last executing test programs: 5.028005385s ago: executing program 0 (id=1646): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033d407277bac878b4ab50a", @ANYRES32, @ANYRES8=r1], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000030e8d5000000010000001400000500242c100806d320d98a61a90021", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x8000000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x1, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f0000000180)=@caif=@dgm={0x25, 0x4, 0xa}, 0x80, 0x0}, 0x0) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) r5 = openat$cgroup_type(r2, &(0x7f0000000640), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0xbec151108205ee6d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="178d8544cab8a6048604bf0bb019", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) write$cgroup_type(r5, &(0x7f0000000680), 0x9) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff3) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000280)=""/235, 0x41100, 0x10, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x1, 0x80000001, 0x8ca1}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[r7, r2], &(0x7f0000000400)=[{0x2, 0x2, 0x0, 0x4}, {0x5, 0x5, 0x1, 0x2}, {0x4, 0x5, 0x7, 0xb}, {0x5, 0x5, 0x9, 0x4}, {0x4, 0x1}, {0x3, 0x4, 0x6, 0x7}], 0x10, 0x2}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r9, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x24}, 0x94) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[], 0xc) 2.302652778s ago: executing program 4 (id=1656): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x8, 0x7, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xa, 0xff, 0x8, 0x1, 0x0, 0x5, 0x5013c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x81, 0x2}, 0x0, 0x0, 0x6, 0x7, 0x3, 0x582a010f, 0xff, 0x0, 0x6, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x1}, 0x110000, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xfc76}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000b80)=0x7) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r2 = gettid() perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x1, 0xfd, 0x1d, 0x0, 0x8000000000000000, 0x8060, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x101928, 0x8, 0x1000, 0x3, 0x5c4504c9, 0x3, 0xf82, 0x0, 0xa, 0x0, 0x9}, r2, 0x10, r0, 0xb) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f0000003140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000aadf0000850000002200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) 2.150604595s ago: executing program 0 (id=1659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/4, 0x4, 0x0, &(0x7f0000000240)=""/22, 0x16}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="040003076804268c989e14f0a2a8", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xe2, 0x1, 0x0, 0x0, 0x0, 0xfffd, 0x1019, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x6}, 0x962d, 0x20000, 0x0, 0x0, 0x1ffffffffffe, 0x5, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0}, 0xffffffffffffff88) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000980)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffe3f}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="218b48a48ba17d5eb02605c30c3dfe727a323332137656de72f75fde", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRESHEX=r6, @ANYRES16=0x0, @ANYRESDEC=r3, @ANYBLOB="c81866c3c2f833a0c081ef6e629585ae56eb0741f5cf05d1f538f1edae963165796ac107f67a7f9d337f076c3605d7c4ccbf924da83d963a07b55e7863771524aad447d0582a4aa0cde077278e96bafa", @ANYRES16=r9, @ANYBLOB="afd0922ad518214d926ed94445e2ef503b2df9f795b82c975e6db1", @ANYRESOCT=r5], 0xfe33) 1.65039662s ago: executing program 4 (id=1664): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c300000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$kcm(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r4, 0x6, 0x16, &(0x7f0000000200), 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={&(0x7f0000000240)="e8373fbcd81ba908eb265be9b2e609232ecf9d7b2cae61d1a518f129b185b18ce05bec36b2205e12ee9ef5d8728cb9f2c5cec7c803ec4468e5dc5bc849307fe0b9336d52c66eb8bceba8325be55569d0d750814852aca4db970f399fde4b79c8cc74f786c726f2d038f8d15d3ae20591e51075e2ba6b939d92dc2b4c2d0a6efd8e59e4dd803f74431c36eb73b3423766", &(0x7f0000000900)=""/126, &(0x7f0000000040)="9ad160f14afe55fc4e8c2b89c40e34807c049b97f56df807bba9a43bb5", &(0x7f0000000980)="50ac8cf447b11a1bd52666a570d3b26079f36a73ee5b3fc48b866a35d8a950a1bc911471587da39792fe419a0eb1175ac6e2eb61eaaa8fcd5b261ebe6536c21ee8fc46a056a7413240eea9ae1ec4a614b339f5e5b86edfabf6588de84cb45d85d04ce6bb70fc757276fce80d9bea6686b138e21d68e80d25b3aa6bbeac2fe3e39e229fe7291bc8bb76c9f24c28c1c303", 0xec61, r5, 0x4}, 0x38) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="5d97c7", @ANYRESDEC=r0, @ANYRESOCT=r3, @ANYRESOCT=r2], 0x48) (async) recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000800)=[{}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000780)=""/84, 0x54}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x5, &(0x7f0000000880)=""/102, 0x66}, 0x40012100) 1.550480304s ago: executing program 3 (id=1665): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000080000006457053f23f79accbae6b4defe220897d4200000928c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000005c0), 0x8}, 0x100080, 0x0, 0x8, 0x20046484afba06c7, 0xa, 0x3ff, 0x1}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x6, 0x7602, 0xa1cf, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000009c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000001dc0)=0xff, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xcf5}, 0x0, 0x0, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x80001, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x1b, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb227, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8dcf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x4b, 0xb, 0x9, 0x6, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0xd2, &(0x7f0000000640)=""/210, 0x40f00, 0x48, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x2}, 0x10, 0x1b79b, r6, 0x5, &(0x7f0000000540)=[r1, 0xffffffffffffffff, r0, r1], &(0x7f0000000740)=[{0x5, 0x4, 0xc}, {0x2, 0x5, 0x10, 0x6}, {0x5, 0x1, 0xf, 0xa}, {0x0, 0x5, 0x0, 0xc}, {0x1, 0x2, 0x10, 0xc}], 0x10, 0x9d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x62, 0x0, 0x0, 0x0, 0x10000, 0x60000000, 0xffffffffffffff4e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x50) openat$cgroup_ro(r9, 0x0, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81114d3b00ff08000e40000200875a65969ff57b00ff0200"], 0xfdef) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x20, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x80000000, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.542745745s ago: executing program 2 (id=1666): socket$kcm(0x2, 0x3, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x99, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f0000000380), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x200000000000, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x281c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x7, 0x1000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f00000005c0)={[{0x0, 'rdma'}, {0x2b, 'devices'}, {0x2d, 'rlimit'}]}, 0x17) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8918, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e1208000f0000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) socket$kcm(0xa, 0x2, 0x3a) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4080) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000740)=r0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.322754405s ago: executing program 1 (id=1667): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x44002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4d31, 0x880, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80200000, 0x4, @perf_config_ext={0x8, 0x100000001}, 0x200, 0x7, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="2e000000000000000000000000efffff7819a800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xdfda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x6}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x14002) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1898e50000000000210000000000000195"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) syz_open_procfs$namespace(0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x10) 1.313460276s ago: executing program 4 (id=1668): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x10160) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b7, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x597) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000040)) 1.294954797s ago: executing program 2 (id=1669): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122c00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a392f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x88c, 0x12) 1.190508822s ago: executing program 3 (id=1670): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000100)=r3, 0x120) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x20000001}}}, 0x94, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x39, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x60, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e1406", 0x1b}], 0x1}, 0x0) openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000008c0)="1800000068006bcd0200"/24, 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000024) socket$kcm(0x2, 0x2, 0x73) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x104046, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x7fffffffffffffff) 1.099786616s ago: executing program 1 (id=1671): r0 = socket$kcm(0xa, 0x5, 0x0) (async) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$sock_attach_bpf(r0, 0x0, 0x2a, 0x0, 0x8400) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000076000000bf0900000000000026090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b703000000000000140000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x10) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) 992.243851ms ago: executing program 1 (id=1672): r0 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close(r2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 894.663426ms ago: executing program 0 (id=1673): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000ffffffff850000005511a8118593cc0cf672ac00"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, r2}, 