last executing test programs: 14.556880931s ago: executing program 3 (id=601): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x417, 0x5) 14.359301068s ago: executing program 3 (id=604): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000e7008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 14.155735498s ago: executing program 3 (id=607): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000061b100000200000000000000c5afe1c590fea86b5d7db0e13c4f3f3cfcd9a0932a96a3b8f575f98fb86133f56f966ab587da5518c0b452665c073069ef96b134221bdde1c17278ae79b7b887cf9af9e34d85ba7397a0b9ccfe6b6a8c78206669fc783ed3ba6bafbcd674dfcc0cdb4e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) write$cgroup_subtree(r2, 0x0, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a3, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, 0x0) 11.983902572s ago: executing program 3 (id=615): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) 11.473343845s ago: executing program 3 (id=622): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 8.092313496s ago: executing program 3 (id=641): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fff6) 6.260211516s ago: executing program 2 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa6, 0x1, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d}, {0x30}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000008b"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000040), &(0x7f0000000440)=""/183}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000001c0)=0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r3, &(0x7f0000000040)}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000001d00)={'wlan1\x00', @random='\x00\x00\b\x00'}) 5.215714057s ago: executing program 0 (id=665): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000000880)=""/4092}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.127594578s ago: executing program 2 (id=667): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4.936771917s ago: executing program 2 (id=669): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x1000000, 0x0, 0x0, 0x7}]}}, &(0x7f0000000340)=""/142, 0x26, 0x8e, 0x1}, 0x28) 4.917238864s ago: executing program 0 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16, 0xfc, 0x5, 0xffffffff}]}) 4.828059777s ago: executing program 2 (id=671): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x5, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 4.529062854s ago: executing program 0 (id=673): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x30) 4.392165005s ago: executing program 2 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x20000000, 0x7}, 0x0, 0x0, 0x2, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[], 0xe) 4.330157308s ago: executing program 1 (id=675): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000b00006110180000000000d40500002000000095000000000000009abb1723bf2c203831c9545b21c751ee4024f479cbe4b89f9807836ea5847c95ffc926c2e182c7a3221481f5009edaf5f542a715b99fb3d2a73dd02584a54ee68c70dbfbcdcea76ee541e318cbe84cd4f5381f522e258a4d9aeb9b16feb66bf40fdf73be95633dc5de907f2ffdcc18494f09c327abd3a76fee11357181f05f7ac06d6a9078df8bc21f00cd8ac4109850ce4aa147beacafecd5c7ccdeecb146ca1e7611f8b3adb41b39029c1b9b59fbf1b4a80167ca6b113a1600000000000000000000cdb7fe6d684423596ee2bdad7787936c24c84d4721327a695ed24946de35ff5e000091e0610ac2d72b9b6f453f98e7b5a25941905bd564aac36dbe7d1db9f5561ad6f7c2e79fb80b6949d626024b5fb96e3da0d7113b1c826f49a2cbc18001d315aaf280a8a762689f8c6fee958836002f48815ad19ee99d81c9e3cda430cef4a75e5c4dd14c3cbb6af58e3f3b3f8cbd858532b02995d79ca5dac0fd49aa150f6e212e3f46e4f37f372ee43f136e4d3af6cc4a0ce2379cc1010d8483b82e54feeefa1e89d6a3b74fbb4b619c43984223674b40fbe29ea5752c76a5e6a44d95382a9e04f9a51881aedb6d6242d0fe2e7dcf1f8b22f46c37fb010f8e86c62a4c72327c7eaaf720aff72529429aed45219cb1b6476e53b650927d193b4062c4640de2781643edc5e59280c59332e92b52675a02009db11b3829d8424fdf33ccdb7f89bfa14f9c2a17f9183cb48222e685f49340891845efdac175d90c116eaa013315165865f9a3785e21b41fd4b5eda7eb5a7462307fe72a3fe53eb02c75867e6eeebfc3037683f66d407fc28c4735a221bb5b78a6f966474a98ceceb20f0d4757b8e81ab14d29bad2b19aa5aff53ee333009688b401064898f58f88226f0e675cc74f0adaf4b97315e12e88b5eabd519e523a7f0e839fe91774f85a65068de244a78687c12e4e6dffb556c8d30b8ee73faaac455701569da7ae1a4e44fdd2cf28965a9f5e09acf476e07e5ea768c558a5622601742b27b91724dde6a0f96d3e53e67db57bbd0d3f2dd8439192dfc71f9e5f289c7f519e8b794fb09b64fb3c1bcd46731051de09510ebd717eb57655d447753fd2ff052a9d6889ddb5a5f68564bd00a5ff58a75805eadb00000000000000006a9af2471aada1ad164502199e0a668ad4daa53e5658f82733b3c7f36fcf3146adf7025dfd79c5a67c27395f5ca5a90d45402e58b42946b5a977a56385f31083a4b65d61ec4991cd6c91a02bd788825a"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 4.04396043s ago: executing program 1 (id=677): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd7, 0x6, 0x0, 0x0, 0x0, 0x6, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x7}, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x1008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xf4, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x8, '\x00', r1, @sock_ops}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/2, 0x0, 0x2, 0x1, 0x5}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 3.880288705s ago: executing program 1 (id=678): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 3.720374826s ago: executing program 1 (id=679): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 2.939974584s ago: executing program 4 (id=680): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x7101}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 2.925123217s ago: executing program 4 (id=681): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x5, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1488}, 0x0, 0xffffffffffffffff, r0, 0x0) 2.872322729s ago: executing program 1 (id=682): socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x8180, 0x2, 0x0, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0xfffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) 2.748209775s ago: executing program 4 (id=683): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007112040000000000950000002a00001f1fa2f07289514300"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x80) 2.73455791s ago: executing program 4 (id=684): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4c01, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x1ff) 2.670834893s ago: executing program 4 (id=685): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x7}, 0x94) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x2, 0x11, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0xffffffffffffff6f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 1.468146415s ago: executing program 0 (id=686): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001580)={0x2c, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000014}, 0x10) 1.333117716s ago: executing program 0 (id=687): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x8000, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7, 0x0, 0x0, 0x200000}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r2 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x2, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/13], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x1010, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000073cd273bd15b3a115b0000000000851000000200000085000003009500a5050100"/51], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x0, 0x0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x2a, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x2, 0xa, 0x2, 0x5, 0x81}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x0, 0x5, 0xa, 0x1, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000400)='syzkaller\x00', 0x3b47, 0x99, &(0x7f0000001340)=""/153, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x4, 0xb, 0xee0f, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001480)=[r1], &(0x7f00000014c0)=[{0x1, 0x3, 0x10, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r6, 0x4) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0xb, 0x0, 0x42) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31000000001400000011006d"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x302, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 872.000897ms ago: executing program 0 (id=688): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x6}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x15, &(0x7f0000001200)=@raw=[@call={0x85, 0x0, 0x0, 0x41}, @jmp={0x5, 0x0, 0xa, 0x8, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb}, @alu={0x7, 0x0, 0x5, 0x8, 0x0, 0xfffffffffffffff0, 0x10}, @generic={0x7, 0x7, 0x2, 0x5, 0xa6b}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000080)='GPL\x00', 0xb, 0xffd, &(0x7f0000001cc0)=""/4093, 0x41100, 0x2f}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001600)={0x0, 0x200}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000016c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x9, 0x23, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000940)='syzkaller\x00', 0x7248, 0x16, &(0x7f0000000e00)=""/22, 0x41100, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x5, 0x5, 0x3, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000017c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5, r0], &(0x7f0000001800)=[{0x4, 0x1, 0xa, 0xb}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r6 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r6}, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x12, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37584dd6821d7e9a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r10}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xb, r6, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r11}, 0x10) r12 