last executing test programs: 3.243824143s ago: executing program 4 (id=994): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a120200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.155517413s ago: executing program 0 (id=995): r0 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000d3000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = getpid() r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x9}, r2, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000500)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000064debc2e3e00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001ac0000002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40086602, &(0x7f0000000180)=0x20) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r11}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000100)={r0}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r14}, 0x10) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r15, r13, 0x7, 0x0, 0x0, @void, @value}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40305829, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r7, 0x58, &(0x7f00000001c0)}, 0x10) 3.107467056s ago: executing program 3 (id=996): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'pim6reg0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0xf}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee8440000000800", 0x39}, {&(0x7f0000000440)}], 0x2}, 0x200400c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff35, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91b24fc6004000f000a740100051882c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) 2.794569812s ago: executing program 4 (id=997): socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x2}, 0x20) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 2.702079846s ago: executing program 2 (id=998): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0x6b, 0x0, 0x2, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000640), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00000000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="30bf7fbea92271fc5d6285ef9421e4d05357bfc6b5c9aefa4986c7f86302", @ANYRES64=r3], 0x20) 2.639431562s ago: executing program 1 (id=999): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x38, 0x0, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) 2.545471948s ago: executing program 0 (id=1000): socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000600142603600e1209000f0000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000006c0)={'rose0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r4, 0xe, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0]}, 0x40) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff13, &(0x7f00000000c0)=[{&(0x7f0000000100)="a3d41242fdb99f3ce7c8a071601f6303924c5d74c53a2c5db34ba631f428eafef584d49d2e58248ea7a804b13f932b0e2c517e89096f97bc1a4707da078649c438cc4adc86b45437ed1d08699c229cc36ca6044ac72386dcb05f4dc2c13bbe3c1f801d15799dd23852e44b4191157069164f28827a1138d0013d8f31f541540411b6ecab0098cedb004982d7e332d2308dc60d355cbfedae2e3b9df49be0f42f34", 0x16}, {&(0x7f0000000040)="4a28c0063f4c34e059317f2a53024f7465e6a6626ed497fb9386150dbcf58db48fd9d0b7aed2bdeee7f0ddada7eddbbe480482f73d1a0d170df2c5c3f605edb80f8469ecf0992641e6c2ebd1ee28b64fb9f8966c622679ffa4c970f68340e6f0237663d2c47e31f9ab862ec47ac5ed76e7fef56e72da81"}], 0x0, 0x0, 0xffffffffffffffd4}, 0x4c814) 2.474783233s ago: executing program 1 (id=1001): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000005400000e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg$kcm(r7, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r8) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.394060507s ago: executing program 2 (id=1002): r0 = perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x41, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xed1c8286d929f9a1, 0xfffffffffffffffd, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000140)={&(0x7f0000001100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000100)=[{&(0x7f00000010c0)=""/11, 0xb}], 0x1}, 0x41) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x3ad682, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3c0470bf79483655, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000a2e50000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x1000}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006b04c84e21000af32c6e0a0675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 2.040367582s ago: executing program 3 (id=1003): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000300000018340000000000000000000000000000851000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000085100000fdffffff85100000faffffff"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000050000000005000000100000000000fb02000000"], 0x28}, 0x0) 1.849890219s ago: executing program 3 (id=1004): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000005400000e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg$kcm(r8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r9) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1.836202648s ago: executing program 2 (id=1005): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000000480)=@phonet={0x23, 0x9, 0x8, 0x1}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xffffff81, @empty, 0x3}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000000)="5b5e645e7aad7a9f257120a4b5c8e62a4c272308f585a4e802a8d526f8f8cf960ac8b1c0c8e31a43ba2728c1", 0x2c}, {&(0x7f00000001c0)="352e7aac8a1aa96a830c453890a22101d1f74ddd7a87d0f36f872e808d6dec5137aae2e92f163d3602362bd6a3e271e7d5783246b1a346a5620aaa8e279fda61ab60c137c5791aa1baff9306ccc204e6da5d3f86381349934f280f70", 0x5c}, {&(0x7f00000002c0)="5c81c3ace9def7832bb1ae5430965b3c2cae7dbc80669f3f86596c39344ce611c0033a2f2d94fcfca4dbd4c0741dc6c2b0bcc0ee9b5cf7cba99e705e7595b4cfbecc2b8b8c0371dd5bb1bf0a70ec1b62306518207ed78003bae789f2dd83a51d89a1d36d12ac332e4f1cf60f6b32a4df0448a8938d5a56b410543a1cbeb0d45bdf902c35e8dcc4422842502e8e6986fa5243a3d21d33c5774c9de1d60dbe293aef13bcc44fcad5febed588d4a901442290e26ef9f15a654b65fae170139ca03126c4839a4a3386ef961c16355b1154", 0xcf}], 0x3, &(0x7f0000004240)=[{0x30, 0x10f, 0x100, "deaba3d19a4cd9414b2ee726ce94a5c5a94cc44441245fc4106da34a5623"}, {0x10b8, 0x109, 0x8, "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"}, {0x28, 0x0, 0xffffa3e7, "2d048c45fefbca45aab9836bce137b14c7"}, {0x710, 0x11, 0x1, "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"}, {0x10, 0x110, 0x9}, {0x10, 0xff, 0x2}], 0x1840}, 0x4000041) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f0000000500), 0x25) 1.722416352s ago: executing program 0 (id=1006): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703310000001f03000000000000040014000d000a00200000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.681723775s ago: executing program 1 (id=1007): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000002c0), 0x4) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed71e32efaec8c7a6ec96515899723e33d39f075383a38400120c00010000080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fedc109d78f0a947ee2b49e33538a", 0x79}, {&(0x7f0000000280)="2cff5d274a18d2072f9997897fd3dc29", 0x10}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.609923179s ago: executing program 4 (id=1008): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f94b24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x7000000}, 0x0) 1.399470502s ago: executing program 0 (id=1009): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b400000000000000de0a0000000000006201a4000000000095000000000000006681fabfa7afdea451352385fd277a26b1928972a90713774dee000000008abeded0f241d9e16380276de7f845fb77f3942b1b2f835d2704d284651cec42865a01e610e1d8ebed3bca771dd8dfc94bf8454e0ba5feb0a8fb9c709340a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800000, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)=0x7ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x8004745a, 0x20000002) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000001080)=@framed={{0x18, 0x8}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) 1.342575367s ago: executing program 1 (id=1010): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xb, [@datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x4, 0x6}], '1'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], ']'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "8bec"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x61, 0x30]}}, &(0x7f00000004c0)=""/184, 0x57, 0xb8, 0x1, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x21, 0xffffffff, 0x0, 0x1, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x200001}, 0x0, 0x10000, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8913, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, r0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x51, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) socket$kcm(0x29, 0x2, 0x0) 943.1686ms ago: executing program 3 (id=1011): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a00014003000000f6000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbacc8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d544148c3b880a658ecb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd9}, {&(0x7f0000000180)="694b5ad5a0494aa6f0334b37c7f51772825cc4f48d98e5310e64a38c790862cb197b15ccf947fd70df26959bc91534280e3b457145fdef8d13504940bbdb888242c46eabef6812b9f8c4cfac8bd7830018206e219e136e51914718f752d78f1af13895a071ce9c8b1ce92a1315fa60e56a0f8a4158ee74ae9aca98a0cd66dba6cb2bf872d0a3aed59ed0939f9a087f9b47d37cada1a7da863e1f11074a02b3d7740e28b90fc1810c", 0xa8}, {&(0x7f0000000240)="4266f3c5250f7b6eff19d1c7dadb26523624342d31f945b9062566afb293d73aa0ab15dc41cbab62c0d3a8e984cae3", 0x2f}, {&(0x7f0000000280)="16fdd4a1d5dd0d6c24fc4cc5b1857eb693edd307b8fee03da47494818cffa8ae47f7d0e91934998cc2ceb061fcc90be05a5b6497d4e852bdbd51cdc401713a5c1e8bce2dba55f4e1044fe7eb78014f5385df004a85bba08b53c5d1a75e8bcae18a9500a38523168edf474b014f9c8728915de7278d07ff68ff7739a1e49f8b2c6ee3753945843c4c2a74fffc69c91b1914", 0x91}, {&(0x7f0000000340)="9c96ac64f41e6883", 0x8}], 0x5}, 0x4) 942.818001ms ago: executing program 4 (id=1012): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r0, 0x6b, 0x0, 0x2, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000640), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1a00000000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="30bf7fbea92271fc5d6285ef9421e4d05357bfc6b5c9aefa4986c7f86302", @ANYRES64=r3], 0x20) 782.171162ms ago: executing program 2 (id=1013): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000c1b918ce77cfa3e41ced00000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0e00000000000000000580000000008af27724fbffff0000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e800000000923700000003000000000000009b9af02677ab8969081a6cba11eb354a1b0908c6b73deb509be3d2f4b8032deb844b481ab9e31b985b3df4d8c232397fb5698f6c259fad882a82732e3bf12b970617ffadcfe2bd6cf00a82c7d1afb10f57a62eade9c17001740e6bba01e45f6444a7126bee1f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000dc5f99aaf86dde3eccd879b70000000000000095000000a3864b6800"/45], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2404c854) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000006956b53cbaa39b47986f8f71aa7df082e8e1924083868f2fe6fbf481909048127ebeb20c79fa61d963bb8d5d411ee57a16aab3c06a4ef3e1b4cb2879a37c4a90a64c33555dfdca5a4c6034046c255051382ac80a83c6dac641", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r4, &(0x7f0000000380)={0x0, 0xee51828d43e8364b, 0x0, 0x0, 0x0, 0xff6b}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 725.733931ms ago: executing program 3 (id=1014): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x38, 0x0, 0x0) getpid() recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}, 0x0) 702.767541ms ago: executing program 4 (id=1015): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x38, 0x0, 0x0) getpid() recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="8e", 0x1}], 0x1}, 0x0) 608.2214ms ago: executing program 0 (id=1016): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001a00)="bd8924b41209a8e7c8af2137eafa46c23c49b4730f1c8d7d8d63d817a31a6799ace18f2ca5a47240a364bebaa0619929c54384d769bc46a4c53a501f37ac6275771dcf049995c9477a606c23674089390023a6c70693bd63a4e6e0515633d6c9c93067c9ee6a65ac69dfa1c545420e9fb2c830a34d68be99357d70a90cfc7f8af37e972b215aea1577b802ca4fad2c8c2b9cbefb67c80c4fd4926d1a8c34b33ce66a309759eba08e0aed263415eb8e5164603092c8b5f82518afaebd8b", 0x0}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000011800000001000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x50) 514.135631ms ago: executing program 2 (id=1017): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff2a1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009700000085000000070000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffb9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x313000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYRES8], 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 491.189507ms ago: executing program 4 (id=1018): socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x2}, 0x20) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) recvmsg(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r5, 0x0, 0x80) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 330.087696ms ago: executing program 1 (id=1019): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703310000001f03000000000000040014000d000a00200000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 185.691479ms ago: executing program 3 (id=1020): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000005400000e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg$kcm(r8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r9) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 102.840068ms ago: executing program 0 (id=1021): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000005400000e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0) recvmsg$kcm(r8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r9) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 59.469913ms ago: executing program 1 (id=1022): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) close(r0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000002cc0)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x8}], 0x10}, 0x0) (async) r3 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000073011b000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB='\x00O\x00'/20, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x78, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f0000000000)=0x8000) write$cgroup_pid(r7, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40086602, &(0x7f0000000180)) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0xc000) (async) sendmsg$kcm(r2, &(0x7f0000000e80)={&(0x7f0000000740)=@llc={0x1a, 0x201, 0x85, 0x6, 0x2, 0x9}, 0x80, &(0x7f0000000840)=[{&(0x7f00000008c0)="6f058136f13ab32a6389752743cbd687261d33cfa2970e0b0b585f4731d32e0cd91f013c5c7c86726aa8ebe3c24a7dcae98adaf08fdbbf4286b05dfd51a6ad12d5efb5dfd95dfa9fbe96a3edec43a25dfd53f65f0e7baac61c59d58a8d01c2043bbd737894724134c197e21270df819ec556ae71e6393912efaeeb6d447f15d64ce6ed4e76841a974c63ff3ccdd6c29166061d7c219e312eb87aa530d430a4155f701b52621caa291d5041eee8130f9c61e017860a335fb6c5a36091df0b9caf8f0d299f902f4d84c515ebafc50b6d606e0698f7a4a11a078418a188c25c11c5455099b3a9831b838d3e", 0xea}, {&(0x7f0000000b00)="28545fc11b6637e0bbba1a6eb8e390bd064742c86b45afae54dcce79f895b6983f9a916f105df4bbc76bb89c4a98b53262f4fb4f4f047fc3680f823605f0850e6b2fd350cc80b584d5737ff1bcda55e635c1", 0x52}, {&(0x7f0000000b80)="3f36bb8f073cadbaa870e83d1eb6bcbc9ecb7e506d4223b63be6a8da2ab606eb259df54c8a27fdae729f67534377e5b92bb50f595c270b4e2ca3ede9cb4e38574626545fd87722007eaa7501ff2fbc7019593ee59ea46b5cca3ba2a9cb9deac294b059b24e56a728014a220dfc50f50a41f8e277856b31ad941d5b54d980c754ea15304bfd7ff80745b18745ef3a301212981e22f120138b18e996aa6f0c61ca134ca1e66cd9718f946d9e151a1ffb8ef1a0957063ff6c555ca69ae50be7a75a29d4b8ed750a1d5613c4f6761dcb2c917802e0b5572213f621541b55c88d027ffc1aa4e79c3b19697ee1949958ac017e", 0xf0}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1d0}, 0x8800) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0200000004000000080000000161a3da3800e3acc888d3a20000000000000000e8c87b8b3301be8782247bdef2c57fb67c600c54fced7420730c89e460d2616f36aa95cda5aa9549dcd3ec9c4dec757050c7d380d155700d42f70604b6221f2f3ccc7870f0f300bce837b775e4b14877efa4a9fcca991e28f1d6dc450514e2abad1d0d6ae1e60b8d3bef96831400c073da848808d7501661eaf84105d03c97875b3617d54e9ab846d2c4d5ba62be526c86a4ed0c2725020ca1e3e1d3095a8d694255df2ecc9aad40", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="03000000020000000400"/28], 0x50) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000004000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000800850000008600000018040000050000000000000045000000852000000100000095000000000000008520000004000000852000000200000018630000030000000000000000000004852000000100000012600001f0ffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0xfffffffd, 0x1000, &(0x7f0000001840)=""/4096, 0x40f00, 0x18, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x1, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000580)=[r4, r4, r4], &(0x7f00000005c0)=[{0x0, 0x3, 0x4, 0x5}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x1, 0xc, 0x6}, {0x2, 0x5, 0xf, 0x4}, {0x3, 0x5, 0x5, 0x2}, {0x2, 0x1}], 0x10, 0xfffffffd, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9}, 0x57) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0xe, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) close(r1) 0s ago: executing program 2 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 4) kernel console output (not intermixed with test programs): network, BSSID 50:50:50:50:50:50 [ 285.514200][ T6312] netlink: 152 bytes leftover after parsing attributes in process `syz.2.126'. [ 285.560391][ T6063] veth1_vlan: entered promiscuous mode [ 285.667070][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.682840][ T6063] veth0_macvtap: entered promiscuous mode [ 285.688807][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.705606][ T6076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.737639][ T6063] veth1_macvtap: entered promiscuous mode [ 285.872869][ T6317] @ÿ: renamed from veth0_vlan (while UP) [ 285.992244][ T5243] Bluetooth: hci8: unexpected event 0x08 length: 15 > 4 [ 286.004964][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.042674][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.062420][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.074444][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.091702][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.104627][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.133467][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.143335][ T6320] netlink: 'syz.3.121': attribute type 2 has an invalid length. [ 286.174807][ T6322] @ÿ: renamed from veth0_vlan (while UP) [ 286.278891][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.332426][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.376034][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.411552][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.421825][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.434174][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.446604][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.462271][ T6330] netlink: 'syz.3.130': attribute type 10 has an invalid length. [ 286.520155][ T6330] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.575101][ T6330] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.655210][ T6332] netlink: 'syz.2.131': attribute type 10 has an invalid length. [ 286.711319][ T6332] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.720688][ T6332] bond0: (slave team0): Enslaving as an active interface with an up link [ 286.730448][ T6333] netlink: 'syz.3.130': attribute type 10 has an invalid length. [ 286.740920][ T6333] bond0: (slave team0): Releasing backup interface [ 286.758589][ T6333] bridge0: port 3(team0) entered blocking state [ 286.765560][ T6333] bridge0: port 3(team0) entered disabled state [ 286.772317][ T6333] team0: entered allmulticast mode [ 286.780027][ T6333] team_slave_0: entered allmulticast mode [ 286.785807][ T6333] team_slave_1: entered allmulticast mode [ 286.799588][ T6333] team0: entered promiscuous mode [ 286.804669][ T6333] team_slave_0: entered promiscuous mode [ 286.810665][ T6333] team_slave_1: entered promiscuous mode [ 286.824218][ T6335] netlink: 'syz.2.131': attribute type 10 has an invalid length. [ 286.846858][ T6335] bond0: (slave team0): Releasing backup interface [ 286.870278][ T6335] bridge0: port 3(team0) entered blocking state [ 286.876957][ T6335] bridge0: port 3(team0) entered disabled state [ 286.883383][ T6335] team0: entered allmulticast mode [ 286.888729][ T6335] team_slave_0: entered allmulticast mode [ 286.894498][ T6335] team_slave_1: entered allmulticast mode [ 286.905732][ T6335] team0: entered promiscuous mode [ 286.911849][ T6335] team_slave_0: entered promiscuous mode [ 286.917908][ T6335] team_slave_1: entered promiscuous mode [ 287.028441][ T6063] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.040950][ T6063] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.050401][ T6063] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.060861][ T6063] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.162824][ T6076] veth0_vlan: entered promiscuous mode [ 287.243136][ T6076] veth1_vlan: entered promiscuous mode [ 287.687235][ T6076] veth0_macvtap: entered promiscuous mode [ 287.837331][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.845294][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.859872][ T6076] veth1_macvtap: entered promiscuous mode [ 288.004915][ T2533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.028174][ T2533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.037974][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.056204][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.074805][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.085448][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.099785][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.111356][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.126844][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.143377][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.157757][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.210265][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.242033][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.283559][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.326098][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.352344][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.377970][ T5243] Bluetooth: hci7: unexpected event 0x07 length: 15 < 255 [ 288.400319][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.431359][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.449084][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.463179][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.488665][ T6076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.502363][ T6076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.512737][ T6076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.531173][ T6076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.818210][ T6366] netlink: 'syz.3.139': attribute type 10 has an invalid length. [ 288.864699][ T6366] team0: left allmulticast mode [ 288.892053][ T6366] team_slave_0: left allmulticast mode [ 288.946097][ T6366] team_slave_1: left allmulticast mode [ 288.951989][ T6366] team0: left promiscuous mode [ 288.956947][ T6366] team_slave_0: left promiscuous mode [ 288.965549][ T6366] team_slave_1: left promiscuous mode [ 288.978956][ T6366] bridge0: port 3(team0) entered disabled state [ 289.012069][ T6366] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.023171][ T6366] bond0: (slave team0): Enslaving as an active interface with an up link [ 289.051691][ T6373] netlink: 'syz.3.139': attribute type 10 has an invalid length. [ 289.121589][ T6373] bond0: (slave team0): Releasing backup interface [ 289.157793][ T6373] bridge0: port 3(team0) entered blocking state [ 289.164264][ T6373] bridge0: port 3(team0) entered disabled state [ 289.178737][ T6373] team0: entered allmulticast mode [ 289.184404][ T6373] team_slave_0: entered allmulticast mode [ 289.212348][ T6373] team_slave_1: entered allmulticast mode [ 289.231616][ T6373] team0: entered promiscuous mode [ 289.240103][ T6373] team_slave_0: entered promiscuous mode [ 289.255742][ T6373] team_slave_1: entered promiscuous mode [ 289.298111][ T6377] netlink: 'syz.2.140': attribute type 10 has an invalid length. [ 289.324542][ T6377] ipvlan1: entered promiscuous mode [ 289.350496][ T6377] team0: Device ipvlan1 failed to register rx_handler [ 289.455542][ T6381] tap0: tun_chr_ioctl cmd 2147767519 [ 289.467303][ T6382] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.141'. [ 289.679253][ T2552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.725264][ T2552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.932032][ T6390] warning: `syz.2.144' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 290.318960][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.347193][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.372565][ T6398] netlink: 'syz.3.146': attribute type 9 has an invalid length. [ 290.382066][ T6398] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.146'. [ 290.540421][ T6400] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 290.567839][ T6400] bridge0: port 3(macsec0) entered blocking state [ 290.582721][ T6400] bridge0: port 3(macsec0) entered disabled state [ 290.657265][ T6400] macsec0: entered allmulticast mode [ 290.686517][ T6400] veth1_macvtap: entered allmulticast mode [ 290.703661][ T6401] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.147'. [ 290.724411][ T6401] openvswitch: netlink: Multiple metadata blocks provided [ 290.783472][ T6400] macsec0: entered promiscuous mode [ 290.807786][ T6400] bridge0: port 3(macsec0) entered blocking state [ 290.815890][ T6400] bridge0: port 3(macsec0) entered forwarding state [ 295.408607][ T6419] netlink: 'syz.0.150': attribute type 3 has an invalid length. [ 295.435737][ T6403] netlink: 'syz.2.148': attribute type 10 has an invalid length. [ 295.444227][ T6419] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.150'. [ 295.454035][ T6403] team0: left allmulticast mode [ 295.476623][ T6403] team_slave_0: left allmulticast mode [ 295.482183][ T6403] team_slave_1: left allmulticast mode [ 295.526220][ T6403] team0: left promiscuous mode [ 295.531100][ T6403] team_slave_0: left promiscuous mode [ 295.584581][ T6403] team_slave_1: left promiscuous mode [ 295.624594][ T6403] bridge0: port 3(team0) entered disabled state [ 295.749061][ T6403] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.786607][ T6403] bond0: (slave team0): Enslaving as an active interface with an up link [ 295.854079][ T6405] netlink: 'syz.2.148': attribute type 10 has an invalid length. [ 295.898093][ T6405] bond0: (slave team0): Releasing backup interface [ 295.954433][ T6405] bridge0: port 3(team0) entered blocking state [ 295.996453][ T6431] netlink: 168 bytes leftover after parsing attributes in process `syz.0.150'. [ 296.026156][ T6405] bridge0: port 3(team0) entered disabled state [ 296.032795][ T6405] team0: entered allmulticast mode [ 296.076011][ T6405] team_slave_0: entered allmulticast mode [ 296.081839][ T6405] team_slave_1: entered allmulticast mode [ 296.138233][ T6405] team0: entered promiscuous mode [ 296.166559][ T6405] team_slave_0: entered promiscuous mode [ 296.198708][ T6405] team_slave_1: entered promiscuous mode [ 296.658055][ T6431] netlink: 'syz.0.150': attribute type 29 has an invalid length. [ 296.704033][ T6432] bridge0: port 3(macsec0) entered disabled state [ 296.711028][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.718957][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.752676][ T6436] netlink: 'syz.1.152': attribute type 4 has an invalid length. [ 296.772030][ T6436] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.152'. [ 297.084366][ T6439] netlink: 'syz.2.153': attribute type 29 has an invalid length. [ 297.093785][ T6442] netlink: 'syz.2.153': attribute type 29 has an invalid length. [ 297.103303][ T6444] netlink: 'syz.2.153': attribute type 21 has an invalid length. [ 297.111982][ T6443] netlink: 'syz.2.153': attribute type 29 has an invalid length. [ 297.665065][ T6455] netlink: 152 bytes leftover after parsing attributes in process `syz.4.157'. [ 297.836875][ T6456] tap0: tun_chr_ioctl cmd 2147767519 [ 297.895447][ T6459] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.156'. [ 298.229172][ T6471] netlink: 'syz.2.161': attribute type 4 has an invalid length. [ 298.318830][ T6465] netlink: 48569 bytes leftover after parsing attributes in process `syz.4.160'. [ 298.345399][ T6471] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.161'. [ 298.558096][ T5243] Bluetooth: hci6: unexpected event 0x16 length: 15 > 6 [ 298.631304][ T6475] team0: left allmulticast mode [ 298.716306][ T6475] team_slave_0: left allmulticast mode [ 298.781508][ T6475] team_slave_1: left allmulticast mode [ 298.815758][ T6475] team0: left promiscuous mode [ 299.055478][ T6475] team_slave_0: left promiscuous mode [ 299.086315][ T6475] team_slave_1: left promiscuous mode [ 299.127515][ T6475] bridge0: port 3(team0) entered disabled state [ 299.361361][ T6475] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.382971][ T6475] bond0: (slave team0): Enslaving as an active interface with an up link [ 299.411923][ T6476] bond0: (slave team0): Releasing backup interface [ 299.419469][ T6485] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.163'. [ 299.490121][ T6476] bridge0: port 3(team0) entered blocking state [ 299.546692][ T6476] bridge0: port 3(team0) entered disabled state [ 299.553262][ T6476] team0: entered allmulticast mode [ 299.576200][ T6476] team_slave_0: entered allmulticast mode [ 299.596363][ T6476] team_slave_1: entered allmulticast mode [ 299.613626][ T6476] team0: entered promiscuous mode [ 299.625670][ T6476] team_slave_0: entered promiscuous mode [ 299.638319][ T6476] team_slave_1: entered promiscuous mode [ 300.033329][ T6499] team0: left allmulticast mode [ 300.042181][ T6499] team_slave_0: left allmulticast mode [ 300.055583][ T6499] team_slave_1: left allmulticast mode [ 300.062930][ T6499] team0: left promiscuous mode [ 300.081435][ T6499] team_slave_0: left promiscuous mode [ 300.111443][ T6499] team_slave_1: left promiscuous mode [ 300.167307][ T6499] bridge0: port 3(team0) entered disabled state [ 300.199788][ T6499] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.221501][ T6499] bond0: (slave team0): Enslaving as an active interface with an up link [ 300.300295][ T6507] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.167'. [ 300.426512][ T6505] tap0: tun_chr_ioctl cmd 2147767519 [ 300.617165][ T6511] netlink: 152 bytes leftover after parsing attributes in process `syz.0.171'. [ 302.054300][ T6524] validate_nla: 4 callbacks suppressed [ 302.054321][ T6524] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 302.077088][ T6524] bridge0: port 4(team0) entered blocking state [ 302.083598][ T6524] bridge0: port 4(team0) entered disabled state [ 302.110596][ T6524] team0: entered allmulticast mode [ 302.136097][ T6524] team_slave_0: entered allmulticast mode [ 302.151858][ T6524] team_slave_1: entered allmulticast mode [ 302.163633][ T6524] team0: entered promiscuous mode [ 302.172011][ T6524] team_slave_0: entered promiscuous mode [ 302.178722][ T6524] team_slave_1: entered promiscuous mode [ 302.211041][ T6527] wg2: entered promiscuous mode [ 302.220545][ T6527] wg2: entered allmulticast mode [ 302.229064][ T6519] netlink: 48569 bytes leftover after parsing attributes in process `syz.1.174'. [ 306.120278][ T6572] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.184'. [ 306.548443][ T6565] netlink: 'syz.2.185': attribute type 10 has an invalid length. [ 306.572936][ T6563] netlink: 152 bytes leftover after parsing attributes in process `syz.3.186'. [ 306.911783][ T6577] netlink: 'syz.4.188': attribute type 9 has an invalid length. [ 306.956289][ T6577] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.188'. [ 307.117348][ T6581] @ÿ: renamed from veth0_vlan (while UP) [ 309.425243][ T6617] @ÿ: renamed from veth0_vlan (while UP) [ 310.270876][ T6628] tap0: tun_chr_ioctl cmd 2147767519 [ 310.349726][ T6628] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.200'. [ 310.868927][ T6641] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.202'. [ 311.149222][ T6637] netlink: 'syz.1.203': attribute type 3 has an invalid length. [ 311.305556][ T6637] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.203'. [ 314.999993][ T6640] tap0: tun_chr_ioctl cmd 2147767519 [ 315.960974][ T6667] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 316.006985][ T6667] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.210'. [ 316.310669][ T6674] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 316.341947][ T6674] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.212'. [ 316.370451][ T6678] netlink: 'syz.3.212': attribute type 3 has an invalid length. [ 316.387865][ T6678] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.212'. [ 316.503070][ T6677] mac80211_hwsim hwsim30 ;£: renamed from wlan1 (while UP) [ 316.836898][ T6683] netlink: 'syz.2.215': attribute type 3 has an invalid length. [ 316.934766][ T6683] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.215'. [ 317.245353][ T6691] netlink: 48569 bytes leftover after parsing attributes in process `syz.0.218'. [ 317.279028][ T6688] netlink: 'syz.3.216': attribute type 21 has an invalid length. [ 317.301165][ T6688] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.393758][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.400457][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.982499][ T5243] Bluetooth: hci8: unexpected event 0x08 length: 15 > 4 [ 318.015513][ T6714] netlink: 'syz.4.223': attribute type 10 has an invalid length. [ 318.189950][ T6714] team0: Port device geneve1 added [ 318.230039][ T6716] netlink: 164 bytes leftover after parsing attributes in process `syz.0.225'. [ 318.588666][ T6718] delete_channel: no stack [ 318.592494][ T6724] netlink: 'syz.1.227': attribute type 4 has an invalid length. [ 318.716295][ T6724] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.227'. [ 319.088247][ T6731] netlink: 'syz.3.228': attribute type 3 has an invalid length. [ 319.152743][ T6723] netlink: 'syz.3.228': attribute type 3 has an invalid length. [ 319.186043][ T6731] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.228'. [ 319.215983][ T6723] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.228'. [ 319.709818][ T6736] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 319.815326][ T6736] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.861160][ T6736] bond0: (slave team0): Enslaving as an active interface with an up link [ 319.893054][ T6738] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 319.994216][ T6738] bond0: (slave team0): Releasing backup interface [ 320.032704][ T6738] bridge0: port 3(team0) entered blocking state [ 320.054418][ T6738] bridge0: port 3(team0) entered disabled state [ 320.090786][ T6738] team0: entered allmulticast mode [ 320.144970][ T6738] team_slave_0: entered allmulticast mode [ 320.183569][ T6738] team_slave_1: entered allmulticast mode [ 320.194601][ T6738] team0: entered promiscuous mode [ 320.202174][ T6738] team_slave_0: entered promiscuous mode [ 320.213277][ T6738] team_slave_1: entered promiscuous mode [ 320.241678][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.252421][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.331551][ T6748] netlink: 152 bytes leftover after parsing attributes in process `syz.2.234'. [ 320.789520][ T5243] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 321.203235][ T6770] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.242'. [ 321.411815][ T6778] validate_nla: 1 callbacks suppressed [ 321.411843][ T6778] netlink: 'syz.3.243': attribute type 4 has an invalid length. [ 321.522529][ T6776] netlink: 'syz.4.242': attribute type 3 has an invalid length. [ 321.549172][ T6778] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.243'. [ 321.669231][ T6776] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.242'. [ 322.016106][ T6783] netlink: 'syz.0.244': attribute type 3 has an invalid length. [ 322.025253][ T6783] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.244'. [ 322.322765][ T6787] netlink: 152 bytes leftover after parsing attributes in process `syz.1.246'. [ 322.602838][ T5243] Bluetooth: hci8: unexpected event 0x08 length: 15 > 4 [ 322.640192][ T6799] netlink: 'syz.4.250': attribute type 21 has an invalid length. [ 322.684966][ T6799] IPv6: NLM_F_CREATE should be specified when creating new route [ 322.738063][ T6804] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.250'. [ 322.813382][ T6806] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 322.980066][ T6806] team0: left allmulticast mode [ 323.067399][ T6806] team_slave_0: left allmulticast mode [ 323.127302][ T6806] team_slave_1: left allmulticast mode [ 323.179752][ T6806] team0: left promiscuous mode [ 323.235710][ T6806] team_slave_0: left promiscuous mode [ 323.324557][ T6806] team_slave_1: left promiscuous mode [ 323.332343][ T6806] bridge0: port 4(team0) entered disabled state [ 323.360436][ T6806] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.388796][ T6806] bond0: (slave team0): Enslaving as an active interface with an up link [ 323.399592][ T6808] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 323.410818][ T6808] bond0: (slave team0): Releasing backup interface [ 323.437353][ T6808] bridge0: port 4(team0) entered blocking state [ 323.458629][ T6808] bridge0: port 4(team0) entered disabled state [ 323.469565][ T6808] team0: entered allmulticast mode [ 323.477224][ T6808] team_slave_0: entered allmulticast mode [ 323.483284][ T6808] team_slave_1: entered allmulticast mode [ 323.494393][ T6808] team0: entered promiscuous mode [ 323.499784][ T6808] team_slave_0: entered promiscuous mode [ 323.506883][ T6808] team_slave_1: entered promiscuous mode [ 323.599047][ T6814] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 323.739518][ T6816] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 323.765452][ T6816] bond0: (slave team0): Releasing backup interface [ 323.811607][ T6816] bridge0: port 3(team0) entered blocking state [ 323.854844][ T6816] bridge0: port 3(team0) entered disabled state [ 323.894261][ T6816] team0: entered allmulticast mode [ 323.913428][ T6816] team_slave_0: entered allmulticast mode [ 323.920298][ T6816] team_slave_1: entered allmulticast mode [ 323.929265][ T6816] team0: entered promiscuous mode [ 323.934478][ T6816] team_slave_0: entered promiscuous mode [ 323.952601][ T6816] team_slave_1: entered promiscuous mode [ 324.792522][ T6838] netlink: 152 bytes leftover after parsing attributes in process `syz.3.261'. [ 325.225667][ T6845] netlink: 'syz.3.263': attribute type 10 has an invalid length. [ 325.262640][ T6845] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.263'. [ 325.293630][ T6847] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 325.313048][ T6847] team0: left allmulticast mode [ 325.345293][ T6847] team_slave_0: left allmulticast mode [ 325.360733][ T6847] team_slave_1: left allmulticast mode [ 325.400252][ T6847] team0: left promiscuous mode [ 325.405100][ T6847] team_slave_0: left promiscuous mode [ 325.444922][ T6847] team_slave_1: left promiscuous mode [ 325.476785][ T6847] bridge0: port 3(team0) entered disabled state [ 326.282946][ T6847] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.298358][ T6847] bond0: (slave team0): Enslaving as an active interface with an up link [ 326.313933][ T6856] bond0: (slave team0): Releasing backup interface [ 326.324199][ T6856] bridge0: port 3(team0) entered blocking state [ 326.331257][ T6856] bridge0: port 3(team0) entered disabled state [ 326.341478][ T6856] team0: entered allmulticast mode [ 326.348511][ T6856] team_slave_0: entered allmulticast mode [ 326.354581][ T6856] team_slave_1: entered allmulticast mode [ 326.365042][ T6856] team0: entered promiscuous mode [ 326.371536][ T6856] team_slave_0: entered promiscuous mode [ 326.377868][ T6856] team_slave_1: entered promiscuous mode [ 326.439609][ T6860] netlink: 48 bytes leftover after parsing attributes in process `syz.0.265'. [ 326.648826][ T6874] validate_nla: 1 callbacks suppressed [ 326.648848][ T6874] netlink: 'syz.4.269': attribute type 9 has an invalid length. [ 326.677305][ T6874] netlink: 399 bytes leftover after parsing attributes in process `syz.4.269'. [ 328.343864][ T6899] netlink: 'syz.4.279': attribute type 10 has an invalid length. [ 328.482145][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.729794][ T6899] bond0: (slave team0): Enslaving as an active interface with an up link [ 328.806739][ T6902] netlink: 'syz.4.279': attribute type 10 has an invalid length. [ 328.913382][ T6903] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 328.948180][ T6902] bond0: (slave team0): Releasing backup interface [ 329.278545][ T6902] bridge0: port 3(team0) entered blocking state [ 329.285255][ T6902] bridge0: port 3(team0) entered disabled state [ 329.372860][ T6902] team0: entered allmulticast mode [ 329.413459][ T6902] team_slave_0: entered allmulticast mode [ 329.466391][ T6902] team_slave_1: entered allmulticast mode [ 329.521022][ T6902] geneve1: entered allmulticast mode [ 329.722101][ T6902] team0: entered promiscuous mode [ 329.793251][ T6902] team_slave_0: entered promiscuous mode [ 329.830575][ T6902] team_slave_1: entered promiscuous mode [ 329.858166][ T6902] geneve1: entered promiscuous mode [ 329.965933][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.975200][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.368788][ T6919] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 330.396369][ T6919] team0: left allmulticast mode [ 330.423599][ T6919] team_slave_0: left allmulticast mode [ 330.441160][ T6919] team_slave_1: left allmulticast mode [ 330.455900][ T6919] geneve1: left allmulticast mode [ 330.481848][ T6919] team0: left promiscuous mode [ 330.498733][ T6919] team_slave_0: left promiscuous mode [ 330.504454][ T6919] team_slave_1: left promiscuous mode [ 330.522687][ T6923] netlink: 'syz.1.284': attribute type 3 has an invalid length. [ 330.526116][ T6919] geneve1: left promiscuous mode [ 330.546449][ T6919] bridge0: port 3(team0) entered disabled state [ 330.561633][ T6923] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.284'. [ 330.582074][ T6919] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.656140][ T6919] bond0: (slave team0): Enslaving as an active interface with an up link [ 330.716097][ T6920] netlink: 'syz.4.283': attribute type 10 has an invalid length. [ 330.790262][ T6920] bond0: (slave team0): Releasing backup interface [ 330.854580][ T6920] bridge0: port 3(team0) entered blocking state [ 330.876161][ T6920] bridge0: port 3(team0) entered disabled state [ 330.893933][ T6920] team0: entered allmulticast mode [ 330.912586][ T6920] team_slave_0: entered allmulticast mode [ 330.926100][ T6920] team_slave_1: entered allmulticast mode [ 330.931910][ T6920] geneve1: entered allmulticast mode [ 330.967720][ T6920] team0: entered promiscuous mode [ 330.985365][ T6920] team_slave_0: entered promiscuous mode [ 331.002665][ T6920] team_slave_1: entered promiscuous mode [ 331.015627][ T6920] geneve1: entered promiscuous mode [ 331.196553][ T6926] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 331.252351][ T6926] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.285'. [ 331.315594][ T6936] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 331.330052][ T6930] netlink: 'syz.2.285': attribute type 3 has an invalid length. [ 331.338161][ T6936] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.287'. [ 331.391672][ T6930] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.285'. [ 331.394137][ T6940] netlink: 'syz.4.289': attribute type 10 has an invalid length. [ 331.421905][ T6940] team0: left allmulticast mode [ 331.434633][ T6940] team_slave_0: left allmulticast mode [ 331.453862][ T6940] team_slave_1: left allmulticast mode [ 331.459992][ T6940] geneve1: left allmulticast mode [ 331.465343][ T6940] team0: left promiscuous mode [ 331.477136][ T6940] team_slave_0: left promiscuous mode [ 331.501187][ T6940] team_slave_1: left promiscuous mode [ 331.540463][ T6940] geneve1: left promiscuous mode [ 331.599374][ T6940] bridge0: port 3(team0) entered disabled state [ 331.644535][ T6940] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.662441][ T6940] bond0: (slave team0): Enslaving as an active interface with an up link [ 331.761646][ T6941] netlink: 'syz.4.289': attribute type 10 has an invalid length. [ 331.778144][ T6941] bond0: (slave team0): Releasing backup interface [ 331.791643][ T6941] bridge0: port 3(team0) entered blocking state [ 331.811438][ T6941] bridge0: port 3(team0) entered disabled state [ 331.831104][ T6941] team0: entered allmulticast mode [ 331.840417][ T6941] team_slave_0: entered allmulticast mode [ 331.850876][ T6941] team_slave_1: entered allmulticast mode [ 331.860193][ T6941] geneve1: entered allmulticast mode [ 331.875465][ T6941] team0: entered promiscuous mode [ 331.884421][ T6941] team_slave_0: entered promiscuous mode [ 331.919506][ T6941] team_slave_1: entered promiscuous mode [ 331.925561][ T6941] geneve1: entered promiscuous mode [ 332.947381][ T6960] netlink: 152 bytes leftover after parsing attributes in process `syz.3.295'. [ 333.292564][ T6973] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 333.307003][ T6973] team0: left allmulticast mode [ 333.316546][ T6973] team_slave_0: left allmulticast mode [ 333.335918][ T6973] team_slave_1: left allmulticast mode [ 333.341455][ T6973] team0: left promiscuous mode [ 333.366055][ T6973] team_slave_0: left promiscuous mode [ 333.388226][ T6973] team_slave_1: left promiscuous mode [ 333.394059][ T6973] bridge0: port 3(team0) entered disabled state [ 333.427819][ T6973] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.469341][ T6973] bond0: (slave team0): Enslaving as an active interface with an up link [ 333.518217][ T6975] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 333.565439][ T6975] bond0: (slave team0): Releasing backup interface [ 333.662210][ T6975] bridge0: port 3(team0) entered blocking state [ 333.701078][ T6975] bridge0: port 3(team0) entered disabled state [ 333.751858][ T6975] team0: entered allmulticast mode [ 333.779034][ T6975] team_slave_0: entered allmulticast mode [ 333.797085][ T6975] team_slave_1: entered allmulticast mode [ 333.814321][ T6975] team0: entered promiscuous mode [ 333.836037][ T6975] team_slave_0: entered promiscuous mode [ 333.867526][ T6975] team_slave_1: entered promiscuous mode [ 334.084659][ T6993] netlink: 'syz.1.304': attribute type 3 has an invalid length. [ 334.105603][ T6993] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.304'. [ 334.113097][ T6988] syz.4.303 (6988) used greatest stack depth: 18720 bytes left [ 335.861122][ T7030] netlink: 191384 bytes leftover after parsing attributes in process `syz.2.314'. [ 335.961405][ T7030] netlink: 'syz.2.314': attribute type 19 has an invalid length. [ 336.016157][ T7030] netlink: 1 bytes leftover after parsing attributes in process `syz.2.314'. [ 336.371664][ T7047] netlink: 'syz.3.319': attribute type 4 has an invalid length. [ 336.436089][ T7047] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.319'. [ 336.914984][ T7053] netlink: 'syz.0.320': attribute type 3 has an invalid length. [ 336.937650][ T7053] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.320'. [ 337.077761][ T7057] netlink: 152 bytes leftover after parsing attributes in process `syz.2.323'. [ 337.432867][ T7075] netlink: 48 bytes leftover after parsing attributes in process `syz.4.330'. [ 337.825442][ T7086] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 337.875062][ T7086] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.333'. [ 338.011798][ T7092] netlink: 'syz.1.335': attribute type 4 has an invalid length. [ 338.058448][ T7092] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.335'. [ 338.533587][ T7096] IPv6: NLM_F_REPLACE set, but no existing node found! [ 338.780434][ T7100] netlink: 'syz.3.339': attribute type 3 has an invalid length. [ 338.811899][ T7100] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.339'. [ 339.157680][ T7114] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 339.196892][ T7114] team0: left allmulticast mode [ 339.201876][ T7114] team_slave_0: left allmulticast mode [ 339.228646][ T7114] team_slave_1: left allmulticast mode [ 339.234264][ T7114] team0: left promiscuous mode [ 339.264478][ T7114] team_slave_0: left promiscuous mode [ 339.283837][ T7114] team_slave_1: left promiscuous mode [ 339.309131][ T7114] bridge0: port 3(team0) entered disabled state [ 339.542086][ T7114] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.620773][ T7114] bond0: (slave team0): Enslaving as an active interface with an up link [ 339.651013][ T7115] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 339.725936][ T7115] bond0: (slave team0): Releasing backup interface [ 339.816600][ T7115] bridge0: port 3(team0) entered blocking state [ 339.823030][ T7115] bridge0: port 3(team0) entered disabled state [ 339.900104][ T7115] team0: entered allmulticast mode [ 339.904174][ T7129] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 339.905270][ T7115] team_slave_0: entered allmulticast mode [ 339.905295][ T7115] team_slave_1: entered allmulticast mode [ 339.908973][ T7115] team0: entered promiscuous mode [ 339.930694][ T7129] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.349'. [ 340.020324][ T7115] team_slave_0: entered promiscuous mode [ 340.046681][ T7115] team_slave_1: entered promiscuous mode [ 340.086951][ T7136] netlink: 'syz.3.350': attribute type 4 has an invalid length. [ 340.095449][ T7136] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.350'. [ 341.016460][ T7151] netlink: 'syz.1.356': attribute type 3 has an invalid length. [ 341.025431][ T7151] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.356'. [ 342.761863][ T5243] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 342.784922][ T7186] netlink: 'syz.4.364': attribute type 4 has an invalid length. [ 342.865542][ T7186] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.364'. [ 343.472252][ T7201] netlink: 'syz.1.369': attribute type 3 has an invalid length. [ 343.526712][ T7201] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.369'. [ 343.714284][ T7203] netlink: 3068 bytes leftover after parsing attributes in process `syz.4.370'. [ 343.814316][ T7203] netlink: 'syz.4.370': attribute type 1 has an invalid length. [ 344.038727][ T7203] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.370'. [ 344.607843][ T7215] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.373'. [ 344.651117][ T7215] netlink: 500 bytes leftover after parsing attributes in process `syz.0.373'. [ 345.761005][ T5243] Bluetooth: hci8: unexpected event 0x08 length: 15 > 4 [ 345.830677][ T7231] netlink: 'syz.1.380': attribute type 4 has an invalid length. [ 345.847718][ T7231] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.380'. [ 345.896993][ T7235] FAULT_INJECTION: forcing a failure. [ 345.896993][ T7235] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 345.943499][ T7235] CPU: 1 UID: 0 PID: 7235 Comm: syz.4.381 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 345.954296][ T7235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 345.964409][ T7235] Call Trace: [ 345.967731][ T7235] [ 345.970705][ T7235] dump_stack_lvl+0x241/0x360 [ 345.975445][ T7235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.980686][ T7235] ? __pfx__printk+0x10/0x10 [ 345.985300][ T7235] ? __pfx_lock_release+0x10/0x10 [ 345.990360][ T7235] should_fail_ex+0x3b0/0x4e0 [ 345.995076][ T7235] _copy_from_iter+0x1f6/0x1960 [ 346.000045][ T7235] ? __virt_addr_valid+0x183/0x530 [ 346.005257][ T7235] ? skb_set_owner_w+0x238/0x3e0 [ 346.010231][ T7235] ? __pfx__copy_from_iter+0x10/0x10 [ 346.015664][ T7235] ? __pfx__copy_from_iter+0x10/0x10 [ 346.020981][ T7235] ? page_copy_sane+0x154/0x260 [ 346.025854][ T7235] copy_page_from_iter+0x7a/0x100 [ 346.030931][ T7235] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 346.036776][ T7235] tun_get_user+0xec3/0x4720 [ 346.041412][ T7235] ? perf_trace_lock+0x136/0x490 [ 346.046376][ T7235] ? __lock_acquire+0x137a/0x2040 [ 346.051433][ T7235] ? __pfx_tun_get_user+0x10/0x10 [ 346.056493][ T7235] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 346.061967][ T7235] ? tun_get+0x1e/0x2f0 [ 346.066161][ T7235] ? __pfx_lock_release+0x10/0x10 [ 346.071312][ T7235] ? tun_get+0x1e/0x2f0 [ 346.075488][ T7235] ? tun_get+0x27d/0x2f0 [ 346.079749][ T7235] tun_chr_write_iter+0x113/0x1f0 [ 346.084880][ T7235] vfs_write+0xa72/0xc90 [ 346.089142][ T7235] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 346.094803][ T7235] ? __pfx_vfs_write+0x10/0x10 [ 346.099784][ T7235] ksys_write+0x1a0/0x2c0 [ 346.104136][ T7235] ? __pfx_ksys_write+0x10/0x10 [ 346.109005][ T7235] ? do_syscall_64+0x100/0x230 [ 346.113788][ T7235] ? do_syscall_64+0xb6/0x230 [ 346.118483][ T7235] do_syscall_64+0xf3/0x230 [ 346.123003][ T7235] ? clear_bhb_loop+0x35/0x90 [ 346.127707][ T7235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.133631][ T7235] RIP: 0033:0x7f2c93f7def9 [ 346.138061][ T7235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.157783][ T7235] RSP: 002b:00007f2c94d00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.166314][ T7235] RAX: ffffffffffffffda RBX: 00007f2c94135f80 RCX: 00007f2c93f7def9 [ 346.174301][ T7235] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 346.182285][ T7235] RBP: 00007f2c94d00090 R08: 0000000000000000 R09: 0000000000000000 [ 346.190271][ T7235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.198264][ T7235] R13: 0000000000000000 R14: 00007f2c94135f80 R15: 00007ffea80eeeb8 [ 346.206274][ T7235] [ 346.332277][ T7239] netlink: 'syz.2.382': attribute type 3 has an invalid length. [ 346.386055][ T7239] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.382'. [ 346.484234][ T7245] netlink: 'syz.4.384': attribute type 21 has an invalid length. [ 346.509246][ T7245] netlink: 15462 bytes leftover after parsing attributes in process `syz.4.384'. [ 346.528893][ T7248] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 346.548234][ T7248] team0: left allmulticast mode [ 346.565161][ T7248] team_slave_0: left allmulticast mode [ 346.572460][ T7248] team_slave_1: left allmulticast mode [ 346.580866][ T7248] team0: left promiscuous mode [ 346.586742][ T7248] team_slave_0: left promiscuous mode [ 346.596329][ T7248] team_slave_1: left promiscuous mode [ 346.604778][ T7254] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.384'. [ 346.626253][ T7248] bridge0: port 4(team0) entered disabled state [ 346.649890][ T7248] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.664039][ T7248] bond0: (slave team0): Enslaving as an active interface with an up link [ 346.689512][ T7245] netlink: 48 bytes leftover after parsing attributes in process `syz.4.384'. [ 346.783248][ T7252] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 346.821553][ T7252] bond0: (slave team0): Releasing backup interface [ 346.869435][ T7252] bridge0: port 4(team0) entered blocking state [ 346.895338][ T7252] bridge0: port 4(team0) entered disabled state [ 346.915050][ T7252] team0: entered allmulticast mode [ 346.928489][ T7252] team_slave_0: entered allmulticast mode [ 346.954727][ T7252] team_slave_1: entered allmulticast mode [ 346.962680][ T7252] team0: entered promiscuous mode [ 346.972964][ T7252] team_slave_0: entered promiscuous mode [ 346.995038][ T7252] team_slave_1: entered promiscuous mode [ 347.013787][ T7253] netlink: 'syz.3.386': attribute type 10 has an invalid length. [ 347.041380][ T7253] team0: left allmulticast mode [ 347.047604][ T7253] team_slave_0: left allmulticast mode [ 347.064745][ T7253] team_slave_1: left allmulticast mode [ 347.074044][ T7253] team0: left promiscuous mode [ 347.087616][ T7253] team_slave_0: left promiscuous mode [ 347.093568][ T7253] team_slave_1: left promiscuous mode [ 347.111273][ T7253] bridge0: port 3(team0) entered disabled state [ 347.155585][ T7253] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.183586][ T7253] bond0: (slave team0): Enslaving as an active interface with an up link [ 347.213618][ T7256] netlink: 'syz.3.386': attribute type 10 has an invalid length. [ 347.243589][ T7256] bond0: (slave team0): Releasing backup interface [ 347.291415][ T7256] bridge0: port 3(team0) entered blocking state [ 347.343964][ T7256] bridge0: port 3(team0) entered disabled state [ 347.356888][ T7256] team0: entered allmulticast mode [ 347.375775][ T7256] team_slave_0: entered allmulticast mode [ 347.384850][ T7256] team_slave_1: entered allmulticast mode [ 347.387474][ T7278] netlink: zone id is out of range [ 347.402599][ T7256] team0: entered promiscuous mode [ 347.406012][ T7278] netlink: zone id is out of range [ 347.412883][ T7278] netlink: zone id is out of range [ 347.413081][ T7256] team_slave_0: entered promiscuous mode [ 347.426063][ T7278] netlink: zone id is out of range [ 347.431225][ T7278] netlink: zone id is out of range [ 347.432674][ T7256] team_slave_1: entered promiscuous mode [ 347.444548][ T7278] netlink: zone id is out of range [ 347.458576][ T7278] netlink: zone id is out of range [ 347.475750][ T7278] netlink: zone id is out of range [ 347.481849][ T7278] netlink: zone id is out of range [ 347.516248][ T7278] netlink: zone id is out of range [ 348.268359][ T5243] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 348.578941][ T7295] validate_nla: 1 callbacks suppressed [ 348.578965][ T7295] netlink: 'syz.2.397': attribute type 4 has an invalid length. [ 348.657903][ T7295] __nla_validate_parse: 1 callbacks suppressed [ 348.657923][ T7295] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.397'. [ 348.729731][ T7303] netlink: 'syz.3.398': attribute type 3 has an invalid length. [ 348.844082][ T7303] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.398'. [ 