0x94) (async, rerun: 32) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) (async, rerun: 32) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x680a787d4dd0a841) (async) sendmsg$inet(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000014006b03000000d86e6c1d000284018eaa48df6e6e4de014117ea622fb17960359e3f58e76117c21f450e71b006371432bb47e51060000000000000037e786a6d0bdd7000000000000000000000000000000008967140889", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r9, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x40) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) (async) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)={[{0x2b, 'net_cls'}, {0x2b, 'cpu'}]}, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x48) (async) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 893.848956ms ago: executing program 4 (id=1674): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0xd}, 0x80, 0x0}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x6, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080)={0x3}, 0xfffffffffffffc79}, 0x26) 887.128127ms ago: executing program 3 (id=1675): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xa0, 0x6, 0x2, 0x9, 0x0, 0xf, 0x20000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe, 0x4, @perf_bp={&(0x7f0000000040)}, 0x12301, 0x0, 0x4, 0x4, 0x5, 0x2, 0x3ff, 0x0, 0xf83, 0x0, 0x2}, r3, 0x4, 0xffffffffffffffff, 0xe) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0xa0, 0x6, 0x2, 0x9, 0x0, 0xf, 0x20000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe, 0x4, @perf_bp={&(0x7f0000000040)}, 0x12301, 0x0, 0x4, 0x4, 0x5, 0x2, 0x3ff, 0x0, 0xf83, 0x0, 0x2}, r3, 0x4, 0xffffffffffffffff, 0xe) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1c0000001d008104e00f80ecdb4cb9f207c804a020000000880802fb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 870.609737ms ago: executing program 2 (id=1676): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40814) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000001c40)=""/4065, 0xfe1}], 0x1}, 0x20) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e09140500010000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x80000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 754.852643ms ago: executing program 1 (id=1677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81200, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x4000040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x35, 0x0, 0x3, 0xfffffffd}, {0x4d, 0x0, 0x0, 0x2}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x81200, 0x0) (async) socket$kcm(0x15, 0x5, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x4000040) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x35, 0x0, 0x3, 0xfffffffd}, {0x4d, 0x0, 0x0, 0x2}]}) (async) 744.672383ms ago: executing program 4 (id=1678): r0 = socket$kcm(0xa, 0x3, 0x11) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="53344cf261d77d4df6a998073dc4855724644773793abd2b82f168a127718a089f799cb57041ea16e3e62b45e7783479ac0f7520c0bbfeb568e7781bb88f53921fe7da71b0e403a63cbe84d28f1a1cf75ee29c3b9535d30ac8977da3206a737ccde939f6502a003c7411d4b8f489283869803131a68aa2bdffda1f037180037c49f8fef80f", 0x85}], 0x1, &(0x7f0000000180)="265e763f9153bfdbcdc22880f492d5db5130c9156830476553f61a9e2d16d9735a636006734e8eb4e18b479275498821349d94403278564210cb9ee0a43b5c276948c34d58999abdb681b07f02164b585675af2b05", 0x55, 0x804}, 0x10) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @empty, 0xfffffffd, 0xffffffff}, 0x80, 0x0}, 0x4810) 741.522754ms ago: executing program 3 (id=1679): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x1, 0xc2ba, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x59, 0x821a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x107806, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xb5c, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0) (async, rerun: 32) r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x1, 0x2, 0x4, 0x0, 0x5, 0xa0c82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x3, 0x4}, 0x902, 0x3c, 0x80000001, 0x2, 0x0, 0x0, 0x8000, 0x0, 0xfff, 0x0, 0x7e}, 0xffffffffffffffff, 0x3, r0, 0xb) (async) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x7, 0xc5, 0x8a, 0x3, 0x0, 0x9, 0x201, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x40b4, 0xf9e5, 0xfff, 0x7, 0x8, 0x7, 0xfff, 0x0, 0x3, 0x0, 0xe6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) close(r5) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r10 = getpid() (rerun: 32) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0xfffffffffffffffc, 0x48100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x4, @perf_bp={0x0, 0x4}, 0x100a02, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x37f, 0x0, 0x0, 0x0, 0x2}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r9, &(0x7f0000000780)='syz1\x00', 0x1ff) 695.278896ms ago: executing program 2 (id=1680): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r4, 0x16, 0x0, 0x10, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0}, 0x40) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xe}, 0x100, 0x100000000, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, r6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r8, 0x0, 0x1, &(0x7f0000000440)='\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYRESHEX=r8, @ANYRES32=r9, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r4, r1, 0x22, 0x20, 0x0, @void, @void, @void, @value=r9, r5}, 0x20) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) close(r0) 634.686979ms ago: executing program 0 (id=1681): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b1299ff247ded9373128d80441b67a4cea091f7b90540ed58a49993f6b0f8a816611831d762cde8b875dd21f6bf9c2e905a0c16538ca341fb992cef746f820b7ed2830851ef2635611aad50d7c9e47feb328b654a670937dc12923f01434fa522be40a3b1063fbc82b6d5f97ea150f2b2b8d06af548f08e895ea377aecf1ae7fe5ed4aa4727cdf30b0f5f313e37131c173a81e41fd665fb47145d2c2897d5fc0f076f4111588dab0047c70a37c"], 0x50) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0xe8) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000380)=r2, 0x4) sendmsg(r4, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x40844) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = gettid() (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="224024d1807718df3f44da", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRESOCT, @ANYRES64=r5, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000002, 0x0, @perf_bp={0x0, 0x8}, 0x100040, 0xffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) perf_event_open(0x0, r5, 0xc, 0xffffffffffffffff, 0x0) 575.740652ms ago: executing program 4 (id=1682): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4088, 0xff8}], 0x1}, 0x400001a0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB="080000000000009e070000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x10, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x1b, &(0x7f0000000980)=ANY=[@ANYBLOB="1b16c819e18088e600070000000000000000000052a7000000000000000000b96268229046592da441ff228c87d449455dc0a2c048ccb1444c51976fdd5996e2899865faf7d2e231705cf1974616f42ab10168a3918618b73b7d0990089d5254131b67a484d9d446b49546313993fb3a47459a", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018210000", @ANYRES32=r2, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="0000000000800000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x9, 0x8d, 0x7fffffff}, 0x10, 0x0, r3, 0x7, &(0x7f0000000400)=[r2, r2, r2, r2, r2, r2, r3, r2, r2], &(0x7f0000000740)=[{0x4, 0x1, 0x1, 0x9}, {0x3, 0x4, 0x7, 0xb}, {0x3, 0x1, 0x7, 0xc}, {0x4, 0x4, 0x0, 0xb}, {0x3, 0x5, 0x0, 0x2}, {0x1, 0x5, 0x8, 0x2}, {0x1, 0x1, 0x4, 0x7}], 0x10, 0x20004}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000440)=r4) r5 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000c40)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080040}, 0x20051) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) write$cgroup_subtree(r7, 0x0, 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 524.941375ms ago: executing program 0 (id=1683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000003c0)={'syzkaller1\x00', 0x600}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x4, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000000}, 0x4}, 0x80, 0x0}, 0x20008810) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[{0x10, 0x84, 0x5}], 0x10}, 0x4000010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x2700, 0x1e, 0x0, &(0x7f0000001c40)="3d6ee2e04bd1ab10143d9abe86dd404646c814446bcee4ff6d977d09bebe", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(r4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x2062) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="18d16f1d5a458fcb8c9e7f4369154c00000000d3421b09190516860000000000a654affc61d55fa7ed8e15bae310317b0d37410d0ed76657a74f27b349d400b843b8da12cd5ff4a10180f3a0601ca2246737695043b52d819389517a192b856a1145cbcc97ff185f0ca6860f958248f2c63528a5b1de65ef9c10853a125dcb8bc4298f79900c61ce9ea4f60f18d90c8ab9625452efec5e7b244e799d43d0e2ebfddbc886b4b7c46522d179f473"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x5, 0x10}, 0xc) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000002c0)='io.pressure\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40021103) 523.520214ms ago: executing program 3 (id=1684): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) (async, rerun: 32) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) (rerun: 32) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x200}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) close(r0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (rerun: 32) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x40}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000700), 0x4) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) (rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) perf_event_open(&(0x7f00000001c0)={0x6, 0x80, 0x82, 0x7, 0x5, 0x7e, 0x0, 0xffffffffffffffff, 0x880, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x5}, 0x20, 0xf, 0x59e, 0x6, 0x0, 0x0, 0x7f, 0x0, 0xd5ff, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x8, 0x8, &(0x7f0000000340)}}, 0x64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYRES32, @ANYBLOB], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 450.714318ms ago: executing program 1 (id=1685): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1a042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000040) r1 