last executing test programs: 9.723183549s ago: executing program 0 (id=1251): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES8=0xffffffffffffffff, @ANYBLOB="e02cf623c7c033d6c5ddb44f79e9700792f85a5b4665be0989a7542d8dd58f88058a29aba8364e2428908cd6ae626a654d9b678963c86ecfbf27ff9c04e6e48679de3d243ecdb4292282e5a8ebdde8d8b3b3c2776a2029"], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a0"], 0xfe33) r10 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, r4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) recvmsg$kcm(r9, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={r4, 0x20, &(0x7f0000003380)={&(0x7f0000000780)=""/168, 0xa8, 0x0, &(0x7f0000002380)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400)=r12, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901", @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.76666209s ago: executing program 0 (id=1257): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)=""/4098, 0x1002}], 0x1}, 0x10182) r6 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r6, 0x0, 0xfdef) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x7f, 0x0, 0x1, 0x7, 0x0, 0x3, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x6}, 0x102200, 0x80, 0x200, 0x4, 0xd, 0x1, 0x9, 0x0, 0x1, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r1, 0x1) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 8.312345796s ago: executing program 0 (id=1261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x20000000) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x6, [@struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xf, 0x3, 0x6}]}, @union={0x3, 0x6, 0x0, 0x5, 0x1, 0x6, [{0x7, 0x4, 0x2}, {0xf, 0x0, 0x9}, {0x3, 0x2, 0x2522}, {0x5, 0x5, 0x40}, {0xb, 0x3, 0x7}, {0x0, 0x3, 0x3}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0x6, 0x3}, {0xe, 0x5}, {0xb, 0x2}, {0x5000, 0x2}, {0x8, 0x2}, {0xd, 0x4}, {0x6, 0x3}, {0x5, 0x1}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x30]}}, &(0x7f0000000440)=""/147, 0xde, 0x93, 0x1, 0x10001}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911029000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x9, 0x0, 0x4, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r7 = socket$kcm(0x10, 0x3, 0x0) r8 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20040001) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 6.909334091s ago: executing program 0 (id=1266): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0xfffffff2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000940)={'full', 0x20, 0x81d7, 0x20, 0x7}, 0x2f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)='ao', &(0x7f0000000680), 0x1006, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x8}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x1d, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x53cb9385, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@alu={0x7, 0x1, 0x5, 0x9, 0x4, 0x18, 0xfffffffffffffff0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x8, 0xb, 0xffffffffffffffe0, 0x10}, @call={0x85, 0x0, 0x0, 0x98}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0xb, 0xeb, &(0x7f0000000580)=""/235, 0x20780, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x9, 0x2, 0x400}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x1, 0x4, 0x5, 0xb}, {0x4, 0x1, 0xf}, {0x3, 0x1, 0x0, 0x3}, {0x5, 0x2, 0x3, 0x9}, {0x0, 0x1, 0xd, 0x4}, {0x1, 0x5, 0xb, 0x4}, {0x4, 0x3, 0x6, 0x59d90f95fa7d4cc0}], 0x10, 0x6}, 0x94) 6.587934895s ago: executing program 2 (id=1270): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01031800"], 0x0, 0x2a}, 0x28) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x8, 0x9b, 0x0, 0x8, 0x8, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0xc40, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8562}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071128c000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xef, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0x51d, 0x0, 0x467ad31d, 0x852333d6d63ae3ad, r3, 0xfff, '\x00', 0x0, r0, 0x0, 0x2, 0x0, 0x0, @value=r0}, 0x50) 6.354071628s ago: executing program 2 (id=1271): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 6.214011149s ago: executing program 3 (id=1272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000002850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000094"], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000270000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="0200100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) 6.21353252s ago: executing program 2 (id=1273): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x1300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50}], {0x95, 0x0, 0x74}}, 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004800) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) write$cgroup_type(r0, 0x0, 0x0) 6.033222951s ago: executing program 3 (id=1274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x20000000) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x6, [@struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xf, 0x3, 0x6}]}, @union={0x3, 0x6, 0x0, 0x5, 0x1, 0x6, [{0x7, 0x4, 0x2}, {0xf, 0x0, 0x9}, {0x3, 0x2, 0x2522}, {0x5, 0x5, 0x40}, {0xb, 0x3, 0x7}, {0x0, 0x3, 0x3}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0x6, 0x3}, {0xe, 0x5}, {0xb, 0x2}, {0x5000, 0x2}, {0x8, 0x2}, {0xd, 0x4}, {0x6, 0x3}, {0x5, 0x1}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x30]}}, &(0x7f0000000440)=""/147, 0xde, 0x93, 0x1, 0x10001}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911029000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x23, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x9, 0x0, 0x4, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r7 = socket$kcm(0x10, 0x3, 0x0) r8 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20040001) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 6.031723571s ago: executing program 0 (id=1282): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x785d4d6f3e17b582}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000018000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)=r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 4.481115659s ago: executing program 2 (id=1275): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x600c01, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 4.3717888s ago: executing program 3 (id=1277): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="62031400d755af056510", 0xa}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000014c0)="d8000000210081044e810382db44b9040a007f7ffefe0500002015010600142607600e1209000600fe7f00007f6f94007134a10700000089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f00000001c0)="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", 0x1ac}], 0x2}, 0x0) 3.302066672s ago: executing program 1 (id=1279): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.962867106s ago: executing program 1 (id=1280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 2.850097418s ago: executing program 1 (id=1281): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180006000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x0, 0xb3, 0x4f, 0x0, 0x1000, 0x81b0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb1, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x10000}, 0x1a102, 0x1ff, 0x3, 0x2, 0x4, 0x6, 0xff, 0x0, 0x9, 0x0, 0xff}, 0xffffffffffffffff, 0x6, r1, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000275, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x288c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000007800000000000000"], 0x18}, 0x0) recvmsg$kcm(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$kcm(0x2, 0x5, 0x84) (async) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0xfe, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x3}, 0x11098, 0xfffffffffffffffe, 0x10000465, 0x5, 0x0, 0x3, 0x4, 0x0, 0xb, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r10 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) 890.02715ms ago: executing program 3 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r1}, 0x20) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0xc000000000, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000140), 0x1b}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0x2, 0x5, 0x0, 0x400, 0x0, 0x8000000000000001}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000540)='\x8d\x8c\x8d\xf8\xd3\x0f\x9d\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x94\xc2 \x19i\xda\xb2\x00X\x02\x00\x00\x000O\xa4\xe7\xf8\x7f\xec-\xbe\xa5\xb9PY\xc8P\xa3%\xcd\xe8G\'\xe5\x1b!\x1c\xd6\xdd\fX\x1f{T\x12\xf2\a\x00\xb2e\xfd\xa1\xcb`\x8bSQ\xe4M,\x9d\x14\xa9\xd6\v\x1f\xe6\xa3\xbd\xc5\xb7\x9c\xe1\xe6\x96\x04~\x82\x9c7\x9a\xbcq\x15\xa4\x92^F{US\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\x99>>\x95,\xf6s\xe6S\xccG\xe4\x00\x00\x1d\xe4\xb7\x9b\x8b\x98\x9c\xa9\xf3\xa7\xf79\xa0\r\xc8\x96\xef\x8d\x8e\x92\xf3\xa3\x94~(^x\x17\x13\xb5\x96\xb4\xc7L~\xca\xbbT\xc0P\xabc\to2\x0f\x00\x80\x1d\xf8+#\xdfR\xc8\xe5\xcfkdq&\x1bhy\'\xd4\xab\xe0U\xe9\x8dd\xc8\x15\xeb\xe5\xden\xe1\xa1m\x9f\x11!4$\xe2\x04\x02E\x8d\x91@e\xa1\x00\xe9\xe1\xe2\xb2:\"R\xde\xad\xbc\xa1^]NV^7\x97\xd0\xda\x15I\x19\x1c\x00\xb3\xda\xa8p\x9e\x0e\xa8z[\n\xf7o\xeaU\x9c\x93\x89:\x1ae-\xf3\x03\xb2\xec\x7f\x02\n\xe5\xec;\n\xb72/\xf2\xaa\xb9c\xa4\xf1~\x17[\xaai\xae:\x00\x00\x00') (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 889.43374ms ago: executing program 2 (id=1284): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x1300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50}], {0x95, 0x0, 0x74}}, 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004800) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4018, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) write$cgroup_type(r0, 0x0, 0x0) 888.58486ms ago: executing program 1 (id=1285): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x36}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3}], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 879.24798ms ago: executing program 0 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x400, 0x80000000, 0x0, 0x40000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={0xffffffffffffffff, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f00000012c0)=[{}], 0x8, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0xee, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb7e2ab, 0x0, 0x0, 0x0, 0xe69}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0xfffffff3, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001500)={0x1, 0x2, 0x1, 0x400}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001540)=[r0, r0], &(0x7f0000001580)=[{0x0, 0x4, 0x7, 0x8}, {0x1, 0x4, 0x8, 0x6}, {0x2, 0x2, 0x0, 0x8}, {0x4, 0x4, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x5}, {0x5, 0x1, 0x2, 0xa}, {0x5, 0x2, 0x2, 0xa}, {0x1, 0x1, 0x8, 0x3}], 0x10, 0xdd3}, 0x94) (async) r6 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r6, &(0x7f0000002c40)={&(0x7f00000016c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001740)=""/113, 0x71}, {&(0x7f00000017c0)=""/5, 0x5}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/38, 0x26}, {&(0x7f0000001940)=""/42, 0x2a}, {&(0x7f0000001980)=""/32, 0x20}, {&(0x7f00000019c0)=""/101, 0x65}, {&(0x7f0000001a40)=""/187, 0xbb}, {&(0x7f0000001b00)=""/4096, 0x1000}], 0x9, &(0x7f0000002bc0)=""/115, 0x73}, 0x40000022) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d00)={{r0, 0xffffffffffffffff}, &(0x7f0000002c80), &(0x7f0000002cc0)=r5}, 0x20) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002f80)={0x6, 0x0}, 0x8) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003040)={{r0, 0xffffffffffffffff}, &(0x7f0000002fc0), &(0x7f0000003000)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003100)={0xd, 0x14, &(0x7f0000002d40)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xbc}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x517}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000002e00)='GPL\x00', 0x101, 0x86, &(0x7f0000002e40)=""/134, 0x0, 0xa, '\x00', r3, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000002f00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002f40)={0x2, 0x10, 0x6, 0xa470}, 0x10, r8, r5, 0x3, &(0x7f0000003080)=[r9, r1, r1, r7, r1, r1, r7], &(0x7f00000030c0)=[{0x5, 0x2, 0x5, 0x4}, {0x4, 0x3, 0x3, 0x4}, {0x1, 0x2, 0x2, 0x7}], 0x10, 0x8}, 0x94) (async) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000032c0)={@fallback=r5, 0x0, 0x1, 0x8, &(0x7f00000031c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000003200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003280)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003300)={@fallback=r6, r10, 0x7, 0x2a, r10, @void, @void, @void, @value=r2, r12}, 0x20) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003340)=r4, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003880)={r5, 0xe0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000035c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000003600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003640)=[0x0], 0x0, 0x7b, &(0x7f0000003680)=[{}], 0x8, 0x10, &(0x7f00000036c0), &(0x7f0000003700), 0x8, 0x68, 0x8, 0x8, &(0x7f0000003740)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000038c0)={r11, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000003980)={0x18, 0xa, &(0x7f0000003380)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf6}}, @map_val={0x18, 0xa, 0x2, 0x0, r0}], &(0x7f0000003400)='syzkaller\x00', 0x7, 0xff, &(0x7f0000003440)=""/255, 0x41100, 0x10, '\x00', r3, @fallback=0xf, r11, 0x8, &(0x7f0000003540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000003580)={0x4, 0x5, 0x7db, 0x2}, 0x10, r15, 0xffffffffffffffff, 0x4, &(0x7f0000003900)=[r16, r7, r9, r9], &(0x7f0000003940)=[{0x0, 0x1, 0x0, 0x6}, {0x2, 0x3, 0x1, 0x3}, {0x1, 0x2, 0x4, 0x7}, {0x2, 0x1, 0xa, 0x2}]}, 0x94) (async) sendmsg$tipc(r11, &(0x7f0000003c40)={&(0x7f0000003a40)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x1, 0x4}}, 0x10, &(0x7f0000003b00)=[{&(0x7f0000003a80)="264ab6ce55f04e73aeeea629801b5ddf7170dfa668654dae05deea0916e85108e757e84215117c5ddcc52ca81325bee50d9f89bda040ef45cc8bbd3be7a4e43f95802573a6c524bc7cafdfaa389a6fa18682706a727ff7db857d9835c273818ebefa286a04cfdce5ea70a926", 0x6c}], 0x1, &(0x7f0000003b40)="3c9a9baaec09cfd6af810c493b784339c0d279e5696b266fc99c151449eb8f7d165eaccbf738da062352fa202cb40e97a3cc1b3e33ae21c6c6cb69274c53c72ee2d908419916aef7780c1f3d6dee5d162d3e0f1aee17030d100a70b9beb523df8cd1874261e1f93bf7d2dabbf4267160a598365f3fc55a6822d5705a1b7deab9dab8e4714d83a127cfe615b3d3b94ef1b7ef326603e814f67944e7cd31b76eee141333b65be58bc0a98b5b0af231016abb67771157199b1065c6b81bd3ac0ed14d20ed289320d6b4ff19c7c4c114cad04fee8ea0ef3e268e4fa95b1426b3146c88ef701562031599656bd4d154200860cc68ac62", 0xf4, 0x20040840}, 0x80) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003c80)='./cgroup/syz1\x00', 0x200002, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003e80)={r7, &(0x7f0000003cc0)="b84379d6764c81e477847ba324933fd424684ff1bcd86281a8f5aca26ab5ed01f1b6f4f0b1e36d8f771c7fa3daccdfdeb9b1d78c10a28a06c59976b857902860ed9bf5bffb94f97af364f0b4cdf6e57e675877a0955dce9913aa81e55b825ea8cd69bae6009254cc974fa3cc54749fe8ee82dd545a53d4b794cf9f82c86e69ece12b02aeeabba68d435f8dda9e7a1ae4b05bd1be31e45b8e3655a5599b881384ede15b7b44c5f7f942ed87f4ba73d49bab1bff2eb897db", &(0x7f0000003d80)=""/197}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r18, 0x1, 0x32, &(0x7f0000003f00)=r11, 0x4) (async) r20 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005180)={&(0x7f0000005000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x4, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x8}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x48, 0x2}, @enum64={0xb, 0x1, 0x0, 0x13, 0x0, 0x7, [{0xd, 0xd41, 0x5}]}, @typedef={0x5, 0x0, 0x0, 0x8, 0x4}, @typedef={0x7d4f, 0x0, 0x0, 0x8, 0x1}, @volatile={0xb, 0x0, 0x0, 0x9, 0x2}, @datasec={0xc, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x2, 0x48b1}, {0x2, 0x3, 0xb9a}, {0x4, 0x70f5, 0x8b}], '~^'}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000050c0)=""/141, 0xac, 0x8d, 0x0, 0xd6}, 0x28) sendmsg$unix(r11, &(0x7f0000005200)={&(0x7f0000003f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000003fc0)="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", 0x1000}], 0x1, &(0x7f00000051c0)=[@rights={{0x30, 0x1, 0x1, [r20, r10, 0xffffffffffffffff, r18, r6, r13, r0, r19]}}], 0x30, 0x24014045}, 