560] delete_channel: no stack [ 131.031027][ T6577] netlink: 'syz.3.244': attribute type 39 has an invalid length. [ 131.279523][ T6577] hsr_slave_1 (unregistering): left promiscuous mode [ 132.983145][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.993016][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.055776][ T5783] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 133.107610][ T6606] syzkaller0: entered promiscuous mode [ 133.120355][ T6606] syzkaller0: entered allmulticast mode [ 133.146172][ T6614] netlink: 'syz.2.259': attribute type 33 has an invalid length. [ 133.187348][ T6614] netlink: 152 bytes leftover after parsing attributes in process `syz.2.259'. [ 133.685643][ T6622] netlink: 'syz.1.262': attribute type 2 has an invalid length. [ 133.721799][ T6622] netlink: 'syz.1.262': attribute type 1 has an invalid length. [ 133.765983][ T6622] netlink: 9 bytes leftover after parsing attributes in process `syz.1.262'. [ 135.292080][ T6612] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.249'. [ 135.301377][ T6612] bridge_slave_1: default FDB implementation only supports local addresses [ 135.312446][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 135.582181][ T5783] Bluetooth: hci3: Malformed Event: 0x13 [ 136.202707][ T6658] netlink: 144 bytes leftover after parsing attributes in process `syz.0.276'. [ 136.320908][ T6658] team0: Port device team_slave_0 removed [ 136.327516][ T6658] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 136.366228][ T5783] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 136.519020][ T6670] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.282'. [ 136.568556][ T6670] bridge_slave_1: default FDB implementation only supports local addresses [ 136.586750][ T6675] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.282'. [ 136.646101][ T6672] syzkaller0: entered promiscuous mode [ 136.651696][ T6672] syzkaller0: entered allmulticast mode [ 138.567049][ T5783] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 138.739550][ T6706] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.248983][ T5783] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 140.641512][ T6745] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.309'. [ 141.869704][ T6793] netlink: 'syz.1.329': attribute type 3 has an invalid length. [ 141.888392][ T6793] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.329'. [ 142.094620][ T6802] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.332'. [ 142.687565][ T6820] syzkaller0: entered promiscuous mode [ 142.699550][ T6820] syzkaller0: entered allmulticast mode [ 143.009648][ T6832] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.347'. [ 144.671746][ T6842] sit0: entered allmulticast mode [ 144.686193][ T6849] sit0: entered promiscuous mode [ 144.970668][ T6857] netlink: 144 bytes leftover after parsing attributes in process `syz.1.355'. [ 145.901068][ T6891] netlink: 'syz.0.368': attribute type 12 has an invalid length. [ 145.921819][ T6891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.368'. [ 146.041548][ T6894] syzkaller0: entered promiscuous mode [ 146.048425][ T6894] syzkaller0: entered allmulticast mode [ 146.062448][ T6896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.368'. [ 147.308012][ T6901] netlink: 'syz.1.373': attribute type 21 has an invalid length. [ 147.689767][ T6918] delete_channel: no stack [ 147.698931][ T6918] delete_channel: no stack [ 147.985726][ T6924] TCP: TCP_TX_DELAY enabled [ 148.431340][ T6949] syzkaller0: entered promiscuous mode [ 148.437199][ T6949] syzkaller0: entered allmulticast mode [ 148.551902][ T6947] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.391'. [ 150.218728][ T6947] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.391'. [ 150.228763][ T6947] tipc: Started in network mode [ 150.233864][ T6947] tipc: Node identity b, cluster identity 73 [ 150.239855][ T6947] tipc: Node number set to 11 [ 150.569895][ T6964] syzkaller0: entered promiscuous mode [ 150.577028][ T6964] syzkaller0: entered allmulticast mode [ 150.584786][ T42] syzkaller0: tun_net_xmit 48 [ 150.592862][ T6973] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 150.599083][ T6973] syzkaller0: Linktype set failed because interface is up [ 150.623924][ T6977] delete_channel: no stack [ 150.635272][ T6977] delete_channel: no stack [ 150.669710][ T6964] syzkaller0: tun_net_xmit 1280 [ 150.683337][ T6964] syzkaller0: create flow: hash 933121306 index 1 [ 151.306292][ T6961] syzkaller0: delete flow: hash 933121306 index 1 [ 153.329897][ T7034] delete_channel: no stack [ 153.335525][ T7034] delete_channel: no stack [ 155.283080][ T7077] delete_channel: no stack [ 155.416467][ T7088] delete_channel: no stack [ 155.421145][ T7088] delete_channel: no stack [ 155.826493][ T7099] netlink: 140 bytes leftover after parsing attributes in process `syz.0.443'. [ 155.836167][ T7099] netlink: 10 bytes leftover after parsing attributes in process `syz.0.443'. [ 155.857525][ T7099] bond0: (slave bond_slave_0): Releasing backup interface [ 155.896789][ T7099] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 156.049154][ T7105] netlink: 'syz.3.445': attribute type 9 has an invalid length. [ 156.060531][ T7105] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.445'. [ 156.846198][ T5783] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 157.263680][ T7140] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.458'. [ 157.576242][ T7150] delete_channel: no stack [ 157.582581][ T7150] delete_channel: no stack [ 159.611405][ T7192] delete_channel: no stack [ 159.623975][ T7192] delete_channel: no stack [ 159.678749][ T7184] netlink: 14 bytes leftover after parsing attributes in process `syz.2.472'. [ 159.749067][ T5783] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 159.766300][ T7184] hsr_slave_0: left promiscuous mode [ 159.828741][ T7184] hsr_slave_1: left promiscuous mode [ 161.994539][ T7265] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.504'. [ 164.146521][ T7341] syzkaller0: entered promiscuous mode [ 164.152068][ T7341] syzkaller0: entered allmulticast mode [ 165.723935][ T7362] netlink: 188 bytes leftover after parsing attributes in process `syz.3.540'. [ 165.960927][ T7369] netlink: 168 bytes leftover after parsing attributes in process `syz.1.544'. [ 166.408519][ T7393] netlink: set zone limit has 8 unknown bytes [ 166.431616][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.550'. [ 167.559461][ T7428] netlink: 14 bytes leftover after parsing attributes in process `syz.0.565'. [ 167.603598][ T7428] hsr_slave_0: left promiscuous mode [ 167.637986][ T7428] hsr_slave_1: left promiscuous mode [ 168.601940][ T7475] sit0: entered promiscuous mode [ 169.594731][ T7510] netlink: 'syz.3.596': attribute type 21 has an invalid length. [ 169.602664][ T7510] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.625239][ T7510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.632760][ T7510] IPv6: NLM_F_CREATE should be set when creating new route [ 169.640117][ T7510] IPv6: NLM_F_CREATE should be set when creating new route [ 169.647407][ T7510] IPv6: NLM_F_CREATE should be set when creating new route [ 169.700145][ T7512] netlink: 'syz.3.596': attribute type 21 has an invalid length. [ 169.731841][ T7512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.621617][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.605'. [ 171.050568][ T7561] netlink: 164 bytes leftover after parsing attributes in process `syz.3.612'. [ 174.193775][ T7618] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 174.297452][ T7618] macvlan1: entered allmulticast mode [ 174.330406][ T7618] veth1_vlan: entered allmulticast mode [ 174.380054][ T7618] team0: Port device macvlan1 added [ 174.982597][ T7637] netlink: 'syz.1.638': attribute type 21 has an invalid length. [ 175.011229][ T7637] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.028355][ T7637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.035637][ T7637] IPv6: NLM_F_CREATE should be set when creating new route [ 175.042948][ T7637] IPv6: NLM_F_CREATE should be set when creating new route [ 175.050187][ T7637] IPv6: NLM_F_CREATE should be set when creating new route [ 175.111619][ T7639] netlink: 'syz.1.638': attribute type 21 has an invalid length. [ 175.154883][ T7639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.319131][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 175.921741][ T7670] syzkaller0: entered promiscuous mode [ 175.964322][ T7670] syzkaller0: entered allmulticast mode [ 176.469019][ T5783] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 178.255518][ T5783] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 