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x28, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f00000007c0)={&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000006c0)}, 0x10001) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000efb6ed7a4e42aba070000006b110f000000000095000000000000007fbe33c0ff6cc6e2b799aa3d1d585de0323b556f78ba820320910d0c7d5485d783c43aaa7ac47b6c7fef2dcaaa88705e96901a86f96921e33ea9f85415ea3b39eea6af04acc41a7c70a79f49528264b6f269e9d694335a7467d44b9c3782fff4dc94ad7d4081130ac9f443f7f58839db486a640e53de5e49418f87488b77eb05bae1376aed6e528542338eda23a9274ce9a626ab3dac4f7ba636bbfdfb17"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="11000000520081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffff, 0x1ff}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, r2, 0x0) socket$kcm(0x10, 0x2, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) close(r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f00000001c0)="7c51afb5efcea19cd375991895b2743c6720aa5364e67f93406e96424aa8265363678232a8b6d0e5a1944d8185fce2eb58f50784132ea9529802e754ada672b2b20b5964bdec7dae547640a1c10e2e3b354f3763bdd31acac8267f9475a2bdd6656974fa45f887641cdb9a8410a34650ee35582b2d0c0c30e183584999e5f18a82e8173583cf9973bab4058f53eb7c3a9017ca2bc4c6b90aee09e1e5c00fe9bc4b8e73fcdf6b87438acd6dbb93c6e879631ed30a853d8e66a93eeb2f19f8a718325ff16ca10018f30b844af1c033eb52b72c", 0x0, &(0x7f0000000340)="3af0adb3960beffb672390b3af8ad5eb701ed6de906266e195f9d012a12e8cc8", 0x0, 0x711, r4}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000001200)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x40440c0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 448.327008ms ago: executing program 2 (id=1686): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1, '\x00', r3, r1, 0x5, 0x0, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, r1, 0x1c, 0x2020}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r2, 0x3, 0x18}, 0xc) r6 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001540)={r1, 0x20, &(0x7f0000001500)={&(0x7f0000000440)=""/4096, 0x1000, 0x0, &(0x7f0000001440)=""/139, 0x8b}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001580)={r5, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000015c0)={r2, 0x4, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}, [@ldst={0x1, 0x2, 0x3, 0x3, 0x7, 0x20, 0xfffffffffffffffc}, @ldst={0x2, 0x1, 0x0, 0x6, 0x4, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x800}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x13, '\x00', r3, 0x1b, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x0, 0x2, &(0x7f0000001600)=[r10, r5, r4, r6, r11, r1, r5], &(0x7f0000001640)=[{0x5, 0x3, 0x0, 0xb}, {0x4, 0x2, 0x5}], 0x10, 0x6}, 0x94) openat$cgroup_pressure(r6, &(0x7f0000001740)='memory.pressure\x00', 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001b40)={&(0x7f0000001780)="c5959dd9f40c3db78902781a48e5a49492b544a7abeca6f246904b556488330c91d0943dc0c71d6e9312000707de5a341a53910f5f1c1c006bae6937f4d63289ef82c53d8beb13f1be163d6512e3cd19eb0710d92e753900e9815151fd683810acf28ed9888fb9ae2dc4a34f10918768135833ef324bf06b20784a70a027ad80915e6273115d2c323bd57a4c73c40e980f3061857e2524da4efb79e8efdc93f077a557c7ad896b38eb2f4de8f2909b4de09d6c1ba1c06edef11bf3d4082002fffd6a35c6b49325373825ffb177ed40c37bc89b0b80f3948649f580f00e2bbd2c", &(0x7f0000001880)=""/135, &(0x7f0000001940)="64a45c4d89823e89a4775ebe66607f9acced1d1676344c1ac447e378c9b9d76c00f05505dd945a6dd13dc04234df46b3ec902a57c86debf399e042f52aeb55b8ff3c9d489c312fa29746efabfef9f3eafa4f12525f657a5869b7c95028acb3b1247373db13e548695b3ed1143b28af748f8f9a4195ffaf6dd2098544d8743a0a9fda159bc9e38fad67a4fdfcbf5929862556256a7c7d77642db6bb9162ea99ad69aff390265a2489f3bcd2c5f36d61270b814a3ab5c6001c372f1476c42de41d9c6199b57bf3a57330308ed1e24759f8ff2cc499d7bff9a624", &(0x7f0000001a40)="ce4342495d91bbc3e86076cd967378eb9448835f45c3ec7b664a05961f7fec944b2e7d4dc153c54320453e6eb801da1201c151a0faeb1ad0bf028dbd60825d6fe0c997def62a4b9b42e6f0be306908278eb7115deefbf692160d5d5c4a7b24f9e9a52bfe86be57084d47eafe5d1ca4d1f92cf75da72897f34a0926edabdb32fab1027b69eaff4ee17cfaff69fc520a9101d50113d895807736b809654a20d36fee3034ed2b1992135cdee4540264bec9ec8360e0fce56b60f02d6bc2b9f874913a802047f4b9692572835bd298470a4ca1c106b5aed55e5dc71b315613e23e97037e587418c99787a0c8aace352237244ff2a31e", 0x6, r6, 0x4}, 0x38) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001b80)={r1}, 0x8) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@base={0x1e, 0xe, 0xf0, 0x7, 0x1501, 0xffffffffffffffff, 0x0, '\x00', 0x0, r12, 0x0, 0x2, 0x4}, 0x50) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001cc0)={0x10, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d00)=r15, 0x4) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001d40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r16, &(0x7f0000001d80), 0x2, 0x0) close(r11) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000020c0)={0x6, 0x21, &(0x7f0000001dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xda2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}, @jmp={0x5, 0x1, 0x7, 0x4, 0x5, 0x4, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f00)='GPL\x00', 0x4, 0xe9, &(0x7f0000001f40)=""/233, 0x41000, 0x29, '\x00', r3, 0x25, r1, 0x8, &(0x7f0000002040)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=[r11, r13, r5, r6, 0xffffffffffffffff], 0x0, 0x10, 0x919b}, 0x94) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002180)=r9, 0x4) r18 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@base={0xe, 0x5, 0x6, 0x3, 0x100, r1, 0x4, '\x00', r3, r1, 0x5, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002240)={0x3, 0x4, 0x4, 0xa, 0x0, r18, 0x6, '\x00', 0x0, r17, 0x1, 0x5, 0x2}, 0x50) r19 = openat$cgroup_ro(r0, &(0x7f0000002540)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x18, 0x17, &(0x7f00000022c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x3ff}, @map_fd={0x18, 0xec87ec0217fe5d02, 0x1, 0x0, r6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0xa, 0x7, 0x4, 0xffffffffffffffff, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x208}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0xa, 0x8, 0x30, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000002380)='syzkaller\x00', 0x4d6, 0xf7, &(0x7f00000023c0)=""/247, 0x41100, 0x54, '\x00', r3, 0x0, r1, 0x8, &(0x7f00000024c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000002500)={0x1, 0x8, 0xfffffff5, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002580)=[r11, r14, r10, r0, r12, r11, r19], &(0x7f00000025c0), 0x10, 0x9}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000026c0)={0x0, r0}, 0x8) 313.181024ms ago: executing program 2 (id=1687): perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0xcccf, 0x6, 0x5, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x1}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000, 0x8001}, 0x0, 0x6, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa31086b8703040047887ea60264160af365040004", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b", 0x15}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b", 0x15}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) 200.46151ms ago: executing program 1 (id=1688): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x8}, 0xc) (async) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="52aaa1b59feb0100180000080000000025000000000000000800000000005f5f5f2e2e00"], 0x0, 0x20}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffec3, &(0x7f0000000340)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c0200000000020208000200030001001400000007b556a737c160f9555b4755bb05251e618234902f7ae5bf2434f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f27d6d2ee", 0x6}, {&(0x7f0000000240)="8b8389eb21f7076a5de1545f5077d0a754f2d4ac3ea00572182bcb2f5d7367fbce672d7a63f93c8804dbee4df65352f1ca34578a72ec7c4db057672dbddca2a95876b11a1a4cfaefa4db5489bcd322d8e47635dbbc683fa86161109ab78eda09135518301612516e70663c070617803c471dea8e7b4c834bd074a4e4ebfc07afc4d0569b01270754c5a501de268cfb7a50b4993f21eba631ca5ac9fbd17f5761f6c4765a03c1c58580dd391c2c56573ebd3f1daaf1f87be3e98b899468e24324e5fb9d826c96545ce8935f7f082dba31f9b33897a30a418d9296cdb4b9a0e29594f02da49d9853a42c68db71210812"}, {&(0x7f0000000100)="e21abef2bee49594318fed45c40018ad66a80cdd0867b5470a0f9c9c9b082f0ca87f63b6bc"}], 0x100000000000013c, 0x0, 0x0, 0x1f00c00e}, 0x0) 82.525126ms ago: executing program 3 (id=1689): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_clone(0x400, &(0x7f0000000340)="a5727648a446ca2036376b2d1aba88d59c24f96866fc8b5c2b36891e5d0f9e1a5a5936079b6a155ec4985d7227e6d3e789bc97b367665df668a6e756456751c0808cdbafc44553531f7d32e6c541569cb15e140aa017422348c197ceb3d0ba2cd70fb366f91439632d3ab916361a292f30f82a2ba5c7f5ce63ff9d0cf3f43b924c8409d19de421d8d01fde740f6382ae1be938a16564a2162c472d0d6d63a2f669b1e72e34388d969cf932b9c5b310fd6e0b276977c9149a62497c10028048c751adaff8e8a39c994af82c0b6b1865ddded726d562d007c5d492fc0ec2f49b257634", 0xe2, &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000004c0)="1e19d25e09f1db4c3da3fa62e7a6761e19968708de2a85df75eb0f7f243cf62820284d8b878be2195b7731f4b96ac15bc87f92a6c12ef11fd1fd85803a02e16f8a17f89cb54693b5dce3df934bbb2d81299766cd93c4f5471122f8f24d292e83be9fc5ea076cd866dfdb118acf2dbffa9c7898eca9d67331f870af2012267eaca9f4b690f8c7511c7e25960c4815ec978a9ab109e6160e9a9d6ae8ae961133a021ee942530211ccb3676ff614dd7891cc4d40b7477b4d07818f273d76f17172f950e011b05a9172861c059e153947b6f64c14509ce5a9c0406eb9a54223fd9") recvmsg$unix(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000780)=""/244, 0xf4}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x5, &(0x7f0000000900)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r2, 0x6, '\x00', 0x0, r3, 0x3, 0x5, 0x4}, 0x50) r7 = openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000600)=ANY=[], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0xffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) sendmsg(r1, &(0x7f0000000fc0)={&(0x7f0000000ac0)=@ax25={{0x3, @default, 0x7}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b40)="1c6917870eb2dbd8df7dd5ee07666b76d85c9da8b22b4b5b23f72331cce9f62459019c16fd6e2909c8d5ea6b9773dc4bc252ae26922adc3c4206f23ab80a6c2977067e78875a3a7757a5cfcfd66443ff7174c0da67cdde9c9e7b5b40e883cb35ff15c5f9e934a760fa6c8268eb7644c140241bc3b855125e84d827c65201930fbddcde032bb1c3d25eb102133353a523fc58c68dfac8160574a1ec4fd2ead0882002cb47261ca07a98dbf3169dab4c93fac8337ce63820d3d16378e243c5f268c84fa5274527ee36b16d9d150c", 