0x800) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000052c0)={r18, &(0x7f0000005240)="d1ae6b172083f9ef35f13cd0e80b8f25801611551483fcfe2875d1aeda585d3c45b4e25b2b0ee22aec18b92f38b8", &(0x7f0000005280)=""/25}, 0x20) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000005300)={0x2, 0x80, 0x7, 0x80, 0x0, 0x3, 0x0, 0x7, 0x48509, 0x14, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x59d, 0x2, @perf_config_ext={0x30f, 0x1ff}, 0x10000, 0x4, 0x200, 0x2, 0x3, 0x46d7, 0x4, 0x0, 0x337, 0x0, 0x24}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000005380)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8, '\x00', r3, r20, 0x1, 0x0, 0x4}, 0x50) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000005400)='\x00') (async, rerun: 32) openat$cgroup_freezer_state(r17, &(0x7f0000005440), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005a40)={0x6, 0xc, &(0x7f0000005500)=@raw=[@map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x200}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffeffff}], &(0x7f0000005580)='GPL\x00', 0x5, 0xe3, &(0x7f00000055c0)=""/227, 0x40f00, 0x2, '\x00', r14, 0x25, r20, 0x8, &(0x7f00000056c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000005700)={0x1, 0x8, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000005980)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r7, r11, r16, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000059c0)=[{0x3, 0x1, 0x3, 0xa}, {0x4, 0x3, 0x5, 0x4}, {0x0, 0x4, 0xb}, {0x5, 0x5, 0xe, 0x2}, {0x1, 0x2, 0x5}, {0x2, 0x5, 0xe, 0x4}, {0x2, 0x3, 0xa, 0x2}, {0x2, 0x5, 0x10, 0x6}], 0x10, 0xfff}, 0x94) 251.869396ms ago: executing program 1 (id=1287): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff61}, 0x90) (async) unlink(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00') (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x25, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 195.386097ms ago: executing program 3 (id=1288): socket$kcm(0x2, 0x200000000000001, 0x106) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) (async) r3 = socket$kcm(0xa, 0x1, 0x0) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) (async, rerun: 32) r6 = socket$kcm(0x2, 0x5, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) (async, rerun: 64) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) (rerun: 64) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r7}, 0x18) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000780), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000340), 0x8, 0x3f, 0x8, 0xffffff91, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) (rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000001640)={0x0, r1}, 0x8) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (rerun: 64) 193.921968ms ago: executing program 2 (id=1289): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0x10, &(0x7f0000000040)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) syz_clone(0x4841480, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) 5.835719ms ago: executing program 3 (id=1290): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x5a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x31, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xed4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x1, 0xa, 0xa, 0x2, 0xc, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2b6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @alu={0x0, 0x0, 0x8, 0x3, 0x7, 0xfffffffffffffffe, 0xffffffffffffffef}, @map_fd, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x58}, @ldst={0x3, 0x3, 0x3, 0xa, 0xb, 0x21c, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x1], &(0x7f0000000480)=[{0x0, 0x1, 0x3}, {0x4, 0x2, 0x7, 0x4}, {0x4, 0x5, 0x7, 0x1}, {0x3, 0x2, 0x6, 0x5}, {0x0, 0x3, 0x6, 0x3}, {0x1, 0x3, 0x9, 0x4}], 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x84, 0x2}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=1291): socket$kcm(0x2, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022, 0x1}], 0x10, 0xfffffffc}, 0x94) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 83.032957][ T5759] cgroup: Unknown subsys name 'net' [ 83.199457][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.911117][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.027691][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.039811][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.047908][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.056758][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.080309][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.088574][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.097678][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.105668][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.114042][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.131226][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.136422][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.144653][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.161910][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.171674][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.179363][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.188228][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.197501][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.205259][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.218232][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.227512][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.235303][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.248066][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.256807][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.264370][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.858016][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.983014][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 88.034718][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 88.106978][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 88.226569][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.234583][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.242594][ T5776] bridge_slave_0: entered allmulticast mode [ 88.249988][ T5776] bridge_slave_0: entered promiscuous mode [ 88.281938][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.289236][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.296479][ T5776] bridge_slave_1: entered allmulticast mode [ 88.303852][ T5776] bridge_slave_1: entered promiscuous mode [ 88.329245][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.336449][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.343836][ T5770] bridge_slave_0: entered allmulticast mode [ 88.351490][ T5770] bridge_slave_0: entered promiscuous mode [ 88.401966][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.409447][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.416631][ T5770] bridge_slave_1: entered allmulticast mode [ 88.424216][ T5770] bridge_slave_1: entered promiscuous mode [ 88.434406][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.447390][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.457125][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.464476][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.471808][ T5780] bridge_slave_0: entered allmulticast mode [ 88.479122][ T5780] bridge_slave_0: entered promiscuous mode [ 88.530512][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.537719][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.546237][ T5780] bridge_slave_1: entered allmulticast mode [ 88.553721][ T5780] bridge_slave_1: entered promiscuous mode [ 88.572960][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.580577][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.587899][ T5773] bridge_slave_0: entered allmulticast mode [ 88.595450][ T5773] bridge_slave_0: entered promiscuous mode [ 88.605277][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.613152][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.621597][ T5773] bridge_slave_1: entered allmulticast mode [ 88.628839][ T5773] bridge_slave_1: entered promiscuous mode [ 88.652789][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.688338][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.701836][ T5776] team0: Port device team_slave_0 added [ 88.711470][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.722840][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.745355][ T5776] team0: Port device team_slave_1 added [ 88.780933][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.839384][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.846417][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.872963][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.887582][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.903592][ T5770] team0: Port device team_slave_0 added [ 88.914044][ T5780] team0: Port device team_slave_0 added [ 88.923141][ T5780] team0: Port device team_slave_1 added [ 88.930375][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.937369][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.963451][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.995135][ T5770] team0: Port device team_slave_1 added [ 89.025258][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.032486][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.058605][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.111276][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.118297][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.144648][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.167787][ T5773] team0: Port device team_slave_0 added [ 89.185714][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.192830][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.219333][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.230965][ T5778] Bluetooth: hci0: command tx timeout [ 89.236822][ T5778] Bluetooth: hci1: command tx timeout [ 89.237142][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.250015][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.276878][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.304070][ T5773] team0: Port device team_slave_1 added [ 89.309776][ T5784] Bluetooth: hci2: command tx timeout [ 89.316709][ T5778] Bluetooth: hci3: command tx timeout [ 89.365219][ T5780] hsr_slave_0: entered promiscuous mode [ 89.372362][ T5780] hsr_slave_1: entered promiscuous mode [ 89.397905][ T5776] hsr_slave_0: entered promiscuous mode [ 89.404573][ T5776] hsr_slave_1: entered promiscuous mode [ 89.411114][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.419091][ T5776] Cannot create hsr debugfs directory [ 89.430161][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.437163][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.463388][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.476556][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.483828][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.509896][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.625566][ T5773] hsr_slave_0: entered promiscuous mode [ 89.632722][ T5773] hsr_slave_1: entered promiscuous mode [ 89.639505][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.647087][ T5773] Cannot create hsr debugfs directory [ 89.659367][ T5770] hsr_slave_0: entered promiscuous mode [ 89.665896][ T5770] hsr_slave_1: entered promiscuous mode [ 89.672753][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.680442][ T5770] Cannot create hsr debugfs directory [ 90.121406][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.142261][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.153460][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.177534][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.238269][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.250603][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.267179][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.278479][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.355618][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.370158][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.393656][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.426788][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.491761][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.505998][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.536047][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.548331][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.665912][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.712263][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.761252][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.768646][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.795153][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.806635][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.813856][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.830600][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.850289][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.905272][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.912521][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.931111][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.957586][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.965052][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.991743][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.999030][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.047507][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.054743][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.106933][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.175785][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.226079][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.233375][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.277054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.284361][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.314455][ T5778] Bluetooth: hci1: command tx timeout [ 91.321846][ T5784] Bluetooth: hci0: command tx timeout [ 91.389368][ T5778] Bluetooth: hci3: command tx timeout [ 91.399003][ T5784] Bluetooth: hci2: command tx timeout [ 91.512166][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.768017][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.816002][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.843884][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.016112][ T5780] veth0_vlan: entered promiscuous mode [ 92.045343][ T5773] veth0_vlan: entered promiscuous mode [ 92.065835][ T5776] veth0_vlan: entered promiscuous mode [ 92.081460][ T5773] veth1_vlan: entered promiscuous mode [ 92.092954][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.103816][ T5780] veth1_vlan: entered promiscuous mode [ 92.176115][ T5776] veth1_vlan: entered promiscuous mode [ 92.213279][ T5780] veth0_macvtap: entered promiscuous mode [ 92.232018][ T5780] veth1_macvtap: entered promiscuous mode [ 92.254472][ T5773] veth0_macvtap: entered promiscuous mode [ 92.278539][ T1188] cfg80211: failed to load regulatory.db [ 92.295403][ T5770] veth0_vlan: entered promiscuous mode [ 92.316603][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.336478][ T5773] veth1_macvtap: entered promiscuous mode [ 92.348478][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.384100][ T5770] veth1_vlan: entered promiscuous mode [ 92.396725][ T5776] veth0_macvtap: entered promiscuous mode [ 92.409138][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.418124][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.428241][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.438022][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.458070][ T5776] veth1_macvtap: entered promiscuous mode [ 92.493193][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.507059][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.523185][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.547578][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.558470][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.571406][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.586901][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.596599][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.606735][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.616263][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.641359][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.653384][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.663788][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.676982][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.690317][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.702423][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.713768][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.723767][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.735022][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.746694][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.776218][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.785186][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.794702][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.803955][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.826712][ T5770] veth0_macvtap: entered promiscuous mode [ 92.904173][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.921163][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.937697][ T5770] veth1_macvtap: entered promiscuous mode [ 93.051080][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.062113][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.077208][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.087637][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.095310][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.106284][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.116599][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.127692][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.141082][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.160308][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.171766][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.182204][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.193152][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.203323][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.217576][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.229490][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.274006][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.290293][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.308605][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.318162][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.329690][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.338541][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.359812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.367813][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.389270][ T5778] Bluetooth: hci1: command tx timeout [ 93.394763][ T5778] Bluetooth: hci0: command tx timeout [ 93.469271][ T5778] Bluetooth: hci3: command tx timeout [ 93.474772][ T5778] Bluetooth: hci2: command tx timeout [ 93.499981][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.510096][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.528830][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.547300][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.658756][ C0] hrtimer: interrupt took 90135 ns [ 93.699407][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.727517][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.817191][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.844940][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.543792][ T5851] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.568247][ T5851] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.441100][ T5860] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7'. [ 95.472790][ T5784] Bluetooth: hci1: command tx timeout [ 95.478344][ T5778] Bluetooth: hci0: command tx timeout [ 95.549015][ T5778] Bluetooth: hci2: command tx timeout [ 95.553447][ T5784] Bluetooth: hci3: command tx timeout [ 95.586010][ T5860] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.7'. [ 95.651454][ T5868] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 95.699012][ T5868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10'. [ 95.722729][ T5868] team0: entered promiscuous mode [ 95.728141][ T5868] team_slave_0: entered promiscuous mode [ 95.774342][ T5868] team_slave_1: entered promiscuous mode [ 95.817279][ T5868] team0: entered allmulticast mode [ 95.859946][ T5868] team_slave_0: entered allmulticast mode [ 95.866054][ T5868] team_slave_1: entered allmulticast mode [ 95.908744][ T5868] bridge0: port 3(team0) entered blocking state [ 95.916609][ T5868] bridge0: port 3(team0) entered disabled state [ 95.967926][ T5868] bridge0: port 3(team0) entered blocking state [ 95.975275][ T5868] bridge0: port 3(team0) entered forwarding state [ 96.665746][ T5880] sock: sock_timestamping_bind_phc: sock not bind to device [ 97.339805][ T5891] netlink: 'syz.0.15': attribute type 29 has an invalid length. [ 97.625975][ T5897] netlink: 'syz.0.15': attribute type 2 has an invalid length. [ 97.712084][ T5897] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15'. [ 100.532384][ T5903] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 100.637249][ T5891] netlink: 'syz.0.15': attribute type 29 has an invalid length. [ 100.667881][ T5905] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16'. [ 100.691658][ T5905] tc_dump_action: action bad kind [ 100.913407][ T5910] netlink: 'syz.1.18': attribute type 29 has an invalid length. [ 100.960065][ T5910] netlink: 'syz.1.18': attribute type 29 has an invalid length. [ 101.855423][ T5909] syzkaller0: entered promiscuous mode [ 101.861804][ T5909] syzkaller0: entered allmulticast mode [ 102.201131][ T5913] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19'. [ 102.255292][ T5914] netlink: 152 bytes leftover after parsing attributes in process `syz.2.19'. [ 102.266857][ T5914] tc_dump_action: action bad kind [ 105.815601][ T5944] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.23'. [ 106.077272][ T5944] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.23'. [ 106.230170][ T5949] netlink: 'syz.2.27': attribute type 21 has an invalid length. [ 106.243250][ T5943] syz.3.26 (5943) used greatest stack depth: 19880 bytes left [ 106.252952][ T5949] netlink: 156 bytes leftover after parsing attributes in process `syz.2.27'. [ 106.495574][ T5952] netlink: 'syz.3.28': attribute type 2 has an invalid length. [ 106.521475][ T5952] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 106.579441][ T5952] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.28'. [ 106.589834][ T5957] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.325358][ T5976] netlink: 'syz.1.34': attribute type 29 has an invalid length. [ 108.423769][ T5978] netlink: 'syz.1.34': attribute type 2 has an invalid length. [ 108.479042][ T5978] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.34'. [ 108.955524][ T5964] syzkaller0: entered promiscuous mode [ 109.001539][ T5964] syzkaller0: entered allmulticast mode [ 109.088508][ T5971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.33'. [ 109.116146][ T5971] tc_dump_action: action bad kind [ 109.146328][ T5976] netlink: 'syz.1.34': attribute type 29 has an invalid length. [ 110.430048][ T5983] syz.1.36 (5983) used greatest stack depth: 19368 bytes left [ 112.272654][ T6001] netlink: 'syz.1.40': attribute type 21 has an invalid length. [ 112.282713][ T6001] netlink: 156 bytes leftover after parsing attributes in process `syz.1.40'. [ 112.408533][ T5996] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.38'. [ 112.496388][ T6006] sock: sock_timestamping_bind_phc: sock not bind to device [ 112.502718][ T5996] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.38'. [ 113.197513][ T6016] netlink: 'syz.3.46': attribute type 29 has an invalid length. [ 113.213148][ T6016] netlink: 'syz.3.46': attribute type 29 has an invalid length. [ 113.301599][ T6016] netlink: 'syz.3.46': attribute type 2 has an invalid length. [ 113.330051][ T6016] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.46'. [ 113.741553][ T6020] netlink: 152 bytes leftover after parsing attributes in process `syz.0.44'. [ 113.759027][ T6020] tc_dump_action: action bad kind [ 114.084992][ T6034] syzkaller0: entered promiscuous mode [ 114.139626][ T6034] syzkaller0: entered allmulticast mode [ 115.562511][ T6045] netlink: 'syz.2.51': attribute type 10 has an invalid length. [ 115.591344][ T6045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 115.638152][ T6045] team0: entered promiscuous mode [ 115.645172][ T6045] team_slave_0: entered promiscuous mode [ 115.659968][ T6045] team_slave_1: entered promiscuous mode [ 115.666911][ T6045] team0: entered allmulticast mode [ 115.680687][ T6045] team_slave_0: entered allmulticast mode [ 115.690517][ T6045] team_slave_1: entered allmulticast mode [ 115.710266][ T6045] bridge0: port 3(team0) entered blocking state [ 115.732619][ T6045] bridge0: port 3(team0) entered disabled state [ 115.791565][ T6045] bridge0: port 3(team0) entered blocking state [ 115.798603][ T6045] bridge0: port 3(team0) entered forwarding state [ 118.807587][ T6056] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.52'. [ 118.817202][ T6056] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.52'. [ 119.383061][ T6067] sock: sock_timestamping_bind_phc: sock not bind to device [ 120.028032][ T6080] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.59'. [ 120.120094][ T6080] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.59'. [ 120.277895][ T6082] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.64'. [ 120.310851][ T6082] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.64'. [ 120.781382][ T6088] netlink: 'syz.3.65': attribute type 10 has an invalid length. [ 120.799306][ T6088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.65'. [ 120.824000][ T6088] team0: entered promiscuous mode [ 120.844312][ T6088] team_slave_0: entered promiscuous mode [ 120.875337][ T6089] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.73'. [ 120.877368][ T6088] team_slave_1: entered promiscuous mode [ 120.928910][ T6088] team0: entered allmulticast mode [ 120.950189][ T6088] team_slave_0: entered allmulticast mode [ 120.970440][ T6088] team_slave_1: entered allmulticast mode [ 121.172877][ T6088] bridge0: port 3(team0) entered blocking state [ 121.267094][ T6088] bridge0: port 3(team0) entered disabled state [ 121.317237][ T6088] bridge0: port 3(team0) entered blocking state [ 121.324444][ T6088] bridge0: port 3(team0) entered forwarding state [ 121.389945][ T6089] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.73'. [ 121.531278][ T6095] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 121.545633][ T6095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.61'. [ 121.603479][ T6095] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 121.621599][ T6095] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.660724][ T6095] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 122.512997][ T6124] netlink: 'syz.0.71': attribute type 29 has an invalid length. [ 122.593561][ T6124] netlink: 'syz.0.71': attribute type 29 has an invalid length. [ 122.645786][ T6120] tc_dump_action: action bad kind [ 122.857027][ T6130] netlink: 'syz.3.83': attribute type 29 has an invalid length. [ 122.938997][ T6130] netlink: 'syz.3.83': attribute type 29 has an invalid length. [ 124.137660][ T6152] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 124.156139][ T6152] __nla_validate_parse: 6 callbacks suppressed [ 124.156158][ T6152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.79'. [ 124.241668][ T6152] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 124.294174][ T6152] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.341439][ T6164] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.81'. [ 124.440582][ T6152] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 124.704439][ T6164] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.81'. [ 125.843512][ T6187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.88'. [ 125.909899][ T6188] netlink: 152 bytes leftover after parsing attributes in process `syz.3.88'. [ 125.938983][ T6188] tc_dump_action: action bad kind [ 126.273385][ T6194] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.89'. [ 126.283813][ T6194] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.89'. [ 126.743695][ T6198] netlink: 'syz.1.90': attribute type 21 has an invalid length. [ 126.762027][ T6198] netlink: 132 bytes leftover after parsing attributes in process `syz.1.90'. [ 127.416102][ T6216] netlink: 'syz.0.98': attribute type 2 has an invalid length. [ 127.439093][ T6216] netlink: 'syz.0.98': attribute type 8 has an invalid length. [ 127.458960][ T6216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.98'. [ 127.505866][ T6217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.98'. [ 128.306307][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.326326][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.359142][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.378294][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.399489][ T6241] Zero length message leads to an empty skb [ 128.412727][ T6238] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 128.439666][ T6238] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 129.133122][ T6250] netlink: 'syz.0.107': attribute type 12 has an invalid length. [ 129.464729][ T6262] __nla_validate_parse: 3 callbacks suppressed [ 129.464747][ T6262] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.112'. [ 130.979753][ T6262] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.112'. [ 131.314882][ T6289] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.117'. [ 131.358889][ T6289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.117'. [ 132.151725][ T6307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.122'. [ 132.320409][ T6310] netlink: 3890 bytes leftover after parsing attributes in process `syz.2.122'. [ 132.513313][ T6315] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.125'. [ 132.542677][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.235025][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.257732][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.330535][ T6315] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.125'. [ 133.527762][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'. [ 133.643449][ T6327] FAULT_INJECTION: forcing a failure. [ 133.643449][ T6327] name failslab, interval 1, probability 0, space 0, times 1 [ 133.686445][ T6327] CPU: 1 PID: 6327 Comm: syz.3.129 Not tainted syzkaller #0 [ 133.693833][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 133.704058][ T6327] Call Trace: [ 133.707399][ T6327] [ 133.710380][ T6327] dump_stack_lvl+0x18c/0x250 [ 133.715135][ T6327] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.721353][ T6327] ? show_regs_print_info+0x20/0x20 [ 133.726610][ T6327] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.732833][ T6327] ? dump_stack+0x9/0x20 [ 133.737154][ T6327] should_fail_ex+0x39d/0x4d0 [ 133.741915][ T6327] should_failslab+0x9/0x20 [ 133.746571][ T6327] slab_pre_alloc_hook+0x59/0x310 [ 133.751666][ T6327] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 133.757446][ T6327] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 133.763236][ T6327] __kmem_cache_alloc_node+0x53/0x250 [ 133.768685][ T6327] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 133.774463][ T6327] __kmalloc+0xa4/0x230 [ 133.778785][ T6327] tomoyo_realpath_from_path+0xe3/0x5d0 [ 133.784409][ T6327] tomoyo_path_number_perm+0x248/0x620 [ 133.789931][ T6327] ? tomoyo_path_number_perm+0x217/0x620 [ 133.795710][ T6327] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 133.801328][ T6327] ? ksys_write+0x1c4/0x260 [ 133.805934][ T6327] ? __fget_files+0x28/0x4b0 [ 133.810588][ T6327] ? __fget_files+0x28/0x4b0 [ 133.815253][ T6327] security_file_ioctl+0x70/0xa0 [ 133.820263][ T6327] __se_sys_ioctl+0x48/0x170 [ 133.824948][ T6327] do_syscall_64+0x55/0xa0 [ 133.829500][ T6327] ? clear_bhb_loop+0x40/0x90 [ 133.834236][ T6327] ? clear_bhb_loop+0x40/0x90 [ 133.839063][ T6327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.845021][ T6327] RIP: 0033:0x7fab0dd9cdd9 [ 133.849499][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.869164][ T6327] RSP: 002b:00007fab0ebd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.877654][ T6327] RAX: ffffffffffffffda RBX: 00007fab0e015fa0 RCX: 00007fab0dd9cdd9 [ 133.886036][ T6327] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000005 [ 133.894067][ T6327] RBP: 00007fab0ebd0090 R08: 0000000000000000 R09: 0000000000000000 [ 133.902268][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.910465][ T6327] R13: 00007fab0e016038 R14: 00007fab0e015fa0 R15: 00007ffd15395cb8 [ 133.918499][ T6327] [ 134.011581][ T6325] netlink: 'syz.2.126': attribute type 9 has an invalid length. [ 134.016479][ T6327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 134.029055][ T6325] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.126'. [ 134.058042][ T6337] netlink: 'syz.1.132': attribute type 21 has an invalid length. [ 134.067342][ T6337] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 134.607277][ T6353] : renamed from team_slave_1 (while UP) [ 134.623000][ T6347] __nla_validate_parse: 2 callbacks suppressed [ 134.623020][ T6347] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.137'. [ 136.859201][ T6347] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.137'. [ 138.540184][ T6373] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.141'. [ 138.862091][ T6391] FAULT_INJECTION: forcing a failure. [ 138.862091][ T6391] name failslab, interval 1, probability 0, space 0, times 0 [ 138.900724][ T6393] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.147'. [ 138.923499][ T6393] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.147'. [ 138.937095][ T6391] CPU: 1 PID: 6391 Comm: syz.1.146 Not tainted syzkaller #0 [ 138.944469][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.954585][ T6391] Call Trace: [ 138.957906][ T6391] [ 138.960882][ T6391] dump_stack_lvl+0x18c/0x250 [ 138.965647][ T6391] ? show_regs_print_info+0x20/0x20 [ 138.970913][ T6391] ? load_image+0x420/0x420 [ 138.975501][ T6391] ? __might_sleep+0xe0/0xe0 [ 138.980154][ T6391] ? __lock_acquire+0x7d40/0x7d40 [ 138.985657][ T6391] ? prepend_path+0x4b/0x960 [ 138.990304][ T6391] should_fail_ex+0x39d/0x4d0 [ 138.995042][ T6391] should_failslab+0x9/0x20 [ 138.999604][ T6391] slab_pre_alloc_hook+0x59/0x310 [ 139.004683][ T6391] ? __asan_memcpy+0x40/0x70 [ 139.009340][ T6391] ? tomoyo_encode+0x28b/0x540 [ 139.014152][ T6391] ? tomoyo_encode+0x28b/0x540 [ 139.018950][ T6391] __kmem_cache_alloc_node+0x53/0x250 [ 139.024416][ T6391] ? prepend_path+0x4b/0x960 [ 139.029046][ T6391] ? tomoyo_encode+0x28b/0x540 [ 139.033836][ T6391] __kmalloc+0xa4/0x230 [ 139.038032][ T6391] tomoyo_encode+0x28b/0x540 [ 139.042658][ T6391] tomoyo_realpath_from_path+0x592/0x5d0 [ 139.048330][ T6391] tomoyo_path_number_perm+0x248/0x620 [ 139.053836][ T6391] ? tomoyo_path_number_perm+0x217/0x620 [ 139.059519][ T6391] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 139.065020][ T6391] ? ksys_write+0x1c4/0x260 [ 139.069593][ T6391] ? __fget_files+0x28/0x4b0 [ 139.074486][ T6391] ? __fget_files+0x28/0x4b0 [ 139.079119][ T6391] security_file_ioctl+0x70/0xa0 [ 139.084100][ T6391] __se_sys_ioctl+0x48/0x170 [ 139.088732][ T6391] do_syscall_64+0x55/0xa0 [ 139.093183][ T6391] ? clear_bhb_loop+0x40/0x90 [ 139.097893][ T6391] ? clear_bhb_loop+0x40/0x90 [ 139.102610][ T6391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.108539][ T6391] RIP: 0033:0x7f668b59cdd9 [ 139.112978][ T6391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.132760][ T6391] RSP: 002b:00007f668c4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.141218][ T6391] RAX: ffffffffffffffda RBX: 00007f668b816090 RCX: 00007f668b59cdd9 [ 139.149233][ T6391] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000005 [ 139.157241][ T6391] RBP: 00007f668c4a6090 R08: 0000000000000000 R09: 0000000000000000 [ 139.165294][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.173298][ T6391] R13: 00007f668b816128 R14: 00007f668b816090 R15: 00007ffeb6a00a28 [ 139.181314][ T6391] [ 139.193391][ T6391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 139.303260][ T6394] netlink: 'syz.3.148': attribute type 1 has an invalid length. [ 139.312455][ T6394] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.148'. [ 139.351023][ T6394] netlink: 'syz.3.148': attribute type 4 has an invalid length. [ 139.369000][ T6394] netlink: 152 bytes leftover after parsing attributes in process `syz.3.148'. [ 139.436105][ T5784] Bluetooth: hci2: ISO packet for unknown connection handle 2 [ 139.447720][ T6394] .`: renamed from bond0 (while UP) [ 139.706523][ T6402] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.151'. [ 139.742569][ T6402] openvswitch: netlink: Key type 29 is not supported [ 139.864370][ T6409] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.915259][ T6426] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.159'. [ 141.063393][ T6426] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.159'. [ 141.090844][ T6431] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.160'. [ 141.379924][ T6437] netlink: 152 bytes leftover after parsing attributes in process `syz.0.162'. [ 141.390349][ T6434] FAULT_INJECTION: forcing a failure. [ 141.390349][ T6434] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.424488][ T6437] tc_dump_action: action bad kind [ 141.434587][ T6434] CPU: 1 PID: 6434 Comm: syz.2.161 Not tainted syzkaller #0 [ 141.442056][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 141.452176][ T6434] Call Trace: [ 141.455503][ T6434] [ 141.458483][ T6434] dump_stack_lvl+0x18c/0x250 [ 141.463248][ T6434] ? show_regs_print_info+0x20/0x20 [ 141.468518][ T6434] ? load_image+0x420/0x420 [ 141.473089][ T6434] ? __might_fault+0xaa/0x120 [ 141.477834][ T6434] ? __lock_acquire+0x7d40/0x7d40 [ 141.482923][ T6434] should_fail_ex+0x39d/0x4d0 [ 141.487761][ T6434] _copy_from_user+0x2f/0xe0 [ 141.492415][ T6434] ppp_get_filter+0xa7/0x1d0 [ 141.497081][ T6434] ? ppp_set_compress+0x730/0x730 [ 141.502197][ T6434] ppp_ioctl+0xfa0/0x1a90 [ 141.506589][ T6434] ? ppp_poll+0x250/0x250 [ 141.511174][ T6434] ? __fget_files+0x28/0x4b0 [ 141.516053][ T6434] ? bpf_lsm_file_ioctl+0x9/0x10 [ 141.521057][ T6434] ? security_file_ioctl+0x80/0xa0 [ 141.526249][ T6434] ? ppp_poll+0x250/0x250 [ 141.530777][ T6434] __se_sys_ioctl+0xfd/0x170 [ 141.535450][ T6434] do_syscall_64+0x55/0xa0 [ 141.539936][ T6434] ? clear_bhb_loop+0x40/0x90 [ 141.544683][ T6434] ? clear_bhb_loop+0x40/0x90 [ 141.549433][ T6434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.555393][ T6434] RIP: 0033:0x7f07d059cdd9 [ 141.559868][ T6434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.579531][ T6434] RSP: 002b:00007f07d1426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 141.588621][ T6434] RAX: ffffffffffffffda RBX: 00007f07d0816090 RCX: 00007f07d059cdd9 [ 141.596658][ T6434] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000005 [ 141.604686][ T6434] RBP: 00007f07d1426090 R08: 0000000000000000 R09: 0000000000000000 [ 141.612714][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.620739][ T6434] R13: 00007f07d0816128 R14: 00007f07d0816090 R15: 00007ffd240f0d28 [ 141.628795][ T6434] [ 142.041772][ T6461] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.169'. [ 142.068464][ T6461] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.169'. [ 142.442788][ T6472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.171'. [ 143.123652][ T6479] syz.3.173 (6479) used obsolete PPPIOCDETACH ioctl [ 143.368935][ T6488] netlink: 'syz.0.174': attribute type 16 has an invalid length. [ 143.449418][ T6488] netlink: 48 bytes leftover after parsing attributes in process `syz.0.174'. [ 143.509574][ T6488] veth1_macvtap: entered allmulticast mode [ 144.192764][ T6498] netlink: 'syz.3.179': attribute type 2 has an invalid length. [ 144.203176][ T6498] netlink: 119 bytes leftover after parsing attributes in process `syz.3.179'. [ 145.915489][ T6543] __nla_validate_parse: 2 callbacks suppressed [ 145.915511][ T6543] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.192'. [ 146.517044][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 146.536820][ T6537] netlink: 152 bytes leftover after parsing attributes in process `syz.0.191'. [ 146.553303][ T6543] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.192'. [ 146.756224][ T6548] FAULT_INJECTION: forcing a failure. [ 146.756224][ T6548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.788768][ T6548] CPU: 0 PID: 6548 Comm: syz.1.193 Not tainted syzkaller #0 [ 146.796150][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.806388][ T6548] Call Trace: [ 146.809711][ T6548] [ 146.812713][ T6548] dump_stack_lvl+0x18c/0x250 [ 146.817437][ T6548] ? show_regs_print_info+0x20/0x20 [ 146.822679][ T6548] ? load_image+0x420/0x420 [ 146.827222][ T6548] ? __might_fault+0xaa/0x120 [ 146.831928][ T6548] ? __lock_acquire+0x7d40/0x7d40 [ 146.836986][ T6548] should_fail_ex+0x39d/0x4d0 [ 146.841710][ T6548] _copy_from_user+0x2f/0xe0 [ 146.846342][ T6548] memdup_user+0x64/0xc0 [ 146.850697][ T6548] ppp_get_filter+0x111/0x1d0 [ 146.855416][ T6548] ? ppp_set_compress+0x730/0x730 [ 146.860499][ T6548] ppp_ioctl+0xfa0/0x1a90 [ 146.864877][ T6548] ? ppp_poll+0x250/0x250 [ 146.869256][ T6548] ? __fget_files+0x28/0x4b0 [ 146.874064][ T6548] ? bpf_lsm_file_ioctl+0x9/0x10 [ 146.879121][ T6548] ? security_file_ioctl+0x80/0xa0 [ 146.884292][ T6548] ? ppp_poll+0x250/0x250 [ 146.888668][ T6548] __se_sys_ioctl+0xfd/0x170 [ 146.893387][ T6548] do_syscall_64+0x55/0xa0 [ 146.897834][ T6548] ? clear_bhb_loop+0x40/0x90 [ 146.902542][ T6548] ? clear_bhb_loop+0x40/0x90 [ 146.907253][ T6548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 146.913177][ T6548] RIP: 0033:0x7f668b59cdd9 [ 146.917626][ T6548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.937349][ T6548] RSP: 002b:00007f668c4c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.945796][ T6548] RAX: ffffffffffffffda RBX: 00007f668b815fa0 RCX: 00007f668b59cdd9 [ 146.953806][ T6548] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000005 [ 146.962081][ T6548] RBP: 00007f668c4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.970090][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.978099][ T6548] R13: 00007f668b816038 R14: 00007f668b815fa0 R15: 00007ffeb6a00a28 [ 146.986112][ T6548] [ 148.845973][ T6563] netlink: 192 bytes leftover after parsing attributes in process `syz.2.197'. [ 149.752801][ T6596] pim6reg1: entered allmulticast mode [ 149.789360][ T6596] pim6reg1: left allmulticast mode [ 149.865258][ T6598] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.205'. [ 149.982744][ T6598] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.205'. [ 149.990894][ T6601] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.207'. [ 151.370574][ T6609] netlink: 'syz.1.209': attribute type 12 has an invalid length. [ 151.393522][ T6609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.209'. [ 151.638112][ T6613] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 151.667209][ T6613] netlink: 152 bytes leftover after parsing attributes in process `syz.1.211'. [ 151.961299][ T6614] netlink: 128 bytes leftover after parsing attributes in process `syz.3.210'. [ 152.036056][ T6614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.724275][ T6629] netlink: 'syz.3.215': attribute type 3 has an invalid length. [ 152.735808][ T6629] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.215'. [ 152.741288][ T6630] netlink: 'syz.3.215': attribute type 3 has an invalid length. [ 152.759499][ T6630] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.215'. [ 152.776767][ T6627] netlink: 'syz.2.214': attribute type 64 has an invalid length. [ 152.808365][ T6627] netlink: 'syz.2.214': attribute type 64 has an invalid length. [ 153.331597][ T6648] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 153.358717][ T6648] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.218'. [ 153.736516][ T6654] netlink: 'syz.2.220': attribute type 12 has an invalid length. [ 153.744647][ T6654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.220'. [ 154.223672][ T6661] netlink: 'syz.2.221': attribute type 21 has an invalid length. [ 154.237446][ T6661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.221'. [ 155.124595][ T6673] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.224'. [ 155.146569][ T6674] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.222'. [ 155.792376][ T6689] syz.2.229 uses obsolete (PF_INET,SOCK_PACKET) [ 156.417277][ T6706] __nla_validate_parse: 4 callbacks suppressed [ 156.417297][ T6706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.233'. [ 156.435725][ T6706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.233'. [ 156.446268][ T6706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.233'. [ 156.456530][ T6706] netlink: 60 bytes leftover after parsing attributes in process `syz.0.233'. [ 156.644261][ T6714] netlink: 'syz.0.236': attribute type 33 has an invalid length. [ 156.656283][ T6714] netlink: 164 bytes leftover after parsing attributes in process `syz.0.236'. [ 157.003697][ T6728] netlink: 'syz.2.240': attribute type 9 has an invalid length. [ 157.035717][ T6728] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.240'. [ 157.307885][ T6739] netlink: 'syz.1.243': attribute type 15 has an invalid length. [ 157.342509][ T6739] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.243'. [ 157.364307][ T6737] tap0: tun_chr_ioctl cmd 1074025677 [ 157.376292][ T6737] tap0: linktype set to 0 [ 157.387834][ T6737] tap0: tun_chr_ioctl cmd 1074025684 [ 157.555068][ T6751] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.245'. [ 157.568749][ T6751] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.245'. [ 158.593794][ T6760] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.247'. [ 158.783220][ T6773] tc_dump_action: action bad kind [ 158.912415][ T6776] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 158.925019][ T6780] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 158.953268][ T6776] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 159.646663][ T6805] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 159.700573][ T6805] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 159.964030][ T6817] __sock_release: fasync list not empty! [ 159.980647][ T6818] __sock_release: fasync list not empty! [ 160.251833][ T6826] netlink: 'syz.3.266': attribute type 153 has an invalid length. [ 160.261714][ T6826] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 161.083256][ T6843] openvswitch: netlink: Duplicate key (type 0). [ 161.485130][ T6858] __nla_validate_parse: 7 callbacks suppressed [ 161.485151][ T6858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.274'. [ 161.531572][ T6857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.274'. [ 161.552973][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 161.573014][ T6856] netlink: 152 bytes leftover after parsing attributes in process `syz.1.274'. [ 162.314297][ T6855] delete_channel: no stack [ 162.327653][ T6855] delete_channel: no stack [ 162.516232][ T6867] netlink: 'syz.3.277': attribute type 33 has an invalid length. [ 162.541351][ T6867] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.277'. [ 163.504744][ T6880] netlink: 14 bytes leftover after parsing attributes in process `syz.0.281'. [ 163.565997][ T6888] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.282'. [ 163.649521][ T6880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.691633][ T6880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.720115][ T6880] bond0 (unregistering): Released all slaves [ 163.749495][ T6887] netlink: 10 bytes leftover after parsing attributes in process `syz.3.283'. [ 163.817790][ T6888] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.282'. [ 164.342764][ T6909] netlink: 'syz.0.290': attribute type 21 has an invalid length. [ 164.354432][ T6909] netlink: 128 bytes leftover after parsing attributes in process `syz.0.290'. [ 164.376840][ T6909] netlink: 'syz.0.290': attribute type 4 has an invalid length. [ 164.399477][ T6909] netlink: 'syz.0.290': attribute type 3 has an invalid length. [ 166.157326][ T6954] netlink: 'syz.3.302': attribute type 3 has an invalid length. [ 166.488763][ T6957] __nla_validate_parse: 4 callbacks suppressed [ 166.488785][ T6957] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.304'. [ 166.549984][ T6957] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.304'. [ 168.733599][ T6970] netlink: 'syz.3.309': attribute type 41 has an invalid length. [ 169.617853][ T6994] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 169.662520][ T6994] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.312'. [ 169.709637][ T6994] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 170.327618][ T7006] netlink: 64799 bytes leftover after parsing attributes in process `syz.1.316'. [ 170.367118][ T7007] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.315'. [ 