179.075121][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 179.857292][ T5783] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 179.976728][ T7770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.139648][ T7778] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 180.175016][ T7783] netlink: 'syz.3.697': attribute type 4 has an invalid length. [ 180.220291][ T7778] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 180.291660][ T7785] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.697'. [ 180.353386][ T7783] netlink: 'syz.3.697': attribute type 16 has an invalid length. [ 180.401873][ T7783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.697'. [ 180.909165][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 180.910277][ T7800] netlink: 'syz.3.704': attribute type 10 has an invalid length. [ 180.943620][ T7800] netlink: 'syz.3.704': attribute type 16 has an invalid length. [ 180.972411][ T7800] netlink: 156 bytes leftover after parsing attributes in process `syz.3.704'. [ 181.039580][ T7800] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.704'. [ 181.336319][ T7814] netlink: 180 bytes leftover after parsing attributes in process `syz.0.707'. [ 182.275295][ T7837] Q±6ã`Ò˜: renamed from lo (while UP) [ 182.308867][ T5783] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 182.640383][ T7846] syzkaller0: entered promiscuous mode [ 182.667676][ T7846] syzkaller0: entered allmulticast mode [ 183.165239][ T7889] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.724'. [ 184.632856][ T7889] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.724'. [ 184.653725][ T7896] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 184.673967][ T7896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.724'. [ 184.694469][ T7896] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 184.701539][ T7896] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.748500][ T7896] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 184.943471][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 185.034021][ T7910] delete_channel: no stack [ 185.056540][ T7910] delete_channel: no stack [ 185.769785][ T5783] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 186.667151][ T7969] delete_channel: no stack [ 186.717131][ T7969] delete_channel: no stack [ 186.862763][ T5783] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 188.165087][ T8026] delete_channel: no stack [ 188.180679][ T8026] delete_channel: no stack [ 188.799286][ T8041] syzkaller0: entered promiscuous mode [ 188.805163][ T8041] syzkaller0: entered allmulticast mode [ 189.203139][ T8053] netlink: 'syz.3.781': attribute type 29 has an invalid length. [ 190.370625][ T8053] netlink: 'syz.3.781': attribute type 29 has an invalid length. [ 190.718973][ T8070] netlink: 763 bytes leftover after parsing attributes in process `syz.3.789'. [ 192.159791][ T8110] netlink: 'syz.2.804': attribute type 15 has an invalid length. [ 192.177330][ T8110] netlink: 'syz.2.804': attribute type 7 has an invalid length. [ 192.491017][ T8127] netlink: 'syz.2.812': attribute type 19 has an invalid length. [ 192.499998][ T8127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.812'. [ 193.358880][ T8141] netlink: 'syz.0.819': attribute type 15 has an invalid length. [ 193.409428][ T8141] netlink: 'syz.0.819': attribute type 7 has an invalid length. [ 194.326020][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.340575][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.500547][ T8189] syzkaller0: entered promiscuous mode [ 194.515022][ T8189] syzkaller0: entered allmulticast mode [ 196.124508][ T8212] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.844'. [ 196.385905][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 196.392032][ T5089] Bluetooth: hci3: command 0x0406 tx timeout [ 196.398582][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 196.406239][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 197.636359][ T8266] netlink: 68 bytes leftover after parsing attributes in process `syz.1.868'. [ 198.090196][ T8285] netlink: 'syz.2.875': attribute type 21 has an invalid length. [ 198.127417][ T8285] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.875'. [ 199.330813][ T8326] netlink: 'syz.3.895': attribute type 10 has an invalid length. [ 199.367780][ T8326] team0: Port device virt_wifi0 added [ 199.390979][ T8330] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.895'. [ 200.940222][ T8379] netlink: 'syz.0.913': attribute type 8 has an invalid length. [ 200.973267][ T8379] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.913'. [ 201.256162][ T8390] syzkaller0: entered promiscuous mode [ 201.261849][ T8390] syzkaller0: entered allmulticast mode [ 205.141986][ T8401] IPv6: NLM_F_CREATE should be specified when creating new route [ 205.150008][ T8401] netlink: 1 bytes leftover after parsing attributes in process `syz.2.919'. [ 205.251972][ T8422] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 205.285007][ T8422] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 205.302603][ T8423] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 205.324357][ T8422] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 205.366272][ T8423] netlink: 'syz.1.929': attribute type 29 has an invalid length. [ 206.069613][ T8451] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 206.314274][ T8455] netlink: set zone limit has 8 unknown bytes [ 206.481830][ T8454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.941'. [ 207.465796][ T8476] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.948'. [ 208.069516][ T8500] netlink: 'syz.1.958': attribute type 2 has an invalid length. [ 208.092488][ T8500] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 209.057391][ T8535] netlink: 'syz.0.970': attribute type 21 has an invalid length. [ 209.089837][ T8535] netlink: 128 bytes leftover after parsing attributes in process `syz.0.970'. [ 209.123028][ T8535] netlink: 'syz.0.970': attribute type 5 has an invalid length. [ 209.163139][ T8535] netlink: 3 bytes leftover after parsing attributes in process `syz.0.970'. [ 209.172326][ T8528] : renamed from bond_slave_0 (while UP) [ 209.310654][ T8547] netlink: 55 bytes leftover after parsing attributes in process `syz.2.972'. [ 210.192365][ T8560] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.976'. [ 212.691724][ T8596] netlink: set zone limit has 8 unknown bytes [ 212.906203][ T8596] netlink: 176 bytes leftover after parsing attributes in process `syz.0.991'. [ 212.925094][ T8603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.993'. [ 212.934530][ T8603] netlink: 3 bytes leftover after parsing attributes in process `syz.2.993'. [ 212.979968][ T8603] netlink: 3 bytes leftover after parsing attributes in process `syz.2.993'. [ 213.314734][ T8614] validate_nla: 1 callbacks suppressed [ 213.314774][ T8614] netlink: 'syz.3.997': attribute type 19 has an invalid length. [ 213.407316][ T8622] netlink: 'syz.1.1000': attribute type 21 has an invalid length. [ 213.436344][ T8622] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1000'. [ 213.491314][ T8622] netlink: 'syz.1.1000': attribute type 5 has an invalid length. [ 213.538243][ T8622] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1000'. [ 217.005921][ T8696] netlink: 'syz.3.1027': attribute type 21 has an invalid length. [ 217.062969][ T8696] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1027'. [ 217.079838][ T8696] netlink: 'syz.3.1027': attribute type 5 has an invalid length. [ 217.124147][ T8696] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1027'. [ 219.445811][ T8747] netlink: 'syz.0.1044': attribute type 10 has an invalid length. [ 219.639963][ T8747] team0 (unregistering): Port device team_slave_1 removed [ 219.688337][ T8747] veth1_vlan: left allmulticast mode [ 219.711681][ T8747] team0 (unregistering): Port device macvlan1 removed [ 220.334156][ T8768] netlink: zone id is out of range [ 220.339346][ T8768] netlink: set zone limit has 8 unknown bytes [ 220.392089][ T8768] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1055'. [ 222.890741][ T5776] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 223.112098][ T8834] netlink: 'syz.2.1075': attribute type 10 has an invalid length. [ 223.289990][ T8834] team0 (unregistering): Port device team_slave_0 removed [ 223.364065][ T8834] team0 (unregistering): Port device team_slave_1 removed [ 223.481961][ T8844] netlink: 'syz.1.1082': attribute type 41 has an invalid length. [ 223.602902][ T5776] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 223.788041][ T8857] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 223.899802][ T8865] netlink: 'syz.3.1087': attribute type 3 has an invalid length. [ 