0xcd}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000000c40)="a9deff32c1ab26e10ac203ca4d0ad213dbbbe961b3584410d13008a3eb467054c650d7b4a1f444edb4116fcbb94cf45abc0d3ebe83d6c14f7b2e87fdfd7f5ef724c550ea4f98f03ee02a5d7f36f1f55a3061ec5f33377003fa0eb85b54b5b0a594ddbb9f6c865181405120ed8a6d83bcc03dcbcfd7aab4de6832e182503bba0120ef85e8e2ead6a9af6e6265893bdaf50859ea92ae4e3c2ecf40aae58db442a945374033e4348108be50876f39b38a4398383a8d0a8671a9d76295e82945de150c5a1ad4ca78c6c48db691e85d2903a215d2756c3e176404c47c9c84ad7308914ff4787d39206091184f8c8f26554a", 0xef}, {&(0x7f0000000d40)="39465c1a8904836564b50b63a5d488cd0469f97f06c4c1f07504cd129c6c2383af7f1d16107876f02829adb738b420e06a49c411aa2cc7a6fa4a3493fcffe0546f1ea7f65d47d28c229a08d0e3ac0668fe842ef1a9dbb413d0d96979f8efebbd02db59fad020", 0x66}, {&(0x7f0000000e80)="2db28b9511b654576f08e991c17606", 0xf}], 0x5, &(0x7f0000001000)=[{0x38, 0x0, 0x0, "058ffbe023de86ef90458c5b671a9573ac5ef3d6567dab74ff4957b117356b860684d9"}, {0x100, 0x116, 0x80000001, "885f56bbe8734efd37ef33d5141720bf6db2a0e6f18e570cb0efb83ba62dee492704ef156ff6e22b822766c698232a701d69c59b887e49f6f83e04c84b9d04c4486bedb8862b6d178669f913bdbecc920dcb9a766ba25495609ebd0fd6692e6789fbaec58f7049f373cfac2298b2b541296e474f033782feed10da525625fcc62f1916702ed064c1d3579c58a9069c1dbd4d5b71fecb18b6343d6203136ff3b335a33d25c2ea6e9cc34d7b5d4d5f7494651c9030f7e79ac268a2cdebf0c3867fdcdbe2229f5d38849f71cda0b60bc74df962f27faa903cde208b857b2793999548d817fec69a70d2e0ac9e834bde3d"}], 0x138}, 0x10048841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc600b0002400a0004", 0x1b}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2006c8c6f59bab50100d0c96ffc6010", 0x19}], 0x1}, 0x4000000) 0s ago: executing program 0 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x2, 0xc, 0x5, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000600)="dc0696f5f8837fe3df33c9f7b984", 0x0, 0x8001, 0x0, 0xfffffffffffffc92, 0x0, 0x0, 0x0, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x6}, 0x10c002, 0xac5d, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x6}, 0x10c002, 0xac5d, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES16=r2], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x6, @perf_bp={0x0, 0x9}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x0, 0xfffffffd, 0xfffc}, 0x0, 0x1, 0xffffffffffffffff, 0x9) (async) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x6, @perf_bp={0x0, 0x9}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x0, 0xfffffffd, 0xfffc}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r0, 0x4000, r9}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c000000070000000800000000f01f0020000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) (async) r12 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r12, 0x6, 0x21, &(0x7f0000000200), 0x20) (async) setsockopt$sock_attach_bpf(r12, 0x6, 0x21, &(0x7f0000000200), 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r11, &(0x7f00000001c0), 0x0}, 0x20) close(r8) (async) close(r8) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): r0' with parent 'hsr' already present! [ 61.922205][ T4275] Cannot create hsr debugfs directory [ 62.121875][ T4267] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.132822][ T4267] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.157528][ T4267] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.183041][ T4267] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.230696][ T4268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.258440][ T4268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.267992][ T4268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.294138][ T4268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.352516][ T4276] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.364432][ T4276] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.386849][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.398356][ T4276] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.408540][ T4276] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.441590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.457409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.477253][ T4266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.488873][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.506290][ T4266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.517888][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.528472][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.538399][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.545736][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.558026][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.577260][ T4266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.590618][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.600753][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.609315][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.616451][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.642073][ T4266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.688383][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.698177][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.706927][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.716600][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.725708][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.734394][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.745731][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.755298][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.764129][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.803937][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.817346][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.830484][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.842236][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.853702][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.872567][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.889990][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.911830][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.923443][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.940665][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.965228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.973823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.997319][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.007843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.018863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.030985][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.038155][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.072029][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.092480][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.101835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.112919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.121434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.178239][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.187719][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.205503][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.212595][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.223999][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.240675][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.254834][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.261952][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.272004][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.281102][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.290167][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.298991][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.306137][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.313644][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.323001][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.339460][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.349306][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.360435][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.385329][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.393371][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.405604][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.413254][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.421297][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.431450][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.443908][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.456691][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.489405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.498872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.507539][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.514672][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.526785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.536124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.544822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.553415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.562292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.571588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.580248][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.589086][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.597778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.611565][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.627842][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.636988][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.645731][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.652780][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.660461][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.670296][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.693313][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.713309][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.722469][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.731014][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.742389][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.751498][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.780034][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.810996][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.820009][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.830299][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.839221][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.848173][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 