170.588602][ T7007] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.315'. [ 171.668837][ T7019] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.320'. [ 171.714094][ T7019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.320'. [ 173.442683][ T7035] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 173.755018][ T7052] netlink: 'syz.3.327': attribute type 10 has an invalid length. [ 173.810346][ T7052] macvlan0: entered promiscuous mode [ 173.815764][ T7052] macvlan0: entered allmulticast mode [ 173.854424][ T7050] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.328'. [ 173.869646][ T7052] veth1_vlan: entered allmulticast mode [ 173.907580][ T7052] team0: Port device macvlan0 added [ 173.992721][ T7050] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.328'. [ 174.515889][ T7078] netlink: 'syz.3.334': attribute type 10 has an invalid length. [ 174.541471][ T7078] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.334'. [ 174.939025][ T7086] netlink: 'syz.3.336': attribute type 10 has an invalid length. [ 174.947173][ T7086] netlink: 2 bytes leftover after parsing attributes in process `syz.3.336'. [ 174.957269][ T7086] hsr0: entered promiscuous mode [ 174.967111][ T7086] bridge0: port 4(hsr0) entered blocking state [ 174.974434][ T7086] bridge0: port 4(hsr0) entered disabled state [ 174.986061][ T7086] hsr0: entered allmulticast mode [ 175.013167][ T7086] hsr_slave_0: entered allmulticast mode [ 175.034253][ T7086] hsr_slave_1: entered allmulticast mode [ 175.060996][ T7086] bridge0: port 4(hsr0) entered blocking state [ 175.067400][ T7086] bridge0: port 4(hsr0) entered forwarding state [ 176.480781][ T7121] netlink: 156 bytes leftover after parsing attributes in process `syz.3.346'. [ 176.794470][ T7125] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.349'. [ 176.822467][ T7125] netlink: 'syz.2.349': attribute type 2 has an invalid length. [ 177.155716][ T7131] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.350'. [ 177.179469][ T7131] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.350'. [ 177.576882][ T7146] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 178.035130][ T7161] syzkaller0: entered promiscuous mode [ 178.047444][ T7161] syzkaller0: entered allmulticast mode [ 178.465654][ T7173] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.363'. [ 178.636714][ T7168] netlink: 'syz.2.362': attribute type 10 has an invalid length. [ 178.648750][ T7168] netlink: 152 bytes leftover after parsing attributes in process `syz.2.362'. [ 178.663579][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 178.673548][ T7176] netlink: 'syz.0.364': attribute type 2 has an invalid length. [ 178.689363][ T7173] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.363'. [ 179.055578][ T7186] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 179.222616][ T7186] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 179.718269][ T7203] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.456828][ T7210] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.376'. [ 180.523231][ T7210] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.376'. [ 180.983618][ T7224] netlink: 152 bytes leftover after parsing attributes in process `syz.1.379'. [ 181.145001][ T7223] netlink: 'syz.1.379': attribute type 10 has an invalid length. [ 183.204136][ T7245] syzkaller0: entered promiscuous mode [ 183.223392][ T7245] syzkaller0: entered allmulticast mode [ 183.517161][ T7257] __nla_validate_parse: 1 callbacks suppressed [ 183.517180][ T7257] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.388'. [ 183.556597][ T7257] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.388'. [ 184.574594][ T7276] netlink: 156 bytes leftover after parsing attributes in process `syz.1.392'. [ 184.636791][ T7270] delete_channel: no stack [ 186.985555][ T7305] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.399'. [ 187.002188][ T7305] openvswitch: netlink: Duplicate key (type 0). [ 187.161354][ T7311] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.401'. [ 187.190548][ T7312] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.400'. [ 187.234363][ T7312] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.400'. [ 187.647684][ T7319] netlink: 'syz.1.403': attribute type 10 has an invalid length. [ 187.670454][ T7319] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 187.682000][ T7324] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.404'. [ 187.815894][ T7319] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 187.850262][ T7319] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 187.892002][ T7319] team0: Port device wlan1 added [ 188.693314][ T7359] netlink: 'syz.3.408': attribute type 10 has an invalid length. [ 188.730809][ T7359] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.408'. [ 188.863653][ T7359] netlink: 'syz.3.408': attribute type 9 has an invalid length. [ 188.940006][ T7359] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.408'. [ 189.059235][ T7361] netlink: 152 bytes leftover after parsing attributes in process `syz.2.409'. [ 189.250973][ T7343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 189.260172][ T7343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 189.569569][ T7358] netlink: 'syz.2.409': attribute type 10 has an invalid length. [ 189.646164][ T7358] netlink: 152 bytes leftover after parsing attributes in process `syz.2.409'. [ 189.823838][ T7343] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.407'. [ 190.511461][ T7382] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.412'. [ 190.524338][ T7382] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.412'. [ 191.358269][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 191.374661][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 192.084562][ T7413] netlink: 152 bytes leftover after parsing attributes in process `syz.3.420'. [ 192.302444][ T7413] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 192.935537][ T7434] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 192.942478][ T7434] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.860417][ T7442] netlink: 'syz.1.426': attribute type 10 has an invalid length. [ 194.219681][ T7442] wg1: entered promiscuous mode [ 194.236471][ T7442] wg1: entered allmulticast mode [ 194.253004][ T7442] team0: Device wg1 is of different type [ 194.626897][ T7442] syz.1.426 (7442) used greatest stack depth: 19176 bytes left [ 194.679317][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.686278][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.743255][ T7431] __nla_validate_parse: 2 callbacks suppressed [ 194.743278][ T7431] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.423'. [ 195.030360][ T7431] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 195.558194][ T7469] netlink: 152 bytes leftover after parsing attributes in process `syz.2.434'. [ 195.796788][ T7466] netlink: 'syz.2.434': attribute type 10 has an invalid length. [ 195.850092][ T7466] netlink: 152 bytes leftover after parsing attributes in process `syz.2.434'. [ 196.231535][ T7480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.436'. [ 196.271447][ T7480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.436'. [ 196.536519][ T7474] netlink: 60 bytes leftover after parsing attributes in process `syz.1.436'. [ 196.586724][ T7475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.436'. [ 196.681773][ T7489] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.440'. [ 196.744287][ T7489] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 196.846695][ T7491] netlink: 'syz.3.441': attribute type 21 has an invalid length. [ 196.878151][ T7491] netlink: 168 bytes leftover after parsing attributes in process `syz.3.441'. [ 197.124306][ T7506] netlink: 'syz.3.446': attribute type 10 has an invalid length. [ 197.146723][ T7506] netlink: 152 bytes leftover after parsing attributes in process `syz.3.446'. [ 197.267372][ T7510] netlink: 'syz.0.444': attribute type 25 has an invalid length. [ 197.298965][ T7510] netlink: 'syz.0.444': attribute type 28 has an invalid length. [ 198.022508][ T7535] netlink: 'syz.1.455': attribute type 21 has an invalid length. [ 198.386162][ T7538] netlink: 'syz.3.456': attribute type 10 has an invalid length. [ 198.535844][ T7538] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 198.555551][ T7538] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 198.643605][ T7538] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 198.670465][ T7538] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 198.696190][ T7538] team0: Port device wlan1 added [ 198.723573][ T7550] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 198.844119][ T7550] team0: Device wg1 is of different type [ 198.973041][ T7538] syz.3.456 (7538) used greatest stack depth: 18792 bytes left [ 199.135747][ T7562] netlink: 'syz.1.461': attribute type 41 has an invalid length. [ 199.551369][ T7568] netlink: 'syz.1.465': attribute type 10 has an invalid length. [ 199.563829][ T7568] hsr0: entered promiscuous mode [ 199.571194][ T7568] bridge0: port 4(hsr0) entered blocking state [ 199.577968][ T7568] bridge0: port 4(hsr0) entered disabled state [ 199.586917][ T7568] hsr0: entered allmulticast mode [ 199.593041][ T7568] hsr_slave_0: entered allmulticast mode [ 199.599437][ T7568] hsr_slave_1: entered allmulticast mode [ 199.608781][ T7568] bridge0: port 4(hsr0) entered blocking state [ 199.615145][ T7568] bridge0: port 4(hsr0) entered forwarding state [ 200.337868][ T7588] netlink: 'syz.1.470': attribute type 2 has an invalid length. [ 200.338118][ T7589] __nla_validate_parse: 8 callbacks suppressed [ 200.338160][ T7589] netlink: 60 bytes leftover after parsing attributes in process `syz.3.467'. [ 200.363260][ T7588] netlink: 'syz.1.470': attribute type 8 has an invalid length. [ 200.379025][ T7588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.470'. [ 200.403573][ T7589] netlink: 60 bytes leftover after parsing attributes in process `syz.3.467'. [ 200.443017][ T7587] netlink: 132 bytes leftover after parsing attributes in process `syz.1.470'. [ 200.467383][ T7582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.467'. [ 200.519282][ T7583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.467'. [ 200.901856][ T7601] netlink: 'syz.2.473': attribute type 10 has an invalid length. [ 201.020368][ T7601] wg1: entered promiscuous mode [ 201.027146][ T7601] wg1: entered allmulticast mode [ 201.034924][ T7601] team0: Device wg1 is of different type [ 201.146969][ T7609] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.476'. [ 201.364931][ T7609] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 202.424848][ T7646] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 202.433308][ T7646] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.493'. [ 202.617744][ T7652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.486'. [ 202.641487][ T7652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.486'. [ 204.080296][ T7668] netlink: 'syz.3.490': attribute type 10 has an invalid length. [ 204.455694][ T7695] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 204.915052][ C0] hsr0: VLAN not yet supported [ 205.041499][ T7719] netlink: 'syz.0.506': attribute type 4 has an invalid length. [ 205.288909][ T7721] netlink: 'syz.1.507': attribute type 9 has an invalid length. [ 205.851406][ T7728] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 205.879302][ T7728] __nla_validate_parse: 11 callbacks suppressed [ 205.879559][ T7728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.510'. [ 206.041354][ T7741] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 206.061268][ T7741] netlink: 'syz.1.511': attribute type 3 has an invalid length. [ 206.090884][ T7741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.511'. [ 206.503109][ T7755] netlink: 152 bytes leftover after parsing attributes in process `syz.1.518'. [ 206.614619][ T7755] netlink: 152 bytes leftover after parsing attributes in process `syz.1.518'. [ 206.699845][ T7760] netlink: 'syz.0.520': attribute type 6 has an invalid length. [ 206.707918][ T7760] netlink: 168 bytes leftover after parsing attributes in process `syz.0.520'. [ 207.128588][ T7776] netlink: 'syz.0.525': attribute type 4 has an invalid length. [ 207.139065][ T7776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.525'. [ 207.245346][ T7779] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP) [ 207.633797][ T7784] netlink: 'syz.3.527': attribute type 10 has an invalid length. [ 207.674162][ T7784] bridge0: port 3(team0) entered disabled state [ 207.763971][ T7784] bridge0: port 3(team0) entered disabled state [ 207.808209][ T7784] team_slave_0: left promiscuous mode [ 207.815938][ T7783] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.528'. [ 207.829559][ T7784] team_slave_0: left allmulticast mode [ 207.877767][ T7784] team0 (unregistering): Port device team_slave_0 removed [ 207.920379][ T7784] : left promiscuous mode [ 207.925104][ T7784] : left allmulticast mode [ 207.946525][ T7784] team0 (unregistering): Port device 0 removed [ 207.964473][ T7784] veth1_vlan: left allmulticast mode [ 207.984171][ T7784] team0 (unregistering): Port device macvlan0 removed [ 208.002478][ T7784] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 208.009877][ T7784] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 208.031222][ T7784] team0 (unregistering): Port device wlan1 removed [ 208.055114][ T7781] netlink: 'syz.3.527': attribute type 10 has an invalid length. [ 208.064961][ T7781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.527'. [ 208.083758][ T7781] batman_adv: batadv0: Adding interface: veth0_vlan [ 208.091609][ T7781] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.122301][ T7781] batman_adv: batadv0: Interface activated: veth0_vlan [ 208.138467][ T7783] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.528'. [ 208.169997][ T7793] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.531'. [ 210.126738][ T7865] validate_nla: 4 callbacks suppressed [ 210.126757][ T7865] netlink: 'syz.2.547': attribute type 21 has an invalid length. [ 210.471344][ T7870] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 210.515210][ T7870] netlink: 'syz.3.549': attribute type 4 has an invalid length. [ 211.243112][ T7893] __nla_validate_parse: 8 callbacks suppressed [ 211.243135][ T7893] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.553'. [ 211.830165][ T7894] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 211.908711][ T7894] netlink: 2 bytes leftover after parsing attributes in process `syz.0.548'. [ 211.987520][ T7894] hsr0: entered promiscuous mode [ 212.103693][ T7894] bridge0: port 3(hsr0) entered blocking state [ 212.113849][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 212.119852][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 212.120335][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 212.126942][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 212.219036][ T7894] bridge0: port 3(hsr0) entered disabled state [ 212.360365][ T7894] hsr0: entered allmulticast mode [ 212.382736][ T7894] hsr_slave_0: entered allmulticast mode [ 212.486213][ T7894] hsr_slave_1: entered allmulticast mode [ 212.523942][ T7913] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.555'. [ 212.536761][ T7894] bridge0: port 3(hsr0) entered blocking state [ 212.543406][ T7894] bridge0: port 3(hsr0) entered forwarding state [ 212.626191][ T7913] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.555'. [ 212.871446][ T7836] delete_channel: no stack [ 213.432795][ T7932] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.560'. [ 213.463778][ T7937] netlink: 'syz.2.560': attribute type 2 has an invalid length. [ 213.489819][ T7937] netlink: 'syz.2.560': attribute type 8 has an invalid length. [ 213.497768][ T7937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.560'. [ 214.125634][ T7942] netlink: 'syz.3.561': attribute type 21 has an invalid length. [ 214.594818][ T7951] netlink: 60 bytes leftover after parsing attributes in process `syz.3.564'. [ 214.926551][ T7961] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.565'. [ 214.961859][ T7961] bridge_slave_1: default FDB implementation only supports local addresses [ 215.260699][ T7969] syzkaller0: entered promiscuous mode [ 215.267209][ T7967] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.566'. [ 215.288844][ T7969] syzkaller0: entered