223.972489][ T8865] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1087'. [ 224.317070][ T8869] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1090'. [ 224.387579][ T8876] netlink: 'syz.1.1093': attribute type 6 has an invalid length. [ 224.417853][ T8876] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1093'. [ 224.932014][ T5776] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 225.041894][ T8893] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 225.216837][ T8893] team0 (unregistering): Port device team_slave_1 removed [ 225.380424][ T8906] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 225.415699][ T8906] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 226.026234][ T42] wlan1: Trigger new scan to find an IBSS to join [ 226.313416][ T8936] syzkaller0: entered promiscuous mode [ 226.319029][ T8936] syzkaller0: entered allmulticast mode [ 229.969721][ T8975] syzkaller0: entered promiscuous mode [ 229.984245][ T8975] syzkaller0: entered allmulticast mode [ 230.168318][ T8998] FAULT_INJECTION: forcing a failure. [ 230.168318][ T8998] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 230.227040][ T8998] CPU: 0 PID: 8998 Comm: syz.3.1136 Not tainted syzkaller #0 [ 230.234461][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.244543][ T8998] Call Trace: [ 230.247843][ T8998] [ 230.250784][ T8998] dump_stack_lvl+0x18c/0x250 [ 230.255496][ T8998] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.261671][ T8998] ? show_regs_print_info+0x20/0x20 [ 230.266880][ T8998] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.273067][ T8998] should_fail_ex+0x39d/0x4d0 [ 230.277750][ T8998] _copy_from_user+0x2f/0xe0 [ 230.282337][ T8998] __sys_bpf+0x23e/0x890 [ 230.286575][ T8998] ? bpf_link_show_fdinfo+0x390/0x390 [ 230.291946][ T8998] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 230.298103][ T8998] __x64_sys_bpf+0x7c/0x90 [ 230.302510][ T8998] do_syscall_64+0x55/0xb0 [ 230.306920][ T8998] ? clear_bhb_loop+0x40/0x90 [ 230.311600][ T8998] ? clear_bhb_loop+0x40/0x90 [ 230.316275][ T8998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.322163][ T8998] RIP: 0033:0x7fbd0499ce59 [ 230.326581][ T8998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.346181][ T8998] RSP: 002b:00007fbd05855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.354587][ T8998] RAX: ffffffffffffffda RBX: 00007fbd04c15fa0 RCX: 00007fbd0499ce59 [ 230.362549][ T8998] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 230.370509][ T8998] RBP: 00007fbd05855090 R08: 0000000000000000 R09: 0000000000000000 [ 230.378471][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.386435][ T8998] R13: 00007fbd04c16038 R14: 00007fbd04c15fa0 R15: 00007ffeac4ac8e8 [ 230.394410][ T8998] [ 230.872205][ T59] wlan1: Trigger new scan to find an IBSS to join [ 231.807341][ T2952] wlan1: Creating new IBSS network, BSSID 02:50:29:bc:16:ca [ 232.298298][ T9015] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.312683][ T9018] netlink: 'syz.2.1139': attribute type 3 has an invalid length. [ 232.332919][ T9018] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1139'. [ 232.969211][ T5776] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 233.671343][ T9059] netlink: 'syz.3.1157': attribute type 10 has an invalid length. [ 233.755358][ T9059] team0 (unregistering): Port device team_slave_1 removed [ 233.785675][ T9059] team0 (unregistering): Port device virt_wifi0 removed [ 233.819554][ T9064] FAULT_INJECTION: forcing a failure. [ 233.819554][ T9064] name failslab, interval 1, probability 0, space 0, times 1 [ 233.832473][ T9064] CPU: 0 PID: 9064 Comm: syz.0.1158 Not tainted syzkaller #0 [ 233.839890][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.849958][ T9064] Call Trace: [ 233.853236][ T9064] [ 233.856160][ T9064] dump_stack_lvl+0x18c/0x250 [ 233.860839][ T9064] ? show_regs_print_info+0x20/0x20 [ 233.866031][ T9064] ? load_image+0x420/0x420 [ 233.870526][ T9064] ? __lock_acquire+0x7d40/0x7d40 [ 233.875547][ T9064] should_fail_ex+0x39d/0x4d0 [ 233.880229][ T9064] should_failslab+0x9/0x20 [ 233.884726][ T9064] slab_pre_alloc_hook+0x59/0x310 [ 233.889746][ T9064] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 233.895548][ T9064] ? bpf_test_init+0x9f/0x140 [ 233.900218][ T9064] ? bpf_test_init+0x9f/0x140 [ 233.904887][ T9064] __kmem_cache_alloc_node+0x53/0x250 [ 233.910261][ T9064] ? bpf_test_init+0x9f/0x140 [ 233.914965][ T9064] __kmalloc+0xa4/0x230 [ 233.919166][ T9064] bpf_test_init+0x9f/0x140 [ 233.923678][ T9064] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 233.929060][ T9064] ? dev_put+0x80/0x80 [ 233.933132][ T9064] ? dev_put+0x80/0x80 [ 233.937194][ T9064] bpf_prog_test_run+0x321/0x390 [ 233.942127][ T9064] __sys_bpf+0x49d/0x890 [ 233.946372][ T9064] ? bpf_link_show_fdinfo+0x390/0x390 [ 233.951744][ T9064] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.957911][ T9064] __x64_sys_bpf+0x7c/0x90 [ 233.962322][ T9064] do_syscall_64+0x55/0xb0 [ 233.966732][ T9064] ? clear_bhb_loop+0x40/0x90 [ 233.971401][ T9064] ? clear_bhb_loop+0x40/0x90 [ 233.976073][ T9064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.981959][ T9064] RIP: 0033:0x7f5e91b9ce59 [ 233.986365][ T9064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.005961][ T9064] RSP: 002b:00007f5e92a11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.014367][ T9064] RAX: ffffffffffffffda RBX: 00007f5e91e15fa0 RCX: 00007f5e91b9ce59 [ 234.022330][ T9064] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 234.030291][ T9064] RBP: 00007f5e92a11090 R08: 0000000000000000 R09: 0000000000000000 [ 234.038266][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.046233][ T9064] R13: 00007f5e91e16038 R14: 00007f5e91e15fa0 R15: 00007ffc6c76c838 [ 234.054212][ T9064] [ 234.263119][ T5776] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 234.359223][ T9079] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1164'. [ 234.801688][ T5776] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 234.863400][ T2952] wlan1: Trigger new scan to find an IBSS to join [ 235.062645][ T9109] netlink: 'syz.1.1177': attribute type 10 has an invalid length. [ 235.105174][ T9113] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1177'. [ 235.126772][ T9109] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 235.365775][ T9114] syzkaller0: entered promiscuous mode [ 235.371313][ T9114] syzkaller0: entered allmulticast mode [ 235.619805][ T5776] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 237.083801][ T9142] netlink: 'syz.0.1187': attribute type 21 has an invalid length. [ 237.108984][ T9142] netlink: 'syz.0.1187': attribute type 12 has an invalid length. [ 237.119296][ T9142] netlink: 'syz.0.1187': attribute type 13 has an invalid length. [ 237.131774][ T9142] netlink: 'syz.0.1187': attribute type 14 has an invalid length. [ 237.141364][ T9142] netlink: 'syz.0.1187': attribute type 15 has an invalid length. [ 237.153905][ T9142] netlink: 'syz.0.1187': attribute type 16 has an invalid length. [ 237.161744][ T9142] netlink: 'syz.0.1187': attribute type 21 has an invalid length. [ 237.173729][ T9142] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.1187'. [ 237.378298][ T9163] validate_nla: 1 callbacks suppressed [ 237.378331][ T9163] netlink: 'syz.0.1190': attribute type 4 has an invalid length. [ 237.392536][ T9163] netlink: 169012 bytes leftover after parsing attributes in process `syz.0.1190'. [ 237.835420][ T5776] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 237.914109][ T3499] wlan1: Trigger new scan to find an IBSS to join [ 238.068429][ T9194] delete_channel: no stack [ 238.438095][ T5776] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 239.454959][ T9254] FAULT_INJECTION: forcing a failure. [ 239.454959][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 239.483331][ T9254] CPU: 1 PID: 9254 Comm: syz.2.1228 Not tainted syzkaller #0 [ 239.490746][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.500833][ T9254] Call Trace: [ 239.504131][ T9254] [ 239.507078][ T9254] dump_stack_lvl+0x18c/0x250 [ 239.510141][ T9256] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1227'. [ 239.511763][ T9254] ? show_regs_print_info+0x20/0x20 [ 239.511789][ T9254] ? load_image+0x420/0x420 [ 239.511808][ T9254] ? __might_sleep+0xe0/0xe0 [ 239.535370][ T9254] ? __lock_acquire+0x7d40/0x7d40 [ 239.540423][ T9254] should_fail_ex+0x39d/0x4d0 [ 239.545133][ T9254] should_failslab+0x9/0x20 [ 239.549659][ T9254] slab_pre_alloc_hook+0x59/0x310 [ 239.554714][ T9254] ? kvmalloc_node+0x70/0x180 [ 239.559411][ T9254] ? kvmalloc_node+0x70/0x180 [ 239.564107][ T9254] __kmem_cache_alloc_node+0x53/0x250 [ 239.569506][ T9254] ? kvmalloc_node+0x70/0x180 [ 239.574206][ T9254] __kmalloc_node+0xa4/0x230 [ 239.578827][ T9254] kvmalloc_node+0x70/0x180 [ 239.583351][ T9254] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 239.588752][ T9254] ? 