63.855101][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 63.863422][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.872549][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.881362][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.890359][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.899451][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.911293][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.924344][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 63.930400][ T4266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.930409][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 63.947259][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 63.965313][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.973571][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.985050][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.004857][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.049133][ T4267] device veth0_vlan entered promiscuous mode [ 64.066172][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.085532][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.093461][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.118527][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.159162][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.182775][ T4267] device veth1_vlan entered promiscuous mode [ 64.200962][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.221778][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.245543][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.264470][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.273505][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.295164][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.302285][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.340698][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.355553][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.370596][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.380263][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.387407][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.443699][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.454661][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.463555][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.481301][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.492736][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.501949][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.510855][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.522630][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.531674][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.539801][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.547537][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.557181][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.567558][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.576699][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.585119][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.597951][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.607009][ T4267] device veth0_macvtap entered promiscuous mode [ 64.618144][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.649559][ T4267] device veth1_macvtap entered promiscuous mode [ 64.658546][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.669622][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.679219][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.690535][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.702324][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.741701][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.756943][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.769076][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.781198][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.796183][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.821710][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.831032][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.854906][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.864779][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.875339][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.894932][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.909718][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.928494][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.946852][ T4268] device veth0_vlan entered promiscuous mode [ 64.975336][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.989555][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.033444][ T4267] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.054183][ T4267] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.062922][ T4267] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.096225][ T4267] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.112104][ T4268] device veth1_vlan entered promiscuous mode [ 65.138183][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.148763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.158257][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.223494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.238510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.248118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.257752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.266505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.289754][ T4266] device veth0_vlan entered promiscuous mode [ 65.317199][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.331240][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.352207][ T4268] device veth0_macvtap entered promiscuous mode [ 65.367786][ T4266] device veth1_vlan entered promiscuous mode [ 65.396000][ T4268] device veth1_macvtap entered promiscuous mode [ 65.408926][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.417825][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.426520][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.433969][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.448935][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.488720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.499731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.533422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.542573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.556257][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.564983][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.576857][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.580309][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.596547][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.613562][ T4266] device veth0_macvtap entered promiscuous mode [ 65.625098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.633212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.641451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.649697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.658737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.668008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.678478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.688016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.717022][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.729796][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.741694][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.752440][ T4276] device veth0_vlan entered promiscuous mode [ 65.763040][ T4266] device veth1_macvtap entered promiscuous mode [ 65.773981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.790667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.800438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.809641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.818643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.830130][ T4268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.839620][ T4268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.848957][ T4268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.858289][ T4268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.869481][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.880636][ T4276] device veth1_vlan entered promiscuous mode [ 65.884119][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.923717][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.931445][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 65.931453][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 65.945270][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.985276][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.997697][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.007820][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 66.014616][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 66.015028][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 66.024277][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.037657][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.059901][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.067874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.076336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.087226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.096400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.105175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.121879][ T4275] device veth0_vlan entered promiscuous mode [ 66.143030][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.169408][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.185104][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.199950][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.223547][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.233807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.242595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.258375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.267625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.304168][ T4275] device veth1_vlan entered promiscuous mode [ 66.320834][ T4276] device veth0_macvtap entered promiscuous mode [ 