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r12, 0x0, 0x20000011) sendmsg$kcm(r12, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) 119.626477ms ago: executing program 4 (id=689): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1000}, 0x0) socket$kcm(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xbe766f0780fc8e72, 0x0) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/1367], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) 111.939384ms ago: executing program 1 (id=699): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 0s ago: executing program 2 (id=690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x67) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000200)="1c2d9ea53a2aa9e6bd3cf0c2729567876cafa11f177a09eafba1c6665c5c42cfa81fa4fde4c27fade2d4d4e64bed82f8fe5d54311a62f6ad3f828b3eb6dec0c1efa1a0f20400926f4781b5ef0dfae45cbdd9cfc3869a60d4da0bf3c4dd86cb8f7df665333263ac629ca0194db121a1b68650c79dde85fe90f1ac80f2aa64c8d4f28e0acfac83f0f90db36ef00177d010318d17e0813ed4c42dea285fbcf24d4644e9b875639af5149fe35d4725c637cdd0610be9e966c7406863a8519ac56dbea9b36cc0717fb0e6f30eacb01e06381870a12b0ac6cf6b", &(0x7f00000003c0)=""/220, &(0x7f00000004c0)="ff20bb70c110ae6eb50266be3061fb23a10eb2cb1aa45231ae568860555c1c5c089104900ce8573b13f9979778dc84d3be5e27e0224adc176cd9e5c709249a26b4a5f9", &(0x7f0000000540)="f618052d44d75df5fecfe4d1f106012d19c2372de8625fe7b59cab2be4fc467a97f218225717af99324569257330c03d190f3aa4e980ccaa5cb7443ed200be68f70da400bcfbf3984aa17bb3da230305af776a423cab4953c2e1d56e5a10ddee854acd673a1a956f244ff9e27d05fb8bdc6a10c1824740476e2be5136626a4aa5ec534026fd504ebd048f426867064e2f5", 0x1, r0}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x3e, 0xd2, &(0x7f0000000000)="16b0f34a84bd4b83cd3efc166da4dfa2ca485d661dbf2976b88d08e8930bce7a4e88fa88b6be7ee32e4f01f71ffc0c497565a65ff9e781385ca59a12fc5b", &(0x7f0000000040)=""/210, 0x10001, 0x0, 0x8b, 0xb5, &(0x7f0000000180)="fa5da84eef464d2765283cb5fb3646f9e48fd402e34ebdd4f989e3c894f6d46dfc4582e9dc7899850efcf737717e1a0273e0e1df41f2e4b5c09c1397bdcfc5824d9243af0786f80e9998d45b540fcd9b548ebb4518317fd1c99ed7f7c5009945390680529915b04fd8981aba0bf81e99e8038335f73cfe8d42bb6075a2c3602c44c07123eb2ed73eb44c4c", &(0x7f0000000300)="0a403fe046e65c61a1e040f525ef280e36b33fd06c0513aaa4539c44984b8c8b17cd11006795c2a46450209b4797b380421cb5f63bb508eab7219755cdcfa564d779c03ff13017ac7738f96a6953d1e3588a8671838adeb159e0dcadd459d2226e27d8257eb7999fa7d16ce1112bfb0325f9c7843f610dca2c37dc6ab623ec410731b60698a7c954349e3b119feb10c182d250a9f2a22f9e2525eeae362bd63a9aa7b1ac9475fc4ad91a9654bddd5394b8750b915c", 0x4, 0x0, 0x800}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}}, 0x40) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 83.191961][ T5850] cgroup: Unknown subsys name 'net' [ 83.330290][ T5850] cgroup: Unknown subsys name 'cpuset' [ 83.339408][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.136152][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.119567][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.126179][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.135027][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.143393][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.143487][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.157928][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.159111][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.172864][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.174845][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.188567][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.191517][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.196966][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.204076][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.210646][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.218255][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.235665][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.243548][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.251926][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.267443][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.277377][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.285622][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.314367][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.326089][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.335041][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.343398][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.895736][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 90.084776][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 90.108377][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 90.224696][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.232464][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.240680][ T5860] bridge_slave_0: entered allmulticast mode [ 90.249170][ T5860] bridge_slave_0: entered promiscuous mode [ 90.258145][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 90.313738][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.321432][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.330015][ T5860] bridge_slave_1: entered allmulticast mode [ 90.338127][ T5860] bridge_slave_1: entered promiscuous mode [ 90.444953][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.506724][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 90.520929][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.550273][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.557621][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.564823][ T5867] bridge_slave_0: entered allmulticast mode [ 90.572765][ T5867] bridge_slave_0: entered promiscuous mode [ 90.619922][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.627307][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.634606][ T5867] bridge_slave_1: entered allmulticast mode [ 90.642321][ T5867] bridge_slave_1: entered promiscuous mode [ 90.672615][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.680128][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.687541][ T5864] bridge_slave_0: entered allmulticast mode [ 90.694935][ T5864] bridge_slave_0: entered promiscuous mode [ 90.741992][ T5860] team0: Port device team_slave_0 added [ 90.748723][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.756309][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.763842][ T5864] bridge_slave_1: entered allmulticast mode [ 90.771943][ T5864] bridge_slave_1: entered promiscuous mode [ 90.816914][ T5860] team0: Port device team_slave_1 added [ 90.868347][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.882636][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.928587][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.940009][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.947783][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.955112][ T5861] bridge_slave_0: entered allmulticast mode [ 90.963062][ T5861] bridge_slave_0: entered promiscuous mode [ 91.006642][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.031347][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.038823][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.047047][ T5861] bridge_slave_1: entered allmulticast mode [ 91.054419][ T5861] bridge_slave_1: entered promiscuous mode [ 91.089932][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.097358][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.125656][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.177610][ T5867] team0: Port device team_slave_0 added [ 91.197311][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.204432][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.231939][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.245629][ T5864] team0: Port device team_slave_0 added [ 91.254988][ T5864] team0: Port device team_slave_1 added [ 91.276877][ T5867] team0: Port device team_slave_1 added [ 91.283822][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.292039][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.299544][ T5862] bridge_slave_0: entered allmulticast mode [ 91.306781][ T5881] Bluetooth: hci0: command tx timeout [ 91.313132][ T5862] bridge_slave_0: entered promiscuous mode [ 91.316414][ T5881] Bluetooth: hci3: command tx timeout [ 91.319424][ T5865] Bluetooth: hci4: command tx timeout [ 91.328635][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.337519][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.344758][ T5862] bridge_slave_1: entered allmulticast mode [ 91.352560][ T5862] bridge_slave_1: entered promiscuous mode [ 91.383284][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.386139][ T5865] Bluetooth: hci2: command tx timeout [ 91.395927][ T5881] Bluetooth: hci1: command tx timeout [ 91.403244][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.519921][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.544308][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.551874][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.578379][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.612500][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.622122][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.648625][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.662971][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.670821][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.696846][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.711007][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.739770][ T5860] hsr_slave_0: entered promiscuous mode [ 91.747038][ T5860] hsr_slave_1: entered promiscuous mode [ 91.754294][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.762411][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.789340][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.802165][ T5861] team0: Port device team_slave_0 added [ 91.811308][ T5861] team0: Port device team_slave_1 added [ 91.843524][ T5862] team0: Port device team_slave_0 added [ 91.888003][ T5862] team0: Port device team_slave_1 added [ 91.948280][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.955317][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.981479][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.029038][ T24] cfg80211: failed to load regulatory.db [ 92.038083][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.045068][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.072407][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.084850][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.092552][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.118594][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.179343][ T5864] hsr_slave_0: entered promiscuous mode [ 92.186393][ T5864] hsr_slave_1: entered promiscuous mode [ 92.193599][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 92.200177][ T5864] Cannot create hsr debugfs directory [ 92.214385][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.221473][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.248279][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.290088][ T5867] hsr_slave_0: entered promiscuous mode [ 92.296850][ T5867] hsr_slave_1: entered promiscuous mode [ 92.303230][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 92.309378][ T5867] Cannot create hsr debugfs directory [ 92.351511][ T5861] hsr_slave_0: entered promiscuous mode [ 92.360813][ T5861] hsr_slave_1: entered promiscuous mode [ 92.367973][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 92.374755][ T5861] Cannot create hsr debugfs directory [ 92.577745][ T5862] hsr_slave_0: entered promiscuous mode [ 92.584172][ T5862] hsr_slave_1: entered promiscuous mode [ 92.590938][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 92.597102][ T5862] Cannot create hsr debugfs directory [ 92.992906][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.023500][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.050539][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.070653][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.135295][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.148646][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.162045][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.179239][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.279258][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.291588][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.304712][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.319837][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.386995][ T5881] Bluetooth: hci4: command tx timeout [ 93.387280][ T5865] Bluetooth: hci3: command tx timeout [ 93.392468][ T5881] Bluetooth: hci0: command tx timeout [ 93.438369][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.460173][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.468779][ T5865] Bluetooth: hci1: command tx timeout [ 93.472982][ T5881] Bluetooth: hci2: command tx timeout [ 93.509694][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.520669][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.552337][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.628789][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.655557][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.687940][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.701064][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.719388][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.726695][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.748049][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.810192][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.817391][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.864030][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.898692][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.971389][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.995204][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.017098][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.024277][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.055905][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.063087][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.074693][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.081903][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.099449][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.135032][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.142418][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.212987][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.260729][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.267964][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.340165][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.347408][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.505684][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.577782][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.600914][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.623574][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.630813][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.680308][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.687646][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.876298][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.887887][ T5860] veth0_vlan: entered promiscuous mode [ 94.913441][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.983251][ T5860] veth1_vlan: entered promiscuous mode [ 95.049140][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.190525][ T5861] veth0_vlan: entered promiscuous mode [ 95.222565][ T5861] veth1_vlan: entered promiscuous mode [ 95.261731][ T5860] veth0_macvtap: entered promiscuous mode [ 95.325336][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.353191][ T5860] veth1_macvtap: entered promiscuous mode [ 95.439089][ T5861] veth0_macvtap: entered promiscuous mode [ 95.458829][ T5861] veth1_macvtap: entered promiscuous mode [ 95.469181][ T5881] Bluetooth: hci0: command tx timeout [ 95.473718][ T5879] Bluetooth: hci4: command tx timeout [ 95.482631][ T5865] Bluetooth: hci3: command tx timeout [ 95.487450][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.499871][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.530030][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.549371][ T5865] Bluetooth: hci1: command tx timeout [ 95.554847][ T5865] Bluetooth: hci2: command tx timeout [ 95.591022][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.607454][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.635500][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.645578][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.673945][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.714457][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.771775][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.790545][ T5867] veth0_vlan: entered promiscuous mode [ 95.815035][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.824005][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.863668][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.884266][ T5862] veth0_vlan: entered promiscuous mode [ 95.886463][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.899604][ T5862] veth1_vlan: entered promiscuous mode [ 95.906128][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.930254][ T5864] veth0_vlan: entered promiscuous mode [ 95.941886][ T5867] veth1_vlan: entered promiscuous mode [ 96.033813][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.042018][ T5864] veth1_vlan: entered promiscuous mode [ 96.052616][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.093269][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.109780][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.159534][ T5867] veth0_macvtap: entered promiscuous mode [ 96.193323][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.200219][ T5867] veth1_macvtap: entered promiscuous mode [ 96.236300][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.253767][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.263839][ T5862] veth0_macvtap: entered promiscuous mode [ 96.302937][ T5862] veth1_macvtap: entered promiscuous mode [ 96.331638][ T5864] veth0_macvtap: entered promiscuous mode [ 96.370354][ T5864] veth1_macvtap: entered promiscuous mode [ 96.382291][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.392309][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.460682][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.500257][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.532389][ T5986] sit0: entered allmulticast mode [ 96.552207][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.590028][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.602673][ T5986] sit0: entered promiscuous mode [ 96.622415][ C1] hrtimer: interrupt took 57809 ns [ 96.674323][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.683607][ T78] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.708665][ T78] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.724809][ T78] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.755749][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.774198][ T78] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.815383][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.854031][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.945238][ T5990] C: renamed from team_slave_0 (while UP) [ 96.959104][ T5990] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 96.968321][ T5990] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 96.990710][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.002453][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052655][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.072433][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.118440][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 97.135052][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.149143][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.408905][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.426257][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.509063][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.521670][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.548068][ T5865] Bluetooth: hci0: command tx timeout [ 97.553950][ T5879] Bluetooth: hci3: command tx timeout [ 97.554356][ T5881] Bluetooth: hci4: command tx timeout [ 97.608118][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.620457][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.629256][ T5881] Bluetooth: hci2: command tx timeout [ 97.629270][ T5865] Bluetooth: hci1: command tx timeout [ 97.747309][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.777521][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.973588][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.011389][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.175298][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.199411][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.503404][ T6019] -1: renamed from wg0 (while UP) [ 99.533746][ T6030] syz.0.12 (6030) used obsolete PPPIOCDETACH ioctl [ 99.557418][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.566124][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.593906][ T6026] bridge0: entered allmulticast mode [ 99.621285][ T6027] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.12'. [ 99.681378][ T6032] bridge_slave_1: left allmulticast mode [ 99.688126][ T6032] bridge_slave_1: left promiscuous mode [ 99.709725][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.782953][ T6032] bridge_slave_0: left allmulticast mode [ 99.800526][ T6032] bridge_slave_0: left promiscuous mode [ 99.821682][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.093747][ T6043] netlink: 'syz.2.14': attribute type 16 has an invalid length. [ 100.101899][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 100.416285][ T6049] : entered promiscuous mode [ 100.756525][ T6063] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 100.843313][ T6063] team0: Cannot enslave team device to itself [ 101.798681][ T6075] macvtap0: refused to change device tx_queue_len [ 101.806720][ T6074] netlink: 'syz.1.24': attribute type 12 has an invalid length. [ 101.836888][ T6074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24'. [ 102.068769][ T6080] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 102.114691][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 102.454528][ T6094] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 102.744728][ T6094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.888629][ T6094] team0: Port device bond0 added [ 102.934939][ T6089] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 102.998025][ T6094] syz.1.29 (6094) used greatest stack depth: 18168 bytes left [ 104.182263][ T6143] netlink: 'syz.3.38': attribute type 8 has an invalid length. [ 104.230209][ T6143] netlink: 'syz.3.38': attribute type 3 has an invalid length. [ 104.274715][ T6140] netlink: 'syz.3.38': attribute type 7 has an invalid length. [ 104.282698][ T6143] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.38'. [ 104.295811][ T6140] netlink: 'syz.3.38': attribute type 13 has an invalid length. [ 104.305819][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'. [ 104.414368][ T6152] warning: `syz.0.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.635231][ T6151] netlink: 156 bytes leftover after parsing attributes in process `syz.4.43'. [ 105.517108][ T6174] netlink: 'syz.0.48': attribute type 13 has an invalid length. [ 105.826824][ T6180] Illegal XDP return value 1523775924 on prog (id 31) dev N/A, expect packet loss! [ 105.921923][ T6183] netlink: 'syz.0.50': attribute type 6 has an invalid length. [ 106.426827][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 106.464088][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 106.983916][ T6206] netlink: 232 bytes leftover after parsing attributes in process `syz.1.58'. [ 107.063303][ T6213] netlink: 'syz.3.57': attribute type 40 has an invalid length. [ 107.142145][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.236747][ T6218] netlink: 'syz.4.59': attribute type 41 has an invalid length. [ 107.271317][ T6218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.59'. [ 107.609913][ T6217] syzkaller0: entered promiscuous mode [ 107.628133][ T6217] syzkaller0: entered allmulticast mode [ 107.659762][ T6217] syzkaller0: refused to change device tx_queue_len [ 108.121529][ T6234] netlink: 'syz.1.64': attribute type 2 has an invalid length. [ 108.186386][ T6234] netlink: 'syz.1.64': attribute type 8 has an invalid length. [ 108.219669][ T6239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.236622][ T6234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.64'. [ 108.358961][ T6235] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 108.377640][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'. [ 108.397834][ T6235] syzkaller1: linktype set to 823 [ 108.421070][ T6250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.66'. [ 111.241591][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'. [ 111.254170][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'. [ 111.264507][ T6254] netlink: 731 bytes leftover after parsing attributes in process `syz.1.68'. [ 111.809960][ T6267] netlink: 'syz.2.73': attribute type 29 has an invalid length. [ 112.106605][ T6272] netlink: 'syz.2.73': attribute type 29 has an invalid length. [ 112.158970][ T6267] netlink: 'syz.2.73': attribute type 29 has an invalid length. [ 112.255500][ T6272] netlink: 'syz.2.73': attribute type 29 has an invalid length. [ 112.401027][ T6277] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.618237][ T6286] Zero length message leads to an empty skb [ 112.880788][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.80'. [ 113.019020][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.84'. [ 114.756694][ T6341] netlink: 184 bytes leftover after parsing attributes in process `syz.3.91'. [ 114.936679][ T6348] netlink: 763 bytes leftover after parsing attributes in process `syz.3.91'. [ 115.016941][ T6349] netlink: 7 bytes leftover after parsing attributes in process `syz.4.89'. [ 115.123311][ T6349] netlink: 116 bytes leftover after parsing attributes in process `syz.4.89'. [ 116.092359][ T6370] netlink: 220 bytes leftover after parsing attributes in process `syz.1.96'. [ 116.094324][ T6373] netlink: 14 bytes leftover after parsing attributes in process `syz.4.97'. [ 116.138447][ T6370] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 116.507497][ T6385] netlink: 'syz.1.101': attribute type 17 has an invalid length. [ 117.252085][ T6392] netlink: 'syz.1.104': attribute type 4 has an invalid length. [ 117.300584][ T6392] netlink: 152 bytes leftover after parsing attributes in process `syz.1.104'. [ 117.329221][ T6392] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 117.998345][ T6399] netlink: 'syz.3.105': attribute type 10 has an invalid length. [ 120.011576][ T6399] team0 (unregistering): Port device team_slave_0 removed [ 120.060858][ T6399] team0 (unregistering): Port device team_slave_1 removed [ 121.801202][ T6457] FAULT_INJECTION: forcing a failure. [ 121.801202][ T6457] name failslab, interval 1, probability 0, space 0, times 1 [ 121.814654][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 122.041068][ T6457] CPU: 0 UID: 0 PID: 6457 Comm: syz.0.124 Not tainted syzkaller #0 PREEMPT(full) [ 122.041098][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.041123][ T6457] Call Trace: [ 122.041131][ T6457] [ 122.041141][ T6457] dump_stack_lvl+0x189/0x250 [ 122.041180][ T6457] ? __pfx____ratelimit+0x10/0x10 [ 122.041209][ T6457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.041235][ T6457] ? __pfx__printk+0x10/0x10 [ 122.041274][ T6457] ? __pfx___might_resched+0x10/0x10 [ 122.041305][ T6457] should_fail_ex+0x414/0x560 [ 122.041340][ T6457] should_failslab+0xa8/0x100 [ 122.041375][ T6457] __kmalloc_cache_noprof+0x70/0x3d0 [ 122.041405][ T6457] ? nf_tables_newchain+0xfeb/0x2900 [ 122.041434][ T6457] nf_tables_newchain+0xfeb/0x2900 [ 122.041479][ T6457] ? __pfx_nf_tables_newchain+0x10/0x10 [ 122.041549][ T6457] ? nfnl_pernet+0x23/0x240 [ 122.041590][ T6457] ? __nla_parse+0x40/0x60 [ 122.041628][ T6457] nfnetlink_rcv+0x1132/0x2520 [ 122.041707][ T6457] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 122.041758][ T6457] ? ref_tracker_free+0x63a/0x7d0 [ 122.041828][ T6457] ? __netlink_deliver_tap+0x807/0x850 [ 122.041859][ T6457] ? netlink_deliver_tap+0x2e/0x1b0 [ 122.041914][ T6457] netlink_unicast+0x82c/0x9e0 [ 122.041955][ T6457] ? __pfx_netlink_unicast+0x10/0x10 [ 122.041986][ T6457] ? netlink_sendmsg+0x642/0xb30 [ 122.042014][ T6457] ? skb_put+0x11b/0x210 [ 122.042053][ T6457] netlink_sendmsg+0x805/0xb30 [ 122.042098][ T6457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.042134][ T6457] ? aa_sock_msg_perm+0xf1/0x1d0 [ 122.042170][ T6457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.042194][ T6457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.042226][ T6457] __sock_sendmsg+0x21c/0x270 [ 122.042259][ T6457] ____sys_sendmsg+0x505/0x830 [ 122.042290][ T6457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.042326][ T6457] ? import_iovec+0x74/0xa0 [ 122.042356][ T6457] ___sys_sendmsg+0x21f/0x2a0 [ 122.042382][ T6457] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.042434][ T6457] ? __fget_files+0x2a/0x420 [ 122.042483][ T6457] ? __fget_files+0x2a/0x420 [ 122.042514][ T6457] ? __fget_files+0x3a0/0x420 [ 122.042561][ T6457] __x64_sys_sendmsg+0x19b/0x260 [ 122.042587][ T6457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.042624][ T6457] ? __pfx_ksys_write+0x10/0x10 [ 122.042650][ T6457] ? rcu_is_watching+0x15/0xb0 [ 122.042680][ T6457] ? do_syscall_64+0xbe/0x3b0 [ 122.042722][ T6457] do_syscall_64+0xfa/0x3b0 [ 122.042750][ T6457] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.042779][ T6457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.042800][ T6457] ? clear_bhb_loop+0x60/0xb0 [ 122.042828][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.042849][ T6457] RIP: 0033:0x7fbc2698ebe9 [ 122.042873][ T6457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.042890][ T6457] RSP: 002b:00007fbc27808038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.042918][ T6457] RAX: ffffffffffffffda RBX: 00007fbc26bc5fa0 RCX: 00007fbc2698ebe9 [ 122.042934][ T6457] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 122.042949][ T6457] RBP: 00007fbc27808090 R08: 0000000000000000 R09: 0000000000000000 [ 122.042963][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.042975][ T6457] R13: 00007fbc26bc6038 R14: 00007fbc26bc5fa0 R15: 00007ffc73899b98 [ 122.043015][ T6457] [ 122.922952][ T30] audit: type=1107 audit(1757071669.982:2): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',' [ 123.015688][ T6477] netlink: 232 bytes leftover after parsing attributes in process `syz.1.126'. [ 123.356835][ T6482] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 123.380547][ T6482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.128'. [ 123.510457][ T6482] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 123.557252][ T6482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.668826][ T6493] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.131'. [ 123.966841][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 124.157663][ T6511] netlink: 44 bytes leftover after parsing attributes in process `syz.4.135'. [ 124.520060][ T6533] netlink: 10 bytes leftover after parsing attributes in process `syz.4.141'. [ 124.734207][ T6540] netlink: 'syz.1.143': attribute type 29 has an invalid length. [ 124.753015][ T6548] netlink: 'syz.0.142': attribute type 13 has an invalid length. [ 124.753525][ T6540] netlink: 'syz.1.143': attribute type 29 has an invalid length. [ 124.778321][ T6548] netlink: 'syz.0.142': attribute type 17 has an invalid length. [ 124.920888][ T6548] sit0: left promiscuous mode [ 124.941222][ T6548] sit0: left allmulticast mode [ 125.007973][ T6550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.145'. [ 125.015094][ T6553] netlink: 44 bytes leftover after parsing attributes in process `syz.3.146'. [ 125.067211][ T6557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.146'. [ 125.173180][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.182557][ T6557] unsupported nlmsg_type 40 [ 125.241079][ T6548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.322348][ T6563] netlink: 'syz.2.148': attribute type 64 has an invalid length. [ 126.438762][ T6588] syzkaller0: entered promiscuous mode [ 126.465995][ T6588] syzkaller0: entered allmulticast mode [ 126.714552][ T6602] FAULT_INJECTION: forcing a failure. [ 126.714552][ T6602] name failslab, interval 1, probability 0, space 0, times 0 [ 126.864730][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 126.864758][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.864770][ T6602] Call Trace: [ 126.864778][ T6602] [ 126.864787][ T6602] dump_stack_lvl+0x189/0x250 [ 126.864817][ T6602] ? __pfx____ratelimit+0x10/0x10 [ 126.864845][ T6602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.864869][ T6602] ? __pfx__printk+0x10/0x10 [ 126.864901][ T6602] ? __pfx___might_resched+0x10/0x10 [ 126.864921][ T6602] ? fs_reclaim_acquire+0x7d/0x100 [ 126.864957][ T6602] should_fail_ex+0x414/0x560 [ 126.864988][ T6602] should_failslab+0xa8/0x100 [ 126.865019][ T6602] __kmalloc_cache_noprof+0x70/0x3d0 [ 126.865046][ T6602] ? nft_trans_table_add+0x56/0x430 [ 126.865074][ T6602] nft_trans_table_add+0x56/0x430 [ 126.865104][ T6602] nf_tables_newtable+0xce3/0x1890 [ 126.865155][ T6602] nfnetlink_rcv+0x1132/0x2520 [ 126.865216][ T6602] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 126.865278][ T6602] ? ref_tracker_free+0x63a/0x7d0 [ 126.865340][ T6602] ? __netlink_deliver_tap+0x807/0x850 [ 126.865371][ T6602] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.865420][ T6602] netlink_unicast+0x82c/0x9e0 [ 126.865457][ T6602] ? __pfx_netlink_unicast+0x10/0x10 [ 126.865486][ T6602] ? netlink_sendmsg+0x642/0xb30 [ 126.865514][ T6602] ? skb_put+0x11b/0x210 [ 126.865561][ T6602] netlink_sendmsg+0x805/0xb30 [ 126.865601][ T6602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.865632][ T6602] ? aa_sock_msg_perm+0xf1/0x1d0 [ 126.865668][ T6602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.865692][ T6602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.865725][ T6602] __sock_sendmsg+0x21c/0x270 [ 126.865761][ T6602] ____sys_sendmsg+0x505/0x830 [ 126.865790][ T6602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.865821][ T6602] ? import_iovec+0x74/0xa0 [ 126.865848][ T6602] ___sys_sendmsg+0x21f/0x2a0 [ 126.865871][ T6602] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.865932][ T6602] ? __fget_files+0x2a/0x420 [ 126.865962][ T6602] ? __fget_files+0x3a0/0x420 [ 126.866004][ T6602] __x64_sys_sendmsg+0x19b/0x260 [ 126.866029][ T6602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.866060][ T6602] ? __pfx_ksys_write+0x10/0x10 [ 126.866085][ T6602] ? rcu_is_watching+0x15/0xb0 [ 126.866112][ T6602] ? do_syscall_64+0xbe/0x3b0 [ 126.866156][ T6602] do_syscall_64+0xfa/0x3b0 [ 126.866184][ T6602] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.866211][ T6602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.866232][ T6602] ? clear_bhb_loop+0x60/0xb0 [ 126.866257][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.866277][ T6602] RIP: 0033:0x7fba0d18ebe9 [ 126.866296][ T6602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.866312][ T6602] RSP: 002b:00007fba0e089038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.866335][ T6602] RAX: ffffffffffffffda RBX: 00007fba0d3c5fa0 RCX: 00007fba0d18ebe9 [ 126.866350][ T6602] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 126.866362][ T6602] RBP: 00007fba0e089090 R08: 0000000000000000 R09: 0000000000000000 [ 126.866375][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.866388][ T6602] R13: 00007fba0d3c6038 R14: 00007fba0d3c5fa0 R15: 00007fffd2aa3928 [ 126.866423][ T6602] [ 127.647978][ T6629] __nla_validate_parse: 2 callbacks suppressed [ 127.648001][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.1.167'. [ 127.736409][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 127.809089][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 127.830264][ T6627] openvswitch: netlink: IP tunnel dst address not specified [ 128.105810][ T6635] netlink: 'syz.3.169': attribute type 10 has an invalid length. [ 128.162141][ T6635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.169'. [ 128.215003][ T6635] dummy0: entered promiscuous mode [ 128.263870][ T6635] dummy0: entered allmulticast mode [ 128.300973][ T6635] bridge0: port 3(dummy0) entered blocking state [ 128.357846][ T6635] bridge0: port 3(dummy0) entered disabled state [ 128.476450][ T6635] bridge0: port 3(dummy0) entered blocking state [ 128.483137][ T6635] bridge0: port 3(dummy0) entered forwarding state [ 128.726398][ T6647] netlink: 232 bytes leftover after parsing attributes in process `syz.4.174'. [ 129.037658][ T6657] FAULT_INJECTION: forcing a failure. [ 129.037658][ T6657] name failslab, interval 1, probability 0, space 0, times 0 [ 129.122369][ T6657] CPU: 0 UID: 0 PID: 6657 Comm: syz.4.177 Not tainted syzkaller #0 PREEMPT(full) [ 129.122399][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.122412][ T6657] Call Trace: [ 129.122428][ T6657] [ 129.122438][ T6657] dump_stack_lvl+0x189/0x250 [ 129.122469][ T6657] ? __pfx____ratelimit+0x10/0x10 [ 129.122498][ T6657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.122524][ T6657] ? __pfx__printk+0x10/0x10 [ 129.122560][ T6657] ? __pfx___might_resched+0x10/0x10 [ 129.122580][ T6657] ? fs_reclaim_acquire+0x7d/0x100 [ 129.122617][ T6657] should_fail_ex+0x414/0x560 [ 129.122650][ T6657] should_failslab+0xa8/0x100 [ 129.122681][ T6657] __kmalloc_cache_noprof+0x70/0x3d0 [ 129.122709][ T6657] ? nf_tables_newchain+0xfeb/0x2900 [ 129.122735][ T6657] nf_tables_newchain+0xfeb/0x2900 [ 129.122774][ T6657] ? __pfx_nf_tables_newchain+0x10/0x10 [ 129.122833][ T6657] ? nfnl_pernet+0x23/0x240 [ 129.122890][ T6657] ? __nla_parse+0x40/0x60 [ 129.122926][ T6657] nfnetlink_rcv+0x1132/0x2520 [ 129.122988][ T6657] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 129.123034][ T6657] ? ref_tracker_free+0x63a/0x7d0 [ 129.123094][ T6657] ? __netlink_deliver_tap+0x807/0x850 [ 129.123124][ T6657] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.123173][ T6657] netlink_unicast+0x82c/0x9e0 [ 129.123210][ T6657] ? __pfx_netlink_unicast+0x10/0x10 [ 129.123239][ T6657] ? netlink_sendmsg+0x642/0xb30 [ 129.123266][ T6657] ? skb_put+0x11b/0x210 [ 129.123303][ T6657] netlink_sendmsg+0x805/0xb30 [ 129.123344][ T6657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.123378][ T6657] ? aa_sock_msg_perm+0xf1/0x1d0 [ 129.123411][ T6657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.123434][ T6657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.123465][ T6657] __sock_sendmsg+0x21c/0x270 [ 