0xffffffffa0004740 [ 239.592922][ T9254] ? 0xffffffffa0004740 [ 239.597088][ T9254] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 239.602999][ T9254] ? 0xffffffffa0004740 [ 239.607166][ T9254] ? xdp_convert_md_to_buff+0x330/0x330 [ 239.612736][ T9254] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 239.618975][ T9254] ? _copy_from_user+0xa5/0xe0 [ 239.623739][ T9254] ? bpf_test_init+0x119/0x140 [ 239.628499][ T9254] ? xdp_convert_md_to_buff+0x5b/0x330 [ 239.633957][ T9254] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 239.639335][ T9254] ? dev_put+0x80/0x80 [ 239.643408][ T9254] ? dev_put+0x80/0x80 [ 239.647474][ T9254] bpf_prog_test_run+0x321/0x390 [ 239.652407][ T9254] __sys_bpf+0x49d/0x890 [ 239.656645][ T9254] ? bpf_link_show_fdinfo+0x390/0x390 [ 239.662036][ T9254] ? lock_chain_count+0x20/0x20 [ 239.666894][ T9254] __x64_sys_bpf+0x7c/0x90 [ 239.671305][ T9254] do_syscall_64+0x55/0xb0 [ 239.675717][ T9254] ? clear_bhb_loop+0x40/0x90 [ 239.680392][ T9254] ? clear_bhb_loop+0x40/0x90 [ 239.685066][ T9254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.690956][ T9254] RIP: 0033:0x7fbd0b39ce59 [ 239.695365][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.714967][ T9254] RSP: 002b:00007fbd0c18c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.723374][ T9254] RAX: ffffffffffffffda RBX: 00007fbd0b615fa0 RCX: 00007fbd0b39ce59 [ 239.731337][ T9254] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 239.739303][ T9254] RBP: 00007fbd0c18c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.747265][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.755226][ T9254] R13: 00007fbd0b616038 R14: 00007fbd0b615fa0 R15: 00007ffef77ec338 [ 239.763203][ T9254] [ 240.863759][ T2952] wlan1: Creating new IBSS network, BSSID 26:05:24:91:80:b2 [ 243.283464][ T9284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1236'. [ 244.331253][ T9332] netlink: 'syz.1.1253': attribute type 10 has an invalid length. [ 244.517879][ T9332] syz.1.1253 (9332) used greatest stack depth: 19816 bytes left [ 244.792978][ T5776] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 245.812149][ T5776] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 246.648885][ T5776] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 247.206942][ T9415] syzkaller0: entered promiscuous mode [ 247.245305][ T9415] syzkaller0: entered allmulticast mode [ 247.804860][ T5776] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 247.806411][ T5783] Bluetooth: hci3: hardware error 0x0f [ 248.103094][ T9435] FAULT_INJECTION: forcing a failure. [ 248.103094][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 248.130822][ T9435] CPU: 1 PID: 9435 Comm: syz.1.1294 Not tainted syzkaller #0 [ 248.138246][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.148317][ T9435] Call Trace: [ 248.151609][ T9435] [ 248.154548][ T9435] dump_stack_lvl+0x18c/0x250 [ 248.159334][ T9435] ? show_regs_print_info+0x20/0x20 [ 248.164547][ T9435] ? load_image+0x420/0x420 [ 248.169067][ T9435] ? __might_sleep+0xe0/0xe0 [ 248.173674][ T9435] ? __lock_acquire+0x7d40/0x7d40 [ 248.178721][ T9435] should_fail_ex+0x39d/0x4d0 [ 248.183423][ T9435] should_failslab+0x9/0x20 [ 248.187927][ T9435] slab_pre_alloc_hook+0x59/0x310 [ 248.192950][ T9435] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 248.198235][ T9435] __kmem_cache_alloc_node+0x53/0x250 [ 248.203606][ T9435] ? __asan_memset+0x22/0x40 [ 248.208192][ T9435] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 248.213473][ T9435] kmalloc_trace+0x2a/0xe0 [ 248.217886][ T9435] __xdp_reg_mem_model+0x1e4/0x5c0 [ 248.222991][ T9435] ? kvmalloc_node+0x70/0x180 [ 248.227673][ T9435] ? kvmalloc_node+0x70/0x180 [ 248.232343][ T9435] ? xdp_reg_mem_model+0x40/0x40 [ 248.237279][ T9435] xdp_reg_mem_model+0x22/0x40 [ 248.242036][ T9435] bpf_test_run_xdp_live+0x262/0x1b20 [ 248.247407][ T9435] ? 0xffffffffa0004740 [ 248.251557][ T9435] ? 0xffffffffa0004740 [ 248.255701][ T9435] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 248.261582][ T9435] ? 0xffffffffa0004740 [ 248.265730][ T9435] ? xdp_convert_md_to_buff+0x330/0x330 [ 248.271292][ T9435] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 248.277529][ T9435] ? _copy_from_user+0xa5/0xe0 [ 248.282286][ T9435] ? bpf_test_init+0x119/0x140 [ 248.287043][ T9435] ? xdp_convert_md_to_buff+0x5b/0x330 [ 248.292497][ T9435] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 248.297875][ T9435] ? dev_put+0x80/0x80 [ 248.301945][ T9435] ? dev_put+0x80/0x80 [ 248.306005][ T9435] bpf_prog_test_run+0x321/0x390 [ 248.310943][ T9435] __sys_bpf+0x49d/0x890 [ 248.315181][ T9435] ? bpf_link_show_fdinfo+0x390/0x390 [ 248.320552][ T9435] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.326709][ T9435] __x64_sys_bpf+0x7c/0x90 [ 248.331118][ T9435] do_syscall_64+0x55/0xb0 [ 248.335529][ T9435] ? clear_bhb_loop+0x40/0x90 [ 248.340199][ T9435] ? clear_bhb_loop+0x40/0x90 [ 248.344874][ T9435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.350762][ T9435] RIP: 0033:0x7f70be39ce59 [ 248.355171][ T9435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.374775][ T9435] RSP: 002b:00007f70bf2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.383184][ T9435] RAX: ffffffffffffffda RBX: 00007f70be615fa0 RCX: 00007f70be39ce59 [ 248.391154][ T9435] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 248.399117][ T9435] RBP: 00007f70bf2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.407076][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.415038][ T9435] R13: 00007f70be616038 R14: 00007f70be615fa0 R15: 00007ffc0a420258 [ 248.423017][ T9435] [ 249.985995][ T5783] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 251.220182][ T9465] netlink: 'syz.0.1306': attribute type 10 has an invalid length. [ 251.348327][ T9465] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 251.839475][ T9490] syzkaller0: entered promiscuous mode [ 251.846265][ T9490] syzkaller0: entered allmulticast mode [ 254.648798][ T9551] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1340'. [ 254.948082][ T9556] syzkaller0: entered promiscuous mode [ 254.973717][ T9556] syzkaller0: entered allmulticast mode [ 255.747844][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761677][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.113957][ T9596] FAULT_INJECTION: forcing a failure. [ 257.113957][ T9596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.143000][ T9596] CPU: 0 PID: 9596 Comm: syz.2.1354 Not tainted syzkaller #0 [ 257.150410][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.160480][ T9596] Call Trace: [ 257.163779][ T9596] [ 257.166717][ T9596] dump_stack_lvl+0x18c/0x250 [ 257.171418][ T9596] ? show_regs_print_info+0x20/0x20 [ 257.176632][ T9596] ? load_image+0x420/0x420 [ 257.181150][ T9596] ? __might_fault+0xaa/0x120 [ 257.185845][ T9596] ? __lock_acquire+0x7d40/0x7d40 [ 257.190892][ T9596] should_fail_ex+0x39d/0x4d0 [ 257.195597][ T9596] _copy_to_user+0x2f/0xa0 [ 257.200037][ T9596] bpf_test_finish+0x4e7/0x650 [ 257.204831][ T9596] ? convert_skb_to___skb+0x420/0x420 [ 257.210243][ T9596] bpf_prog_test_run_xdp+0x8a9/0x10e0 [ 257.215650][ T9596] ? dev_put+0x80/0x80 [ 257.219750][ T9596] ? dev_put+0x80/0x80 [ 257.223835][ T9596] bpf_prog_test_run+0x321/0x390 [ 257.228792][ T9596] __sys_bpf+0x49d/0x890 [ 257.233061][ T9596] ? bpf_link_show_fdinfo+0x390/0x390 [ 257.238460][ T9596] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 257.244655][ T9596] __x64_sys_bpf+0x7c/0x90 [ 257.249094][ T9596] do_syscall_64+0x55/0xb0 [ 257.253532][ T9596] ? clear_bhb_loop+0x40/0x90 [ 257.258230][ T9596] ? clear_bhb_loop+0x40/0x90 [ 257.262931][ T9596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.268843][ T9596] RIP: 0033:0x7fbd0b39ce59 [ 257.273275][ T9596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.292890][ T9596] RSP: 002b:00007fbd0c18c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.301313][ T9596] RAX: ffffffffffffffda RBX: 00007fbd0b615fa0 RCX: 00007fbd0b39ce59 [ 257.309281][ T9596] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 257.317242][ T9596] RBP: 00007fbd0c18c090 R08: 0000000000000000 R09: 0000000000000000 [ 257.325206][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.333168][ T9596] R13: 00007fbd0b616038 R14: 00007fbd0b615fa0 R15: 00007ffef77ec338 [ 257.341145][ T9596] [ 257.457222][ T9607] netlink: 'syz.3.1360': attribute type 46 has an invalid length. [ 257.465507][ T9607] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1360'. [ 257.791239][ T9623] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 