349.095245][ T7312] tap0: tun_chr_ioctl cmd 2147767519 [ 349.207103][ T7312] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.400'. [ 350.230615][ T7325] IPv6: NLM_F_REPLACE set, but no existing node found! [ 350.871987][ T5243] Bluetooth: hci8: unexpected event 0x08 length: 15 > 4 [ 351.249204][ T7350] netlink: 'syz.1.412': attribute type 10 has an invalid length. [ 351.327535][ T7350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.473986][ T7351] netlink: 'syz.2.414': attribute type 3 has an invalid length. [ 351.499978][ T7351] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.414'. [ 351.844838][ T7350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.184940][ T7350] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 352.236353][ T7367] netlink: 'syz.4.417': attribute type 9 has an invalid length. [ 352.244321][ T7367] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.417'. [ 353.310186][ T5243] Bluetooth: hci7: unexpected event 0x08 length: 15 > 4 [ 353.982316][ T7389] netlink: 'syz.0.426': attribute type 29 has an invalid length. [ 354.032357][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 354.094075][ T7400] netlink: 'syz.3.429': attribute type 3 has an invalid length. [ 354.118085][ T7400] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.429'. [ 355.186946][ T7413] netlink: 'syz.0.434': attribute type 9 has an invalid length. [ 355.206325][ T7413] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.434'. [ 355.279593][ T7422] netlink: 'syz.4.436': attribute type 1 has an invalid length. [ 355.287870][ T7422] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.436'. [ 356.328029][ T7429] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 356.339015][ T7429] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.439'. [ 356.367597][ T7434] netlink: 'syz.1.439': attribute type 3 has an invalid length. [ 356.375451][ T7434] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.439'. [ 356.469038][ T7424] delete_channel: no stack [ 357.457099][ T7449] netlink: 'syz.0.446': attribute type 4 has an invalid length. [ 357.542947][ T7449] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.446'. [ 357.559181][ T7455] netlink: 'syz.1.445': attribute type 3 has an invalid length. [ 357.643357][ T7455] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.445'. [ 358.246180][ T7466] netlink: 'syz.0.450': attribute type 9 has an invalid length. [ 358.260228][ T7466] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.450'. [ 359.893602][ T7475] delete_channel: no stack [ 360.069068][ T7486] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 360.115616][ T7486] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.455'. [ 360.164558][ T7482] netlink: 'syz.0.455': attribute type 3 has an invalid length. [ 360.205469][ T7482] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.455'. [ 360.899701][ T7503] netlink: 'syz.3.460': attribute type 4 has an invalid length. [ 360.908041][ T7503] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.460'. [ 361.703790][ T7507] netlink: 'syz.2.462': attribute type 3 has an invalid length. [ 361.740296][ T7507] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.462'. [ 362.047737][ T7518] IPv6: NLM_F_REPLACE set, but no existing node found! [ 362.099418][ T7519] netlink: 'syz.0.465': attribute type 9 has an invalid length. [ 362.114191][ T7519] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.465'. [ 363.129824][ T7535] netlink: 'syz.3.472': attribute type 4 has an invalid length. [ 363.163181][ T7535] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.472'. [ 364.227707][ T7553] netlink: 'syz.3.476': attribute type 3 has an invalid length. [ 364.266424][ T7553] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.476'. [ 364.337037][ T7557] netlink: 48569 bytes leftover after parsing attributes in process `syz.0.479'. [ 365.363268][ T7584] netlink: 'syz.1.486': attribute type 10 has an invalid length. [ 365.436281][ T7584] team0: left allmulticast mode [ 365.455779][ T7584] team_slave_0: left allmulticast mode [ 365.461890][ T7584] team_slave_1: left allmulticast mode [ 365.518090][ T7584] team0: left promiscuous mode [ 365.524742][ T7590] netlink: 'syz.2.487': attribute type 4 has an invalid length. [ 365.527915][ T7584] team_slave_0: left promiscuous mode [ 365.564189][ T7584] team_slave_1: left promiscuous mode [ 365.565675][ T7590] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.487'. [ 365.585646][ T7584] bridge0: port 3(team0) entered disabled state [ 365.709485][ T7584] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.775609][ T7598] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.489'. [ 365.840245][ T7584] bond0: (slave team0): Enslaving as an active interface with an up link [ 365.856535][ T7588] netlink: 'syz.1.486': attribute type 10 has an invalid length. [ 365.897853][ T7588] bond0: (slave team0): Releasing backup interface [ 366.005138][ T7588] bridge0: port 3(team0) entered blocking state [ 366.056472][ T7588] bridge0: port 3(team0) entered disabled state [ 366.082587][ T7588] team0: entered allmulticast mode [ 366.101511][ T7588] team_slave_0: entered allmulticast mode [ 366.124265][ T7588] team_slave_1: entered allmulticast mode [ 366.163582][ T7588] team0: entered promiscuous mode [ 366.188209][ T7588] team_slave_0: entered promiscuous mode [ 366.194119][ T7588] team_slave_1: entered promiscuous mode [ 366.231256][ T7605] netlink: 48 bytes leftover after parsing attributes in process `syz.3.490'. [ 367.892009][ T7632] netlink: 'syz.0.499': attribute type 3 has an invalid length. [ 367.946662][ T7632] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.499'. [ 368.103848][ T7641] netlink: 'syz.1.502': attribute type 4 has an invalid length. [ 368.126209][ T7641] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.502'. [ 368.401140][ T7645] FAULT_INJECTION: forcing a failure. [ 368.401140][ T7645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.493054][ T7645] CPU: 1 UID: 0 PID: 7645 Comm: syz.2.504 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 368.503714][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 368.513794][ T7645] Call Trace: [ 368.517090][ T7645] [ 368.520119][ T7645] dump_stack_lvl+0x241/0x360 [ 368.525014][ T7645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.530253][ T7645] ? __pfx__printk+0x10/0x10 [ 368.534873][ T7645] should_fail_ex+0x3b0/0x4e0 [ 368.539593][ T7645] _copy_from_user+0x2f/0xe0 [ 368.544198][ T7645] bpf_test_init+0x11f/0x180 [ 368.548904][ T7645] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 368.554287][ T7645] ? __pfx_lock_acquire+0x10/0x10 [ 368.559330][ T7645] ? __pfx_lock_release+0x10/0x10 [ 368.564378][ T7645] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 368.570190][ T7645] ? __fget_files+0x29/0x470 [ 368.574805][ T7645] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 368.580620][ T7645] bpf_prog_test_run+0x33a/0x3b0 [ 368.585661][ T7645] __sys_bpf+0x48d/0x810 [ 368.589925][ T7645] ? __pfx___sys_bpf+0x10/0x10 [ 368.594714][ T7645] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.600718][ T7645] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.607070][ T7645] ? do_syscall_64+0x100/0x230 [ 368.611851][ T7645] __x64_sys_bpf+0x7c/0x90 [ 368.616279][ T7645] do_syscall_64+0xf3/0x230 [ 368.620799][ T7645] ? clear_bhb_loop+0x35/0x90 [ 368.625490][ T7645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.631397][ T7645] RIP: 0033:0x7f0fabd7def9 [ 368.635823][ T7645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.655444][ T7645] RSP: 002b:00007f0facaa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.663870][ T7645] RAX: ffffffffffffffda RBX: 00007f0fabf35f80 RCX: 00007f0fabd7def9 [ 368.671849][ T7645] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 368.679829][ T7645] RBP: 00007f0facaa1090 R08: 0000000000000000 R09: 0000000000000000 [ 368.687805][ T7645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.695782][ T7645] R13: 0000000000000000 R14: 00007f0fabf35f80 R15: 00007ffcec8b6908 [ 368.703789][ T7645] [ 368.880049][ T7654] tap0: tun_chr_ioctl cmd 2147767519 [ 368.946295][ T7652] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.507'. [ 368.976573][ T7658] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 368.984585][ T7658] team0: left allmulticast mode [ 369.042917][ T7658] team_slave_0: left allmulticast mode [ 369.082341][ T7658] team_slave_1: left allmulticast mode [ 369.102526][ T7658] team0: left promiscuous mode [ 369.113248][ T7658] team_slave_0: left promiscuous mode [ 369.143824][ T7658] team_slave_1: left promiscuous mode [ 369.150633][ T7658] bridge0: port 3(team0) entered disabled state [ 369.181787][ T7658] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.198359][ T7658] bond0: (slave team0): Enslaving as an active interface with an up link [ 369.244528][ T7659] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 369.356896][ T7659] bond0: (slave team0): Releasing backup interface [ 369.433803][ T7659] bridge0: port 3(team0) entered blocking state [ 369.477865][ T7659] bridge0: port 3(team0) entered disabled state [ 369.496004][ T7659] team0: entered allmulticast mode [ 369.501201][ T7659] team_slave_0: entered allmulticast mode [ 369.526014][ T7659] team_slave_1: entered allmulticast mode [ 369.544405][ T7659] team0: entered promiscuous mode [ 369.556468][ T7659] team_slave_0: entered promiscuous mode [ 369.567288][ T7659] team_slave_1: entered promiscuous mode [ 369.894683][ T7677] netlink: 'syz.4.514': attribute type 9 has an invalid length. [ 369.933947][ T7677] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.514'. [ 370.046201][ T7679] tap0: tun_chr_ioctl cmd 2147767519 [ 370.104651][ T7675] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.513'. [ 370.207613][ T7688] netlink: 'syz.2.516': attribute type 3 has an invalid length. [ 370.216251][ T7688] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.516'. [ 370.449639][ T7692] netlink: 'syz.1.517': attribute type 4 has an invalid length. [ 370.476089][ T7692] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.517'. [ 370.561844][ T7696] FAULT_INJECTION: forcing a failure. [ 370.561844][ T7696] name failslab, interval 1, probability 0, space 0, times 1 [ 370.601296][ T7696] CPU: 1 UID: 0 PID: 7696 Comm: syz.0.520 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 370.612019][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 370.622153][ T7696] Call Trace: [ 370.625501][ T7696] [ 370.628586][ T7696] dump_stack_lvl+0x241/0x360 [ 370.633376][ T7696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.638666][ T7696] ? __pfx__printk+0x10/0x10 [ 370.643380][ T7696] ? ref_tracker_alloc+0x332/0x490 [ 370.648590][ T7696] should_fail_ex+0x3b0/0x4e0 [ 370.653386][ T7696] ? skb_clone+0x20c/0x390 [ 370.657882][ T7696] should_failslab+0xac/0x100 [ 370.662647][ T7696] ? skb_clone+0x20c/0x390 [ 370.667134][ T7696] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 370.672576][ T7696] skb_clone+0x20c/0x390 [ 370.676896][ T7696] __netlink_deliver_tap+0x3cc/0x7c0 [ 370.682260][ T7696] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.687581][ T7696] netlink_deliver_tap+0x19d/0x1b0 [ 370.692739][ T7696] netlink_unicast+0x7c4/0x990 [ 370.697588][ T7696] ? __pfx_netlink_unicast+0x10/0x10 [ 370.702915][ T7696] ? __virt_addr_valid+0x183/0x530 [ 370.708077][ T7696] ? __check_object_size+0x49c/0x900 [ 370.713410][ T7696] ? bpf_lsm_netlink_send+0x9/0x10 [ 370.718578][ T7696] netlink_sendmsg+0x8e4/0xcb0 [ 370.723430][ T7696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.728762][ T7696] ? __import_iovec+0x536/0x820 [ 370.733648][ T7696] ? aa_sock_msg_perm+0x91/0x160 [ 370.738634][ T7696] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 370.743958][ T7696] ? security_socket_sendmsg+0x87/0xb0 [ 370.749470][ T7696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.754791][ T7696] __sock_sendmsg+0x221/0x270 [ 370.759535][ T7696] ____sys_sendmsg+0x525/0x7d0 [ 370.764461][ T7696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.769849][ T7696] __sys_sendmsg+0x2b0/0x3a0 [ 370.774493][ T7696] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.779658][ T7696] ? vfs_write+0x7c4/0xc90 [ 370.784267][ T7696] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.790645][ T7696] ? do_syscall_64+0x100/0x230 [ 370.795463][ T7696] ? do_syscall_64+0xb6/0x230 [ 370.800193][ T7696] do_syscall_64+0xf3/0x230 [ 370.804737][ T7696] ? clear_bhb_loop+0x35/0x90 [ 370.809470][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.815404][ T7696] RIP: 0033:0x7f3a2797def9 [ 370.819864][ T7696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.839506][ T7696] RSP: 002b:00007f3a286f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.847968][ T7696] RAX: ffffffffffffffda RBX: 00007f3a27b35f80 RCX: 00007f3a2797def9 [ 370.855974][ T7696] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 370.863973][ T7696] RBP: 00007f3a286f3090 R08: 0000000000000000 R09: 0000000000000000 [ 370.872147][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.880174][ T7696] R13: 0000000000000000 R14: 00007f3a27b35f80 R15: 00007ffe02a6bca8 [ 370.888237][ T7696] [ 371.026090][ T7696] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.520'. [ 371.166117][ T7704] netlink: 'syz.2.521': attribute type 10 has an invalid length. [ 371.200524][ T7704] team0: left allmulticast mode [ 371.223368][ T7704] team_slave_0: left allmulticast mode [ 371.256771][ T7704] team_slave_1: left allmulticast mode [ 371.262336][ T7704] team0: left promiscuous mode [ 371.275992][ T7704] team_slave_0: left promiscuous mode [ 371.302941][ T7704] team_slave_1: left promiscuous mode [ 371.371293][ T7704] bridge0: port 3(team0) entered disabled state [ 371.459868][ T7704] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.518432][ T7704] bond0: (slave team0): Enslaving as an active interface with an up link [ 371.630938][ T7705] netlink: 'syz.2.521': attribute type 10 has an invalid length. [ 371.694413][ T7705] bond0: (slave team0): Releasing backup interface [ 372.821546][ T7705] bridge0: port 3(team0) entered blocking state [ 372.879062][ T7705] bridge0: port 3(team0) entered disabled state [ 372.925611][ T7705] team0: entered allmulticast mode [ 372.954212][ T7705] team_slave_0: entered allmulticast mode [ 372.974960][ T7705] team_slave_1: entered allmulticast mode [ 373.007669][ T7705] team0: entered promiscuous mode [ 373.012783][ T7705] team_slave_0: entered promiscuous mode [ 373.043495][ T7705] team_slave_1: entered promiscuous mode [ 373.085384][ T7732] netlink: 'syz.3.529': attribute type 9 has an invalid length. [ 373.116325][ T7732] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.529'. [ 373.345391][ T7750] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 373.399006][ T7750] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.534'. [ 374.919808][ T7777] netlink: 'syz.4.542': attribute type 3 has an invalid length. [ 374.986439][ T7777] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.542'. [ 375.799482][ T7788] netlink: 188 bytes leftover after parsing attributes in process `syz.3.546'. [ 375.927554][ T7790] netlink: 'syz.0.548': attribute type 9 has an invalid length. [ 375.935276][ T7790] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.548'. [ 376.172242][ T7799] netlink: 'syz.1.549': attribute type 4 has an invalid length. [ 376.265551][ T7799] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.549'. [ 376.551235][ T7806] netlink: 'syz.3.553': attribute type 29 has an invalid length. [ 376.601982][ T7806] netlink: 'syz.3.553': attribute type 29 has an invalid length. [ 376.686006][ T7803] FAULT_INJECTION: forcing a failure. [ 376.686006][ T7803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.706403][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.4.551 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 376.707035][ T7806] netlink: 'syz.3.553': attribute type 2 has an invalid length. [ 376.717039][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 376.717066][ T7803] Call Trace: [ 376.717087][ T7803] [ 376.717107][ T7803] dump_stack_lvl+0x241/0x360 [ 376.717163][ T7803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.717202][ T7803] ? __pfx__printk+0x10/0x10 [ 376.717248][ T7803] ? __pfx_lock_release+0x10/0x10 [ 376.717326][ T7803] should_fail_ex+0x3b0/0x4e0 [ 376.765678][ T7803] _copy_from_user+0x2f/0xe0 [ 376.770331][ T7803] __sys_bpf+0x1a4/0x810 [ 376.774628][ T7803] ? __pfx___sys_bpf+0x10/0x10 [ 376.779499][ T7803] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 376.785540][ T7803] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.791922][ T7803] ? do_syscall_64+0x100/0x230 [ 376.796764][ T7803] __x64_sys_bpf+0x7c/0x90 [ 376.801245][ T7803] do_syscall_64+0xf3/0x230 [ 376.805817][ T7803] ? clear_bhb_loop+0x35/0x90 [ 376.810576][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.816517][ T7803] RIP: 0033:0x7f2c93f7def9 [ 376.821007][ T7803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.840681][ T7803] RSP: 002b:00007f2c94d00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.849158][ T7803] RAX: ffffffffffffffda RBX: 00007f2c94135f80 RCX: 00007f2c93f7def9 [ 376.857171][ T7803] RDX: 0000000000000028 RSI: 0000000020000280 RDI: 0000000000000012 [ 376.865179][ T7803] RBP: 00007f2c94d00090 R08: 0000000000000000 R09: 0000000000000000 [ 376.873186][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.881192][ T7803] R13: 0000000000000000 R14: 00007f2c94135f80 R15: 00007ffea80eeeb8 [ 376.889273][ T7803] [ 376.931997][ T7806] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.553'. [ 377.338081][ T7815] delete_channel: no stack [ 377.343618][ T7815] delete_channel: no stack [ 377.347084][ T7818] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 377.402649][ T7818] team0: left allmulticast mode [ 377.416909][ T7818] team_slave_0: left allmulticast mode [ 377.422458][ T7818] team_slave_1: left allmulticast mode [ 377.455399][ T7818] team0: left promiscuous mode [ 377.472872][ T7818] team_slave_0: left promiscuous mode [ 377.490365][ T7818] team_slave_1: left promiscuous mode [ 377.542273][ T7818] bridge0: port 3(team0) entered disabled state [ 377.574461][ T7818] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.614474][ T7818] bond0: (slave team0): Enslaving as an active interface with an up link [ 377.644771][ T7823] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 377.716948][ T7823] bond0: (slave team0): Releasing backup interface [ 377.807598][ T7823] bridge0: port 3(team0) entered blocking state [ 377.831343][ T7823] bridge0: port 3(team0) entered disabled state [ 377.845033][ T7823] team0: entered allmulticast mode [ 377.857208][ T7823] team_slave_0: entered allmulticast mode [ 377.878749][ T7823] team_slave_1: entered allmulticast mode [ 377.900230][ T7823] team0: entered promiscuous mode [ 377.912859][ T7823] team_slave_0: entered promiscuous mode [ 377.924370][ T7823] team_slave_1: entered promiscuous mode [ 377.969453][ T7833] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.561'. [ 378.015765][ T7838] netlink: 10 bytes leftover after parsing attributes in process `syz.4.562'. [ 378.455695][ T7847] netlink: 'syz.0.566': attribute type 29 has an invalid length. [ 378.515190][ T7846] netlink: 'syz.0.566': attribute type 29 has an invalid length. [ 378.595392][ T7846] netlink: 'syz.0.566': attribute type 16 has an invalid length. [ 378.733395][ T7857] tap0: tun_chr_ioctl cmd 2147767519 [ 378.787611][ T7857] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.568'. [ 