allmulticast mode [ 216.569006][ T7967] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.566'. [ 217.880162][ T7986] ªªªªª»: renamed from veth1_vlan (while UP) [ 218.961048][ T8000] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.578'. [ 219.622050][ T7992] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.575'. [ 219.643964][ T7992] bridge_slave_1: default FDB implementation only supports local addresses [ 219.656798][ T8000] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.578'. [ 220.060213][ T8010] netlink: 'syz.3.581': attribute type 1 has an invalid length. [ 220.091323][ T8010] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.581'. [ 220.564403][ T8022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.585'. [ 220.595784][ T8022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.585'. [ 220.629669][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.585'. [ 220.844864][ T8026] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.585'. [ 222.134179][ T8047] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.589'. [ 222.178863][ T8047] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.589'. [ 222.295694][ T8050] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.592'. [ 222.317127][ T8050] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 222.479561][ T8056] netlink: 'syz.1.594': attribute type 21 has an invalid length. [ 222.488304][ T8056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.594'. [ 226.195066][ T8124] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 226.259815][ T8124] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.611'. [ 228.319367][ T8136] netlink: 'syz.1.616': attribute type 9 has an invalid length. [ 228.514905][ T8139] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 228.588814][ T8139] netlink: 168 bytes leftover after parsing attributes in process `syz.2.615'. [ 228.989660][ T8159] netlink: 14 bytes leftover after parsing attributes in process `syz.1.616'. [ 229.032377][ T8159] netlink: del zone limit has 4 unknown bytes [ 230.999678][ T5784] Bluetooth: hci3: ISO packet for unknown connection handle 35 [ 232.533978][ T8208] netlink: 60 bytes leftover after parsing attributes in process `syz.3.633'. [ 234.441594][ T8232] bridge0: entered promiscuous mode [ 234.470130][ T8232] bridge0: entered allmulticast mode [ 236.030992][ T8257] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.644'. [ 236.240359][ T8257] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.644'. [ 240.768750][ T8280] netlink: 'syz.2.651': attribute type 19 has an invalid length. [ 240.776627][ T8280] netlink: 156 bytes leftover after parsing attributes in process `syz.2.651'. [ 241.330656][ T8297] Ÿë: port 1(gretap0) entered blocking state [ 241.365961][ T8297] Ÿë: port 1(gretap0) entered disabled state [ 241.401977][ T8297] gretap0: entered allmulticast mode [ 241.439954][ T8297] gretap0: entered promiscuous mode [ 241.500083][ T8295] Ÿë: port 2(veth0_to_team) entered blocking state [ 241.537367][ T8295] Ÿë: port 2(veth0_to_team) entered disabled state [ 241.562522][ T8295] veth0_to_team: entered allmulticast mode [ 241.617120][ T8295] veth0_to_team: entered promiscuous mode [ 242.351574][ T8304] netlink: 'syz.3.658': attribute type 9 has an invalid length. [ 242.711386][ T8304] netlink: 14 bytes leftover after parsing attributes in process `syz.3.658'. [ 242.826868][ T8304] netlink: del zone limit has 4 unknown bytes [ 244.417221][ T8343] Ÿë: port 1(veth0_to_team) entered blocking state [ 244.425686][ T8343] Ÿë: port 1(veth0_to_team) entered disabled state [ 244.440471][ T8343] veth0_to_team: entered allmulticast mode [ 244.482522][ T8343] veth0_to_team: entered promiscuous mode [ 246.474911][ T8368] netlink: 'syz.2.674': attribute type 9 has an invalid length. [ 246.941288][ T8372] syzkaller0: entered promiscuous mode [ 246.978933][ T8372] syzkaller0: entered allmulticast mode [ 247.184490][ T8377] bridge0: port 4(hsr0) entered disabled state [ 247.197036][ T8377] bridge0: port 3(team0) entered disabled state [ 247.216947][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.231712][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.305247][ T8377] bridge0: entered allmulticast mode [ 250.311105][ T8393] Ÿë: port 1(veth0_to_team) entered blocking state [ 250.319453][ T8393] Ÿë: port 1(veth0_to_team) entered disabled state [ 250.326257][ T8393] veth0_to_team: entered allmulticast mode [ 250.333487][ T8393] veth0_to_team: entered promiscuous mode [ 250.658893][ T8400] netlink: 'syz.3.682': attribute type 2 has an invalid length. [ 250.672160][ T8400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.682'. [ 252.010467][ T8414] raw_sendmsg: syz.3.685 forgot to set AF_INET. Fix it! [ 253.814643][ T8424] syzkaller0: entered promiscuous mode [ 253.828750][ T8424] syzkaller0: entered allmulticast mode [ 256.115687][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.130707][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.968918][ T8452] netlink: 14 bytes leftover after parsing attributes in process `syz.0.692'. [ 257.303479][ T8462] C: renamed from team_slave_0 (while UP) [ 257.314585][ T8462] netlink: 'syz.1.693': attribute type 3 has an invalid length. [ 257.328845][ T8462] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 257.352822][ T8462] netlink: 116 bytes leftover after parsing attributes in process `syz.1.693'. [ 257.379593][ T8462] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 259.614563][ T8484] netlink: 'syz.3.702': attribute type 10 has an invalid length. [ 259.668243][ T8486] netlink: 'syz.3.702': attribute type 9 has an invalid length. [ 259.734079][ T8486] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.702'. [ 260.498287][ T8487] netlink: 'syz.3.702': attribute type 9 has an invalid length. [ 260.523178][ T8487] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.702'. [ 260.860724][ T8511] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 260.874474][ T8511] netlink: 152 bytes leftover after parsing attributes in process `syz.0.708'. [ 260.895342][ T8513] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.709'. [ 261.876475][ T8546] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 261.908861][ T8546] netlink: 152 bytes leftover after parsing attributes in process `syz.3.718'. [ 263.039860][ T8558] bridge0: port 4(hsr0) entered disabled state [ 263.056853][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.084939][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.186186][ T8558] bridge0: left promiscuous mode [ 263.676700][ T8575] netlink: 'syz.2.726': attribute type 1 has an invalid length. [ 263.695327][ T8575] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.726'. [ 264.251199][ T8583] C: renamed from team_slave_0 (while UP) [ 265.723242][ T8583] netlink: 'syz.2.727': attribute type 3 has an invalid length. [ 265.739015][ T8583] netlink: 'syz.2.727': attribute type 1 has an invalid length. [ 265.746967][ T8583] netlink: 116 bytes leftover after parsing attributes in process `syz.2.727'. [ 265.788783][ T8583] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 265.974242][ T8597] netlink: 'syz.0.730': attribute type 10 has an invalid length. [ 266.008428][ T8597] netlink: 152 bytes leftover after parsing attributes in process `syz.0.730'. [ 266.557559][ T8622] netlink: 'syz.0.737': attribute type 1 has an invalid length. [ 266.582163][ T8622] netlink: 'syz.0.737': attribute type 10 has an invalid length. [ 266.610440][ T8622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.737'. [ 266.649502][ T8622] veth0_vlan: entered allmulticast mode [ 266.660598][ T8622] bridge0: port 4(veth0_vlan) entered blocking state [ 266.689791][ T8622] bridge0: port 4(veth0_vlan) entered disabled state [ 266.722998][ T8622] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 267.195082][ T8638] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 267.206375][ T8638] netlink: 152 bytes leftover after parsing attributes in process `syz.2.743'. [ 267.289335][ T8643] netlink: 'syz.3.742': attribute type 9 has an invalid length. [ 268.326802][ T8645] syzkaller0: entered promiscuous mode [ 268.333640][ T8645] syzkaller0: entered allmulticast mode [ 268.371268][ T8658] IPv6: Can't replace route, no match found [ 269.061697][ T8663] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 269.593643][ T8676] netlink: 'syz.1.753': attribute type 3 has an invalid length. [ 269.602443][ T8676] netlink: 'syz.1.753': attribute type 6 has an invalid length. [ 269.614491][ T8676] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.753'. [ 269.641733][ T8676] delete_channel: no stack [ 269.647573][ T8676] delete_channel: no stack [ 269.749409][ T8679] netlink: 'syz.2.752': attribute type 10 has an invalid length. [ 269.774755][ T8679] netlink: 152 bytes leftover after parsing attributes in process `syz.2.752'. [ 270.807545][ T8690] delete_channel: no stack [ 273.072497][ T8708] netlink: 14 bytes leftover after parsing attributes in process `syz.0.760'. [ 273.220961][ T8708] netlink: get zone limit has 4 unknown bytes [ 273.276646][ T8708] netlink: 128 bytes leftover after parsing attributes in process `syz.0.760'. [ 273.299012][ T8708] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 274.341152][ T8724] netlink: 'syz.2.764': attribute type 10 has an invalid length. [ 274.354887][ T8724] netlink: 152 bytes leftover after parsing attributes in process `syz.2.764'. [ 274.665032][ T8731] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 275.297961][ T8751] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 275.316556][ T8751] netlink: 152 bytes leftover after parsing attributes in process `syz.3.774'. [ 276.311220][ T8757] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 276.337053][ T8763] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 276.357762][ T8763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.778'. [ 276.410706][ T8763] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 276.483442][ T8763] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 277.112804][ T7342] tipc: Subscription rejected, illegal request [ 277.318989][ T8786] netlink: 'syz.0.785': attribute type 10 has an invalid length. [ 277.351307][ T8786] netlink: 152 bytes leftover after parsing attributes in process `syz.0.785'. [ 278.096652][ T8804] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 278.865572][ T8825] netlink: 'syz.0.796': attribute type 10 has an invalid length. [ 278.896313][ T8825] netlink: 152 bytes leftover after parsing attributes in process `syz.0.796'. [ 280.672297][ T8856] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.803'. [ 280.962317][ T8865] netlink: 140 bytes leftover after parsing attributes in process `syz.1.805'. [ 280.982130][ T8865] netlink: 10 bytes leftover after parsing attributes in process `syz.1.805'. [ 281.021855][ T8865] bond0: (slave bond_slave_0): Releasing backup interface [ 281.051996][ T8865] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 281.186897][ T8882] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.809'. [ 281.511614][ T8893] netlink: 'syz.2.813': attribute type 11 has an invalid length. [ 281.538731][ T8893] netlink: 212788 bytes leftover after parsing attributes in process `syz.2.813'. [ 281.812679][ T8905] netlink: 'syz.0.816': attribute type 10 has an invalid length. [ 281.838987][ T8905] netlink: 152 bytes leftover after parsing attributes in process `syz.0.816'. [ 281.893782][ T8913] netlink: 'syz.2.818': attribute type 2 has an invalid length. [ 281.913159][ T8913] netlink: 14 bytes leftover after parsing attributes in process `syz.2.818'. [ 282.182983][ T8917] netlink: 'syz.0.819': attribute type 17 has an invalid length. [ 282.503412][ T8924] syzkaller0: entered promiscuous mode [ 285.089565][ T8947] netlink: 'syz.2.827': attribute type 10 has an invalid length. [ 285.100289][ T8947] netlink: 152 bytes leftover after parsing attributes in process `syz.2.827'. [ 285.223711][ T8950] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 285.232797][ T8952] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.830'. [ 285.259101][ T8952] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 285.722347][ T8969] hsr0: left allmulticast mode [ 285.738999][ T8969] hsr_slave_0: left allmulticast mode [ 285.748285][ T8969] hsr_slave_1: left allmulticast mode [ 285.767569][ T8969] bridge0: port 3(hsr0) entered disabled state [ 285.830455][ T8969] bridge_slave_1: left allmulticast mode [ 285.837521][ T8969] bridge_slave_1: left promiscuous mode [ 285.859042][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.900280][ T8969] bridge_slave_0: left allmulticast mode [ 285.906034][ T8969] bridge_slave_0: left promiscuous mode [ 285.929154][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.660016][ T8984] netlink: 'syz.0.838': attribute type 10 has an invalid length. [ 286.686832][ T8984] netlink: 152 bytes leftover after parsing attributes in process `syz.0.838'. [ 286.977589][ T8991] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.841'. [ 287.831862][ T9025] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 287.859198][ T9025] netlink: 152 bytes leftover after parsing attributes in process `syz.3.849'. [ 288.519552][ T9051] netlink: 'syz.1.855': attribute type 2 has an invalid length. [ 288.660405][ T9049] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.856'. [ 288.835364][ T9058] syzkaller0: entered promiscuous mode [ 288.861744][ T9058] syzkaller0: entered allmulticast mode [ 291.216538][ T9064] netlink: 'syz.0.859': attribute type 10 has an invalid length. [ 291.224962][ T9064] netlink: 152 bytes leftover after parsing attributes in process `syz.0.859'. [ 291.234554][ T9072] netlink: 152 bytes leftover after parsing attributes in process `syz.3.862'. [ 291.247484][ T9072] tc_dump_action: action bad kind [ 291.575847][ T9085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.603212][ T9089] netlink: 'syz.1.867': attribute type 16 has an invalid length. [ 291.623389][ T9089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.867'. [ 291.662800][ T9089] veth1_macvtap: entered allmulticast mode [ 291.693085][ T9091] netlink: 'syz.0.866': attribute type 10 has an invalid length. [ 291.719764][ T9091] syz_tun: entered promiscuous mode [ 291.751485][ T9092] netlink: 'syz.1.867': attribute type 10 has an invalid length. [ 291.810711][ T9092] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.867'. [ 292.642352][ T9103] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.870'. [ 293.399658][ T9111] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 293.419808][ T9111] netlink: 152 bytes leftover after parsing attributes in process `syz.1.873'. [ 294.679026][ T9128] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 294.737606][ T9128] team0: Device ipvlan1 failed to register rx_handler [ 296.341207][ T9156] netlink: 'syz.0.884': attribute type 10 has an invalid length. [ 296.591832][ T9156] netlink: 152 bytes leftover after parsing attributes in process `syz.0.884'. [ 298.938624][ T9179] veth0_vlan: entered allmulticast mode [ 299.981601][ T9190] netlink: 'syz.2.894': attribute type 2 has an invalid length. [ 300.019157][ T9190] netlink: 'syz.2.894': attribute type 1 has an invalid length. [ 300.027013][ T9190] netlink: 9 bytes leftover after parsing attributes in process `syz.2.894'. [ 300.205983][ T9197] netlink: 'syz.1.896': attribute type 10 has an invalid length. [ 300.225305][ T9197] netlink: 152 bytes leftover after parsing attributes in process `syz.1.896'. [ 300.385762][ T9195] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.893'. [ 300.629140][ T9201] netlink: 'syz.2.897': attribute type 13 has an invalid length. [ 300.719657][ T9201] netlink: 160 bytes leftover after parsing attributes in process `syz.2.897'. [ 301.007013][ T9201] erspan0: refused to change device tx_queue_len [ 301.019101][ T9201] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 301.602256][ T9210] netlink: 'syz.1.899': attribute type 2 has an invalid length. [ 301.616011][ T9210] netlink: 'syz.1.899': attribute type 8 has an invalid length. [ 301.708927][ T9210] netlink: 132 bytes leftover after parsing attributes in process `syz.1.899'. [ 303.276461][ T9233] netlink: 'syz.2.904': attribute type 21 has an invalid length. [ 303.295164][ T9233] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.488380][ T9245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.909'. [ 304.521829][ T9245] sock: sock_timestamping_bind_phc: sock not bind to device [ 304.912470][ T9255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.491315][ T9270] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.912'. [ 306.698099][ T9271] delete_channel: no stack [ 306.782163][ T9271] delete_channel: no stack [ 308.871684][ T9278] netlink: 'syz.2.916': attribute type 10 has an invalid length. [ 308.953493][ T9278] netlink: 2 bytes leftover after parsing attributes in process `syz.2.916'. [ 308.976383][ T9278] hsr0: entered promiscuous mode [ 309.006812][ T9278] bridge0: port 4(hsr0) entered blocking state [ 309.033925][ T9278] bridge0: port 4(hsr0) entered disabled state [ 309.058571][ T9278] hsr0: entered allmulticast mode [ 309.068339][ T9278] hsr_slave_0: entered allmulticast mode [ 309.102238][ T9278] hsr_slave_1: entered allmulticast mode [ 309.126950][ T9278] bridge0: port 4(hsr0) entered blocking state [ 309.133378][ T9278] bridge0: port 4(hsr0) entered forwarding state [ 309.491277][ T9298] netlink: 'syz.3.922': attribute type 9 has an invalid length. [ 309.516434][ T9298] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.922'. [ 311.277031][ T9327] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 311.287935][ T9327] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.932'. [ 311.361444][ T9331] netlink: 'syz.1.934': attribute type 153 has an invalid length. [ 311.378803][ T9331] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 311.386491][ T9331] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.934'. [ 312.032586][ T9358] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.942'. [ 312.307933][ T9368] netlink: 14 bytes leftover after parsing attributes in process `syz.0.947'. [ 312.766522][ T9385] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.953'. [ 313.018233][ T9398] netlink: 'syz.1.957': attribute type 3 has an invalid length. [ 313.029863][ T9397] netlink: 'syz.1.957': attribute type 3 has an invalid length. [ 313.037972][ T9397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.957'. [ 313.047897][ T9398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.957'. [ 313.223404][ T9402] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.959'. [ 313.562642][ T9412] netlink: 'syz.1.962': attribute type 4 has an invalid length. [ 313.585246][ T9412] netlink: 152 bytes leftover after parsing attributes in process `syz.1.962'. [ 313.812060][ T9412] .