66.333437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.345903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.355464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.378071][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.387154][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.397462][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.408462][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.440157][ T4276] device veth1_macvtap entered promiscuous mode [ 66.496727][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.500620][ T4275] device veth0_macvtap entered promiscuous mode [ 66.519292][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.519599][ T4355] Zero length message leads to an empty skb [ 66.551033][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.559830][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.569177][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.579059][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.597366][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.608506][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.619043][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.629707][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.639852][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.651139][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.662897][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.689111][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.702437][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.711574][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.722251][ T4358] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.6'. [ 66.745321][ T4275] device veth1_macvtap entered promiscuous mode [ 66.761006][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.780622][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.791514][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.808021][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.819281][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.831602][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.848495][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.866627][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.875107][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.883792][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.896712][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.905758][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.916305][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.927146][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.942485][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.951120][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.965665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.989011][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.999042][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.007461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.048133][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.062276][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.072421][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.086190][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.096719][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.107305][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.117151][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.130057][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.141371][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.164613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.173313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.215937][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.227277][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.232559][ C1] hrtimer: interrupt took 26810 ns [ 67.237784][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.252965][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.268124][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.278752][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.292518][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.309573][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.339046][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.390148][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.412192][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.427977][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.437703][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.447654][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.456698][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.490218][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.506186][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.537837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.564861][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.577025][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.620357][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.724730][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.788954][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.843330][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.941185][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.004372][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 68.010481][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 68.014418][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.085889][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 68.086293][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.091909][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 68.091943][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 68.105865][ T4369] delete_channel: no stack [ 68.228409][ T4369] delete_channel: no stack [ 68.271179][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.341664][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.349437][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.239698][ T4396] netlink: 'syz.1.12': attribute type 3 has an invalid length. [ 70.250343][ T4382] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 70.310864][ T4400] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12'. [ 70.337206][ T4396] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12'. [ 70.349892][ T4382] team0: Device ipvlan1 failed to register rx_handler [ 70.547456][ T4404] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.14'. [ 70.652299][ T4382] syz.3.10 (4382) used greatest stack depth: 20016 bytes left [ 70.926062][ T4413] netlink: 'syz.3.20': attribute type 2 has an invalid length. [ 71.090777][ T4413] device 0 entered promiscuous mode [ 71.292878][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.300285][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.352117][ T4414] delete_channel: no stack [ 71.387023][ T4414] delete_channel: no stack [ 72.604759][ T4443] netlink: 'syz.3.27': attribute type 29 has an invalid length. [ 72.612935][ T4443] netlink: 'syz.3.27': attribute type 29 has an invalid length. [ 72.763083][ T4451] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.28'. [ 72.786789][ T4446] netlink: 'syz.3.27': attribute type 29 has an invalid length. [ 73.117490][ T4454] netlink: 'syz.3.30': attribute type 3 has an invalid length. [ 73.147167][ T4277] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 73.151810][ T4454] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.30'. [ 73.277329][ T4470] netlink: 156 bytes leftover after parsing attributes in process `syz.3.30'. [ 74.940152][ T4493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39'. [ 75.406412][ T4499] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.41'. [ 76.037813][ T4512] netlink: 'syz.2.45': attribute type 3 has an invalid length. [ 76.082261][ T4515] netlink: 156 bytes leftover after parsing attributes in process `syz.2.45'. [ 76.130918][ T4512] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.45'. [ 76.406867][ T14] cfg80211: failed to load regulatory.db [ 76.580364][ T4525] delete_channel: no stack [ 76.630246][ T4525] delete_channel: no stack [ 78.084263][ T4544] netlink: 'syz.1.48': attribute type 10 has an invalid length. [ 78.188729][ T4544] team0: Device ipvlan1 failed to register rx_handler [ 78.527587][ T4549] netlink: 144 bytes leftover after parsing attributes in process `syz.4.55'. [ 79.499679][ T4558] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.57'. [ 80.029375][ T4562] netlink: 'syz.0.58': attribute type 10 has an invalid length. [ 80.682712][ T4562] team0: Port device wlan1 added [ 80.710099][ T4572] bridge0: port 3(team0) entered blocking state [ 80.746063][ T4572] bridge0: port 3(team0) entered disabled state [ 80.753219][ T4562] syz.0.58 (4562) used greatest stack depth: 19480 bytes left [ 80.772957][ T4572] device team0 entered promiscuous mode [ 80.834223][ T4572] device team_slave_0 entered promiscuous mode [ 80.873282][ T4572] device team_slave_1 entered promiscuous mode [ 80.911994][ T4572] bridge0: port 3(team0) entered blocking state [ 80.918640][ T4572] bridge0: port 3(team0) entered forwarding state [ 80.978087][ T4581] netlink: 'syz.4.62': attribute type 3 has an invalid length. [ 81.016471][ T4581] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.62'. [ 81.060692][ T4581] netlink: 156 bytes leftover after parsing attributes in process `syz.4.62'. [ 81.551181][ T4594] Driver unsupported XDP return value 0 on prog (id 48) dev N/A, expect packet loss! [ 82.889613][ T4601] netlink: 'syz.3.69': attribute type 2 has an invalid length. [ 82.905986][ T4611] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.71'. [ 83.332025][ T4631] netlink: 'syz.4.78': attribute type 10 has an invalid length. [ 83.373895][ T4631] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.78'. [ 83.487570][ T4631] netlink: 'syz.4.78': attribute type 3 has an invalid length. [ 83.541200][ T4631] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.78'. [ 83.994986][ T4660] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.86'. [ 84.251613][ T4663] netlink: 196 bytes leftover after parsing attributes in process `syz.0.87'. [ 84.790197][ T4685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.94'. [ 84.967364][ T4690] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 85.249625][ T4690] device wlan1 entered promiscuous mode [ 85.266035][ T4690] team0: Port device wlan1 added [ 85.299355][ T4700] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.97'. [ 