378.832501][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.844605][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.887435][ T7861] FAULT_INJECTION: forcing a failure. [ 378.887435][ T7861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.983544][ T7861] CPU: 0 UID: 0 PID: 7861 Comm: syz.1.571 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 378.994220][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 379.004317][ T7861] Call Trace: [ 379.007633][ T7861] [ 379.010601][ T7861] dump_stack_lvl+0x241/0x360 [ 379.015324][ T7861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.020569][ T7861] ? __pfx__printk+0x10/0x10 [ 379.025212][ T7861] should_fail_ex+0x3b0/0x4e0 [ 379.029942][ T7861] _copy_from_user+0x2f/0xe0 [ 379.034580][ T7861] sctp_setsockopt+0xcc/0x11c0 [ 379.039406][ T7861] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 379.045343][ T7861] do_sock_setsockopt+0x3af/0x720 [ 379.050426][ T7861] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 379.056017][ T7861] ? __fget_files+0x29/0x470 [ 379.060661][ T7861] ? __fget_files+0x3f6/0x470 [ 379.065425][ T7861] __sys_setsockopt+0x1ae/0x250 [ 379.070330][ T7861] __x64_sys_setsockopt+0xb5/0xd0 [ 379.075409][ T7861] do_syscall_64+0xf3/0x230 [ 379.079948][ T7861] ? clear_bhb_loop+0x35/0x90 [ 379.084648][ T7861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.090554][ T7861] RIP: 0033:0x7f27b697def9 [ 379.094979][ T7861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.114599][ T7861] RSP: 002b:00007f27b773b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 379.123037][ T7861] RAX: ffffffffffffffda RBX: 00007f27b6b35f80 RCX: 00007f27b697def9 [ 379.131020][ T7861] RDX: 0000000000000019 RSI: 0000000000000084 RDI: 0000000000000003 [ 379.139091][ T7861] RBP: 00007f27b773b090 R08: 0000000000000008 R09: 0000000000000000 [ 379.147070][ T7861] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.155057][ T7861] R13: 0000000000000000 R14: 00007f27b6b35f80 R15: 00007fff6790e588 [ 379.163052][ T7861] [ 379.293467][ T7870] team0: left allmulticast mode [ 379.313011][ T7870] team_slave_0: left allmulticast mode [ 379.362160][ T7870] team_slave_1: left allmulticast mode [ 379.426362][ T7870] team0: left promiscuous mode [ 379.431201][ T7870] team_slave_0: left promiscuous mode [ 379.479244][ T7870] team_slave_1: left promiscuous mode [ 379.485111][ T7870] bridge0: port 4(team0) entered disabled state [ 379.611294][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.651802][ T7870] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.740505][ T7872] bond0: (slave team0): Releasing backup interface [ 379.814611][ T7872] bridge0: port 4(team0) entered blocking state [ 379.846297][ T7872] bridge0: port 4(team0) entered disabled state [ 379.852800][ T7872] team0: entered allmulticast mode [ 379.905967][ T7872] team_slave_0: entered allmulticast mode [ 379.942667][ T7872] team_slave_1: entered allmulticast mode [ 379.961175][ T7872] team0: entered promiscuous mode [ 379.985921][ T7872] team_slave_0: entered promiscuous mode [ 379.998446][ T7872] team_slave_1: entered promiscuous mode [ 380.577075][ T7894] netlink: 48569 bytes leftover after parsing attributes in process `syz.4.584'. [ 381.136375][ T7906] tap0: tun_chr_ioctl cmd 2147767519 [ 381.143318][ T7908] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.589'. [ 381.166890][ T7906] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.587'. [ 381.286319][ T5243] Bluetooth: hci7: unexpected event 0x08 length: 15 > 4 [ 381.549520][ T7913] FAULT_INJECTION: forcing a failure. [ 381.549520][ T7913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.693914][ T7913] CPU: 1 UID: 0 PID: 7913 Comm: syz.4.591 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 381.704587][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 381.714681][ T7913] Call Trace: [ 381.717985][ T7913] [ 381.720939][ T7913] dump_stack_lvl+0x241/0x360 [ 381.725655][ T7913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.730887][ T7913] ? __pfx__printk+0x10/0x10 [ 381.735514][ T7913] ? __pfx_lock_release+0x10/0x10 [ 381.740591][ T7913] should_fail_ex+0x3b0/0x4e0 [ 381.745313][ T7913] _copy_from_iter+0x1f6/0x1960 [ 381.750198][ T7913] ? __virt_addr_valid+0x183/0x530 [ 381.755332][ T7913] ? skb_set_owner_w+0x238/0x3e0 [ 381.760304][ T7913] ? __pfx_lock_release+0x10/0x10 [ 381.765378][ T7913] ? __pfx__copy_from_iter+0x10/0x10 [ 381.770696][ T7913] ? __virt_addr_valid+0x183/0x530 [ 381.775851][ T7913] ? __virt_addr_valid+0x183/0x530 [ 381.780990][ T7913] ? __virt_addr_valid+0x45f/0x530 [ 381.786134][ T7913] ? __phys_addr_symbol+0x2f/0x70 [ 381.791186][ T7913] ? __check_object_size+0x49c/0x900 [ 381.796594][ T7913] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 381.802368][ T7913] skb_copy_datagram_from_iter+0xf3/0x6c0 [ 381.808131][ T7913] ? skb_put+0x114/0x1f0 [ 381.812419][ T7913] tun_get_user+0xec3/0x4720 [ 381.817186][ T7913] ? __lock_acquire+0x137a/0x2040 [ 381.822279][ T7913] ? __pfx_tun_get_user+0x10/0x10 [ 381.827360][ T7913] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 381.832875][ T7913] ? tun_get+0x1e/0x2f0 [ 381.837065][ T7913] ? __pfx_lock_release+0x10/0x10 [ 381.842150][ T7913] ? tun_get+0x1e/0x2f0 [ 381.846338][ T7913] ? tun_get+0x27d/0x2f0 [ 381.850615][ T7913] tun_chr_write_iter+0x113/0x1f0 [ 381.855727][ T7913] vfs_write+0xa72/0xc90 [ 381.860016][ T7913] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 381.865612][ T7913] ? __pfx_vfs_write+0x10/0x10 [ 381.870436][ T7913] ksys_write+0x1a0/0x2c0 [ 381.874811][ T7913] ? __pfx_ksys_write+0x10/0x10 [ 381.879695][ T7913] ? do_syscall_64+0x100/0x230 [ 381.884585][ T7913] ? do_syscall_64+0xb6/0x230 [ 381.889294][ T7913] do_syscall_64+0xf3/0x230 [ 381.893927][ T7913] ? clear_bhb_loop+0x35/0x90 [ 381.898650][ T7913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.904580][ T7913] RIP: 0033:0x7f2c93f7def9 [ 381.909028][ T7913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.928765][ T7913] RSP: 002b:00007f2c94d00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 381.937219][ T7913] RAX: ffffffffffffffda RBX: 00007f2c94135f80 RCX: 00007f2c93f7def9 [ 381.945222][ T7913] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 381.953227][ T7913] RBP: 00007f2c94d00090 R08: 0000000000000000 R09: 0000000000000000 [ 381.961231][ T7913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.969231][ T7913] R13: 0000000000000000 R14: 00007f2c94135f80 R15: 00007ffea80eeeb8 [ 381.977253][ T7913] [ 383.259211][ T7929] validate_nla: 2 callbacks suppressed [ 383.259252][ T7929] netlink: 'syz.4.596': attribute type 3 has an invalid length. [ 383.315254][ T7929] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.596'. [ 383.881875][ T7951] netlink: 'syz.0.605': attribute type 4 has an invalid length. [ 383.978410][ T7951] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.605'. [ 384.853676][ T7969] tap0: tun_chr_ioctl cmd 2147767519 [ 384.885720][ T7969] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.608'. [ 385.218501][ T7975] netlink: 'syz.3.612': attribute type 29 has an invalid length. [ 385.266001][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 385.692209][ T7992] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 385.757846][ T7992] bridge_slave_0: left promiscuous mode [ 385.786458][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.029492][ T7956] Bluetooth: hci6: command 0x0406 tx timeout [ 386.040004][ T7956] Bluetooth: hci1: command 0x0406 tx timeout [ 386.044189][ T7955] Bluetooth: hci8: command 0x0406 tx timeout [ 386.046207][ T7956] Bluetooth: hci7: command 0x0406 tx timeout [ 387.186316][ T8021] tap0: tun_chr_ioctl cmd 2147767519 [ 387.227869][ T8021] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.625'. [ 387.241452][ T8018] netlink: 'syz.3.624': attribute type 29 has an invalid length. [ 387.275476][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 387.603818][ T8033] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.627'. [ 387.635297][ T8033] net_ratelimit: 7 callbacks suppressed [ 387.635410][ T8033] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 388.071292][ T8037] netlink: 'syz.0.630': attribute type 6 has an invalid length. [ 388.134994][ T8037] netlink: 'syz.0.630': attribute type 8 has an invalid length. [ 388.678189][ T8051] netlink: 'syz.2.634': attribute type 9 has an invalid length. [ 388.720356][ T8051] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.634'. [ 389.025212][ T8069] tap0: tun_chr_ioctl cmd 2147767519 [ 389.079711][ T8069] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.640'. [ 389.978753][ T8074] delete_channel: no stack [ 390.378275][ T8088] delete_channel: no stack [ 390.422606][ T8081] netlink: 'syz.2.643': attribute type 10 has an invalid length. [ 390.463198][ T8081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.643'. [ 390.500720][ T8081] hsr0: entered promiscuous mode [ 390.525293][ T8081] hsr0: entered allmulticast mode [ 390.545037][ T8081] hsr_slave_0: entered allmulticast mode [ 390.558183][ T8081] hsr_slave_1: entered allmulticast mode [ 390.602103][ T8081] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 391.035310][ T8113] netlink: 'syz.4.655': attribute type 10 has an invalid length. [ 391.053769][ T8113] team0: left allmulticast mode [ 391.073877][ T8113] team_slave_0: left allmulticast mode [ 391.107126][ T8113] team_slave_1: left allmulticast mode [ 391.116891][ T8113] geneve1: left allmulticast mode [ 391.132253][ T8113] team0: left promiscuous mode [ 391.148169][ T8113] team_slave_0: left promiscuous mode [ 391.156141][ T5243] Bluetooth: hci2: command 0x0406 tx timeout [ 391.175041][ T8113] team_slave_1: left promiscuous mode [ 391.198694][ T8113] geneve1: left promiscuous mode [ 391.227356][ T8113] bridge0: port 3(team0) entered disabled state [ 391.300446][ T8113] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.314618][ T8113] bond0: (slave team0): Enslaving as an active interface with an up link [ 391.325427][ T8119] netlink: 'syz.4.655': attribute type 10 has an invalid length. [ 391.344681][ T8119] bond0: (slave team0): Releasing backup interface [ 391.377644][ T8119] bridge0: port 3(team0) entered blocking state [ 391.385313][ T8119] bridge0: port 3(team0) entered disabled state [ 391.392082][ T8119] team0: entered allmulticast mode [ 391.398404][ T8119] team_slave_0: entered allmulticast mode [ 391.404331][ T8119] team_slave_1: entered allmulticast mode [ 391.410527][ T8119] geneve1: entered allmulticast mode [ 391.419506][ T8119] team0: entered promiscuous mode [ 391.424750][ T8119] team_slave_0: entered promiscuous mode [ 391.431402][ T8119] team_slave_1: entered promiscuous mode [ 391.437506][ T8119] geneve1: entered promiscuous mode [ 391.509437][ T8116] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.656'. [ 392.086248][ T8137] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 392.143372][ T8137] team0: left allmulticast mode [ 392.163662][ T8137] team_slave_0: left allmulticast mode [ 392.185511][ T8137] team_slave_1: left allmulticast mode [ 392.231187][ T8137] team0: left promiscuous mode [ 392.315951][ T8137] team_slave_0: left promiscuous mode [ 392.348197][ T8137] team_slave_1: left promiscuous mode [ 392.354253][ T8137] bridge0: port 3(team0) entered disabled state [ 392.427848][ T8130] delete_channel: no stack [ 392.712245][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.732311][ T8137] bond0: (slave team0): Enslaving as an active interface with an up link [ 392.756019][ T8138] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 392.775091][ T8138] bond0: (slave team0): Releasing backup interface [ 392.800771][ T8138] bridge0: port 3(team0) entered blocking state [ 392.812327][ T8138] bridge0: port 3(team0) entered disabled state [ 392.819716][ T8138] team0: entered allmulticast mode [ 392.825041][ T8138] team_slave_0: entered allmulticast mode [ 392.834326][ T8138] team_slave_1: entered allmulticast mode [ 392.842371][ T8138] team0: entered promiscuous mode [ 392.848097][ T8138] team_slave_0: entered promiscuous mode [ 392.854136][ T8138] team_slave_1: entered promiscuous mode [ 393.543213][ T8175] netlink: 'syz.1.670': attribute type 4 has an invalid length. [ 393.596139][ T8175] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.670'. [ 393.743014][ T8179] netlink: 'syz.4.667': attribute type 1 has an invalid length. [ 393.891918][ T8179] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.667'. [ 394.078535][ T8164] netlink: 'syz.4.667': attribute type 3 has an invalid length. [ 394.146078][ T8164] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.667'. [ 394.763916][ T8199] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.676'. [ 394.778653][ T8199] netlink: zone id is out of range [ 394.784972][ T8199] netlink: zone id is out of range [ 394.797515][ T8199] netlink: zone id is out of range [ 394.839198][ T8199] netlink: zone id is out of range [ 394.925278][ T8199] netlink: zone id is out of range [ 394.939844][ T8199] netlink: zone id is out of range [ 394.959438][ T8198] netlink: 'syz.1.677': attribute type 29 has an invalid length. [ 394.969881][ T8199] netlink: zone id is out of range [ 394.975169][ T8199] netlink: zone id is out of range [ 394.991817][ T8199] netlink: zone id is out of range [ 395.006066][ T8198] netlink: 'syz.1.677': attribute type 29 has an invalid length. [ 395.006362][ T8199] netlink: zone id is out of range [ 395.057222][ T8202] netlink: 'syz.1.677': attribute type 29 has an invalid length. [ 395.125293][ T8205] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.678'. [ 395.153208][ T8204] netlink: 4093 bytes leftover after parsing attributes in process `syz.2.678'. [ 395.312259][ T8190] delete_channel: no stack [ 395.540957][ T8207] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 395.559251][ T8207] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.679'. [ 395.590618][ T8207] netlink: 'syz.0.679': attribute type 3 has an invalid length. [ 395.634301][ T8207] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.679'. [ 395.653157][ T8213] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 395.653403][ T8213] team0: left allmulticast mode [ 395.653432][ T8213] team_slave_0: left allmulticast mode [ 395.653460][ T8213] team_slave_1: left allmulticast mode [ 395.653491][ T8213] team0: left promiscuous mode [ 395.653514][ T8213] team_slave_0: left promiscuous mode [ 395.653744][ T8213] team_slave_1: left promiscuous mode [ 395.654198][ T8213] bridge0: port 3(team0) entered disabled state [ 395.734393][ T8213] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.783091][ T8213] bond0: (slave team0): Enslaving as an active interface with an up link [ 395.830448][ T8215] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 395.914466][ T8215] bond0: (slave team0): Releasing backup interface [ 395.931125][ T8223] netlink: 'syz.3.683': attribute type 4 has an invalid length. [ 395.963958][ T8223] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.683'. [ 395.997548][ T8215] bridge0: port 3(team0) entered blocking state [ 396.004068][ T8215] bridge0: port 3(team0) entered disabled state [ 396.060633][ T8215] team0: entered allmulticast mode [ 396.066856][ T8215] team_slave_0: entered allmulticast mode [ 396.072926][ T8215] team_slave_1: entered allmulticast mode [ 396.083126][ T8215] team0: entered promiscuous mode [ 396.091362][ T8215] team_slave_0: entered promiscuous mode [ 396.098390][ T8215] team_slave_1: entered promiscuous mode [ 396.777367][ T8235] team0: left allmulticast mode [ 396.782305][ T8235] team_slave_0: left allmulticast mode [ 396.800193][ T8235] team_slave_1: left allmulticast mode [ 396.856136][ T8235] team0: left promiscuous mode [ 396.865545][ T8235] team_slave_0: left promiscuous mode [ 396.910719][ T8235] team_slave_1: left promiscuous mode [ 397.003378][ T8235] bridge0: port 3(team0) entered disabled state [ 397.356297][ T8247] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.690'. [ 397.652161][ T8235] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.709995][ T8235] bond0: (slave team0): Enslaving as an active interface with an up link [ 397.770800][ T8248] IPv6: Can't replace route, no match found [ 398.835477][ T8274] validate_nla: 3 callbacks suppressed [ 398.835501][ T8274] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 398.855512][ T8274] team0: left allmulticast mode [ 398.862379][ T8274] team_slave_0: left allmulticast mode [ 398.870373][ T8274] team_slave_1: left allmulticast mode [ 398.876322][ T8274] team0: left promiscuous mode [ 398.881286][ T8274] team_slave_0: left promiscuous mode [ 398.887093][ T8274] team_slave_1: left promiscuous mode [ 398.893128][ T8274] bridge0: port 3(team0) entered disabled state [ 398.967882][ T8274] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.013887][ T8274] bond0: (slave team0): Enslaving as an active interface with an up link [ 399.038740][ T8276] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 399.053018][ T8285] netlink: 'syz.4.699': attribute type 4 has an invalid length. [ 399.076840][ T8276] team0: left allmulticast mode [ 399.080506][ T8285] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.699'. [ 399.098215][ T8276] team_slave_0: left allmulticast mode [ 399.104113][ T8276] team_slave_1: left allmulticast mode [ 399.111147][ T8276] team0: left promiscuous mode [ 399.116927][ T8276] team_slave_0: left promiscuous mode [ 399.127102][ T8276] team_slave_1: left promiscuous mode [ 399.133862][ T8276] bridge0: port 4(team0) entered disabled state [ 399.168470][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.224550][ T8276] bond0: (slave team0): Enslaving as an active interface with an up link [ 399.250409][ T8277] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 399.260059][ T8277] bond0: (slave team0): Releasing backup interface [ 399.273475][ T8277] bridge0: port 4(team0) entered blocking state [ 399.281338][ T8277] bridge0: port 4(team0) entered disabled state [ 399.288509][ T8277] team0: entered allmulticast mode [ 399.293815][ T8277] team_slave_0: entered allmulticast mode [ 399.302158][ T8277] team_slave_1: entered allmulticast mode [ 399.318298][ T8277] team0: entered promiscuous mode [ 399.323655][ T8277] team_slave_0: entered promiscuous mode [ 399.331349][ T8277] team_slave_1: entered promiscuous mode [ 399.349269][ T8278] netlink: 'syz.2.697': attribute type 10 has an invalid length. [ 399.370532][ T8278] bond0: (slave team0): Releasing backup interface [ 399.401028][ T8278] bridge0: port 3(team0) entered blocking state [ 399.407726][ T8278] bridge0: port 3(team0) entered disabled state [ 399.414440][ T8278] team0: entered allmulticast mode [ 399.421227][ T8278] team_slave_0: entered allmulticast mode [ 399.429758][ T8278] team_slave_1: entered allmulticast mode [ 399.442173][ T8278] team0: entered promiscuous mode [ 399.448856][ T8278] team_slave_0: entered promiscuous mode [ 399.466112][ T8278] team_slave_1: entered promiscuous mode [ 401.275520][ T8323] netlink: 48569 bytes leftover after parsing attributes in process `syz.4.712'. [ 401.998373][ T8331] netlink: 'syz.3.714': attribute type 10 has an invalid length. [ 402.036144][ T8331] team0: left allmulticast mode [ 402.044636][ T8331] team_slave_0: left allmulticast mode [ 402.061865][ T8331] team_slave_1: left allmulticast mode [ 402.067658][ T8331] team0: left promiscuous mode [ 402.072912][ T8331] team_slave_0: left promiscuous mode [ 402.088625][ T8331] team_slave_1: left promiscuous mode [ 402.111775][ T8331] bridge0: port 3(team0) entered disabled state [ 402.162991][ T8331] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.178469][ T8331] bond0: (slave team0): Enslaving as an active interface with an up link [ 402.197547][ T8335] netlink: 'syz.3.714': attribute type 10 has an invalid length. [ 402.239795][ T8335] bond0: (slave team0): Releasing backup interface [ 402.280981][ T8335] bridge0: port 1(team0) entered blocking state [ 402.315592][ T8335] bridge0: port 1(team0) entered disabled state [ 402.325741][ T8335] team0: entered allmulticast mode [ 402.340374][ T8335] team_slave_0: entered allmulticast mode [ 402.355884][ T8335] team_slave_1: entered allmulticast mode [ 402.377090][ T8335] team0: entered promiscuous mode [ 402.383397][ T8335] team_slave_0: entered promiscuous mode [ 402.395601][ T8335] team_slave_1: entered promiscuous mode [ 402.721330][ T8348] syz.4.720 (8348) used greatest stack depth: 18400 bytes left [ 403.177775][ T8365] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 403.210105][ T8365] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 403.234324][ T8365] bond0: (slave team0): Releasing backup interface [ 403.294008][ T8365] bridge0: port 3(team0) entered blocking state [ 403.316740][ T8365] bridge0: port 3(team0) entered disabled state [ 403.332432][ T8365] team0: entered allmulticast mode [ 403.340005][ T8365] team_slave_0: entered allmulticast mode [ 403.347083][ T8365] team_slave_1: entered allmulticast mode [ 403.363814][ T8365] team0: entered promiscuous mode [ 403.377013][ T8365] team_slave_0: entered promiscuous mode [ 403.391015][ T8365] team_slave_1: entered promiscuous mode [ 403.415909][ T8371] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 403.429226][ T8371] netlink: 55 bytes leftover after parsing attributes in process `syz.2.727'. [ 403.466706][ T8376] netlink: 60 bytes leftover after parsing attributes in process `syz.4.728'. [ 403.817294][ T5252] Bluetooth: hci2: ISO packet for unknown connection handle 3849 [ 404.787397][ T8395] netlink: 'syz.3.733': attribute type 29 has an invalid length. [ 404.796621][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.733'. [ 404.891735][ T8400] netlink: 'syz.1.736': attribute type 10 has an invalid length. [ 404.913122][ T8400] team0: left allmulticast mode [ 404.926609][ T8400] team_slave_0: left allmulticast mode [ 404.942584][ T8400] team_slave_1: left allmulticast mode [ 404.968619][ T8400] team0: left promiscuous mode [ 404.973564][ T8400] team_slave_0: left promiscuous mode [ 404.996291][ T8400] team_slave_1: left promiscuous mode [ 405.025745][ T8400] bridge0: port 3(team0) entered disabled state [ 405.108482][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.142290][ T8400] bond0: (slave team0): Enslaving as an active interface with an up link [ 405.179910][ T8404] netlink: 'syz.1.736': attribute type 10 has an invalid length. [ 405.269415][ T8404] bond0: (slave team0): Releasing backup interface [ 405.308698][ T8404] bridge0: port 3(team0) entered blocking state [ 405.322963][ T8404] bridge0: port 3(team0) entered disabled state [ 405.344547][ T8404] team0: entered allmulticast mode [ 405.375390][ T8404] team_slave_0: entered allmulticast mode [ 405.395931][ T8404] team_slave_1: entered allmulticast mode [ 405.412443][ T8404] team0: entered promiscuous mode [ 405.435423][ T8404] team_slave_0: entered promiscuous mode [ 405.456135][ T8404] team_slave_1: entered promiscuous mode [ 405.473627][ T8397] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 405.547537][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 405.640314][ T8405] netlink: 'syz.4.738': attribute type 29 has an invalid length. [ 405.666919][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 406.284012][ T8417] delete_channel: no stack [ 406.492884][ T8424] netlink: 'syz.2.744': attribute type 29 has an invalid length. [ 406.547536][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 407.724125][ T8463] netlink: 'syz.0.757': attribute type 10 has an invalid length. [ 407.827091][ T8463] team0: left allmulticast mode [ 407.832046][ T8463] team_slave_0: left allmulticast mode [ 407.892588][ T8463] team_slave_1: left allmulticast mode [ 407.984684][ T8463] team0: left promiscuous mode [ 408.074433][ T8463] team_slave_0: left promiscuous mode [ 408.101233][ T8470] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 408.126377][ T8463] team_slave_1: left promiscuous mode [ 408.132175][ T8470] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.758'. [ 408.155769][ T8463] bridge0: port 4(team0) entered disabled state [ 408.257398][ T8468] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 408.265136][ T8468] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.756'. [ 408.275305][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.344832][ T8473] netlink: 'syz.3.756': attribute type 3 has an invalid length. [ 408.370284][ T8463] bond0: (slave team0): Enslaving as an active interface with an up link [ 408.398456][ T8473] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.756'. [ 408.414015][ T8471] bond0: (slave team0): Releasing backup interface [ 408.444400][ T8471] bridge0: port 4(team0) entered blocking state [ 408.474934][ T8471] bridge0: port 4(team0) entered disabled state [ 408.491505][ T8471] team0: entered allmulticast mode [ 408.502160][ T8471] team_slave_0: entered allmulticast mode [ 408.544506][ T8471] team_slave_1: entered allmulticast mode [ 408.559162][ T8471] team0: entered promiscuous mode [ 408.564480][ T8471] team_slave_0: entered promiscuous mode [ 408.570712][ T8471] team_slave_1: entered promiscuous mode [ 408.978272][ T8489] netlink: 64 bytes leftover after parsing attributes in process `syz.3.765'. [ 409.501416][ T8500] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.768'. [ 409.585143][ T8500] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.768'. [ 409.798804][ T8511] validate_nla: 5 callbacks suppressed [ 409.798827][ T8511] netlink: 'syz.3.769': attribute type 3 has an invalid length. [ 409.870145][ T8511] __nla_validate_parse: 1 callbacks suppressed [ 409.870171][ T8511] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.769'. [ 409.969571][ T8513] netlink: 'syz.1.772': attribute type 29 has an invalid length. [ 409.978449][ T8514] netlink: 'syz.1.772': attribute type 29 has an invalid length. [ 410.179325][ T8521] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 410.190975][ T8521] team0: left allmulticast mode [ 410.202407][ T8521] team_slave_0: left allmulticast mode [ 410.220194][ T8521] team_slave_1: left allmulticast mode [ 410.246226][ T8521] team0: left promiscuous mode [ 410.267306][ T8521] team_slave_0: left promiscuous mode [ 410.276243][ T8521] team_slave_1: left promiscuous mode [ 410.291410][ T8521] bridge0: port 1(team0) entered disabled state [ 410.429897][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.461273][ T8521] bond0: (slave team0): Enslaving as an active interface with an up link [ 410.476001][ T8524] netlink: 'syz.3.774': attribute type 10 has an invalid length. [ 410.501229][ T8524] bond0: (slave team0): Releasing backup interface [ 410.564019][ T8524] bridge0: port 1(team0) entered blocking state [ 410.656075][ T8524] bridge0: port 1(team0) entered disabled state [ 410.665922][ T8524] team0: entered allmulticast mode [ 410.671683][ T8524] team_slave_0: entered allmulticast mode [ 410.683677][ T8524] team_slave_1: entered allmulticast mode [ 410.693439][ T8524] team0: entered promiscuous mode [ 410.698781][ T8524] team_slave_0: entered promiscuous mode [ 410.705051][ T8524] team_slave_1: entered promiscuous mode [ 410.743964][ T8530] netlink: 'syz.4.779': attribute type 10 has an invalid length. [ 410.767546][ T8530] team0: left allmulticast mode [ 410.778765][ T8530] team_slave_0: left allmulticast mode [ 410.791194][ T8530] team_slave_1: left allmulticast mode [ 410.802513][ T8530] geneve1: left allmulticast mode [ 410.809515][ T8543] netlink: 'syz.2.782': attribute type 3 has an invalid length. [ 410.812835][ T8530] team0: left promiscuous mode [ 410.823657][ T8543] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.782'. [ 410.831781][ T8530] team_slave_0: left promiscuous mode [ 410.847116][ T8530] team_slave_1: left promiscuous mode [ 410.863282][ T8530] geneve1: left promiscuous mode [ 410.869563][ T8530] bridge0: port 3(team0) entered disabled state [ 410.889940][ T8530] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.906555][ T8530] bond0: (slave team0): Enslaving as an active interface with an up link [ 411.269224][ T8554] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 411.313371][ T8554] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.784'. [ 411.339206][ T8555] netlink: 'syz.2.784': attribute type 3 has an invalid length. [ 411.353608][ T8555] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.784'. [ 414.801811][ T8585] netlink: 'syz.3.794': attribute type 3 has an invalid length. [ 414.826320][ T8585] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.794'. [ 415.243233][ T8584] delete_channel: no stack [ 415.631675][ T8593] netlink: 'syz.4.798': attribute type 3 has an invalid length. [ 415.638903][ T8591] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 415.656277][ T8598] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 415.667677][ T8591] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.798'. [ 415.688379][ T8598] team0: left allmulticast mode [ 415.693354][ T8598] team_slave_0: left allmulticast mode [ 415.707195][ T8593] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.798'. [ 415.725505][ T8598] team_slave_1: left allmulticast mode [ 415.755317][ T8598] team0: left promiscuous mode [ 415.779294][ T8598] team_slave_0: left promiscuous mode [ 415.800394][ T8598] team_slave_1: left promiscuous mode [ 415.815917][ T8598] bridge0: port 1(team0) entered disabled state [ 415.910864][ T8598] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.957792][ T8598] bond0: (slave team0): Enslaving as an active interface with an up link [ 417.042035][ T8617] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.806'. [ 417.096752][ T8616] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.806'. [ 417.517753][ T8629] netlink: 'syz.3.810': attribute type 3 has an invalid length. [ 417.544858][ T8629] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.810'. [ 417.629058][ T8635] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.813'. [ 417.679124][ T8635] netlink: 500 bytes leftover after parsing attributes in process `syz.0.813'. [ 417.770379][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.972764][ T8640] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 418.057187][ T8650] netlink: 'syz.4.814': attribute type 3 has an invalid length. [ 418.082780][ T8640] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.814'. [ 418.136103][ T8650] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.814'. [ 418.475185][ T8657] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 418.628048][ T8661] sctp: [Deprecated]: syz.1.822 (pid 8661) Use of int in max_burst socket option deprecated. [ 418.628048][ T8661] Use struct sctp_assoc_value instead [ 419.140341][ T8685] FAULT_INJECTION: forcing a failure. [ 419.140341][ T8685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.174118][ T8685] CPU: 0 UID: 0 PID: 8685 Comm: syz.0.828 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 419.184888][ T8685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 419.195082][ T8685] Call Trace: [ 419.198399][ T8685] [ 419.201361][ T8685] dump_stack_lvl+0x241/0x360 [ 419.206084][ T8685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.211318][ T8685] ? __pfx__printk+0x10/0x10 [ 419.215955][ T8685] should_fail_ex+0x3b0/0x4e0 [ 419.220694][ T8685] _copy_from_user+0x2f/0xe0 [ 419.225342][ T8685] sctp_setsockopt+0xcc/0x11c0 [ 419.230161][ T8685] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 419.236096][ T8685] do_sock_setsockopt+0x3af/0x720 [ 419.241261][ T8685] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 419.246854][ T8685] ? __fget_files+0x29/0x470 [ 419.251496][ T8685] ? __fget_files+0x3f6/0x470 [ 419.256297][ T8685] __sys_setsockopt+0x1ae/0x250 [ 419.261201][ T8685] __x64_sys_setsockopt+0xb5/0xd0 [ 419.266278][ T8685] do_syscall_64+0xf3/0x230 [ 419.270907][ T8685] ? clear_bhb_loop+0x35/0x90 [ 419.275652][ T8685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.281608][ T8685] RIP: 0033:0x7f3a2797def9 [ 419.286070][ T8685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.305807][ T8685] RSP: 002b:00007f3a286d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 419.314396][ T8685] RAX: ffffffffffffffda RBX: 00007f3a27b36058 RCX: 00007f3a2797def9 [ 419.322423][ T8685] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000008 [ 419.330490][ T8685] RBP: 00007f3a286d2090 R08: 0000000000000098 R09: 0000000000000000 [ 419.339037][ T8685] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.347055][ T8685] R13: 0000000000000001 R14: 00007f3a27b36058 R15: 00007ffe02a6bca8 [ 419.355104][ T8685] [ 419.434466][ T8691] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 419.442721][ T8691] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.831'. [ 419.572080][ T8687] netlink: 'syz.2.831': attribute type 3 has an invalid length. [ 420.220810][ T5252] Bluetooth: hci7: unexpected event 0x08 length: 15 > 4 [ 420.466119][ T8707] netlink: 'syz.4.836': attribute type 10 has an invalid length. [ 420.566561][ T8707] bond0: (slave team0): Releasing backup interface [ 420.621745][ T8707] bridge0: port 3(team0) entered blocking state [ 420.639612][ T8707] bridge0: port 3(team0) entered disabled state [ 420.664775][ T8707] team0: entered allmulticast mode [ 420.680649][ T8707] team_slave_0: entered allmulticast mode [ 420.690788][ T8707] team_slave_1: entered allmulticast mode [ 420.699846][ T8707] geneve1: entered allmulticast mode [ 420.778362][ T8707] team0: entered promiscuous mode [ 420.790307][ T8707] team_slave_0: entered promiscuous mode [ 420.806048][ T8707] team_slave_1: entered promiscuous mode [ 420.817881][ T8707] geneve1: entered promiscuous mode [ 421.571408][ T8732] netlink: 'syz.3.843': attribute type 29 has an invalid length. [ 421.601687][ T8732] __nla_validate_parse: 1 callbacks suppressed [ 421.601727][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 421.701921][ T8738] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 421.715130][ T8738] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.845'. [ 421.846118][ T8741] netlink: 'syz.2.847': attribute type 3 has an invalid length. [ 421.866361][ T8741] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.847'. [ 422.045263][ T5252] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 422.267740][ T8755] netlink: 'syz.2.854': attribute type 10 has an invalid length. [ 423.063836][ T8765] netlink: 6 bytes leftover after parsing attributes in process `syz.1.858'. [ 423.185141][ T8763] netlink: 48569 bytes leftover after parsing attributes in process `syz.3.857'. [ 423.216579][ T8766] netlink: 6 bytes leftover after parsing attributes in process `syz.1.858'. [ 423.486111][ T8770] netlink: 'syz.0.859': attribute type 21 has an invalid length. [ 423.568665][ T8774] netlink: 191384 bytes leftover after parsing attributes in process `syz.0.859'. [ 423.579968][ T8776] netlink: 'syz.1.862': attribute type 3 has an invalid length. [ 423.590760][ T8776] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.862'. [ 423.613148][ T8781] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.861'. [ 423.665073][ T8781] netlink: 'syz.4.861': attribute type 19 has an invalid length. [ 423.684847][ T8781] netlink: 1 bytes leftover after parsing attributes in process `syz.4.861'. [ 423.766614][ T8783] netlink: 'syz.0.859': attribute type 19 has an invalid length. [ 423.790851][ T5252] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 425.401806][ T8818] netlink: 'syz.2.876': attribute type 4 has an invalid length. [ 425.985605][ T8810] delete_channel: no stack [ 426.236753][ T5252] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 429.858672][ T8875] netlink: 'syz.3.889': attribute type 4 has an invalid length. [ 429.886156][ T8875] __nla_validate_parse: 3 callbacks suppressed [ 429.886183][ T8875] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.889'. [ 430.727743][ T5252] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 430.807574][ T8886] FAULT_INJECTION: forcing a failure. [ 430.807574][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 430.830895][ T8886] CPU: 0 UID: 0 PID: 8886 Comm: syz.3.894 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 430.841548][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 430.851649][ T8886] Call Trace: [ 430.854963][ T8886] [ 430.857920][ T8886] dump_stack_lvl+0x241/0x360 [ 430.862646][ T8886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.867890][ T8886] ? __pfx__printk+0x10/0x10 [ 430.872526][ T8886] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 430.878117][ T8886] ? __pfx___might_resched+0x10/0x10 [ 430.883455][ T8886] should_fail_ex+0x3b0/0x4e0 [ 430.888193][ T8886] ? sk_prot_alloc+0x58/0x210 [ 430.892917][ T8886] should_failslab+0xac/0x100 [ 430.897645][ T8886] ? sk_prot_alloc+0x58/0x210 [ 430.902363][ T8886] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 430.907772][ T8886] ? __pfx_lock_release+0x10/0x10 [ 430.912846][ T8886] sk_prot_alloc+0x58/0x210 [ 430.917480][ T8886] ? sk_alloc+0x26/0x370 [ 430.921776][ T8886] sk_alloc+0x38/0x370 [ 430.925893][ T8886] inet_create+0x652/0xe70 [ 430.930428][ T8886] ? inet_create+0x9c/0xe70 [ 430.934945][ T8886] ? __sock_create+0x337/0x920 [ 430.939723][ T8886] __sock_create+0x490/0x920 [ 430.944340][ T8886] mptcp_subflow_create_socket+0x132/0xdf0 [ 430.950164][ T8886] ? mark_lock+0x9a/0x350 [ 430.954527][ T8886] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 430.960956][ T8886] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.967310][ T8886] __mptcp_nmpc_sk+0x178/0x800 [ 430.972089][ T8886] ? __local_bh_enable_ip+0x168/0x200 [ 430.977482][ T8886] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 430.982796][ T8886] mptcp_setsockopt+0x1108/0x3bc0 [ 430.987844][ T8886] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 430.993235][ T8886] ? __pfx_aa_sk_perm+0x10/0x10 [ 430.998095][ T8886] ? __pfx_lock_acquire+0x10/0x10 [ 431.003133][ T8886] ? aa_sock_opt_perm+0x79/0x120 [ 431.008081][ T8886] ? sock_common_setsockopt+0x37/0xc0 [ 431.013463][ T8886] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 431.019369][ T8886] do_sock_setsockopt+0x3af/0x720 [ 431.024412][ T8886] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 431.029971][ T8886] ? __fget_files+0x29/0x470 [ 431.034576][ T8886] ? __fget_files+0x3f6/0x470 [ 431.039277][ T8886] __sys_setsockopt+0x1ae/0x250 [ 431.044145][ T8886] __x64_sys_setsockopt+0xb5/0xd0 [ 431.049361][ T8886] do_syscall_64+0xf3/0x230 [ 431.053875][ T8886] ? clear_bhb_loop+0x35/0x90 [ 431.058660][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.064565][ T8886] RIP: 0033:0x7f02ea97def9 [ 431.068987][ T8886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.088600][ T8886] RSP: 002b:00007f02eb83a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.097026][ T8886] RAX: ffffffffffffffda RBX: 00007f02eab35f80 RCX: 00007f02ea97def9 [ 431.105004][ T8886] RDX: 000000000000001e RSI: 0000000000000006 RDI: 0000000000000009 [ 431.112988][ T8886] RBP: 00007f02eb83a090 R08: 0000000000000004 R09: 0000000000000000 [ 431.121053][ T8886] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.129028][ T8886] R13: 0000000000000000 R14: 00007f02eab35f80 R15: 00007ffd37c55928 [ 431.137022][ T8886] [ 431.185236][ T8892] netlink: 'syz.4.896': attribute type 10 has an invalid length. [ 431.195516][ T8892] team0: left allmulticast mode [ 431.200589][ T8892] team_slave_0: left allmulticast mode [ 431.206276][ T8892] team_slave_1: left allmulticast mode [ 431.211782][ T8892] geneve1: left allmulticast mode [ 431.217050][ T8892] team0: left promiscuous mode [ 431.221853][ T8892] team_slave_0: left promiscuous mode [ 431.255245][ T8892] team_slave_1: left promiscuous mode [ 431.276460][ T8892] geneve1: left promiscuous mode [ 431.308246][ T8892] bridge0: port 3(team0) entered disabled state [ 431.354012][ T8892] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.385313][ T8892] bond0: (slave team0): Enslaving as an active interface with an up link [ 431.452651][ T8893] netlink: 'syz.4.896': attribute type 10 has an invalid length. [ 431.491511][ T8893] bond0: (slave team0): Releasing backup interface [ 431.535615][ T8893] bridge0: port 3(team0) entered blocking state [ 431.547206][ T8893] bridge0: port 3(team0) entered disabled state [ 431.558280][ T8893] team0: entered allmulticast mode [ 431.563463][ T8893] team_slave_0: entered allmulticast mode [ 431.570621][ T8893] team_slave_1: entered allmulticast mode [ 431.576983][ T8893] geneve1: entered allmulticast mode [ 431.584425][ T8893] team0: entered promiscuous mode [ 431.594735][ T8893] team_slave_0: entered promiscuous mode [ 431.604587][ T8893] team_slave_1: entered promiscuous mode [ 431.617282][ T8893] geneve1: entered promiscuous mode [ 431.626098][ T8895] Â: renamed from bond0 (while UP) [ 431.640001][ T8907] netlink: 'syz.2.900': attribute type 10 has an invalid length. [ 431.648386][ T8907] team0: left allmulticast mode [ 431.653417][ T8907] team_slave_0: left allmulticast mode [ 431.659851][ T8907] team_slave_1: left allmulticast mode [ 431.665368][ T8907] team0: left promiscuous mode [ 431.671186][ T8907] team_slave_0: left promiscuous mode [ 431.681647][ T8907] team_slave_1: left promiscuous mode [ 431.690811][ T8907] bridge0: port 3(team0) entered disabled state [ 431.709468][ T8907] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.718576][ T8907] bond0: (slave team0): Enslaving as an active interface with an up link [ 431.729351][ T8909] netlink: 'syz.2.900': attribute type 10 has an invalid length. [ 431.743003][ T8909] bond0: (slave team0): Releasing backup interface [ 431.779967][ T8909] bridge0: port 3(team0) entered blocking state [ 431.804602][ T8909] bridge0: port 3(team0) entered disabled state [ 431.830146][ T8909] team0: entered allmulticast mode [ 431.839685][ T8909] team_slave_0: entered allmulticast mode [ 431.846103][ T8909] team_slave_1: entered allmulticast mode [ 431.858355][ T8909] team0: entered promiscuous mode [ 431.863844][ T8909] team_slave_0: entered promiscuous mode [ 431.870894][ T8909] team_slave_1: entered promiscuous mode [ 431.992023][ T8908] wg2: entered promiscuous mode [ 431.999484][ T8908] wg2: entered allmulticast mode [ 432.740928][ T8928] netlink: 'syz.3.904': attribute type 4 has an invalid length. [ 432.797733][ T8928] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.904'. [ 432.922861][ T8935] netlink: 'syz.4.906': attribute type 2 has an invalid length. [ 433.318638][ T8943] syz.4.909 (8943) used obsolete PPPIOCDETACH ioctl [ 433.548486][ T8951] netlink: 'syz.3.913': attribute type 3 has an invalid length. [ 433.575021][ T8951] netlink: 196520 bytes leftover after parsing attributes in process `syz.3.913'. [ 433.808560][ T8958] netlink: 'syz.0.916': attribute type 9 has an invalid length. [ 433.856384][ T8958] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.916'. [ 434.130114][ T8967] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.918'. [ 434.225412][ T8966] netlink: 'syz.3.917': attribute type 10 has an invalid length. [ 434.252551][ T8966] hsr0: entered promiscuous mode [ 434.272143][ T8975] delete_channel: no stack [ 434.804661][ T8966] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 434.821660][ T8966] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 434.833710][ T8966] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 434.847014][ T8966] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 434.894363][ T8970] netlink: 'syz.2.919': attribute type 29 has an invalid length. [ 434.906977][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 434.934995][ T8980] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.921'. [ 435.575213][ T8998] netlink: 'syz.0.928': attribute type 3 has an invalid length. [ 435.588660][ T8998] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.928'. [ 436.750623][ T5252] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 436.804426][ T9019] netlink: 'syz.4.934': attribute type 10 has an invalid length. [ 436.825660][ T9019] netlink: 40 bytes leftover after parsing attributes in process `syz.4.934'. [ 436.885728][ T9016] tap0: tun_chr_ioctl cmd 2147767519 [ 436.917527][ T9019] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.934'. [ 436.986862][ T9019] net_ratelimit: 7 callbacks suppressed [ 436.986885][ T9019] netlink: get zone limit has 8 unknown bytes [ 437.000956][ T9024] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.932'. [ 437.102920][ T9026] netlink: 'syz.0.936': attribute type 9 has an invalid length. [ 437.118710][ T9026] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.936'. [ 437.152327][ T9019] netlink: 'syz.4.934': attribute type 21 has an invalid length. [ 437.202433][ T9019] netlink: 128 bytes leftover after parsing attributes in process `syz.4.934'. [ 438.558601][ T9040] FAULT_INJECTION: forcing a failure. [ 438.558601][ T9040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.595150][ T9040] CPU: 0 UID: 0 PID: 9040 Comm: syz.2.941 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 438.605958][ T9040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 438.616058][ T9040] Call Trace: [ 438.619389][ T9040] [ 438.622354][ T9040] dump_stack_lvl+0x241/0x360 [ 438.627085][ T9040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.632337][ T9040] ? __pfx__printk+0x10/0x10 [ 438.636979][ T9040] ? __pfx_lock_release+0x10/0x10 [ 438.642074][ T9040] should_fail_ex+0x3b0/0x4e0 [ 438.646815][ T9040] _copy_from_iter+0x1f6/0x1960 [ 438.651733][ T9040] ? __virt_addr_valid+0x183/0x530 [ 438.656887][ T9040] ? skb_set_owner_w+0x238/0x3e0 [ 438.661969][ T9040] ? __pfx__copy_from_iter+0x10/0x10 [ 438.667305][ T9040] ? __pfx__copy_from_iter+0x10/0x10 [ 438.672638][ T9040] ? page_copy_sane+0x154/0x260 [ 438.677533][ T9040] copy_page_from_iter+0x7a/0x100 [ 438.682603][ T9040] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 438.688477][ T9040] tun_get_user+0xec3/0x4720 [ 438.693137][ T9040] ? __lock_acquire+0x137a/0x2040 [ 438.698241][ T9040] ? __pfx_tun_get_user+0x10/0x10 [ 438.703339][ T9040] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 438.708845][ T9040] ? tun_get+0x1e/0x2f0 [ 438.713059][ T9040] ? __pfx_lock_release+0x10/0x10 [ 438.718160][ T9040] ? tun_get+0x1e/0x2f0 [ 438.722364][ T9040] ? tun_get+0x27d/0x2f0 [ 438.726654][ T9040] tun_chr_write_iter+0x113/0x1f0 [ 438.731722][ T9040] vfs_write+0xa72/0xc90 [ 438.736006][ T9040] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 438.741589][ T9040] ? __pfx_vfs_write+0x10/0x10 [ 438.746426][ T9040] ksys_write+0x1a0/0x2c0 [ 438.750802][ T9040] ? __pfx_ksys_write+0x10/0x10 [ 438.755690][ T9040] ? do_syscall_64+0x100/0x230 [ 438.760491][ T9040] ? do_syscall_64+0xb6/0x230 [ 438.765211][ T9040] do_syscall_64+0xf3/0x230 [ 438.769751][ T9040] ? clear_bhb_loop+0x35/0x90 [ 438.774473][ T9040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.780405][ T9040] RIP: 0033:0x7f0fabd7def9 [ 438.784852][ T9040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.804500][ T9040] RSP: 002b:00007f0facaa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.812963][ T9040] RAX: ffffffffffffffda RBX: 00007f0fabf35f80 RCX: 00007f0fabd7def9 [ 438.820974][ T9040] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 00000000000000c8 [ 438.828983][ T9040] RBP: 00007f0facaa1090 R08: 0000000000000000 R09: 0000000000000000 [ 438.837006][ T9040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.845011][ T9040] R13: 0000000000000000 R14: 00007f0fabf35f80 R15: 00007ffcec8b6908 [ 438.853041][ T9040] [ 439.402782][ T9059] netlink: 'syz.2.947': attribute type 10 has an invalid length. [ 439.947059][ T9071] netlink: 48569 bytes leftover after parsing attributes in process `syz.3.952'. [ 440.284018][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.290845][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.630243][ T9098] netlink: 'syz.1.961': attribute type 29 has an invalid length. [ 442.310278][ T9111] FAULT_INJECTION: forcing a failure. [ 442.310278][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.348228][ T9111] CPU: 0 UID: 0 PID: 9111 Comm: syz.4.966 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 442.358941][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 442.369043][ T9111] Call Trace: [ 442.372360][ T9111] [ 442.375329][ T9111] dump_stack_lvl+0x241/0x360 [ 442.380066][ T9111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.385312][ T9111] ? __pfx__printk+0x10/0x10 [ 442.389964][ T9111] ? snprintf+0xda/0x120 [ 442.394276][ T9111] should_fail_ex+0x3b0/0x4e0 [ 442.399021][ T9111] _copy_to_user+0x2f/0xb0 [ 442.403494][ T9111] simple_read_from_buffer+0xca/0x150 [ 442.408919][ T9111] proc_fail_nth_read+0x1ec/0x260 [ 442.413991][ T9111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.419595][ T9111] ? rw_verify_area+0x520/0x6b0 [ 442.424489][ T9111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.430076][ T9111] vfs_read+0x204/0xbc0 [ 442.434285][ T9111] ? __pfx_lock_release+0x10/0x10 [ 442.439364][ T9111] ? __pfx_vfs_read+0x10/0x10 [ 442.444081][ T9111] ? __fget_files+0x29/0x470 [ 442.448803][ T9111] ? __fget_files+0x3f6/0x470 [ 442.453538][ T9111] ksys_read+0x1a0/0x2c0 [ 442.457827][ T9111] ? __pfx_ksys_read+0x10/0x10 [ 442.462625][ T9111] ? do_syscall_64+0x100/0x230 [ 442.467433][ T9111] ? do_syscall_64+0xb6/0x230 [ 442.472246][ T9111] do_syscall_64+0xf3/0x230 [ 442.476798][ T9111] ? clear_bhb_loop+0x35/0x90 [ 442.481535][ T9111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.487470][ T9111] RIP: 0033:0x7f2c93f7c93c [ 442.491921][ T9111] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 442.511659][ T9111] RSP: 002b:00007f2c94d00030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.520127][ T9111] RAX: ffffffffffffffda RBX: 00007f2c94135f80 RCX: 00007f2c93f7c93c [ 442.528145][ T9111] RDX: 000000000000000f RSI: 00007f2c94d000a0 RDI: 0000000000000010 [ 442.536158][ T9111] RBP: 00007f2c94d00090 R08: 0000000000000000 R09: 0000000000000000 [ 442.544168][ T9111] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.552175][ T9111] R13: 0000000000000000 R14: 00007f2c94135f80 R15: 00007ffea80eeeb8 [ 442.560205][ T9111] [ 443.122397][ T9116] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 443.130770][ T9116] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 443.679214][ T9139] netlink: 'syz.4.973': attribute type 3 has an invalid length. [ 443.721022][ T9138] netlink: 'syz.2.974': attribute type 10 has an invalid length. [ 443.888899][ T9139] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.973'. [ 443.916935][ T9138] team0: left allmulticast mode [ 444.009308][ T9138] team_slave_0: left allmulticast mode [ 444.109178][ T9138] team_slave_1: left allmulticast mode [ 444.150168][ T9138] team0: left promiscuous mode [ 444.175408][ T9138] team_slave_0: left promiscuous mode [ 444.226213][ T9138] team_slave_1: left promiscuous mode [ 444.232176][ T9138] bridge0: port 3(team0) entered disabled state [ 444.693187][ T9138] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.704401][ T9138] bond0: (slave team0): Enslaving as an active interface with an up link [ 444.717483][ T9142] netlink: 'syz.2.974': attribute type 10 has an invalid length. [ 444.729501][ T9142] bond0: (slave team0): Releasing backup interface [ 444.750463][ T9142] bridge0: port 3(team0) entered blocking state [ 444.764700][ T9142] bridge0: port 3(team0) entered disabled state [ 444.771302][ T9142] team0: entered allmulticast mode [ 444.776524][ T9142] team_slave_0: entered allmulticast mode [ 444.782284][ T9142] team_slave_1: entered allmulticast mode [ 444.789788][ T9142] team0: entered promiscuous mode [ 444.794867][ T9142] team_slave_0: entered promiscuous mode [ 444.801034][ T9142] team_slave_1: entered promiscuous mode [ 444.921076][ T9155] netlink: 'syz.1.977': attribute type 21 has an invalid length. [ 444.982179][ T9156] netlink: 'syz.1.977': attribute type 21 has an invalid length. [ 445.008558][ T9163] netlink: 'syz.4.978': attribute type 1 has an invalid length. [ 445.018889][ T9163] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.978'. [ 445.024661][ T9156] netlink: 128 bytes leftover after parsing attributes in process `syz.1.977'. [ 445.040435][ T9156] netlink: 'syz.1.977': attribute type 5 has an invalid length. [ 445.050647][ T9156] netlink: 3 bytes leftover after parsing attributes in process `syz.1.977'. [ 445.601361][ T9171] netlink: 'syz.1.982': attribute type 1 has an invalid length. [ 445.609323][ T9171] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.982'. [ 445.944721][ T9177] netlink: 'syz.0.983': attribute type 10 has an invalid length. [ 445.953891][ T9177] team0: left allmulticast mode [ 445.960142][ T9177] team_slave_0: left allmulticast mode [ 445.967509][ T9177] team_slave_1: left allmulticast mode [ 445.973032][ T9177] team0: left promiscuous mode [ 445.979196][ T9177] team_slave_0: left promiscuous mode [ 445.984828][ T9177] team_slave_1: left promiscuous mode [ 445.994343][ T9177] bridge0: port 4(team0) entered disabled state [ 446.019349][ T9177] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.041034][ T9177] Â: (slave team0): Enslaving as an active interface with an up link [ 446.092100][ T9181] Â: (slave team0): Releasing backup interface [ 446.114998][ T9181] bridge0: port 4(team0) entered blocking state [ 446.124641][ T9181] bridge0: port 4(team0) entered disabled state [ 446.132534][ T9181] team0: entered allmulticast mode [ 446.138505][ T9181] team_slave_0: entered allmulticast mode [ 446.162427][ T9181] team_slave_1: entered allmulticast mode [ 446.210715][ T9181] team0: entered promiscuous mode [ 446.232854][ T9181] team_slave_0: entered promiscuous mode [ 446.254867][ T9181] team_slave_1: entered promiscuous mode [ 446.395593][ T9190] bond0: (slave team0): Releasing backup interface [ 446.411538][ T9190] bridge0: port 1(team0) entered blocking state [ 446.420701][ T9190] bridge0: port 1(team0) entered disabled state [ 446.432502][ T9190] team0: entered allmulticast mode [ 446.442476][ T9190] team_slave_0: entered allmulticast mode [ 446.459350][ T9190] team_slave_1: entered allmulticast mode [ 446.473865][ T9190] team0: entered promiscuous mode [ 446.483449][ T9190] team_slave_0: entered promiscuous mode [ 446.494618][ T9190] team_slave_1: entered promiscuous mode [ 446.521949][ T9187] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.988'. [ 447.082752][ T9208] netlink: 208316 bytes leftover after parsing attributes in process `syz.4.994'. [ 447.095085][ T9208] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 447.146132][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.153456][ T9208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.161154][ T9208] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.168472][ T9208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.177127][ T9208] bridge0: entered promiscuous mode [ 447.183031][ T9208] bridge0: entered allmulticast mode [ 447.468226][ T9213] validate_nla: 5 callbacks suppressed [ 447.468269][ T9213] netlink: 'syz.3.996': attribute type 1 has an invalid length. [ 447.509189][ T9213] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.996'. [ 447.665284][ T9224] netlink: 'syz.1.1001': attribute type 10 has an invalid length. [ 447.686970][ T9224] team0: left allmulticast mode [ 447.692012][ T9224] team_slave_0: left allmulticast mode [ 447.714298][ T9224] team_slave_1: left allmulticast mode [ 447.724660][ T9224] team0: left promiscuous mode [ 447.733690][ T9224] team_slave_0: left promiscuous mode [ 447.745421][ T9224] team_slave_1: left promiscuous mode [ 447.759548][ T9224] bridge0: port 3(team0) entered disabled state [ 447.867635][ T9231] netlink: 40115 bytes leftover after parsing attributes in process `syz.2.1002'. [ 447.971881][ T9224] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.983160][ T9224] bond0: (slave team0): Enslaving as an active interface with an up link [ 447.992229][ T9229] netlink: 'syz.1.1001': attribute type 10 has an invalid length. [ 448.020619][ T9229] bond0: (slave team0): Releasing backup interface [ 448.071083][ T9229] bridge0: port 3(team0) entered blocking state [ 448.107337][ T9229] bridge0: port 3(team0) entered disabled state [ 448.123609][ T9229] team0: entered allmulticast mode [ 448.129213][ T9229] team_slave_0: entered allmulticast mode [ 448.135263][ T9229] team_slave_1: entered allmulticast mode [ 448.143614][ T9229] team0: entered promiscuous mode [ 448.150192][ T9229] team_slave_0: entered promiscuous mode [ 448.156518][ T9229] team_slave_1: entered promiscuous mode [ 448.163960][ T9227] netlink: 'syz.2.1002': attribute type 29 has an invalid length. [ 448.316649][ T9242] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 448.380220][ T9245] netlink: 'syz.0.1006': attribute type 10 has an invalid length. [ 448.403081][ T9245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1006'. [ 448.422648][ T9245] hsr0: entered promiscuous mode [ 448.448420][ T9245] hsr0: entered allmulticast mode [ 448.458050][ T9245] hsr_slave_0: entered allmulticast mode [ 448.483462][ T9245] hsr_slave_1: entered allmulticast mode [ 448.520161][ T9245] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 448.611861][ T9251] netlink: 'syz.4.1008': attribute type 3 has an invalid length. [ 448.648250][ T9251] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1008'. [ 449.235615][ T9259] netlink: 'syz.3.1011': attribute type 10 has an invalid length. [ 449.494771][ T9255] IPv6: Can't replace route, no match found [ 449.625348][ T9272] netlink: zone id is out of range [ 449.647041][ T9272] netlink: zone id is out of range [ 449.656519][ T9272] netlink: zone id is out of range [ 449.661694][ T9272] netlink: zone id is out of range [ 449.667692][ T9272] netlink: zone id is out of range [ 449.673258][ T9272] netlink: zone id is out of range [ 449.686354][ T9272] netlink: zone id is out of range [ 449.697125][ T9272] netlink: zone id is out of range [ 449.722408][ T9276] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.733296][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.746246][ T9272] netlink: zone id is out of range [ 449.755158][ T9276] bridge0: entered allmulticast mode [ 449.864056][ T9280] netlink: 'syz.1.1019': attribute type 10 has an invalid length. [ 449.883224][ T9280] hsr0: entered promiscuous mode [ 449.906004][ T9280] hsr0: entered allmulticast mode [ 449.917847][ T9280] hsr_slave_0: entered allmulticast mode [ 449.926096][ T9280] hsr_slave_1: entered allmulticast mode [ 449.932905][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.940216][ T9273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.947864][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.955092][ T9273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.971031][ T9273] bridge0: entered promiscuous mode [ 449.999383][ T9282] netlink: 'syz.3.1020': attribute type 10 has an invalid length. [ 450.031128][ T9282] team0: left allmulticast mode [ 450.037840][ T9282] team_slave_0: left allmulticast mode [ 450.044479][ T9282] team_slave_1: left allmulticast mode [ 450.051528][ T9282] team0: left promiscuous mode [ 450.066298][ T9282] team_slave_0: left promiscuous mode [ 450.080200][ T9282] team_slave_1: left promiscuous mode [ 450.100342][ T9282] bridge0: port 1(team0) entered disabled state [ 450.134777][ T9282] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.139524][ T9294] FAULT_INJECTION: forcing a failure. [ 450.139524][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.140728][ T9294] [ 450.140738][ T9294] ====================================================== [ 450.140746][ T9294] WARNING: possible circular locking dependency detected [ 450.140756][ T9294] 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 Not tainted [ 450.140769][ T9294] ------------------------------------------------------ [ 450.140777][ T9294] syz.2.1023/9294 is trying to acquire lock: [ 450.140789][ T9294] ffffffff8e92c400 (console_owner){-...