257.800100][ T9616] netlink: 'syz.3.1364': attribute type 6 has an invalid length. [ 257.800202][ T9616] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1364'. [ 257.845459][ T9623] netlink: 'syz.0.1366': attribute type 3 has an invalid length. [ 257.869667][ T9623] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1366'. [ 257.900864][ T9624] netlink: 'syz.0.1366': attribute type 10 has an invalid length. [ 257.920232][ T9624] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1366'. [ 258.040906][ T9626] syzkaller0: entered promiscuous mode [ 258.052961][ T9626] syzkaller0: entered allmulticast mode [ 258.530342][ T9636] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1371'. [ 259.981940][ T9652] FAULT_INJECTION: forcing a failure. [ 259.981940][ T9652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.033204][ T9652] CPU: 1 PID: 9652 Comm: syz.3.1376 Not tainted syzkaller #0 [ 260.040623][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 260.050690][ T9652] Call Trace: [ 260.053998][ T9652] [ 260.056946][ T9652] dump_stack_lvl+0x18c/0x250 [ 260.061644][ T9652] ? show_regs_print_info+0x20/0x20 [ 260.066852][ T9652] ? load_image+0x420/0x420 [ 260.071364][ T9652] ? __lock_acquire+0x7d40/0x7d40 [ 260.076391][ T9652] ? snprintf+0xe9/0x140 [ 260.080635][ T9652] should_fail_ex+0x39d/0x4d0 [ 260.085313][ T9652] _copy_to_user+0x2f/0xa0 [ 260.089731][ T9652] simple_read_from_buffer+0xe7/0x150 [ 260.095109][ T9652] proc_fail_nth_read+0x1e8/0x260 [ 260.100137][ T9652] ? proc_fault_inject_write+0x360/0x360 [ 260.105771][ T9652] ? fsnotify_perm+0x271/0x5e0 [ 260.110529][ T9652] ? proc_fault_inject_write+0x360/0x360 [ 260.116161][ T9652] vfs_read+0x28b/0x970 [ 260.120322][ T9652] ? kernel_read+0x1e0/0x1e0 [ 260.124908][ T9652] ? __fget_files+0x28/0x4b0 [ 260.129494][ T9652] ? __fget_files+0x28/0x4b0 [ 260.134079][ T9652] ? __fget_files+0x43d/0x4b0 [ 260.138757][ T9652] ? __fdget_pos+0x2a3/0x330 [ 260.143340][ T9652] ? ksys_read+0x75/0x260 [ 260.147667][ T9652] ksys_read+0x150/0x260 [ 260.151914][ T9652] ? vfs_write+0x990/0x990 [ 260.156328][ T9652] ? lockdep_hardirqs_on+0x98/0x150 [ 260.161526][ T9652] do_syscall_64+0x55/0xb0 [ 260.165937][ T9652] ? clear_bhb_loop+0x40/0x90 [ 260.170609][ T9652] ? clear_bhb_loop+0x40/0x90 [ 260.175284][ T9652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.181173][ T9652] RIP: 0033:0x7fbd0495d68e [ 260.185582][ T9652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.205183][ T9652] RSP: 002b:00007fbd05854fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.213595][ T9652] RAX: ffffffffffffffda RBX: 00007fbd058556c0 RCX: 00007fbd0495d68e [ 260.221562][ T9652] RDX: 000000000000000f RSI: 00007fbd058550a0 RDI: 0000000000000007 [ 260.229523][ T9652] RBP: 00007fbd05855090 R08: 0000000000000000 R09: 0000000000000000 [ 260.237486][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.245449][ T9652] R13: 00007fbd04c16038 R14: 00007fbd04c15fa0 R15: 00007ffeac4ac8e8 [ 260.253429][ T9652] [ 260.704504][ T9677] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1385'. [ 261.139189][ T9677] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 261.163062][ T9677] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 262.776625][ T9738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1406'. [ 262.786580][ T9739] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1406'. [ 263.460265][ T9750] netlink: 'syz.3.1411': attribute type 29 has an invalid length. [ 263.499776][ T9750] netlink: 'syz.3.1411': attribute type 29 has an invalid length. [ 263.547702][ T9757] netlink: 'syz.3.1411': attribute type 29 has an invalid length. [ 263.608901][ T9750] netlink: 'syz.3.1411': attribute type 29 has an invalid length. [ 263.794478][ T9772] netlink: 'syz.0.1418': attribute type 10 has an invalid length. [ 264.063919][ T1316] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.211614][ T9783] syzkaller0: entered promiscuous mode [ 264.226305][ T9783] syzkaller0: entered allmulticast mode [ 266.771185][ T9828] tap0: tun_chr_ioctl cmd 1074025677 [ 266.780812][ T9828] tap0: linktype set to 0 [ 266.867091][ T9828] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1437'. [ 267.710480][ T9864] syzkaller0: entered promiscuous mode [ 267.732917][ T9864] syzkaller0: entered allmulticast mode [ 269.016776][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 270.108675][ T5783] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 272.317603][ T9906] netlink: 'syz.0.1465': attribute type 10 has an invalid length. [ 272.854346][ T9921] syzkaller0: entered promiscuous mode [ 272.886814][ T9921] syzkaller0: entered allmulticast mode [ 275.311594][ T9989] netlink: 'syz.2.1494': attribute type 10 has an invalid length. [ 275.355370][ T9989] bridge0: port 3(batadv0) entered disabled state [ 275.364536][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.375696][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.441605][ T9989] bridge0: port 3(batadv0) entered blocking state [ 275.449312][ T9989] bridge0: port 3(batadv0) entered forwarding state [ 275.457187][ T9989] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.464966][ T9989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.473458][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.481185][ T9989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.528878][ T9989] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 276.133901][T10011] syzkaller0: entered promiscuous mode [ 276.139635][T10011] syzkaller0: entered allmulticast mode [ 278.755548][T10086] @: port 1(vlan0) entered blocking state [ 278.771930][T10086] @: port 1(vlan0) entered disabled state [ 278.778560][T10086] vlan0: entered allmulticast mode [ 278.800872][T10086] veth0_vlan: entered allmulticast mode [ 278.820732][T10086] vlan0: entered promiscuous mode [ 279.802361][T10130] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 279.811210][T10130] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 279.824628][T10130] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 279.853961][T10130] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 279.893058][T10130] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 280.989082][T10165] syzkaller0: entered promiscuous mode [ 281.019593][T10165] syzkaller0: entered allmulticast mode [ 283.298360][T10186] netlink: 'syz.2.1564': attribute type 26 has an invalid length. [ 283.323092][T10186] netlink: 62827 bytes leftover after parsing attributes in process `syz.2.1564'. [ 283.452300][T10198] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1569'. [ 283.618960][T10204] netlink: 8210 bytes leftover after parsing attributes in process `syz.3.1569'. [ 283.708539][T10198] netlink: 8210 bytes leftover after parsing attributes in process `syz.3.1569'. [ 284.483031][ T5783] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 286.123414][T10278] netlink: 'syz.0.1597': attribute type 10 has an invalid length. [ 286.895229][T10293] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 287.647973][T10328] netlink: 'syz.3.1618': attribute type 21 has an invalid length. [ 287.676795][T10328] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 287.701393][T10328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1618'. [ 287.711637][T10331] netlink: 43431 bytes leftover after parsing attributes in process `syz.1.1620'. [ 287.775261][T10334] netlink: 'syz.3.1618': attribute type 21 has an invalid length. [ 287.814049][T10334] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 287.842879][T10334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1618'. [ 288.070543][T10347] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1625'. [ 288.152211][T10354] netlink: 8210 bytes leftover after parsing attributes in process `syz.1.1625'. [ 288.192679][T10347] netlink: 8210 bytes leftover after parsing attributes in process `syz.1.1625'. [ 289.270990][T10384] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1641'. [ 289.310442][T10384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.268835][T10463] syz.3.1668: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 293.301485][T10458] syzkaller0: entered promiscuous mode [ 293.303062][T10463] CPU: 1 PID: 10463 Comm: syz.3.1668 Not tainted syzkaller #0 [ 293.314455][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.324528][T10463] Call Trace: [ 293.325706][T10458] syzkaller0: entered allmulticast mode [ 293.327807][T10463] [ 293.327840][T10463] dump_stack_lvl+0x18c/0x250 [ 293.341024][T10463] ? show_regs_print_info+0x20/0x20 [ 293.342718][T10460] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1667'. [ 293.346233][T10463] ? load_image+0x420/0x420 [ 