129.123495][ T6657] ____sys_sendmsg+0x505/0x830 [ 129.123523][ T6657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.123555][ T6657] ? import_iovec+0x74/0xa0 [ 129.123583][ T6657] ___sys_sendmsg+0x21f/0x2a0 [ 129.123607][ T6657] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.123670][ T6657] ? __fget_files+0x2a/0x420 [ 129.123700][ T6657] ? __fget_files+0x3a0/0x420 [ 129.123743][ T6657] __x64_sys_sendmsg+0x19b/0x260 [ 129.123768][ T6657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.123801][ T6657] ? __pfx_ksys_write+0x10/0x10 [ 129.123825][ T6657] ? rcu_is_watching+0x15/0xb0 [ 129.123861][ T6657] ? do_syscall_64+0xbe/0x3b0 [ 129.123895][ T6657] do_syscall_64+0xfa/0x3b0 [ 129.123923][ T6657] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.123950][ T6657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.123970][ T6657] ? clear_bhb_loop+0x60/0xb0 [ 129.123996][ T6657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.124016][ T6657] RIP: 0033:0x7f06f158ebe9 [ 129.124035][ T6657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.124051][ T6657] RSP: 002b:00007f06ef7ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.124074][ T6657] RAX: ffffffffffffffda RBX: 00007f06f17c5fa0 RCX: 00007f06f158ebe9 [ 129.124089][ T6657] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 129.124114][ T6657] RBP: 00007f06ef7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 129.124126][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.124138][ T6657] R13: 00007f06f17c6038 R14: 00007f06f17c5fa0 R15: 00007ffe27b4a348 [ 129.124170][ T6657] [ 129.531417][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 129.853694][ T6677] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 130.118812][ T6680] netlink: 25 bytes leftover after parsing attributes in process `syz.3.184'. [ 130.128141][ T6680] netlink: zone id is out of range [ 130.133300][ T6680] netlink: zone id is out of range [ 130.184505][ T6680] netlink: zone id is out of range [ 130.223270][ T6680] netlink: zone id is out of range [ 130.229091][ T6680] netlink: zone id is out of range [ 130.234238][ T6680] netlink: zone id is out of range [ 130.240986][ T6680] netlink: zone id is out of range [ 130.247938][ T6680] netlink: zone id is out of range [ 130.253198][ T6680] netlink: zone id is out of range [ 130.604959][ T6702] netlink: 'syz.3.191': attribute type 10 has an invalid length. [ 131.743633][ T6711] FAULT_INJECTION: forcing a failure. [ 131.743633][ T6711] name failslab, interval 1, probability 0, space 0, times 0 [ 131.776972][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT(full) [ 131.777002][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.777015][ T6711] Call Trace: [ 131.777022][ T6711] [ 131.777031][ T6711] dump_stack_lvl+0x189/0x250 [ 131.777067][ T6711] ? __pfx____ratelimit+0x10/0x10 [ 131.777095][ T6711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.777120][ T6711] ? __pfx__printk+0x10/0x10 [ 131.777156][ T6711] ? __pfx___might_resched+0x10/0x10 [ 131.777182][ T6711] should_fail_ex+0x414/0x560 [ 131.777215][ T6711] should_failslab+0xa8/0x100 [ 131.777247][ T6711] __kmalloc_noprof+0xcb/0x4f0 [ 131.777273][ T6711] ? __kasan_kmalloc+0x93/0xb0 [ 131.777298][ T6711] ? nla_strdup+0x9d/0x140 [ 131.777333][ T6711] nla_strdup+0x9d/0x140 [ 131.777365][ T6711] nf_tables_newchain+0x1998/0x2900 [ 131.777406][ T6711] ? __pfx_nf_tables_newchain+0x10/0x10 [ 131.777466][ T6711] ? nfnl_pernet+0x23/0x240 [ 131.777502][ T6711] ? __nla_parse+0x40/0x60 [ 131.777537][ T6711] nfnetlink_rcv+0x1132/0x2520 [ 131.777599][ T6711] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 131.777649][ T6711] ? ref_tracker_free+0x63a/0x7d0 [ 131.777710][ T6711] ? __netlink_deliver_tap+0x807/0x850 [ 131.777740][ T6711] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.777789][ T6711] netlink_unicast+0x82c/0x9e0 [ 131.777825][ T6711] ? __pfx_netlink_unicast+0x10/0x10 [ 131.777854][ T6711] ? netlink_sendmsg+0x642/0xb30 [ 131.777882][ T6711] ? skb_put+0x11b/0x210 [ 131.777918][ T6711] netlink_sendmsg+0x805/0xb30 [ 131.777958][ T6711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.777992][ T6711] ? aa_sock_msg_perm+0xf1/0x1d0 [ 131.778026][ T6711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.778049][ T6711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.778079][ T6711] __sock_sendmsg+0x21c/0x270 [ 131.778109][ T6711] ____sys_sendmsg+0x505/0x830 [ 131.778137][ T6711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.778169][ T6711] ? import_iovec+0x74/0xa0 [ 131.778196][ T6711] ___sys_sendmsg+0x21f/0x2a0 [ 131.778220][ T6711] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.778282][ T6711] ? __fget_files+0x2a/0x420 [ 131.778312][ T6711] ? __fget_files+0x3a0/0x420 [ 131.778355][ T6711] __x64_sys_sendmsg+0x19b/0x260 [ 131.778379][ T6711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.778412][ T6711] ? __pfx_ksys_write+0x10/0x10 [ 131.778436][ T6711] ? rcu_is_watching+0x15/0xb0 [ 131.778464][ T6711] ? do_syscall_64+0xbe/0x3b0 [ 131.778497][ T6711] do_syscall_64+0xfa/0x3b0 [ 131.778525][ T6711] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.778551][ T6711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.778572][ T6711] ? clear_bhb_loop+0x60/0xb0 [ 131.778597][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.778624][ T6711] RIP: 0033:0x7f429098ebe9 [ 131.778644][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.778660][ T6711] RSP: 002b:00007f42917cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.778682][ T6711] RAX: ffffffffffffffda RBX: 00007f4290bc5fa0 RCX: 00007f429098ebe9 [ 131.778698][ T6711] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 131.778711][ T6711] RBP: 00007f42917cd090 R08: 0000000000000000 R09: 0000000000000000 [ 131.778724][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.778737][ T6711] R13: 00007f4290bc6038 R14: 00007f4290bc5fa0 R15: 00007ffe47281398 [ 131.778771][ T6711] [ 132.497045][ T6722] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 132.506893][ T30] audit: type=1800 audit(1757071679.562:3): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.196" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 132.535182][ T6722] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 132.545287][ T6722] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 133.012128][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.027040][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.492941][ T6751] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 133.578104][ T6759] netlink: 48 bytes leftover after parsing attributes in process `syz.4.205'. [ 133.638293][ T6753] netlink: 'syz.2.204': attribute type 39 has an invalid length. [ 133.727103][ T6760] netlink: 'syz.3.206': attribute type 27 has an invalid length. [ 133.768826][ T6765] netlink: 232 bytes leftover after parsing attributes in process `syz.1.207'. [ 134.229648][ T6771] netlink: 'syz.4.208': attribute type 4 has an invalid length. [ 134.686700][ T6751] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 134.830367][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 135.132021][ T6783] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 135.185102][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 135.194387][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 135.324482][ T6783] bond0: (slave bond_slave_0): Releasing backup interface [ 135.910374][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 135.961402][ T6787] netlink: 33 bytes leftover after parsing attributes in process `syz.1.214'. [ 136.006819][ T6799] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.216'. [ 136.026946][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 136.035784][ T6787] netlink: 33 bytes leftover after parsing attributes in process `syz.1.214'. [ 136.498211][ T6808] netlink: 'syz.3.219': attribute type 39 has an invalid length. [ 136.627280][ T6821] netlink: 'syz.1.224': attribute type 3 has an invalid length. [ 136.641995][ T6821] netlink: 'syz.1.224': attribute type 3 has an invalid length. [ 137.015078][ T6808] hsr_slave_0 (unregistering): left promiscuous mode [ 137.519175][ T6841] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 137.552261][ T6841] syzkaller1: linktype set to 823 [ 137.799669][ T6850] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.824680][ T6850] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 138.068766][ T6871] netlink: 'syz.4.237': attribute type 9 has an invalid length. [ 138.910337][ T6879] ======================================================= [ 138.910337][ T6879] WARNING: The mand mount option has been deprecated and [ 138.910337][ T6879] and is ignored by this kernel. Remove the mand [ 138.910337][ T6879] option from the mount to silence this warning. [ 138.910337][ T6879] ======================================================= [ 139.587563][ T6886] __nla_validate_parse: 12 callbacks suppressed [ 139.587587][ T6886] netlink: 232 bytes leftover after parsing attributes in process `syz.4.241'. [ 140.515027][ T6911] nft_compat: unsupported protocol 0 [ 141.410908][ T6928] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.252'. [ 141.632942][ T6937] netlink: 232 bytes leftover after parsing attributes in process `syz.2.256'. [ 141.894359][ T6947] netlink: 232 bytes leftover after parsing attributes in process `syz.0.258'. [ 141.918144][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 142.099416][ T6953] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 142.250163][ T5881] Bluetooth: hci2: ISO packet for unknown connection handle 8 [ 142.521843][ T6971] netlink: 232 bytes leftover after parsing attributes in process `syz.2.267'. [ 143.363897][ T6999] netlink: 'syz.2.271': attribute type 21 has an invalid length. [ 143.407000][ T6999] netlink: 