}-{0:0}, at: vprintk_emit+0x405/0x7c0 [ 450.140847][ T9294] [ 450.140847][ T9294] but task is already holding lock: [ 450.140854][ T9294] ffff8880b893e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 450.140906][ T9294] [ 450.140906][ T9294] which lock already depends on the new lock. [ 450.140906][ T9294] [ 450.140914][ T9294] [ 450.140914][ T9294] the existing dependency chain (in reverse order) is: [ 450.140922][ T9294] [ 450.140922][ T9294] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 450.140950][ T9294] lock_acquire+0x1ed/0x550 [ 450.140979][ T9294] _raw_spin_lock_nested+0x31/0x40 [ 450.141008][ T9294] raw_spin_rq_lock_nested+0x2a/0x140 [ 450.141033][ T9294] task_fork_fair+0x61/0x1e0 [ 450.141063][ T9294] sched_cgroup_fork+0x37c/0x410 [ 450.141082][ T9294] copy_process+0x2217/0x3dc0 [ 450.141110][ T9294] kernel_clone+0x226/0x8f0 [ 450.141139][ T9294] user_mode_thread+0x132/0x1a0 [ 450.141168][ T9294] rest_init+0x23/0x300 [ 450.141193][ T9294] start_kernel+0x47a/0x500 [ 450.141214][ T9294] x86_64_start_reservations+0x2a/0x30 [ 450.141243][ T9294] x86_64_start_kernel+0x9f/0xa0 [ 450.141271][ T9294] common_startup_64+0x13e/0x147 [ 450.141294][ T9294] [ 450.141294][ T9294] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 450.141322][ T9294] lock_acquire+0x1ed/0x550 [ 450.141350][ T9294] _raw_spin_lock_irqsave+0xd5/0x120 [ 450.141381][ T9294] try_to_wake_up+0xb0/0x1470 [ 450.141412][ T9294] __wake_up_common_lock+0x130/0x1e0 [ 450.141441][ T9294] tty_port_default_wakeup+0xa6/0xf0 [ 450.141473][ T9294] serial8250_tx_chars+0x6e2/0x930 [ 450.141500][ T9294] serial8250_handle_irq+0x558/0x710 [ 450.141527][ T9294] serial8250_default_handle_irq+0xd1/0x1f0 [ 450.141559][ T9294] serial8250_interrupt+0xa9/0x1f0 [ 450.141581][ T9294] __handle_irq_event_percpu+0x29a/0xa80 [ 450.141600][ T9294] handle_irq_event+0x89/0x1f0 [ 450.141620][ T9294] handle_edge_irq+0x25f/0xc20 [ 450.141647][ T9294] __common_interrupt+0x136/0x230 [ 450.141667][ T9294] common_interrupt+0xa5/0xd0 [ 450.141686][ T9294] asm_common_interrupt+0x26/0x40 [ 450.141706][ T9294] format_decode+0x20d/0x1bb0 [ 450.141725][ T9294] vsnprintf+0x14f/0x1da0 [ 450.141742][ T9294] seq_printf+0x172/0x270 [ 450.141766][ T9294] show_cpuinfo+0x33f/0xcc0 [ 450.141781][ T9294] seq_read_iter+0x445/0xd60 [ 450.141803][ T9294] vfs_read+0x9bd/0xbc0 [ 450.141817][ T9294] ksys_read+0x1a0/0x2c0 [ 450.141832][ T9294] do_syscall_64+0xf3/0x230 [ 450.141847][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.141867][ T9294] [ 450.141867][ T9294] -> #2 (&tty->write_wait){-...}-{2:2}: [ 450.141889][ T9294] lock_acquire+0x1ed/0x550 [ 450.141909][ T9294] _raw_spin_lock_irqsave+0xd5/0x120 [ 450.141932][ T9294] __wake_up_common_lock+0x25/0x1e0 [ 450.141953][ T9294] tty_port_default_wakeup+0xa6/0xf0 [ 450.141975][ T9294] serial8250_tx_chars+0x6e2/0x930 [ 450.142000][ T9294] serial8250_handle_irq+0x558/0x710 [ 450.142020][ T9294] serial8250_default_handle_irq+0xd1/0x1f0 [ 450.142044][ T9294] serial8250_interrupt+0xa9/0x1f0 [ 450.142061][ T9294] __handle_irq_event_percpu+0x29a/0xa80 [ 450.142076][ T9294] handle_irq_event+0x89/0x1f0 [ 450.142091][ T9294] handle_edge_irq+0x25f/0xc20 [ 450.142114][ T9294] __common_interrupt+0x136/0x230 [ 450.142133][ T9294] common_interrupt+0xa5/0xd0 [ 450.142152][ T9294] asm_common_interrupt+0x26/0x40 [ 450.142171][ T9294] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 450.142195][ T9294] uart_write+0x15d/0x380 [ 450.142214][ T9294] n_tty_write+0xd6a/0x1230 [ 450.142228][ T9294] file_tty_write+0x54f/0x9c0 [ 450.142248][ T9294] vfs_write+0xa72/0xc90 [ 450.142262][ T9294] ksys_write+0x1a0/0x2c0 [ 450.142281][ T9294] do_syscall_64+0xf3/0x230 [ 450.142297][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.142317][ T9294] [ 450.142317][ T9294] -> #1 (&port_lock_key){-...}-{2:2}: [ 450.142337][ T9294] lock_acquire+0x1ed/0x550 [ 450.142357][ T9294] _raw_spin_lock_irqsave+0xd5/0x120 [ 450.142380][ T9294] serial8250_console_write+0x1a8/0x1770 [ 450.142402][ T9294] console_flush_all+0x867/0xfd0 [ 450.142418][ T9294] console_unlock+0x13b/0x4d0 [ 450.142432][ T9294] vprintk_emit+0x5dc/0x7c0 [ 450.142447][ T9294] _printk+0xd5/0x120 [ 450.142460][ T9294] register_console+0x727/0xcf0 [ 450.142477][ T9294] univ8250_console_init+0x52/0x90 [ 450.142495][ T9294] console_init+0x1b8/0x6f0 [ 450.142512][ T9294] start_kernel+0x2d3/0x500 [ 450.142527][ T9294] x86_64_start_reservations+0x2a/0x30 [ 450.142548][ T9294] x86_64_start_kernel+0x9f/0xa0 [ 450.142568][ T9294] common_startup_64+0x13e/0x147 [ 450.142585][ T9294] [ 450.142585][ T9294] -> #0 (console_owner){-...}-{0:0}: [ 450.142604][ T9294] validate_chain+0x18e0/0x5900 [ 450.142619][ T9294] __lock_acquire+0x137a/0x2040 [ 450.142640][ T9294] lock_acquire+0x1ed/0x550 [ 450.142660][ T9294] vprintk_emit+0x422/0x7c0 [ 450.142674][ T9294] _printk+0xd5/0x120 [ 450.142687][ T9294] should_fail_ex+0x391/0x4e0 [ 450.142710][ T9294] strncpy_from_user+0x36/0x2e0 [ 450.142733][ T9294] strncpy_from_user_nofault+0x71/0x140 [ 450.142758][ T9294] bpf_probe_read_compat_str+0xe9/0x180 [ 450.142781][ T9294] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 450.142794][ T9294] bpf_trace_run4+0x334/0x590 [ 450.142810][ T9294] __traceiter_sched_switch+0x98/0xd0 [ 450.142826][ T9294] __schedule+0x2591/0x4a60 [ 450.142839][ T9294] preempt_schedule_common+0x84/0xd0 [ 450.142853][ T9294] preempt_schedule+0xe1/0xf0 [ 450.142867][ T9294] preempt_schedule_thunk+0x1a/0x30 [ 450.142882][ T9294] unwind_next_frame+0x2124/0x2a00 [ 450.142905][ T9294] arch_stack_walk+0x151/0x1b0 [ 450.142919][ T9294] stack_trace_save+0x118/0x1d0 [ 450.142937][ T9294] kasan_save_track+0x3f/0x80 [ 450.142957][ T9294] __kasan_kmalloc+0x98/0xb0 [ 450.142979][ T9294] __kmalloc_noprof+0x1fc/0x400 [ 450.143000][ T9294] bpf_test_init+0xe1/0x180 [ 450.143024][ T9294] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 450.143039][ T9294] bpf_prog_test_run+0x33a/0x3b0 [ 450.143059][ T9294] __sys_bpf+0x48d/0x810 [ 450.143076][ T9294] __x64_sys_bpf+0x7c/0x90 [ 450.143091][ T9294] do_syscall_64+0xf3/0x230 [ 450.143106][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.143126][ T9294] [ 450.143126][ T9294] other info that might help us debug this: [ 450.143126][ T9294] [ 450.143132][ T9294] Chain exists of: [ 450.143132][ T9294] console_owner --> &p->pi_lock --> &rq->__lock [ 450.143132][ T9294] [ 450.143155][ T9294] Possible unsafe locking scenario: [ 450.143155][ T9294] [ 450.143159][ T9294] CPU0 CPU1 [ 450.143164][ T9294] ---- ---- [ 450.143168][ T9294] lock(&rq->__lock); [ 450.143177][ T9294] lock(&p->pi_lock); [ 450.143188][ T9294] lock(&rq->__lock); [ 450.143199][ T9294] lock(console_owner); [ 450.143208][ T9294] [ 450.143208][ T9294] *** DEADLOCK *** [ 450.143208][ T9294] [ 450.143212][ T9294] 2 locks held by syz.2.1023/9294: [ 450.143221][ T9294] #0: ffff8880b893e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 450.143264][ T9294] #1: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 450.143302][ T9294] [ 450.143302][ T9294] stack backtrace: [ 450.143308][ T9294] CPU: 1 UID: 0 PID: 9294 Comm: syz.2.1023 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 450.143327][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 450.143337][ T9294] Call Trace: [ 450.143344][ T9294] [ 450.143350][ T9294] dump_stack_lvl+0x241/0x360 [ 450.143371][ T9294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.143394][ T9294] ? print_circular_bug+0x130/0x1a0 [ 450.143412][ T9294] check_noncircular+0x36a/0x4a0 [ 450.143432][ T9294] ? __pfx_check_noncircular+0x10/0x10 [ 450.143449][ T9294] ? lockdep_lock+0x123/0x2b0 [ 450.143472][ T9294] ? add_lock_to_list+0x1de/0x2e0 [ 450.143493][ T9294] validate_chain+0x18e0/0x5900 [ 450.143521][ T9294] ? __pfx_validate_chain+0x10/0x10 [ 450.143539][ T9294] ? __lock_acquire+0x137a/0x2040 [ 450.143579][ T9294] ? mark_lock+0x9a/0x350 [ 450.143609][ T9294] __lock_acquire+0x137a/0x2040 [ 450.143638][ T9294] lock_acquire+0x1ed/0x550 [ 450.143658][ T9294] ? vprintk_emit+0x405/0x7c0 [ 450.143676][ T9294] ? __pfx_lock_acquire+0x10/0x10 [ 450.143696][ T9294] ? __pfx_lock_release+0x10/0x10 [ 450.143716][ T9294] ? do_raw_spin_lock+0x14f/0x370 [ 450.143737][ T9294] ? do_raw_spin_unlock+0x13c/0x8b0 [ 450.143758][ T9294] ? vprintk_emit+0x405/0x7c0 [ 450.143772][ T9294] vprintk_emit+0x422/0x7c0 [ 450.143786][ T9294] ? vprintk_emit+0x405/0x7c0 [ 450.143802][ T9294] ? __pfx_vprintk_emit+0x10/0x10 [ 450.143817][ T9294] ? __bad_area_nosemaphore+0x118/0x770 [ 450.143843][ T9294] _printk+0xd5/0x120 [ 450.143859][ T9294] ? __pfx__printk+0x10/0x10 [ 450.143880][ T9294] should_fail_ex+0x391/0x4e0 [ 450.143905][ T9294] strncpy_from_user+0x36/0x2e0 [ 450.143930][ T9294] strncpy_from_user_nofault+0x71/0x140 [ 450.143955][ T9294] bpf_probe_read_compat_str+0xe9/0x180 [ 450.143979][ T9294] ? bpf_trace_run4+0x244/0x590 [ 450.144000][ T9294] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 450.144012][ T9294] bpf_trace_run4+0x334/0x590 [ 450.144030][ T9294] ? psi_group_change+0xb88/0x11c0 [ 450.144048][ T9294] ? __pfx_bpf_trace_run4+0x10/0x10 [ 450.144068][ T9294] ? __pfx_probe_sched_switch+0x10/0x10 [ 450.144087][ T9294] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 450.144104][ T9294] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 450.144120][ T9294] __traceiter_sched_switch+0x98/0xd0 [ 450.144138][ T9294] __schedule+0x2591/0x4a60 [ 450.144162][ T9294] ? __pfx___schedule+0x10/0x10 [ 450.144177][ T9294] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 450.144197][ T9294] ? irqentry_enter+0x39/0x60 [ 450.144217][ T9294] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 450.144242][ T9294] ? preempt_schedule+0xe1/0xf0 [ 450.144256][ T9294] preempt_schedule_common+0x84/0xd0 [ 450.144271][ T9294] preempt_schedule+0xe1/0xf0 [ 450.144285][ T9294] ? __pfx_preempt_schedule+0x10/0x10 [ 450.144304][ T9294] preempt_schedule_thunk+0x1a/0x30 [ 450.144319][ T9294] ? unwind_next_frame+0x196f/0x2a00 [ 450.144340][ T9294] ? unwind_next_frame+0x1e75/0x2a00 [ 450.144361][ T9294] ? unwind_next_frame+0x211f/0x2a00 [ 450.144384][ T9294] unwind_next_frame+0x2124/0x2a00 [ 450.144411][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.144431][ T9294] ? __kernel_text_address+0xd/0x40 [ 450.144446][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.144465][ T9294] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 450.144485][ T9294] arch_stack_walk+0x151/0x1b0 [ 450.144506][ T9294] stack_trace_save+0x118/0x1d0 [ 450.144525][ T9294] ? __pfx_stack_trace_save+0x10/0x10 [ 450.144550][ T9294] kasan_save_track+0x3f/0x80 [ 450.144569][ T9294] ? kasan_save_track+0x3f/0x80 [ 450.144587][ T9294] ? __kasan_kmalloc+0x98/0xb0 [ 450.144607][ T9294] ? __kmalloc_noprof+0x1fc/0x400 [ 450.144621][ T9294] ? bpf_test_init+0xe1/0x180 [ 450.144643][ T9294] ? bpf_prog_test_run_xdp+0x48e/0x11b0 [ 450.144657][ T9294] ? bpf_prog_test_run+0x33a/0x3b0 [ 450.144675][ T9294] ? __sys_bpf+0x48d/0x810 [ 450.144690][ T9294] ? __x64_sys_bpf+0x7c/0x90 [ 450.144705][ T9294] ? do_syscall_64+0xf3/0x230 [ 450.144719][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.144760][ T9294] __kasan_kmalloc+0x98/0xb0 [ 450.144781][ T9294] ? bpf_test_init+0xe1/0x180 [ 450.144802][ T9294] ? bpf_test_init+0xe1/0x180 [ 450.144823][ T9294] __kmalloc_noprof+0x1fc/0x400 [ 450.144841][ T9294] bpf_test_init+0xe1/0x180 [ 450.144866][ T9294] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 450.144881][ T9294] ? __pfx_lock_acquire+0x10/0x10 [ 450.144903][ T9294] ? __pfx_lock_release+0x10/0x10 [ 450.144928][ T9294] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 450.144943][ T9294] ? __fget_files+0x29/0x470 [ 450.144967][ T9294] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 450.144989][ T9294] bpf_prog_test_run+0x33a/0x3b0 [ 450.145010][ T9294] __sys_bpf+0x48d/0x810 [ 450.145029][ T9294] ? __pfx___sys_bpf+0x10/0x10 [ 450.145053][ T9294] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 450.145075][ T9294] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 450.145097][ T9294] ? do_syscall_64+0x100/0x230 [ 450.145115][ T9294] __x64_sys_bpf+0x7c/0x90 [ 450.145131][ T9294] do_syscall_64+0xf3/0x230 [ 450.145147][ T9294] ? clear_bhb_loop+0x35/0x90 [ 450.145167][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.145187][ T9294] RIP: 0033:0x7f0fabd7def9 [ 450.145199][ T9294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.145212][ T9294] RSP: 002b:00007f0facaa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 450.145226][ T9294] RAX: ffffffffffffffda RBX: 00007f0fabf35f80 RCX: 00007f0fabd7def9 [ 450.145239][ T9294] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 450.145249][ T9294] RBP: 00007f0facaa1090 R08: 0000000000000000 R09: 0000000000000000 [ 450.145258][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.145267][ T9294] R13: 0000000000000000 R14: 00007f0fabf35f80 R15: 00007ffcec8b6908 [ 450.145286][ T9294] [ 451.490905][ T9294] CPU: 1 UID: 0 PID: 9294 Comm: syz.2.1023 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 451.501593][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 451.511834][ T9294] Call Trace: [ 451.515139][ T9294] [ 451.518062][ T9294] dump_stack_lvl+0x241/0x360 [ 451.522753][ T9294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.527967][ T9294] ? __pfx__printk+0x10/0x10 [ 451.532575][ T9294] should_fail_ex+0x3b0/0x4e0 [ 451.537270][ T9294] strncpy_from_user+0x36/0x2e0 [ 451.542150][ T9294] strncpy_from_user_nofault+0x71/0x140 [ 451.547706][ T9294] bpf_probe_read_compat_str+0xe9/0x180 [ 451.553251][ T9294] ? bpf_trace_run4+0x244/0x590 [ 451.558183][ T9294] bpf_prog_c1796171ffc7efef+0x3d/0x3f [ 451.563653][ T9294] bpf_trace_run4+0x334/0x590 [ 451.568341][ T9294] ? psi_group_change+0xb88/0x11c0 [ 451.573462][ T9294] ? __pfx_bpf_trace_run4+0x10/0x10 [ 451.578668][ T9294] ? __pfx_probe_sched_switch+0x10/0x10 [ 451.584212][ T9294] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 451.590882][ T9294] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 451.596958][ T9294] __traceiter_sched_switch+0x98/0xd0 [ 451.602337][ T9294] __schedule+0x2591/0x4a60 [ 451.606848][ T9294] ? __pfx___schedule+0x10/0x10 [ 451.611695][ T9294] ? perf_trace_preemptirq_template+0xf8/0x3f0 [ 451.617872][ T9294] ? irqentry_enter+0x39/0x60 [ 451.622556][ T9294] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 451.628906][ T9294] ? preempt_schedule+0xe1/0xf0 [ 451.633747][ T9294] preempt_schedule_common+0x84/0xd0 [ 451.639025][ T9294] preempt_schedule+0xe1/0xf0 [ 451.643692][ T9294] ? __pfx_preempt_schedule+0x10/0x10 [ 451.649061][ T9294] preempt_schedule_thunk+0x1a/0x30 [ 451.654253][ T9294] ? unwind_next_frame+0x196f/0x2a00 [ 451.659535][ T9294] ? unwind_next_frame+0x1e75/0x2a00 [ 451.664815][ T9294] ? unwind_next_frame+0x211f/0x2a00 [ 451.670097][ T9294] unwind_next_frame+0x2124/0x2a00 [ 451.675236][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.681302][ T9294] ? __kernel_text_address+0xd/0x40 [ 451.686491][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.692553][ T9294] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 451.698716][ T9294] arch_stack_walk+0x151/0x1b0 [ 451.703492][ T9294] stack_trace_save+0x118/0x1d0 [ 451.708340][ T9294] ? __pfx_stack_trace_save+0x10/0x10 [ 451.713728][ T9294] kasan_save_track+0x3f/0x80 [ 451.718404][ T9294] ? kasan_save_track+0x3f/0x80 [ 451.723248][ T9294] ? __kasan_kmalloc+0x98/0xb0 [ 451.728008][ T9294] ? __kmalloc_noprof+0x1fc/0x400 [ 451.733026][ T9294] ? bpf_test_init+0xe1/0x180 [ 451.737698][ T9294] ? bpf_prog_test_run_xdp+0x48e/0x11b0 [ 451.743232][ T9294] ? bpf_prog_test_run+0x33a/0x3b0 [ 451.748338][ T9294] ? __sys_bpf+0x48d/0x810 [ 451.752748][ T9294] ? __x64_sys_bpf+0x7c/0x90 [ 451.757329][ T9294] ? do_syscall_64+0xf3/0x230 [ 451.761995][ T9294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.768080][ T9294] __kasan_kmalloc+0x98/0xb0 [ 451.772672][ T9294] ? bpf_test_init+0xe1/0x180 [ 451.777346][ T9294] ? bpf_test_init+0xe1/0x180 [ 451.782021][ T9294] __kmalloc_noprof+0x1fc/0x400 [ 451.786865][ T9294] bpf_test_init+0xe1/0x180 [ 451.791372][ T9294] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 451.796752][ T9294] ? __pfx_lock_acquire+0x10/0x10 [ 451.801791][ T9294] ? __pfx_lock_release+0x10/0x10 [ 451.806817][ T9294] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 451.812618][ T9294] ? __fget_files+0x29/0x470 [ 451.817210][ T9294] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 451.823007][ T9294] bpf_prog_test_run+0x33a/0x3b0 [ 451.827963][ T9294] __sys_bpf+0x48d/0x810 [ 451.832202][ T9294] ? __pfx___sys_bpf+0x10/0x10 [ 451.836968][ T9294] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 451.842948][ T9294] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 451.849278][ T9294] ? do_syscall_64+0x100/0x230 [ 451.854037][ T9294] __x64_sys_bpf+0x7c/0x90 [ 451.858459][ T9294] do_syscall_64+0xf3/0x230 [ 451.862955][ T9294] ? clear_bhb_loop+0x35/0x90 [ 451.867644][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.873530][ T9294] RIP: 0033:0x7f0fabd7def9 [ 451.877940][ T9294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.897656][ T9294] RSP: 002b:00007f0facaa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.906069][ T9294] RAX: ffffffffffffffda RBX: 00007f0fabf35f80 RCX: 00007f0fabd7def9 [ 451.914036][ T9294] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 451.922001][ T9294] RBP: 00007f0facaa1090 R08: 0000000000000000 R09: 0000000000000000 [ 451.929978][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.937943][ T9294] R13: 0000000000000000 R14: 00007f0fabf35f80 R15: 00007ffcec8b6908 [ 451.945920][ T9294] [ 451.977137][ T9282] bond0: (slave team0): Enslaving as an active interface with an up link [ 452.021512][ T9285] bond0: (slave team0): Releasing backup interface [ 452.048331][ T9285] bridge0: port 1(team0) entered blocking state [ 452.054727][ T9285] bridge0: port 1(team0) entered disabled state [ 452.063331][ T9285] team0: entered allmulticast mode [ 452.069143][ T9285] team_slave_0: entered allmulticast mode [ 452.074984][ T9285] team_slave_1: entered allmulticast mode [ 452.083108][ T9285] team0: entered promiscuous mode [ 452.088404][ T9285] team_slave_0: entered promiscuous mode [ 452.094293][ T9285] team_slave_1: entered promiscuous mode