85.749927][ T4710] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.99'. [ 85.863547][ T4723] netlink: 196 bytes leftover after parsing attributes in process `syz.3.103'. [ 86.221497][ T4730] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.107'. [ 86.597932][ T4736] netlink: 'syz.3.108': attribute type 21 has an invalid length. [ 88.019593][ T4749] netlink: 'syz.3.114': attribute type 29 has an invalid length. [ 88.065108][ T4752] netlink: 'syz.2.115': attribute type 10 has an invalid length. [ 88.250187][ T4752] device dummy0 entered promiscuous mode [ 88.301739][ T4752] team0: Port device dummy0 added [ 88.360938][ T4753] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.112'. [ 88.730303][ T4763] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.127'. [ 88.885793][ T4766] netlink: 196 bytes leftover after parsing attributes in process `syz.3.118'. [ 89.101900][ T4769] netlink: 'syz.1.119': attribute type 22 has an invalid length. [ 90.733697][ T4805] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.131'. [ 90.781043][ T4801] netlink: 'syz.4.128': attribute type 10 has an invalid length. [ 90.862365][ T4801] netlink: 2 bytes leftover after parsing attributes in process `syz.4.128'. [ 90.887192][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 90.984385][ T4801] device batadv_slave_1 entered promiscuous mode [ 90.991900][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.110802][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.254139][ T4809] netlink: 'syz.4.128': attribute type 10 has an invalid length. [ 91.288335][ T4809] netlink: 40 bytes leftover after parsing attributes in process `syz.4.128'. [ 91.330698][ T4809] device dummy0 entered promiscuous mode [ 91.380208][ T4809] bridge0: port 3(dummy0) entered blocking state [ 91.435024][ T4809] bridge0: port 3(dummy0) entered disabled state [ 91.499057][ T4809] bridge0: port 3(dummy0) entered blocking state [ 91.505829][ T4809] bridge0: port 3(dummy0) entered forwarding state [ 91.720562][ T4829] delete_channel: no stack [ 91.992259][ T4847] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.143'. [ 93.073414][ T4882] ref_ctr_offset mismatch. inode: 0xb1 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 93.311055][ T4886] ref_ctr_offset mismatch. inode: 0xba offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 93.680460][ T4889] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.154'. [ 93.831007][ T4892] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 93.904755][ T4892] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.155'. [ 93.946066][ T4892] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 93.977323][ T4892] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.155'. [ 94.007769][ T4892] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 94.074255][ T4892] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.155'. [ 94.092697][ T4903] tap0: tun_chr_ioctl cmd 1074025675 [ 94.138961][ T4892] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 94.144290][ T4903] tap0: persist enabled [ 94.179629][ T4906] tap0: tun_chr_ioctl cmd 1074025675 [ 94.204248][ T4892] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.155'. [ 94.226047][ T4906] tap0: persist disabled [ 94.241996][ T4892] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 94.270525][ T4910] netlink: 'syz.1.161': attribute type 6 has an invalid length. [ 94.278648][ T4910] netlink: 164 bytes leftover after parsing attributes in process `syz.1.161'. [ 94.292532][ T4892] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.155'. [ 94.363602][ T4892] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 94.400376][ T4892] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.155'. [ 94.427198][ T4892] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 94.439344][ T4918] syz.3.163 uses obsolete (PF_INET,SOCK_PACKET) [ 94.454236][ T4913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.163'. [ 94.512220][ T4892] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.155'. [ 94.740672][ T4922] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 95.018738][ T4925] netlink: 'syz.0.165': attribute type 20 has an invalid length. [ 97.574360][ T5006] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 98.053814][ T5011] netlink: 55 bytes leftover after parsing attributes in process `syz.1.191'. [ 99.132343][ T5049] validate_nla: 98 callbacks suppressed [ 99.132361][ T5049] netlink: 'syz.3.201': attribute type 3 has an invalid length. [ 99.167146][ T5049] __nla_validate_parse: 49 callbacks suppressed [ 99.167161][ T5049] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.201'. [ 99.172377][ T5052] netlink: 'syz.1.200': attribute type 21 has an invalid length. [ 100.530651][ T5084] netlink: 'syz.0.208': attribute type 10 has an invalid length. [ 100.548912][ T5084] netlink: 55 bytes leftover after parsing attributes in process `syz.0.208'. [ 101.011894][ T5101] device syzkaller0 entered promiscuous mode [ 101.959046][ T5123] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.219'. [ 104.193718][ T5114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.201263][ T5114] IPv6: NLM_F_CREATE should be set when creating new route [ 104.208582][ T5114] IPv6: NLM_F_CREATE should be set when creating new route [ 104.215859][ T5114] IPv6: NLM_F_CREATE should be set when creating new route [ 104.229341][ T5132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 104.254410][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 104.263396][ T5132] netlink: 33 bytes leftover after parsing attributes in process `syz.3.222'. [ 104.378083][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 104.408830][ T5132] netlink: 33 bytes leftover after parsing attributes in process `syz.3.222'. [ 104.473961][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 104.493434][ T5132] netlink: 33 bytes leftover after parsing attributes in process `syz.3.222'. [ 105.063025][ T5172] netlink: 'syz.2.233': attribute type 3 has an invalid length. [ 105.073912][ T5172] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.233'. [ 105.124882][ T5177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.132186][ T5177] IPv6: NLM_F_CREATE should be set when creating new route [ 105.139513][ T5177] IPv6: NLM_F_CREATE should be set when creating new route [ 105.146785][ T5177] IPv6: NLM_F_CREATE should be set when creating new route [ 105.874530][ T5188] netlink: 'syz.4.235': attribute type 21 has an invalid length. [ 106.228745][ T5200] netlink: 14 bytes leftover after parsing attributes in process `syz.1.241'. [ 106.481456][ T5199] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 106.693989][ T5195] netlink: 132 bytes leftover after parsing attributes in process `syz.0.239'. [ 106.793066][ T4277] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 106.900200][ T5233] netlink: 'syz.3.249': attribute type 23 has an invalid length. [ 107.120000][ T5240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.127511][ T5240] IPv6: NLM_F_CREATE should be set when creating new route [ 107.135102][ T5240] IPv6: NLM_F_CREATE should be set when creating new route [ 107.142588][ T5240] IPv6: NLM_F_CREATE should be set when creating new route [ 107.890760][ T5263] netlink: 'syz.1.254': attribute type 39 has an invalid length. [ 109.166513][ T4277] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 109.609727][ T5301] netlink: 'syz.4.267': attribute type 11 has an invalid length. [ 109.618325][ T5300] netlink: 'syz.3.268': attribute type 27 has an invalid length. [ 109.634160][ T5301] __nla_validate_parse: 7 callbacks suppressed [ 109.634175][ T5301] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.267'. [ 110.005284][ T5307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.270'. [ 110.296431][ T5297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.311404][ T5309] netlink: 164 bytes leftover after parsing attributes in process `syz.3.271'. [ 110.579122][ T5317] netlink: 196 bytes leftover after parsing attributes in process `syz.2.273'. [ 110.926032][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.936267][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.115914][ T5325] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 111.227219][ T5325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.274'. [ 111.241363][ T5327] netlink: 14 bytes leftover after parsing attributes in process `syz.2.276'. [ 111.412931][ T5327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.478091][ T5327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.506207][ T5327] bond0 (unregistering): Released all slaves [ 111.700041][ T5331] delete_channel: no stack [ 112.035051][ T5344] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 112.301031][ T5355] netlink: 'syz.3.283': attribute type 2 has an invalid length. [ 112.362074][ T5355] device 1 entered promiscuous mode [ 113.151295][ T5365] netlink: 196 bytes leftover after parsing attributes in process `syz.4.286'. [ 113.221952][ T5371] netlink: 'syz.3.288': attribute type 21 has an invalid length. [ 113.439070][ T5378] netlink: 'syz.4.292': attribute type 2 has an invalid length. [ 113.511912][ T5378] device 0 entered promiscuous mode [ 113.850658][ T5394] netlink: 'syz.0.297': attribute type 3 has an invalid length. [ 113.874164][ T5394] netlink: 140 bytes leftover after parsing attributes in process `syz.0.297'. [ 113.898990][ T5395] netlink: 'syz.0.297': attribute type 3 has an invalid length. [ 113.932119][ T5395] netlink: 140 bytes leftover after parsing attributes in process `syz.0.297'. [ 114.169786][ T5407] netlink: 196 bytes leftover after parsing attributes in process `syz.3.302'. [ 114.176175][ T5405] netlink: 'syz.2.300': attribute type 10 has an invalid length. [ 114.271749][ T5405] device veth0_macvtap left promiscuous mode [ 114.754305][ T5425] netlink: 'syz.4.304': attribute type 10 has an invalid length. [ 114.767089][ T5425] netlink: 19931 bytes leftover after parsing attributes in process `syz.4.304'. [ 115.026824][ T5436] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.309'. [ 115.489803][ T5459] netlink: 'syz.3.318': attribute type 4 has an invalid length. [ 115.658068][ T5470] team0: Port device team_slave_0 removed [ 115.681135][ T5470] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 115.757681][ T5473] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 115.841743][ T5472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'. [ 