`: renamed from bond0 (while UP) [ 316.098520][ T9428] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.965'. [ 316.535373][ T9429] netlink: 176 bytes leftover after parsing attributes in process `syz.2.965'. [ 317.514641][ T9463] netlink: 'syz.0.972': attribute type 39 has an invalid length. [ 317.553950][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.560665][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.670686][ T9468] netlink: 14 bytes leftover after parsing attributes in process `syz.3.974'. [ 317.691401][ T9468] netlink: get zone limit has 4 unknown bytes [ 317.734339][ T9472] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.976'. [ 317.866866][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 317.947768][ T9483] netlink: 'syz.3.979': attribute type 21 has an invalid length. [ 318.011139][ T9477] IPv6: pim6reg1: Disabled Multicast RS [ 318.020271][ T9487] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.980'. [ 318.164287][ T9491] netlink: 'syz.0.982': attribute type 21 has an invalid length. [ 318.345034][ T9491] Ÿë: port 2(ip6gretap0) entered blocking state [ 318.352465][ T9491] Ÿë: port 2(ip6gretap0) entered disabled state [ 318.361807][ T9491] ip6gretap0: entered allmulticast mode [ 318.373021][ T9491] ip6gretap0: entered promiscuous mode [ 318.465482][ T9504] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.985'. [ 318.513662][ T9506] netlink: 'syz.1.986': attribute type 3 has an invalid length. [ 318.544174][ T9506] netlink: 16795 bytes leftover after parsing attributes in process `syz.1.986'. [ 318.757379][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 318.788210][ T9516] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.989'. [ 318.802283][ T9520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.987'. [ 318.819155][ T9516] openvswitch: netlink: Flow key attribute not present in set flow. [ 319.101665][ T9524] netlink: 'syz.2.990': attribute type 2 has an invalid length. [ 319.179062][ T9524] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.990'. [ 320.000317][ T9541] netlink: 'syz.1.995': attribute type 2 has an invalid length. [ 320.321481][ T9542] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 324.892658][ T9586] __nla_validate_parse: 23 callbacks suppressed [ 324.892676][ T9586] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.1006'. [ 325.178415][ T9598] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1009'. [ 325.595845][ T9599] netlink: 'syz.1.1010': attribute type 21 has an invalid length. [ 325.941059][ T9604] netlink: 'syz.2.1011': attribute type 9 has an invalid length. [ 325.952403][ T9604] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1011'. [ 326.830633][ T9628] delete_channel: no stack [ 327.071620][ T9636] hsr0: left allmulticast mode [ 327.076469][ T9636] hsr_slave_0: left allmulticast mode [ 327.095847][ T9636] hsr_slave_1: left allmulticast mode [ 327.103009][ T9636] bridge0: port 4(hsr0) entered disabled state [ 327.125586][ T9636] bridge_slave_1: left allmulticast mode [ 327.131602][ T9636] bridge_slave_1: left promiscuous mode [ 327.137662][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.165441][ T9636] bridge_slave_0: left allmulticast mode [ 327.175182][ T9636] bridge_slave_0: left promiscuous mode [ 327.187890][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.893601][ T9661] netlink: 'syz.0.1031': attribute type 2 has an invalid length. [ 327.926371][ T9661] netlink: 'syz.0.1031': attribute type 8 has an invalid length. [ 327.960584][ T9661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1031'. [ 328.703042][ T9660] delete_channel: no stack [ 329.656145][ T9713] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 329.694835][ T9713] netlink: 'syz.2.1045': attribute type 29 has an invalid length. [ 329.962712][ T9716] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1044'. [ 332.299749][ T9755] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1054'. [ 332.327591][ T9755] netlink: zone id is out of range [ 332.342561][ T9755] netlink: zone id is out of range [ 332.358952][ T9755] netlink: zone id is out of range [ 332.364304][ T9755] netlink: zone id is out of range [ 332.374820][ T9755] netlink: zone id is out of range [ 332.384969][ T9755] netlink: zone id is out of range [ 332.398024][ T9755] netlink: zone id is out of range [ 332.408198][ T9755] netlink: zone id is out of range [ 332.419263][ T9759] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1055'. [ 332.430908][ T9755] netlink: zone id is out of range [ 332.448766][ T9755] netlink: zone id is out of range [ 332.458020][ T9755] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1054'. [ 332.484712][ T9755] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1054'. [ 332.535464][ T9755] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1054'. [ 332.599673][ T9755] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1054'. [ 332.662635][ T9755] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1054'. [ 332.712384][ T9755] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1054'. [ 332.743437][ T9755] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1054'. [ 332.945457][ T9769] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 333.360959][ T9784] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 333.381800][ T9784] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 334.129654][ T9802] netlink: 'syz.1.1070': attribute type 3 has an invalid length. [ 334.365926][ T9806] netlink: 'syz.1.1071': attribute type 19 has an invalid length. [ 335.099733][ T7345] tipc: Subscription rejected, illegal request [ 335.289075][ T9837] __nla_validate_parse: 36 callbacks suppressed [ 335.289098][ T9837] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1082'. [ 335.330140][ T9837] hsr_slave_0: left promiscuous mode [ 335.369549][ T9837] hsr_slave_1: left promiscuous mode [ 335.507490][ T9837] hsr0 (unregistering): left allmulticast mode [ 335.519920][ T9837] bridge0: port 4(hsr0) entered disabled state [ 335.802833][ T9846] syzkaller0: entered promiscuous mode [ 335.808401][ T9846] syzkaller0: entered allmulticast mode [ 335.846557][ T9860] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1086'. [ 335.998149][ T9867] netlink: 'syz.1.1088': attribute type 2 has an invalid length. [ 336.013686][ T9867] netlink: 'syz.1.1088': attribute type 8 has an invalid length. [ 336.024993][ T9867] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1088'. [ 336.056509][ T9871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1088'. [ 336.221522][ T9876] netlink: 'syz.1.1090': attribute type 9 has an invalid length. [ 336.269784][ T9876] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1090'. [ 339.166374][ T9885] netlink: 'syz.1.1090': attribute type 9 has an invalid length. [ 339.178921][ T9885] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1090'. [ 339.463070][ T9911] hsr0: left allmulticast mode [ 339.478871][ T9911] hsr_slave_0: left allmulticast mode [ 339.485412][ T9911] hsr_slave_1: left allmulticast mode [ 339.505501][ T9911] bridge0: port 4(hsr0) entered disabled state [ 339.613337][ T9911] bridge0: port 3(team0) entered disabled state [ 339.725256][ T9911] bridge_slave_1: left allmulticast mode [ 339.739138][ T9911] bridge_slave_1: left promiscuous mode [ 339.763317][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.903202][ T9911] bridge_slave_0: left allmulticast mode [ 339.919513][ T9911] bridge_slave_0: left promiscuous mode [ 339.978215][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.391498][ T9923] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1102'. [ 340.484347][ T9922] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 340.684714][ T9927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1103'. [ 340.713140][ T9927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1103'. [ 340.739888][ T9927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1103'. [ 340.771972][ T9929] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1104'. [ 340.826474][ T9929] .`: entered allmulticast mode [ 340.909360][ T9929] bond_slave_1: entered allmulticast mode [ 341.474897][ T9954] netlink: 'syz.3.1111': attribute type 7 has an invalid length. [ 341.555259][ T9954] netlink: 'syz.3.1111': attribute type 7 has an invalid length. [ 342.050712][ T9971] IPv6: Can't replace route, no match found [ 342.069270][ T9969] bridge0: port 3(team0) entered disabled state [ 342.110185][ T9969] bridge_slave_1: left allmulticast mode [ 342.115963][ T9969] bridge_slave_1: left promiscuous mode [ 342.145130][ T9969] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.189858][ T9969] bridge_slave_0: left allmulticast mode [ 342.195802][ T9969] bridge_slave_0: left promiscuous mode [ 342.209145][ T9969] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.295157][ T9975] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1114'. [ 342.306359][ T9977] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1115'. [ 342.317788][ T9977] bond0: entered allmulticast mode [ 342.323744][ T9977] bond_slave_0: entered allmulticast mode [ 342.330972][ T9977] bond_slave_1: entered allmulticast mode [ 343.730602][ T9999] netlink: 'syz.0.1121': attribute type 10 has an invalid length. [ 343.748888][ T9999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'. [ 343.758131][ T9999] team0: entered promiscuous mode [ 343.774095][ T9999] team_slave_0: entered promiscuous mode [ 343.780897][ T9999] team_slave_1: entered promiscuous mode [ 343.786845][ T9999] team0: entered allmulticast mode [ 343.795983][ T9999] team_slave_0: entered allmulticast mode [ 343.813271][ T9999] team_slave_1: entered allmulticast mode [ 343.831286][ T9999] net_ratelimit: 3142 callbacks suppressed [ 343.831303][ T9999] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 343.853725][ T9997] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1122'. [ 343.878938][ T9997] hsr_slave_0: left promiscuous mode [ 343.903307][ T9997] hsr_slave_1: left promiscuous mode [ 344.051912][T10008] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1125'. [ 344.904197][T10030] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 345.209048][T10039] syzkaller0: entered promiscuous mode [ 345.215066][T10039] syzkaller0: entered allmulticast mode [ 345.901954][T10060] __nla_validate_parse: 2 callbacks suppressed [ 345.901974][T10060] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1142'. [ 345.917972][T10060] openvswitch: netlink: Message has 20476 unknown bytes. [ 347.708388][T10051] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1140'. [ 347.719949][T10063] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1143'. [ 348.428511][T10088] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1150'. [ 348.553336][T10092] netlink: 1039 bytes leftover after parsing attributes in process `syz.0.1151'. [ 348.800416][T10106] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1155'. [ 348.977811][T10116] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.1158'. [ 349.554569][T10141] netlink: 'syz.3.1166': attribute type 10 has an invalid length. [ 349.563520][T10141] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1166'. [ 349.872510][T10150] delete_channel: no stack [ 350.012287][T10154] netlink: 'syz.1.1171': attribute type 1 has an invalid length. [ 350.039891][T10154] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1171'. [ 350.476737][T10168] netlink: 'syz.1.1175': attribute type 10 has an invalid length. [ 350.498874][T10168] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1175'. [ 351.121376][T10195] netlink: 'syz.1.1182': attribute type 29 has an invalid length. [ 351.147676][T10195] netlink: 'syz.1.1182': attribute type 29 has an invalid length. [ 351.182765][T10183] delete_channel: no stack [ 351.358496][T10211] netlink: 'syz.3.1184': attribute type 10 has an invalid length. [ 351.382856][T10211] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1184'. [ 351.408861][T10212] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1183'. [ 351.779672][T10222] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1185'. [ 352.439753][T10237] IPv6: Can't replace route, no match found [ 352.937975][T10246] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 352.968815][T10246] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1194'. [ 353.506788][T10256] netlink: 'syz.1.1198': attribute type 4 has an invalid length. [ 353.525558][T10256] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1198'. [ 353.540992][T10256] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 353.954849][T10276] netlink: 'syz.0.1204': attribute type 10 has an invalid length. [ 353.984637][T10276] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1204'. [ 354.021404][T10278] netlink: 'syz.2.1205': attribute type 10 has an invalid length. [ 354.038794][T10278] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 354.064266][T10278] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 354.098888][T10278] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 354.106032][T10278] team0: Device wlan1 is of different type [ 354.687870][T10295] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1211'. [ 354.903847][T10304] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1212'. [ 355.012714][T10304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.082595][T10308] netlink: 'syz.3.1213': attribute type 9 has an invalid length. [ 355.103761][T10308] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1213'. [ 355.128848][T10309] netlink: 'syz.3.1213': attribute type 9 has an invalid length. [ 355.138412][T10309] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1213'. [ 355.367560][T10311] netlink: 'syz.1.1214': attribute type 10 has an invalid length. [ 355.412248][T10314] netlink: 'syz.2.1216': attribute type 16 has an invalid length. [ 355.469139][T10314] netlink: 'syz.2.1216': attribute type 3 has an invalid length. [ 355.831188][T10311] team0: Device veth1_vlan failed to register rx_handler [ 356.151887][T10327] netlink: set zone limit has 8 unknown bytes [ 