'syz.2.271': attribute type 6 has an invalid length. [ 143.415922][ T6999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.271'. [ 143.963156][ T7014] netlink: 'syz.1.276': attribute type 21 has an invalid length. [ 144.048030][ T7016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.277'. [ 144.065385][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 144.077876][ T7016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.277'. [ 145.263932][ T7037] __nla_validate_parse: 1 callbacks suppressed [ 145.263955][ T7037] netlink: 232 bytes leftover after parsing attributes in process `syz.1.282'. [ 145.894971][ T7050] netlink: 'syz.3.288': attribute type 23 has an invalid length. [ 145.911121][ T7049] veth0_vlan: entered allmulticast mode [ 146.072617][ T7055] netlink: 44 bytes leftover after parsing attributes in process `syz.0.291'. [ 146.166990][ T7059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.291'. [ 146.210055][ T7059] net_ratelimit: 77 callbacks suppressed [ 146.210077][ T7059] openvswitch: netlink: Missing key (keys=40, expected=100) [ 146.270028][ T7052] netlink: 'syz.2.289': attribute type 3 has an invalid length. [ 146.279586][ T7052] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.289'. [ 146.332602][ T7056] veth0_vlan: left promiscuous mode [ 146.345706][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 146.367540][ T7056] veth0_vlan: entered promiscuous mode [ 146.395588][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 146.420301][ T7067] openvswitch: netlink: Duplicate or invalid key (type 0). [ 146.430004][ T7067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.445982][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 146.454883][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 146.779607][ T7077] netlink: 232 bytes leftover after parsing attributes in process `syz.3.296'. [ 147.033619][ T7080] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 147.062217][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 147.092998][ T7080] netlink: 'syz.0.298': attribute type 16 has an invalid length. [ 147.121561][ T7080] netlink: 'syz.0.298': attribute type 17 has an invalid length. [ 147.340723][ T7080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.136957][ T7134] __nla_validate_parse: 3 callbacks suppressed [ 151.136979][ T7134] netlink: 232 bytes leftover after parsing attributes in process `syz.0.310'. [ 151.522281][ T7142] netlink: 'syz.4.313': attribute type 2 has an invalid length. [ 151.829223][ T7147] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.314'. [ 152.057036][ T7142] netlink: 'syz.4.313': attribute type 1 has an invalid length. [ 152.114165][ T7142] netlink: 'syz.4.313': attribute type 1 has an invalid length. [ 152.837244][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 152.962360][ T7172] netlink: 6 bytes leftover after parsing attributes in process `syz.3.321'. [ 153.542663][ T7185] netlink: 232 bytes leftover after parsing attributes in process `syz.1.325'. [ 154.913025][ T7203] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.792933][ T7209] syz.1.331 (7209) used greatest stack depth: 17616 bytes left [ 155.921896][ T7239] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 155.950193][ T7241] netlink: 'syz.4.338': attribute type 1 has an invalid length. [ 155.958569][ T7241] netlink: 'syz.4.338': attribute type 4 has an invalid length. [ 155.974790][ T7241] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.338'. [ 155.989561][ T7239] netlink: 124 bytes leftover after parsing attributes in process `syz.0.336'. [ 156.010610][ T7239] netlink: 125920 bytes leftover after parsing attributes in process `syz.0.336'. [ 156.023438][ T7239] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 156.035313][ T7239] netlink: 124 bytes leftover after parsing attributes in process `syz.0.336'. [ 156.168699][ T7247] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.339'. [ 156.189731][ T7247] netlink: 'syz.2.339': attribute type 25 has an invalid length. [ 159.437462][ T7254] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 160.268432][ T7293] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 160.295076][ T7293] team0: entered promiscuous mode [ 160.311066][ T7293] team_slave_0: entered promiscuous mode [ 160.317372][ T7293] team_slave_1: entered promiscuous mode [ 160.384762][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.443629][ T7293] bond0: (slave team0): Enslaving as an active interface with an up link [ 162.661520][ T7379] netlink: 104 bytes leftover after parsing attributes in process `syz.4.392'. [ 162.684234][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 163.278109][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'. [ 163.577083][ T7414] netlink: 60 bytes leftover after parsing attributes in process `syz.3.405'. [ 163.824994][ T7426] netlink: 'syz.3.410': attribute type 4 has an invalid length. [ 163.861538][ T7426] netlink: 152 bytes leftover after parsing attributes in process `syz.3.410'. [ 163.916253][ T7426] : renamed from bond0 [ 164.009048][ T7432] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.411'. [ 165.017228][ T7462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.428'. [ 165.184893][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 165.212518][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 165.888717][ T7499] netlink: 'syz.3.447': attribute type 10 has an invalid length. [ 165.957836][ T7500] netlink: 104 bytes leftover after parsing attributes in process `syz.2.445'. [ 168.611555][ T7604] pim6reg1: entered promiscuous mode [ 168.621286][ T7604] pim6reg1: entered allmulticast mode [ 170.043557][ T7647] __nla_validate_parse: 5 callbacks suppressed [ 170.043595][ T7647] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.514'. [ 171.453316][ T7689] @0Ù: renamed from bond_slave_1 (while UP) [ 171.837068][ T7699] syz_tun: refused to change device tx_queue_len [ 171.930471][ T7698] syzkaller0: entered promiscuous mode [ 174.683721][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.710687][ T7788] bridge_slave_0: entered promiscuous mode [ 175.746997][ T7788] bridge_slave_0: entered allmulticast mode [ 180.533223][ T7865] bridge0: port 4() entered blocking state [ 180.553273][ T7865] bridge0: port 4() entered disabled state [ 180.571991][ T7865] : entered allmulticast mode [ 180.592895][ T7865] bond_slave_0: entered allmulticast mode [ 180.605975][ T7865] bond_slave_1: entered allmulticast mode [ 180.636473][ T7865] : entered promiscuous mode [ 180.649621][ T7865] bond_slave_0: entered promiscuous mode [ 180.671557][ T7865] bond_slave_1: entered promiscuous mode [ 182.813806][ T7896] cgroup: fork rejected by pids controller in /syz3 [ 183.222855][ T7906] syzkaller0: entered promiscuous mode [ 183.241859][ T7906] syzkaller0: entered allmulticast mode [ 186.800901][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.021846][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.238095][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.503761][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.056252][ T37] : left allmulticast mode [ 188.085863][ T37] bond_slave_0: left allmulticast mode [ 188.091537][ T37] bond_slave_1: left allmulticast mode [ 188.126276][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.161726][ T37] : left promiscuous mode [ 188.178531][ T37] bond_slave_0: left promiscuous mode [ 188.186210][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.196368][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.208071][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.209948][ T37] bond_slave_1: left promiscuous mode [ 188.222474][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.248385][ T37] bridge0: port 4() entered disabled state [ 188.381709][ T37] bridge0: port 3(dummy0) entered disabled state [ 188.467876][ T37] bridge_slave_1: left allmulticast mode [ 188.512256][ T37] bridge_slave_1: left promiscuous mode [ 188.528740][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.587199][ T37] bridge_slave_0: left allmulticast mode [ 188.592910][ T37] bridge_slave_0: left promiscuous mode [ 188.649663][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.232696][ T37]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.248227][ T37]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.263396][ T37]  (unregistering): Released all slaves [ 189.426263][ T37] : left promiscuous mode [ 190.270434][ T5881] Bluetooth: hci4: command tx timeout [ 190.521210][ T37] hsr_slave_1: left promiscuous mode [ 190.535046][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.561757][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.615463][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.633822][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.695834][ T37] veth1_macvtap: left promiscuous mode [ 190.725142][ T37] veth0_macvtap: left promiscuous mode [ 190.734633][ T37] veth1_vlan: left promiscuous mode [ 190.744307][ T37] veth0_vlan: left promiscuous mode [ 192.350121][ T5881] Bluetooth: hci4: command tx timeout [ 194.410332][ T8107] netlink: 'syz.0.688': attribute type 29 has an invalid length. [ 194.426579][ T5881] Bluetooth: hci4: command tx timeout [ 194.443244][ T7990] chnl_net:caif_netlink_parms(): no params data found [ 194.446355][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.458761][ T8108] netlink: 'syz.0.688': attribute type 29 has an invalid length. [ 194.460912][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.524983][ T8109] netlink: 'syz.0.688': attribute type 29 has an invalid length. [ 194.605743][ T8115] ------------[ cut here ]------------ [ 194.612011][ T8115] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0)(1) [ 194.636296][ T8115] WARNING: CPU: 1 PID: 8115 