293.346284][T10463] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 293.346313][T10463] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 293.373005][T10463] warn_alloc+0x246/0x340 [ 293.377371][T10463] ? stack_trace_save+0xaa/0x100 [ 293.382319][T10463] ? zone_watermark_ok_safe+0x230/0x230 [ 293.387884][T10463] ? kasan_set_track+0x5f/0x70 [ 293.392664][T10463] ? kasan_set_track+0x4e/0x70 [ 293.397429][T10463] ? __kasan_kmalloc+0x8f/0xa0 [ 293.402192][T10463] ? xsk_init_queue+0xad/0x100 [ 293.406969][T10463] ? xsk_setsockopt+0x4e5/0x760 [ 293.411826][T10463] ? do_sock_setsockopt+0x175/0x1a0 [ 293.417032][T10463] ? __x64_sys_setsockopt+0x182/0x200 [ 293.422425][T10463] __vmalloc_node_range+0x126/0x1330 [ 293.427745][T10463] ? free_vm_area+0x50/0x50 [ 293.432267][T10463] vmalloc_user+0x74/0x80 [ 293.436619][T10463] ? xskq_create+0xbf/0x170 [ 293.441124][T10463] xskq_create+0xbf/0x170 [ 293.445460][T10463] xsk_init_queue+0xad/0x100 [ 293.450068][T10463] xsk_setsockopt+0x4e5/0x760 [ 293.454761][T10463] ? xsk_poll+0x680/0x680 [ 293.459102][T10463] ? __fget_files+0x28/0x4b0 [ 293.463715][T10463] ? __fget_files+0x28/0x4b0 [ 293.468310][T10463] ? aa_sock_opt_perm+0x74/0x100 [ 293.473254][T10463] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 293.478812][T10463] ? security_socket_setsockopt+0x7e/0xa0 [ 293.484538][T10463] ? xsk_poll+0x680/0x680 [ 293.488880][T10463] do_sock_setsockopt+0x175/0x1a0 [ 293.493922][T10463] ? __fdget+0x180/0x210 [ 293.498170][T10463] __x64_sys_setsockopt+0x182/0x200 [ 293.503382][T10463] do_syscall_64+0x55/0xb0 [ 293.507815][T10463] ? clear_bhb_loop+0x40/0x90 [ 293.512495][T10463] ? clear_bhb_loop+0x40/0x90 [ 293.517178][T10463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.523089][T10463] RIP: 0033:0x7fbd0499ce59 [ 293.527509][T10463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.547115][T10463] RSP: 002b:00007fbd05855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 293.555546][T10463] RAX: ffffffffffffffda RBX: 00007fbd04c15fa0 RCX: 00007fbd0499ce59 [ 293.563518][T10463] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 293.571500][T10463] RBP: 00007fbd04a32d6f R08: 0000000000000004 R09: 0000000000000000 [ 293.579469][T10463] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 293.587440][T10463] R13: 00007fbd04c16038 R14: 00007fbd04c15fa0 R15: 00007ffeac4ac8e8 [ 293.595454][T10463] [ 293.619286][T10463] Mem-Info: [ 293.629406][T10463] active_anon:9287 inactive_anon:0 isolated_anon:0 [ 293.629406][T10463] active_file:17866 inactive_file:40033 isolated_file:0 [ 293.629406][T10463] unevictable:768 dirty:133 writeback:0 [ 293.629406][T10463] slab_reclaimable:10229 slab_unreclaimable:93656 [ 293.629406][T10463] mapped:27603 shmem:4906 pagetables:574 [ 293.629406][T10463] sec_pagetables:0 bounce:0 [ 293.629406][T10463] kernel_misc_reclaimable:0 [ 293.629406][T10463] free:1346149 free_pcp:5396 free_cma:0 [ 293.685441][T10463] Node 0 active_anon:37648kB inactive_anon:0kB active_file:71464kB inactive_file:159936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111012kB dirty:532kB writeback:0kB shmem:18588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11684kB pagetables:2296kB sec_pagetables:0kB all_unreclaimable? no [ 293.735605][T10463] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 293.802954][T10463] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.903035][T10463] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 293.909117][T10463] Node 0 DMA32 free:1463944kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:42244kB inactive_anon:0kB active_file:71464kB inactive_file:159108kB unevictable:1536kB writepending:532kB present:3129332kB managed:2586932kB mlocked:0kB bounce:0kB free_pcp:5636kB local_pcp:1568kB free_cma:0kB [ 293.926696][T10471] netlink: 'syz.1.1670': attribute type 9 has an invalid length. [ 293.948585][T10471] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1670'. [ 293.983818][T10463] lowmem_reserve[]: 0 0 0 0 0 [ 293.988642][T10463] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 294.044140][T10463] lowmem_reserve[]: 0 0 0 0 0 [ 294.084397][T10463] Node 1 Normal free:3900504kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15520kB local_pcp:7552kB free_cma:0kB [ 294.117092][T10463] lowmem_reserve[]: 0 0 0 0 0 [ 294.121853][T10463] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 294.135160][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 294.144024][T10463] Node 0 DMA32: 691*4kB (UME) 814*8kB (UE) 593*16kB (UME) 1037*32kB (UME) 397*64kB (UME) 123*128kB (UME) 58*256kB (UME) 24*512kB (UM) 14*1024kB (ME) 4*2048kB (M) 322*4096kB (UM) = 1461676kB [ 294.203846][T10463] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 294.238552][T10463] Node 1 Normal: 218*4kB (UME) 48*8kB (UME) 33*16kB (UME) 93*32kB (UME) 29*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3900504kB [ 294.282958][T10463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.303797][T10463] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.322901][T10463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.342785][T10463] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.352732][T10463] 67424 total pagecache pages [ 294.362899][T10463] 0 pages in swap cache [ 294.367076][T10463] Free swap = 124996kB [ 294.381550][T10463] Total swap = 124996kB [ 294.386035][T10463] 2097051 pages RAM [ 294.389852][T10463] 0 pages HighMem/MovableOnly [ 294.402888][T10463] 416932 pages reserved [ 294.407188][T10463] 0 pages cma reserved [ 295.433039][ T3499] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 296.413062][T10475] IPv6: Can't replace route, no match found [ 297.018971][T10508] netlink: 'syz.0.1685': attribute type 2 has an invalid length. [ 297.046567][T10508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1685'. [ 297.256257][ T5783] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 297.314156][T10517] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1688'. [ 297.508207][T10522] netlink: 'syz.2.1691': attribute type 29 has an invalid length. [ 297.516549][T10522] netlink: 'syz.2.1691': attribute type 29 has an invalid length. [ 297.544214][T10522] netlink: 'syz.2.1691': attribute type 29 has an invalid length. [ 297.568214][T10522] netlink: 'syz.2.1691': attribute type 29 has an invalid length. [ 298.364984][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 299.147437][ T5783] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 300.146530][T10604] C: renamed from team_slave_0 [ 300.174058][T10604] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 300.191830][T10604] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1723'. [ 300.232946][T10604] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 300.701340][T10625] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1728'. [ 300.784205][T10629] netlink: 'syz.2.1734': attribute type 9 has an invalid length. [ 300.823210][T10629] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1734'. [ 300.979568][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 301.280128][T10641] netlink: 'syz.0.1737': attribute type 3 has an invalid length. [ 301.320168][T10641] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1737'. [ 301.350810][T10649] syzkaller0: entered promiscuous mode [ 301.359377][T10649] syzkaller0: entered allmulticast mode [ 301.370132][T10650] netlink: 'syz.0.1737': attribute type 10 has an invalid length. [ 301.409711][T10650] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 301.539965][T10654] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1742'. [ 301.671487][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 302.822904][T10654] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 302.836315][T10654] syzkaller0: linktype set to 768 [ 302.887415][T10666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1746'. [ 303.363749][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 303.898189][T10709] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1761'. [ 304.415143][T10720] netlink: 'syz.1.1766': attribute type 2 has an invalid length. [ 304.435929][T10720] netlink: 'syz.1.1766': attribute type 8 has an invalid length. [ 304.463147][T10720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1766'. [ 304.661869][ T5783] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 304.980923][T10737] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1772'. [ 305.015840][T10737] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1772'. [ 305.095873][T10740] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1772'. [ 305.105636][T10742] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1772'. [ 305.478165][T10749] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 305.496664][T10749] syzkaller0: entered promiscuous mode [ 305.502236][T10749] syzkaller0: entered allmulticast mode [ 305.548895][T10749] netlink: 'syz.1.1775': attribute type 13 has an invalid length. [ 305.559291][T10749] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.1775'. [ 305.570692][T10745] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1773'. [ 305.583397][T10745] bridge_slave_1: entered promiscuous mode [ 307.384786][T10753] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1776'. [ 307.577007][ T5783] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 308.116807][T10773] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1783'. [ 308.398394][T10776] netlink: 'syz.1.1784': attribute type 29 has an invalid length. [ 308.442011][T10776] netlink: 'syz.1.1784': attribute type 29 has an invalid length. [ 308.471756][T10779] netlink: 'syz.1.1784': attribute type 29 has an invalid length. [ 308.519686][T10776] netlink: 'syz.1.1784': attribute type 29 has an invalid length. [ 308.554834][T10776] netlink: 'syz.1.1784': attribute type 29 has an invalid length. [ 308.901794][ T5783] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 309.238342][T10795] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1792'. [ 309.636939][T10795] ================================================================== [ 309.645046][T10795] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 309.652877][T10795] Write of size 56 at addr ffff888079f6ed90 by task syz.2.1792/10795 [ 309.660945][T10795] [ 309.663270][T10795] CPU: 0 PID: 10795 Comm: syz.2.1792 Not tainted syzkaller #0 [ 309.670742][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 309.680803][T10795] Call Trace: [ 309.684088][T10795] [ 309.687031][T10795] dump_stack_lvl+0x18c/0x250 [ 309.691726][T10795] ? __lock_acquire+0x7d40/0x7d40 [ 309.696766][T10795] ? show_regs_print_info+0x20/0x20 [ 309.701972][T10795] ? load_image+0x420/0x420 [ 309.706486][T10795] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 309.711954][T10795] ? __virt_addr_valid+0x18c/0x540 [ 309.717065][T10795] ? __virt_addr_valid+0x469/0x540 [ 309.722173][T10795] print_report+0xa8/0x210 [ 309.726585][T10795] ? __bpf_get_stackid+0x6bf/0x900 [ 309.731688][T10795] kasan_report+0x117/0x150 [ 309.736190][T10795] ? __bpf_get_stackid+0x6bf/0x900 [ 309.741299][T10795] kasan_check_range+0x241/0x290 [ 309.746234][T10795] ? __bpf_get_stackid+0x6bf/0x900 [ 309.751337][T10795] __asan_memcpy+0x40/0x70 [ 309.755750][T10795] __bpf_get_stackid+0x6bf/0x900 [ 309.760684][T10795] bpf_get_stackid_pe+0x343/0x410 [ 309.765704][T10795] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 309.771155][T10795] bpf_overflow_handler+0x43f/0x510 [ 309.776352][T10795] ? bpf_overflow_handler+0xde/0x510 [ 309.781632][T10795] ? tp_perf_event_destroy+0x20/0x20 [ 309.786917][T10795] ? perf_trace_preemptirq_template+0xac/0x330 [ 309.793087][T10795] ? __perf_event_account_interrupt+0x187/0x280 [ 309.799332][T10795] __perf_event_overflow+0x447/0x630 [ 309.804617][T10795] perf_swevent_event+0x319/0x570 [ 309.809639][T10795] ? perf_tp_event+0x1520/0x1520 [ 309.814568][T10795] ? __x64_sys_clone+0x1b7/0x230 [ 309.819498][T10795] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.825577][T10795] ___perf_sw_event+0x4a7/0x730 [ 309.830425][T10795] ? ___perf_sw_event+0x199/0x730 [ 309.835442][T10795] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 309.841851][T10795] ? __lock_acquire+0x1347/0x7d40 [ 309.846874][T10795] ? __put_user_4+0x11/0x20 [ 309.851387][T10795] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 309.857364][T10795] ? lock_chain_count+0x20/0x20 [ 309.862209][T10795] ? debug_mutex_init+0x38/0x70 [ 309.867054][T10795] __perf_sw_event+0x139/0x270 [ 309.871821][T10795] do_user_addr_fault+0x123e/0x12c0 [ 309.877021][T10795] ? rcu_is_watching+0x15/0xb0 [ 309.881785][T10795] exc_page_fault+0x64/0x100 [ 309.886376][T10795] asm_exc_page_fault+0x26/0x30 [ 309.891224][T10795] RIP: 0010:__put_user_4+0x11/0x20 [ 309.896335][T10795] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 309.915936][T10795] RSP: 0018:ffffc9000ce37a58 EFLAGS: 00050202 [ 309.921998][T10795] RAX: 0000000000000013 RBX: 0000000000000000 RCX: 0000200000000040 [ 309.929964][T10795] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9a20 [ 309.937932][T10795] RBP: ffffc9000ce37c50 R08: ffffffff8e8b502f R09: 1ffffffff1d16a05 [ 309.945899][T10795] R10: dffffc0000000000 R11: fffffbfff1d16a06 R12: ffff88801fa9eed0 [ 309.953863][T10795] R13: ffff888062c78110 R14: 0000000000000000 R15: ffff88801fa9e370 [ 309.961835][T10795] copy_process+0x1d7a/0x3dc0 [ 309.966517][T10795] ? copy_process+0x96e/0x3dc0 [ 309.971278][T10795] ? try_to_wake_up+0x781/0x1190 [ 309.976210][T10795] ? __pidfd_prepare+0x140/0x140 [ 309.981138][T10795] ? wake_up_q+0xca/0x100 [ 309.985473][T10795] kernel_clone+0x24b/0x8a0 [ 309.990002][T10795] ? futex_wake_mark+0x150/0x150 [ 309.994943][T10795] ? create_io_thread+0x190/0x190 [ 309.999965][T10795] ? debug_mutex_init+0x38/0x70 [ 310.004825][T10795] ? do_futex+0x35d/0x3e0 [ 310.009152][T10795] __x64_sys_clone+0x1b7/0x230 [ 310.013913][T10795] ? __ia32_sys_vfork+0x140/0x140 [ 310.018939][T10795] ? lock_chain_count+0x20/0x20 [ 310.023785][T10795] ? lockdep_hardirqs_on+0x98/0x150 [ 310.028984][T10795] do_syscall_64+0x55/0xb0 [ 310.033396][T10795] ? clear_bhb_loop+0x40/0x90 [ 310.038072][T10795] ? clear_bhb_loop+0x40/0x90 [ 310.042747][T10795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.048638][T10795] RIP: 0033:0x7fbd0b39ce59 [ 310.053044][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.072643][T10795] RSP: 002b:00007fbd0c18bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 310.081054][T10795] RAX: ffffffffffffffda RBX: 00007fbd0b615fa0 RCX: 00007fbd0b39ce59 [ 310.089019][T10795] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000008001000 [ 310.096984][T10795] RBP: 00007fbd0b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 310.104952][T10795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 310.112917][T10795] R13: 00007fbd0b616038 R14: 00007fbd0b615fa0 R15: 00007ffef77ec338 [ 310.120887][T10795] [ 310.123900][T10795] [ 310.126211][T10795] Allocated by task 10795: [ 310.130611][T10795] kasan_set_track+0x4e/0x70 [ 310.135198][T10795] __kasan_kmalloc+0x8f/0xa0 [ 310.139783][T10795] __kmalloc_node+0xb4/0x230 [ 310.144369][T10795] bpf_map_area_alloc+0x5e/0x110 [ 310.149301][T10795] prealloc_elems_and_freelist+0x86/0x1c0 [ 310.155016][T10795] stack_map_alloc+0x33a/0x4c0 [ 310.159771][T10795] map_create+0x877/0x12f0 [ 310.164178][T10795] __sys_bpf+0x651/0x890 [ 310.168413][T10795] __x64_sys_bpf+0x7c/0x90 [ 310.172822][T10795] do_syscall_64+0x55/0xb0 [ 310.177234][T10795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.183126][T10795] [ 310.185440][T10795] Last potentially related work creation: [ 310.191138][T10795] kasan_save_stack+0x3e/0x60 [ 310.195807][T10795] __kasan_record_aux_stack+0xaf/0xc0 [ 310.201174][T10795] call_rcu+0x153/0x950 [ 310.205323][T10795] __nf_register_net_hook+0x788/0x910 [ 310.210688][T10795] nf_register_net_hook+0xb2/0x190 [ 310.215794][T10795] nf_register_net_hooks+0x44/0x1b0 [ 310.220985][T10795] nf_ct_netns_do_get+0x3c0/0x5c0 [ 310.226006][T10795] nf_ct_netns_inet_get+0x1f/0x150 [ 310.231111][T10795] nf_conncount_init+0x127/0x380 [ 310.236042][T10795] ovs_ct_init+0x316/0x490 [ 310.240456][T10795] ovs_init_net+0x1e6/0x250 [ 310.244953][T10795] ops_init+0x397/0x640 [ 310.249100][T10795] setup_net+0x3b6/0xa30 [ 310.253332][T10795] copy_net_ns+0x36d/0x5e0 [ 310.257735][T10795] create_new_namespaces+0x3d3/0x6f0 [ 310.263011][T10795] copy_namespaces+0x430/0x4a0 [ 310.267768][T10795] copy_process+0x1724/0x3dc0 [ 310.272435][T10795] kernel_clone+0x24b/0x8a0 [ 310.276931][T10795] __x64_sys_clone+0x1b7/0x230 [ 310.281685][T10795] do_syscall_64+0x55/0xb0 [ 310.286093][T10795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.291982][T10795] [ 310.294295][T10795] Second to last potentially related work creation: [ 310.300862][T10795] kasan_save_stack+0x3e/0x60 [ 310.305531][T10795] __kasan_record_aux_stack+0xaf/0xc0 [ 310.310897][T10795] call_rcu+0x153/0x950 [ 310.315045][T10795] __nf_register_net_hook+0x788/0x910 [ 310.320416][T10795] nf_register_net_hook+0xb2/0x190 [ 310.325520][T10795] nf_register_net_hooks+0x44/0x1b0 [ 310.330714][T10795] nf_ct_netns_do_get+0x3c0/0x5c0 [ 310.335734][T10795] nf_ct_netns_inet_get+0x1f/0x150 [ 310.340838][T10795] nf_conncount_init+0x127/0x380 [ 310.345773][T10795] ovs_ct_init+0x316/0x490 [ 310.350188][T10795] ovs_init_net+0x1e6/0x250 [ 310.354678][T10795] ops_init+0x397/0x640 [ 310.358822][T10795] setup_net+0x3b6/0xa30 [ 310.363054][T10795] copy_net_ns+0x36d/0x5e0 [ 310.367466][T10795] create_new_namespaces+0x3d3/0x6f0 [ 310.372740][T10795] copy_namespaces+0x430/0x4a0 [ 310.377494][T10795] copy_process+0x1724/0x3dc0 [ 310.382163][T10795] kernel_clone+0x24b/0x8a0 [ 310.386658][T10795] __x64_sys_clone+0x1b7/0x230 [ 310.391414][T10795] do_syscall_64+0x55/0xb0 [ 310.395825][T10795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.401713][T10795] [ 310.404024][T10795] The buggy address belongs to the object at ffff888079f6ed80 [ 310.404024][T10795] which belongs to the cache kmalloc-cg-64 of size 64 [ 310.418149][T10795] The buggy address is located 16 bytes inside of [ 310.418149][T10795] allocated 40-byte region [ffff888079f6ed80, ffff888079f6eda8) [ 310.432105][T10795] [ 310.434421][T10795] The buggy address belongs to the physical page: [ 310.440829][T10795] page:ffffea0001e7db80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79f6e [ 310.450970][T10795] memcg:ffff888079fc8e01 [ 310.455195][T10795] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 310.462724][T10795] page_type: 0xffffffff() [ 310.467044][T10795] raw: 00fff00000000800 ffff888017c4da00 ffffea0005314e00 0000000000000006 [ 310.475616][T10795] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888079fc8e01 [ 310.484185][T10795] page dumped because: kasan: bad access detected [ 310.490588][T10795] page_owner tracks the page as allocated [ 310.496289][T10795] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5781, tgid 5781 (syz-executor), ts 77901531719, free_ts 77715854251 [ 310.514509][T10795] post_alloc_hook+0x1c1/0x200 [ 310.519270][T10795] get_page_from_freelist+0x1951/0x19e0 [ 310.524807][T10795] __alloc_pages+0x1f0/0x460 [ 310.529385][T10795] alloc_slab_page+0x5d/0x160 [ 310.534050][T10795] new_slab+0x87/0x2d0 [ 310.538114][T10795] ___slab_alloc+0xc5d/0x12f0 [ 310.542787][T10795] __kmem_cache_alloc_node+0x19e/0x250 [ 310.548244][T10795] __kmalloc_node+0xa4/0x230 [ 310.552832][T10795] kvmalloc_node+0x70/0x180 [ 310.557330][T10795] nf_hook_entries_grow+0x27d/0x6d0 [ 310.562525][T10795] nf_hook_entries_insert_raw+0x4b/0x300 [ 310.568152][T10795] nf_nat_register_fn+0x1d0/0x580 [ 310.573165][T10795] iptable_nat_table_init+0xd4/0x2d0 [ 310.578436][T10795] xt_find_table_lock+0x306/0x3e0 [ 310.583463][T10795] xt_request_find_table_lock+0x26/0x100 [ 310.589094][T10795] do_ipt_get_ctl+0x717/0x1200 [ 310.593853][T10795] page last free stack trace: [ 310.598508][T10795] free_unref_page_prepare+0x7b2/0x8c0 [ 310.603965][T10795] free_unref_page+0x32/0x2e0 [ 310.608637][T10795] __slab_free+0x35a/0x400 [ 310.613043][T10795] qlist_free_all+0x75/0xd0 [ 310.617538][T10795] kasan_quarantine_reduce+0x143/0x160 [ 310.622991][T10795] __kasan_slab_alloc+0x22/0x80 [ 310.627829][T10795] slab_post_alloc_hook+0x6e/0x4b0 [ 310.632935][T10795] __kmem_cache_alloc_node+0x13a/0x250 [ 310.638391][T10795] __kmalloc+0xa4/0x230 [ 310.642541][T10795] tomoyo_realpath_from_path+0xe3/0x5d0 [ 310.648076][T10795] tomoyo_path_perm+0x282/0x560 [ 310.652917][T10795] security_inode_getattr+0xd3/0x120 [ 310.658199][T10795] __x64_sys_newfstat+0x12c/0x250 [ 310.663216][T10795] do_syscall_64+0x55/0xb0 [ 310.667625][T10795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.673512][T10795] [ 310.675824][T10795] Memory state around the buggy address: [ 310.681441][T10795] ffff888079f6ec80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 310.689489][T10795] ffff888079f6ed00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 310.697537][T10795] >ffff888079f6ed80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 310.705584][T10795] ^ [ 310.710940][T10795] ffff888079f6ee00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 310.718990][T10795] ffff888079f6ee80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 310.727035][T10795] ================================================================== [ 310.735093][T10795] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 310.742269][T10795] CPU: 0 PID: 10795 Comm: syz.2.1792 Not tainted syzkaller #0 [ 310.749714][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.759756][T10795] Call Trace: [ 310.763028][T10795] [ 310.765952][T10795] dump_stack_lvl+0x18c/0x250 [ 310.770625][T10795] ? show_regs_print_info+0x20/0x20 [ 310.775814][T10795] ? load_image+0x420/0x420 [ 310.780309][T10795] panic+0x2dc/0x730 [ 310.784203][T10795] ? __lock_acquire+0x7d40/0x7d40 [ 310.789221][T10795] ? bpf_jit_dump+0xd0/0xd0 [ 310.793722][T10795] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 310.799613][T10795] ? _raw_spin_unlock+0x40/0x40 [ 310.804461][T10795] ? __bpf_get_stackid+0x6bf/0x900 [ 310.809565][T10795] check_panic_on_warn+0x84/0xa0 [ 310.814497][T10795] ? __bpf_get_stackid+0x6bf/0x900 [ 310.819602][T10795] end_report+0x6f/0x130 [ 310.823842][T10795] kasan_report+0x128/0x150 [ 310.828337][T10795] ? __bpf_get_stackid+0x6bf/0x900 [ 310.833444][T10795] kasan_check_range+0x241/0x290 [ 310.838377][T10795] ? __bpf_get_stackid+0x6bf/0x900 [ 310.843485][T10795] __asan_memcpy+0x40/0x70 [ 310.847897][T10795] __bpf_get_stackid+0x6bf/0x900 [ 310.852840][T10795] bpf_get_stackid_pe+0x343/0x410 [ 310.857859][T10795] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 310.863307][T10795] bpf_overflow_handler+0x43f/0x510 [ 310.868503][T10795] ? bpf_overflow_handler+0xde/0x510 [ 310.873788][T10795] ? tp_perf_event_destroy+0x20/0x20 [ 310.879066][T10795] ? perf_trace_preemptirq_template+0xac/0x330 [ 310.885221][T10795] ? __perf_event_account_interrupt+0x187/0x280 [ 310.891454][T10795] __perf_event_overflow+0x447/0x630 [ 310.896737][T10795] perf_swevent_event+0x319/0x570 [ 310.901757][T10795] ? perf_tp_event+0x1520/0x1520 [ 310.906684][T10795] ? __x64_sys_clone+0x1b7/0x230 [ 310.911615][T10795] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.917680][T10795] ___perf_sw_event+0x4a7/0x730 [ 310.922523][T10795] ? ___perf_sw_event+0x199/0x730 [ 310.927541][T10795] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 310.933948][T10795] ? __lock_acquire+0x1347/0x7d40 [ 310.938967][T10795] ? __put_user_4+0x11/0x20 [ 310.943472][T10795] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 310.949447][T10795] ? lock_chain_count+0x20/0x20 [ 310.954292][T10795] ? debug_mutex_init+0x38/0x70 [ 310.959135][T10795] __perf_sw_event+0x139/0x270 [ 310.963892][T10795] do_user_addr_fault+0x123e/0x12c0 [ 310.969098][T10795] ? rcu_is_watching+0x15/0xb0 [ 310.973858][T10795] exc_page_fault+0x64/0x100 [ 310.978450][T10795] asm_exc_page_fault+0x26/0x30 [ 310.983296][T10795] RIP: 0010:__put_user_4+0x11/0x20 [ 310.988412][T10795] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 311.008007][T10795] RSP: 0018:ffffc9000ce37a58 EFLAGS: 00050202 [ 311.014068][T10795] RAX: 0000000000000013 RBX: 0000000000000000 RCX: 0000200000000040 [ 311.022031][T10795] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9a20 [ 311.029992][T10795] RBP: ffffc9000ce37c50 R08: ffffffff8e8b502f R09: 1ffffffff1d16a05 [ 311.037958][T10795] R10: dffffc0000000000 R11: fffffbfff1d16a06 R12: ffff88801fa9eed0 [ 311.045922][T10795] R13: ffff888062c78110 R14: 0000000000000000 R15: ffff88801fa9e370 [ 311.053892][T10795] copy_process+0x1d7a/0x3dc0 [ 311.058570][T10795] ? copy_process+0x96e/0x3dc0 [ 311.063329][T10795] ? try_to_wake_up+0x781/0x1190 [ 311.068258][T10795] ? __pidfd_prepare+0x140/0x140 [ 311.073192][T10795] ? wake_up_q+0xca/0x100 [ 311.077518][T10795] kernel_clone+0x24b/0x8a0 [ 311.082013][T10795] ? futex_wake_mark+0x150/0x150 [ 311.086946][T10795] ? create_io_thread+0x190/0x190 [ 311.091962][T10795] ? debug_mutex_init+0x38/0x70 [ 311.096808][T10795] ? do_futex+0x35d/0x3e0 [ 311.101129][T10795] __x64_sys_clone+0x1b7/0x230 [ 311.105886][T10795] ? __ia32_sys_vfork+0x140/0x140 [ 311.110910][T10795] ? lock_chain_count+0x20/0x20 [ 311.115755][T10795] ? lockdep_hardirqs_on+0x98/0x150 [ 311.120951][T10795] do_syscall_64+0x55/0xb0 [ 311.125361][T10795] ? clear_bhb_loop+0x40/0x90 [ 311.130038][T10795] ? clear_bhb_loop+0x40/0x90 [ 311.134716][T10795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.140607][T10795] RIP: 0033:0x7fbd0b39ce59 [ 311.145016][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.164609][T10795] RSP: 002b:00007fbd0c18bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 311.173014][T10795] RAX: ffffffffffffffda RBX: 00007fbd0b615fa0 RCX: 00007fbd0b39ce59 [ 311.180974][T10795] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000008001000 [ 311.188934][T10795] RBP: 00007fbd0b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 311.196895][T10795] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.204856][T10795] R13: 00007fbd0b616038 R14: 00007fbd0b615fa0 R15: 00007ffef77ec338 [ 311.212829][T10795] [ 311.216100][T10795] Kernel Offset: disabled [ 311.220410][T10795] Rebooting in 86400 seconds..