356.222461][T10325] netlink: 'syz.0.1219': attribute type 6 has an invalid length. [ 356.381139][T10311] syz.1.1214 (10311) used greatest stack depth: 18440 bytes left [ 356.461925][T10335] __nla_validate_parse: 1 callbacks suppressed [ 356.461944][T10335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1222'. [ 356.539067][T10335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1222'. [ 356.583387][T10338] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 356.632355][T10338] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 356.663408][T10343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1223'. [ 356.683474][T10338] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 356.709749][T10338] team0: Port device netdevsim0 added [ 356.734084][T10344] ªªªªª»: renamed from veth1_vlan (while UP) [ 356.768668][T10343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1223'. [ 356.796674][T10346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1223'. [ 357.387784][T10361] netlink: 'syz.0.1231': attribute type 10 has an invalid length. [ 357.451341][T10365] netlink: 'syz.3.1232': attribute type 10 has an invalid length. [ 357.490722][T10365] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1232'. [ 357.502695][T10365] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 358.500600][T10391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1238'. [ 358.997078][T10407] netlink: 'syz.0.1242': attribute type 4 has an invalid length. [ 359.019148][T10407] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1242'. [ 363.138509][T10443] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1251'. [ 363.422572][T10443] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 363.775783][T10466] netlink: 'syz.3.1256': attribute type 10 has an invalid length. [ 363.812062][T10466] hsr_slave_0: left promiscuous mode [ 363.841176][T10466] hsr_slave_1: left promiscuous mode [ 364.001557][T10475] netlink: 'syz.0.1257': attribute type 21 has an invalid length. [ 364.019885][T10475] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.038292][T10475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.045686][T10475] IPv6: NLM_F_CREATE should be set when creating new route [ 364.053061][T10475] IPv6: NLM_F_CREATE should be set when creating new route [ 364.060571][T10475] IPv6: NLM_F_CREATE should be set when creating new route [ 364.425531][T10491] netlink: 'syz.2.1262': attribute type 21 has an invalid length. [ 364.722483][T10489] netlink: 'syz.0.1261': attribute type 10 has an invalid length. [ 364.912174][T10489] team0: Device veth1_vlan failed to register rx_handler [ 365.147838][T10499] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1264'. [ 365.169103][T10500] netlink: 'syz.3.1264': attribute type 12 has an invalid length. [ 365.177044][T10500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1264'. [ 365.842450][T10508] delete_channel: no stack [ 366.899054][T10535] syzkaller0: entered promiscuous mode [ 366.951330][T10535] syzkaller0: entered allmulticast mode [ 366.962917][T10533] netlink: 'syz.3.1274': attribute type 10 has an invalid length. [ 369.686326][T10556] netlink: set zone limit has 8 unknown bytes [ 371.491194][T10543] netlink: 'syz.3.1277': attribute type 6 has an invalid length. [ 371.499232][T10543] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1277'. [ 371.510051][T10557] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 372.493471][T10585] cgroup: fork rejected by pids controller in /syz2 [ 372.533532][ C0] ================================================================== [ 372.533550][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 372.533590][ C0] Write of size 72 at addr ffff888076b3a810 by task syz.3.1290/10592 [ 372.533616][ C0] [ 372.533624][ C0] CPU: 0 PID: 10592 Comm: syz.3.1290 Not tainted syzkaller #0 [ 372.533643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.533660][ C0] Call Trace: [ 372.533668][ C0] <#DB> [ 372.533676][ C0] dump_stack_lvl+0x18c/0x250 [ 372.533712][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 372.533738][ C0] ? show_regs_print_info+0x20/0x20 [ 372.533771][ C0] ? load_image+0x420/0x420 [ 372.533801][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 372.533832][ C0] ? __virt_addr_valid+0x18c/0x540 [ 372.533858][ C0] ? __virt_addr_valid+0x469/0x540 [ 372.533889][ C0] print_report+0xa8/0x210 [ 372.533918][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 372.533942][ C0] kasan_report+0x117/0x150 [ 372.533972][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 372.534010][ C0] kasan_check_range+0x241/0x290 [ 372.534034][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 372.534062][ C0] __asan_memcpy+0x40/0x70 [ 372.534094][ C0] __bpf_get_stackid+0x6bf/0x900 [ 372.534133][ C0] bpf_get_stackid_pe+0x343/0x410 [ 372.534170][ C0] bpf_prog_ebdd8313a69a195f+0x30/0x45 [ 372.534193][ C0] bpf_overflow_handler+0x1fc/0x510 [ 372.534229][ C0] ? __perf_event_overflow+0x4f8/0x630 [ 372.534250][ C0] ? bpf_overflow_handler+0xde/0x510 [ 372.534279][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 372.534319][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 372.534348][ C0] __perf_event_overflow+0x447/0x630 [ 372.534383][ C0] perf_swevent_event+0x319/0x570 [ 372.534411][ C0] ? perf_tp_event+0x1520/0x1520 [ 372.534440][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 372.534482][ C0] perf_bp_event+0x319/0x430 [ 372.534514][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 372.534583][ C0] ? lock_acquire+0x2c2/0x420 [ 372.534626][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 372.534660][ C0] notifier_call_chain+0x197/0x380 [ 372.534691][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 372.534721][ C0] atomic_notifier_call_chain+0xda/0x180 [ 372.534751][ C0] notify_die+0x145/0x1a0 [ 372.534781][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 372.534820][ C0] ? rcu_is_watching+0x15/0xb0 [ 372.534851][ C0] notify_debug+0x2e/0x50 [ 372.534872][ C0] exc_debug+0xde/0x140 [ 372.534897][ C0] asm_exc_debug+0x1e/0x40 [ 372.534921][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 372.534943][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 372.534960][ C0] RSP: 0018:ffffc9000c71fb48 EFLAGS: 00050206 [ 372.534977][ C0] RAX: ffffffff842a1f01 RBX: 0000000000000188 RCX: 0000000000000038 [ 372.534991][ C0] RDX: 0000000000000001 RSI: 0000200000000310 RDI: ffffc90018b95198 [ 372.535004][ C0] RBP: 0000000000000000 R08: ffffc90018b951cf R09: 1ffff92003172a39 [ 372.535018][ C0] R10: dffffc0000000000 R11: fffff52003172a3a R12: 0000200000000348 [ 372.535032][ C0] R13: 0000000000000000 R14: ffffc90018b95048 R15: 00002000000001c0 [ 372.535057][ C0] ? rcuref_put_slowpath+0x141/0x150 [ 372.535095][ C0] [ 372.535100][ C0] [ 372.535105][ C0] _copy_from_user+0x8b/0xe0 [ 372.535134][ C0] copy_from_bpfptr+0x67/0x80 [ 372.535159][ C0] bpf_prog_load+0xa80/0x1670 [ 372.535198][ C0] ? map_freeze+0x420/0x420 [ 372.535243][ C0] ? __might_fault+0xaa/0x120 [ 372.535264][ C0] ? __might_fault+0xc6/0x120 [ 372.535282][ C0] ? __might_fault+0xaa/0x120 [ 372.535303][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 372.535329][ C0] ? security_bpf+0x7e/0xa0 [ 372.535359][ C0] __sys_bpf+0x5ba/0x890 [ 372.535385][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 372.535430][ C0] ? lock_chain_count+0x20/0x20 [ 372.535466][ C0] __x64_sys_bpf+0x7c/0x90 [ 372.535489][ C0] do_syscall_64+0x55/0xa0 [ 372.535506][ C0] ? clear_bhb_loop+0x40/0x90 [ 372.535530][ C0] ? clear_bhb_loop+0x40/0x90 [ 372.535558][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.535583][ C0] RIP: 0033:0x7fab0dd9cdd9 [ 372.535600][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.535622][ C0] RSP: 002b:00007fab0ebd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.535642][ C0] RAX: ffffffffffffffda RBX: 00007fab0e015fa0 RCX: 00007fab0dd9cdd9 [ 372.535656][ C0] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 372.535668][ C0] RBP: 00007fab0de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 372.535680][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.535692][ C0] R13: 00007fab0e016038 R14: 00007fab0e015fa0 R15: 00007ffd15395cb8 [ 372.535728][ C0] [ 372.535734][ C0] [ 372.535737][ C0] Allocated by task 10592: [ 372.535752][ C0] kasan_set_track+0x4e/0x70 [ 372.535773][ C0] __kasan_kmalloc+0x8f/0xa0 [ 372.535792][ C0] __kmalloc_node+0xb4/0x230 [ 372.535816][ C0] bpf_map_area_alloc+0x5e/0x110 [ 372.535843][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 372.535867][ C0] stack_map_alloc+0x33a/0x4c0 [ 372.535889][ C0] map_create+0x877/0x12f0 [ 372.535906][ C0] __sys_bpf+0x651/0x890 [ 372.535923][ C0] __x64_sys_bpf+0x7c/0x90 [ 372.535939][ C0] do_syscall_64+0x55/0xa0 [ 372.535954][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.535977][ C0] [ 372.535980][ C0] The buggy address belongs to the object at ffff888076b3a800 [ 372.535980][ C0] which belongs to the cache kmalloc-cg-64 of size 64 [ 372.535995][ C0] The buggy address is located 16 bytes inside of [ 372.535995][ C0] allocated 40-byte region [ffff888076b3a800, ffff888076b3a828) [ 372.536015][ C0] [ 372.536018][ C0] The buggy address belongs to the physical page: [ 372.536032][ C0] page:ffffea0001dace80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888076b3a100 pfn:0x76b3a [ 372.536054][ C0] memcg:ffff88803085d801 [ 372.536061][ C0] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 372.536084][ C0] page_type: 0xffffffff() [ 372.536105][ C0] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 dead000000000001 [ 372.536123][ C0] raw: ffff888076b3a100 000000008020001f 00000001ffffffff ffff88803085d801 [ 372.536132][ C0] page dumped because: kasan: bad access detected [ 372.536144][ C0] page_owner tracks the page as allocated [ 372.536150][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5776, tgid 5776 (syz-executor), ts 118943445418, free_ts 118942981064 [ 372.536181][ C0] post_alloc_hook+0x1c1/0x200 [ 372.536208][ C0] get_page_from_freelist+0x1951/0x19e0 [ 372.536225][ C0] __alloc_pages+0x1f0/0x460 [ 372.536240][ C0] alloc_slab_page+0x5d/0x160 [ 372.536257][ C0] new_slab+0x87/0x2d0 [ 372.536270][ C0] ___slab_alloc+0xc5d/0x12f0 [ 372.536295][ C0] __kmem_cache_alloc_node+0x19e/0x250 [ 372.536321][ C0] kmalloc_trace+0x2a/0xe0 [ 372.536345][ C0] alloc_fdtable+0xca/0x2c0 [ 372.536366][ C0] dup_fd+0x786/0xa50 [ 372.536386][ C0] copy_files+0xc3/0x120 [ 372.536404][ C0] copy_process+0x15ab/0x3d80 [ 372.536421][ C0] kernel_clone+0x24b/0x8a0 [ 372.536439][ C0] __x64_sys_clone+0x1b7/0x230 [ 372.536459][ C0] do_syscall_64+0x55/0xa0 [ 372.536473][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.536495][ C0] page last free stack trace: [ 372.536500][ C0] free_unref_page_prepare+0x7b2/0x8c0 [ 372.536528][ C0] free_unref_page+0x32/0x2e0 [ 372.536555][ C0] vfree+0x1a6/0x320 [ 372.536577][ C0] do_ip6t_get_ctl+0xf21/0x1210 [ 372.536599][ C0] nf_getsockopt+0x262/0x280 [ 372.536629][ C0] ipv6_getsockopt+0x226/0x2e0 [ 372.536647][ C0] do_sock_getsockopt+0x379/0x450 [ 372.536664][ C0] __x64_sys_getsockopt+0x1d6/0x280 [ 372.536681][ C0] do_syscall_64+0x55/0xa0 [ 372.536696][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.536720][ C0] [ 372.536724][ C0] Memory state around the buggy address: [ 372.536733][ C0] ffff888076b3a700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 372.536746][ C0] ffff888076b3a780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 372.536758][ C0] >ffff888076b3a800: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 372.536766][ C0] ^ [ 372.536776][ C0] ffff888076b3a880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 372.536787][ C0] ffff888076b3a900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 372.536796][ C0] ================================================================== [ 372.536818][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 372.536826][ C0] CPU: 0 PID: 10592 Comm: syz.3.1290 Not tainted syzkaller #0 [ 372.536845][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.536854][ C0] Call Trace: [ 372.536861][ C0] <#DB> [ 372.536868][ C0] dump_stack_lvl+0x18c/0x250 [ 372.536905][ C0] ? show_regs_print_info+0x20/0x20 [ 372.536938][ C0] ? load_image+0x420/0x420 [ 372.536982][ C0] panic+0x2dc/0x730 [ 372.537007][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 372.537035][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 372.537069][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 372.537095][ C0] ? _raw_spin_unlock+0x40/0x40 [ 372.537124][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 372.537148][ C0] check_panic_on_warn+0x84/0xa0 [ 372.537174][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 372.537199][ C0] end_report+0x6f/0x130 [ 372.537223][ C0] kasan_report+0x128/0x150 [ 372.537252][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 372.537289][ C0] kasan_check_range+0x241/0x290 [ 372.537314][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 372.537341][ C0] __asan_memcpy+0x40/0x70 [ 372.537377][ C0] __bpf_get_stackid+0x6bf/0x900 [ 372.537414][ C0] bpf_get_stackid_pe+0x343/0x410 [ 372.537449][ C0] bpf_prog_ebdd8313a69a195f+0x30/0x45 [ 372.537471][ C0] bpf_overflow_handler+0x1fc/0x510 [ 372.537505][ C0] ? __perf_event_overflow+0x4f8/0x630 [ 372.537526][ C0] ? bpf_overflow_handler+0xde/0x510 [ 372.537555][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 372.537594][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 372.537630][ C0] __perf_event_overflow+0x447/0x630 [ 372.537665][ C0] perf_swevent_event+0x319/0x570 [ 372.537693][ C0] ? perf_tp_event+0x1520/0x1520 [ 372.537717][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 372.537757][ C0] perf_bp_event+0x319/0x430 [ 372.537789][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 372.537856][ C0] ? lock_acquire+0x2c2/0x420 [ 372.537892][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 372.537926][ C0] notifier_call_chain+0x197/0x380 [ 372.537957][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 372.537987][ C0] atomic_notifier_call_chain+0xda/0x180 [ 372.538017][ C0] notify_die+0x145/0x1a0 [ 372.538047][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 372.538085][ C0] ? rcu_is_watching+0x15/0xb0 [ 372.538116][ C0] notify_debug+0x2e/0x50 [ 372.538135][ C0] exc_debug+0xde/0x140 [ 372.538160][ C0] asm_exc_debug+0x1e/0x40 [ 372.538183][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 372.538204][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 372.538221][ C0] RSP: 0018:ffffc9000c71fb48 EFLAGS: 00050206 [ 372.538238][ C0] RAX: ffffffff842a1f01 RBX: 0000000000000188 RCX: 0000000000000038 [ 372.538252][ C0] RDX: 0000000000000001 RSI: 0000200000000310 RDI: ffffc90018b95198 [ 372.538265][ C0] RBP: 0000000000000000 R08: ffffc90018b951cf R09: 1ffff92003172a39 [ 372.538279][ C0] R10: dffffc0000000000 R11: fffff52003172a3a R12: 0000200000000348 [ 372.538293][ C0] R13: 0000000000000000 R14: ffffc90018b95048 R15: 00002000000001c0 [ 372.538318][ C0] ? rcuref_put_slowpath+0x141/0x150 [ 372.538355][ C0] [ 372.538360][ C0] [ 372.538366][ C0] _copy_from_user+0x8b/0xe0 [ 372.538394][ C0] copy_from_bpfptr+0x67/0x80 [ 372.538419][ C0] bpf_prog_load+0xa80/0x1670 [ 372.538459][ C0] ? map_freeze+0x420/0x420 [ 372.538503][ C0] ? __might_fault+0xaa/0x120 [ 372.538524][ C0] ? __might_fault+0xc6/0x120 [ 372.538541][ C0] ? __might_fault+0xaa/0x120 [ 372.538562][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 372.538587][ C0] ? security_bpf+0x7e/0xa0 [ 372.538625][ C0] __sys_bpf+0x5ba/0x890 [ 372.538650][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 372.538698][ C0] ? lock_chain_count+0x20/0x20 [ 372.538739][ C0] __x64_sys_bpf+0x7c/0x90 [ 372.538762][ C0] do_syscall_64+0x55/0xa0 [ 372.538779][ C0] ? clear_bhb_loop+0x40/0x90 [ 372.538804][ C0] ? clear_bhb_loop+0x40/0x90 [ 372.538833][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.538857][ C0] RIP: 0033:0x7fab0dd9cdd9 [ 372.538875][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.538891][ C0] RSP: 002b:00007fab0ebd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.538910][ C0] RAX: ffffffffffffffda RBX: 00007fab0e015fa0 RCX: 00007fab0dd9cdd9 [ 372.538929][ C0] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 372.538942][ C0] RBP: 00007fab0de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 372.538958][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.538969][ C0] R13: 00007fab0e016038 R14: 00007fab0e015fa0 R15: 00007ffd15395cb8 [ 372.539004][ C0] [ 372.539609][ C0] Kernel Offset: disabled