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x6e6/0xc20 [ 194.647206][ T8115] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.651191][ T8115] CPU: 1 UID: 0 PID: 8115 Comm: syz.1.699 Not tainted syzkaller #0 PREEMPT(full) [ 194.660609][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.671602][ T8115] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 194.678561][ T8115] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 af 33 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 194.698387][ T8115] RSP: 0018:ffffc90003d3ef08 EFLAGS: 00010282 [ 194.704901][ T8115] RAX: 150482a76067da00 RBX: 0000000000000000 RCX: 0000000000080000 [ 194.712997][ T8115] RDX: ffffc9000b7da000 RSI: 0000000000007012 RDI: 0000000000007013 [ 194.721186][ T8115] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 194.729580][ T8115] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888056a30348 [ 194.737840][ T8115] R13: ffff888056a30368 R14: ffff888056a30380 R15: 0000000000000000 [ 194.745924][ T8115] FS: 00007fba0e0896c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 194.754896][ T8115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.761597][ T8115] CR2: 0000001b33521ff8 CR3: 0000000078ffe000 CR4: 00000000003526f0 [ 194.769672][ T8115] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.778524][ T8115] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 194.787007][ T8115] Call Trace: [ 194.790326][ T8115] [ 194.793329][ T8115] reg_set_min_max+0x264/0x300 [ 194.798215][ T8115] check_cond_jmp_op+0x159b/0x2910 [ 194.803412][ T8115] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 194.808965][ T8115] ? push_jmp_history+0x1dd/0x6f0 [ 194.814129][ T8115] do_check+0x6751/0xe520 [ 194.818634][ T8115] ? __kasan_kmalloc+0x93/0xb0 [ 194.823616][ T8115] ? do_check_common+0x209/0x24f0 [ 194.829053][ T8115] ? __pfx_do_check+0x10/0x10 [ 194.833789][ T8115] ? init_func_state+0x1ddf/0x2d20 [ 194.839058][ T8115] do_check_common+0x1949/0x24f0 [ 194.844065][ T8115] bpf_check+0x1746a/0x1d2d0 [ 194.848782][ T8115] ? is_bpf_text_address+0x26/0x2b0 [ 194.854042][ T8115] ? kernel_text_address+0xa5/0xe0 [ 194.859385][ T8115] ? __kernel_text_address+0xd/0x40 [ 194.864682][ T8115] ? __lock_acquire+0xab9/0xd20 [ 194.869770][ T8115] ? __mutex_trylock_common+0x153/0x260 [ 194.876077][ T8115] ? __pfx___mutex_trylock_common+0x10/0x10 [ 194.882041][ T8115] ? css_rstat_updated+0x23a/0x4f0 [ 194.887745][ T8115] ? __lock_acquire+0xab9/0xd20 [ 194.892670][ T8115] ? __pfx_bpf_check+0x10/0x10 [ 194.898966][ T8115] ? ktime_get_with_offset+0x8c/0x2a0 [ 194.904514][ T8115] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 194.911179][ T8115] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.916607][ T8115] ? ktime_get_with_offset+0x8c/0x2a0 [ 194.922025][ T8115] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 194.928581][ T8115] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 194.935299][ T8115] ? __asan_memset+0x22/0x50 [ 194.939995][ T8115] ? bpf_obj_name_cpy+0x194/0x1e0 [ 194.945061][ T8115] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 194.950746][ T8115] ? security_bpf_prog_load+0x7f/0x310 [ 194.956313][ T8115] bpf_prog_load+0x1318/0x1930 [ 194.961152][ T8115] ? __pfx_bpf_prog_load+0x10/0x10 [ 194.966524][ T8115] ? bpf_lsm_bpf+0x9/0x20 [ 194.971004][ T8115] ? security_bpf+0x7e/0x300 [ 194.975650][ T8115] __sys_bpf+0x528/0x870 [ 194.980692][ T8115] ? __pfx___sys_bpf+0x10/0x10 [ 194.985548][ T8115] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 194.992977][ T8115] ? rcu_is_watching+0x15/0xb0 [ 194.997947][ T8115] __x64_sys_bpf+0x7c/0x90 [ 195.002609][ T8115] do_syscall_64+0xfa/0x3b0 [ 195.007492][ T8115] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.012838][ T8115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.019024][ T8115] ? clear_bhb_loop+0x60/0xb0 [ 195.023864][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.029891][ T8115] RIP: 0033:0x7fba0d18ebe9 [ 195.034446][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.054373][ T8115] RSP: 002b:00007fba0e089038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.062930][ T8115] RAX: ffffffffffffffda RBX: 00007fba0d3c5fa0 RCX: 00007fba0d18ebe9 [ 195.071378][ T8115] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 195.080157][ T8115] RBP: 00007fba0d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 195.088644][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.096717][ T8115] R13: 00007fba0d3c6038 R14: 00007fba0d3c5fa0 R15: 00007fffd2aa3928 [ 195.105773][ T8115] [ 195.109014][ T8115] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.116333][ T8115] CPU: 1 UID: 0 PID: 8115 Comm: syz.1.699 Not tainted syzkaller #0 PREEMPT(full) [ 195.125572][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.135662][ T8115] Call Trace: [ 195.138988][ T8115] [ 195.141985][ T8115] dump_stack_lvl+0x99/0x250 [ 195.146625][ T8115] ? __asan_memcpy+0x40/0x70 [ 195.151259][ T8115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.156765][ T8115] ? __pfx__printk+0x10/0x10 [ 195.161508][ T8115] vpanic+0x281/0x750 [ 195.165540][ T8115] ? __pfx__printk+0x10/0x10 [ 195.170190][ T8115] ? __pfx_vpanic+0x10/0x10 [ 195.174747][ T8115] ? is_bpf_text_address+0x26/0x2b0 [ 195.180011][ T8115] panic+0xb9/0xc0 [ 195.183784][ T8115] ? __pfx_panic+0x10/0x10 [ 195.188271][ T8115] __warn+0x31b/0x4b0 [ 195.192482][ T8115] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 195.198234][ T8115] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 195.203922][ T8115] report_bug+0x2be/0x4f0 [ 195.208378][ T8115] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 195.214103][ T8115] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 195.219913][ T8115] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 195.225718][ T8115] handle_bug+0x84/0x160 [ 195.229995][ T8115] exc_invalid_op+0x1a/0x50 [ 195.234529][ T8115] asm_exc_invalid_op+0x1a/0x20 [ 195.239409][ T8115] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 195.245759][ T8115] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 af 33 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 195.265555][ T8115] RSP: 0018:ffffc90003d3ef08 EFLAGS: 00010282 [ 195.271639][ T8115] RAX: 150482a76067da00 RBX: 0000000000000000 RCX: 0000000000080000 [ 195.279716][ T8115] RDX: ffffc9000b7da000 RSI: 0000000000007012 RDI: 0000000000007013 [ 195.287714][ T8115] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 195.295708][ T8115] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888056a30348 [ 195.303716][ T8115] R13: ffff888056a30368 R14: ffff888056a30380 R15: 0000000000000000 [ 195.311744][ T8115] reg_set_min_max+0x264/0x300 [ 195.316537][ T8115] check_cond_jmp_op+0x159b/0x2910 [ 195.321778][ T8115] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 195.327261][ T8115] ? push_jmp_history+0x1dd/0x6f0 [ 195.332325][ T8115] do_check+0x6751/0xe520 [ 195.336708][ T8115] ? __kasan_kmalloc+0x93/0xb0 [ 195.341488][ T8115] ? do_check_common+0x209/0x24f0 [ 195.346651][ T8115] ? __pfx_do_check+0x10/0x10 [ 195.351356][ T8115] ? init_func_state+0x1ddf/0x2d20 [ 195.356498][ T8115] do_check_common+0x1949/0x24f0 [ 195.361463][ T8115] bpf_check+0x1746a/0x1d2d0 [ 195.366077][ T8115] ? is_bpf_text_address+0x26/0x2b0 [ 195.371322][ T8115] ? kernel_text_address+0xa5/0xe0 [ 195.376450][ T8115] ? __kernel_text_address+0xd/0x40 [ 195.381709][ T8115] ? __lock_acquire+0xab9/0xd20 [ 195.386584][ T8115] ? __mutex_trylock_common+0x153/0x260 [ 195.392162][ T8115] ? __pfx___mutex_trylock_common+0x10/0x10 [ 195.398096][ T8115] ? css_rstat_updated+0x23a/0x4f0 [ 195.403233][ T8115] ? __lock_acquire+0xab9/0xd20 [ 195.408124][ T8115] ? __pfx_bpf_check+0x10/0x10 [ 195.412926][ T8115] ? ktime_get_with_offset+0x8c/0x2a0 [ 195.418523][ T8115] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 195.424884][ T8115] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.430140][ T8115] ? ktime_get_with_offset+0x8c/0x2a0 [ 195.435563][ T8115] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 195.441819][ T8115] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 195.448432][ T8115] ? __asan_memset+0x22/0x50 [ 195.453036][ T8115] ? bpf_obj_name_cpy+0x194/0x1e0 [ 195.458068][ T8115] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 195.463544][ T8115] ? security_bpf_prog_load+0x7f/0x310 [ 195.469027][ T8115] bpf_prog_load+0x1318/0x1930 [ 195.473842][ T8115] ? __pfx_bpf_prog_load+0x10/0x10 [ 195.478998][ T8115] ? bpf_lsm_bpf+0x9/0x20 [ 195.483350][ T8115] ? security_bpf+0x7e/0x300 [ 195.487972][ T8115] __sys_bpf+0x528/0x870 [ 195.492247][ T8115] ? __pfx___sys_bpf+0x10/0x10 [ 195.497135][ T8115] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 195.503747][ T8115] ? rcu_is_watching+0x15/0xb0 [ 195.508528][ T8115] __x64_sys_bpf+0x7c/0x90 [ 195.512964][ T8115] do_syscall_64+0xfa/0x3b0 [ 195.517508][ T8115] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.522839][ T8115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.529085][ T8115] ? clear_bhb_loop+0x60/0xb0 [ 195.533772][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.539675][ T8115] RIP: 0033:0x7fba0d18ebe9 [ 195.544165][ T8115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.563779][ T8115] RSP: 002b:00007fba0e089038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.572320][ T8115] RAX: ffffffffffffffda RBX: 00007fba0d3c5fa0 RCX: 00007fba0d18ebe9 [ 195.580302][ T8115] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 195.588287][ T8115] RBP: 00007fba0d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 195.596366][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.604367][ T8115] R13: 00007fba0d3c6038 R14: 00007fba0d3c5fa0 R15: 00007fffd2aa3928 [ 195.612399][ T8115] [ 195.615729][ T8115] Kernel Offset: disabled [ 195.620114][ T8115] Rebooting in 86400 seconds..