116.018234][ T5488] netlink: 'syz.2.321': attribute type 10 has an invalid length. [ 116.035116][ T5488] netlink: 55 bytes leftover after parsing attributes in process `syz.2.321'. [ 116.402506][ T5501] netlink: 60 bytes leftover after parsing attributes in process `syz.4.325'. [ 116.458146][ T5490] netlink: 'syz.3.323': attribute type 13 has an invalid length. [ 116.466204][ T5490] netlink: 'syz.3.323': attribute type 58 has an invalid length. [ 116.473945][ T5490] netlink: 152 bytes leftover after parsing attributes in process `syz.3.323'. [ 116.510012][ T5496] netlink: 'syz.1.324': attribute type 10 has an invalid length. [ 116.520118][ T5496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.324'. [ 116.529918][ T5496] device dummy0 entered promiscuous mode [ 116.538755][ T5496] bridge0: port 3(dummy0) entered blocking state [ 116.545665][ T5496] bridge0: port 3(dummy0) entered disabled state [ 116.557685][ T5496] bridge0: port 3(dummy0) entered blocking state [ 116.564153][ T5496] bridge0: port 3(dummy0) entered forwarding state [ 116.609535][ T5501] netlink: 60 bytes leftover after parsing attributes in process `syz.4.325'. [ 116.625157][ T5504] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.326'. [ 116.647663][ T5504] syz.3.326[5504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.760830][ T5506] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 116.804612][ T5506] netlink: 'syz.2.327': attribute type 3 has an invalid length. [ 116.826358][ T5506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.327'. [ 116.857852][ T5511] netlink: 'syz.0.328': attribute type 39 has an invalid length. [ 119.020294][ T5597] netlink: 'syz.4.354': attribute type 27 has an invalid length. [ 119.465459][ T5606] netlink: 'syz.2.353': attribute type 2 has an invalid length. [ 119.513101][ T5606] netlink: 'syz.2.353': attribute type 8 has an invalid length. [ 120.428443][ T5621] __nla_validate_parse: 6 callbacks suppressed [ 120.428460][ T5621] netlink: 830 bytes leftover after parsing attributes in process `syz.3.358'. [ 120.570975][ T5623] netlink: 'syz.0.357': attribute type 7 has an invalid length. [ 120.596914][ T5623] netlink: 140 bytes leftover after parsing attributes in process `syz.0.357'. [ 121.380059][ T5651] netlink: 196 bytes leftover after parsing attributes in process `syz.4.365'. [ 121.576510][ T5667] netlink: 'syz.1.370': attribute type 21 has an invalid length. [ 121.646897][ T5668] netlink: 'syz.3.371': attribute type 3 has an invalid length. [ 121.660081][ T5672] netlink: 168 bytes leftover after parsing attributes in process `syz.0.372'. [ 121.684353][ T5667] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 121.699371][ T5668] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.371'. [ 122.022970][ T5686] netlink: 'syz.4.375': attribute type 27 has an invalid length. [ 122.051299][ T5686] netlink: 164 bytes leftover after parsing attributes in process `syz.4.375'. [ 122.153190][ T5667] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 122.560820][ T5699] netlink: 'syz.4.379': attribute type 2 has an invalid length. [ 122.669495][ T5699] netlink: 'syz.4.379': attribute type 9 has an invalid length. [ 122.706347][ T5699] netlink: 'syz.4.379': attribute type 10 has an invalid length. [ 122.714217][ T5699] netlink: 'syz.4.379': attribute type 11 has an invalid length. [ 122.726355][ T5699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.379'. [ 122.766701][ T5699] netlink: 'syz.4.379': attribute type 4 has an invalid length. [ 122.818200][ T5699] netlink: 140 bytes leftover after parsing attributes in process `syz.4.379'. [ 123.405058][ T5724] netlink: 196 bytes leftover after parsing attributes in process `syz.4.384'. [ 123.935714][ T5737] netlink: 196 bytes leftover after parsing attributes in process `syz.0.399'. [ 124.417113][ T5750] device pim6reg1 entered promiscuous mode [ 125.466493][ T5775] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.481548][ T5775] device syzkaller0 entered promiscuous mode [ 125.643063][ T5788] __nla_validate_parse: 3 callbacks suppressed [ 125.643098][ T5788] netlink: 196 bytes leftover after parsing attributes in process `syz.2.403'. [ 125.872811][ T5790] bridge0: port 3(dummy0) entered disabled state [ 125.979463][ T5790] device bridge_slave_1 left promiscuous mode [ 126.039308][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.075302][ T5790] device bridge_slave_0 left promiscuous mode [ 126.101772][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.784060][ T5827] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.414'. [ 127.515623][ T5840] netlink: 196 bytes leftover after parsing attributes in process `syz.1.417'. [ 127.531140][ T5842] netlink: 144 bytes leftover after parsing attributes in process `syz.4.415'. [ 128.055506][ T5842] team0: Port device team_slave_0 removed [ 128.090289][ T5842] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 128.346961][ T5855] netlink: 1 bytes leftover after parsing attributes in process `syz.1.420'. [ 128.403529][ T5864] netlink: 188 bytes leftover after parsing attributes in process `syz.3.422'. [ 128.438474][ T5865] IPv6: Can't replace route, no match found [ 128.640606][ T5842] syz.4.415 (5842) used greatest stack depth: 18992 bytes left [ 128.916145][ T5889] netlink: 196 bytes leftover after parsing attributes in process `syz.1.430'. [ 129.105302][ T5896] netlink: 2639 bytes leftover after parsing attributes in process `syz.3.431'. [ 129.231016][ T5914] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 129.276598][ T5905] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.431'. [ 129.341219][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.372681][ T5914] device bridge_slave_1 left promiscuous mode [ 129.379653][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.428661][ T5914] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 129.570930][ T5905] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 129.597090][ T5905] CPU: 1 PID: 5905 Comm: syz.3.431 Not tainted syzkaller #0 [ 129.604426][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.614501][ T5905] Call Trace: [ 129.617790][ T5905] [ 129.620722][ T5905] dump_stack_lvl+0x188/0x24e [ 129.625422][ T5905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 129.631577][ T5905] ? show_regs_print_info+0x12/0x12 [ 129.636774][ T5905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 129.642944][ T5905] sysfs_warn_dup+0x8a/0xa0 [ 129.647448][ T5905] sysfs_do_create_link_sd+0xc0/0x110 [ 129.652821][ T5905] device_add+0x7ed/0xfb0 [ 129.657159][ T5905] wiphy_register+0x1d9f/0x2ac0 [ 129.662026][ T5905] ? cfg80211_event_work+0x40/0x40 [ 129.667133][ T5905] ? minstrel_ht_alloc+0x894/0xa20 [ 129.672246][ T5905] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 129.678314][ T5905] ieee80211_register_hw+0x2d00/0x39f0 [ 129.683786][ T5905] ? ieee80211_register_hw+0xee1/0x39f0 [ 129.689327][ T5905] ? ieee80211_register_hw+0xee1/0x39f0 [ 129.694878][ T5905] ? ieee80211_tasklet_handler+0x20/0x20 [ 129.700600][ T5905] ? memset+0x1e/0x40 [ 129.704577][ T5905] ? __hrtimer_init+0x186/0x270 [ 129.709426][ T5905] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 129.715169][ T5905] hwsim_new_radio_nl+0xafa/0xce0 [ 129.720200][ T5905] genl_family_rcv_msg_doit+0x22a/0x330 [ 129.725741][ T5905] ? end_current_label_crit_section+0x170/0x170 [ 129.732009][ T5905] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 129.737922][ T5905] ? bpf_lsm_capable+0x5/0x10 [ 129.742601][ T5905] ? security_capable+0x85/0xb0 [ 129.747455][ T5905] genl_rcv_msg+0x604/0x790 [ 129.751972][ T5905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 129.758137][ T5905] ? genl_bind+0x360/0x360 [ 129.762550][ T5905] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 129.768885][ T5905] ? lock_acquire+0x225/0x4a0 [ 129.773570][ T5905] netlink_rcv_skb+0x1fb/0x450 [ 129.778338][ T5905] ? genl_bind+0x360/0x360 [ 129.782748][ T5905] ? netlink_ack+0x1170/0x1170 [ 129.787611][ T5905] ? down_read+0x1a8/0x2d0 [ 129.792129][ T5905] genl_rcv+0x24/0x40 [ 129.796100][ T5905] netlink_unicast+0x74d/0x8d0 [ 129.800874][ T5905] netlink_sendmsg+0x8ad/0xbd0 [ 129.805648][ T5905] ? netlink_getsockopt+0x550/0x550 [ 129.810852][ T5905] ? aa_sock_msg_perm+0x94/0x150 [ 129.815785][ T5905] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 129.821063][ T5905] ? security_socket_sendmsg+0x7c/0xa0 [ 129.826524][ T5905] ? netlink_getsockopt+0x550/0x550 [ 129.831724][ T5905] ____sys_sendmsg+0x5be/0x970 [ 129.836498][ T5905] ? __sys_sendmsg_sock+0x30/0x30 [ 129.841524][ T5905] ? __import_iovec+0x315/0x500 [ 129.846382][ T5905] ? import_iovec+0x6f/0xa0 [ 129.850887][ T5905] ___sys_sendmsg+0x2a2/0x360 [ 129.855578][ T5905] ? __sys_sendmsg+0x290/0x290 [ 129.860394][ T5905] __se_sys_sendmsg+0x1bb/0x2a0 [ 129.865256][ T5905] ? ct_nmi_exit+0x145/0x1c0 [ 129.869846][ T5905] ? __x64_sys_sendmsg+0x80/0x80 [ 129.874883][ T5905] ? lockdep_hardirqs_on+0x94/0x140 [ 129.880077][ T5905] do_syscall_64+0x4c/0xa0 [ 129.884491][ T5905] ? clear_bhb_loop+0x60/0xb0 [ 129.889164][ T5905] ? clear_bhb_loop+0x60/0xb0 [ 129.893835][ T5905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.899726][ T5905] RIP: 0033:0x7f0145f9c799 [ 129.904145][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.923771][ T5905] RSP: 002b:00007f0146d88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.932202][ T5905] RAX: ffffffffffffffda RBX: 00007f0146216090 RCX: 00007f0145f9c799 [ 129.940178][ T5905] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 129.948151][ T5905] RBP: 00007f0146032c99 R08: 0000000000000000 R09: 0000000000000000 [ 129.956117][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.964085][ T5905] R13: 00007f0146216128 R14: 00007f0146216090 R15: 00007ffe74dc9858 [ 129.972068][ T5905] [ 130.011485][ T5909] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 130.033425][ T5909] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 130.058713][ T5909] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 130.169544][ T5909] syz.2.434 (5909) used greatest stack depth: 16016 bytes left [ 130.301370][ T4329] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 130.710617][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 130.803480][ T5954] netlink: 196 bytes leftover after parsing attributes in process `syz.0.445'. [ 130.845012][ T5953] netlink: 3 bytes leftover after parsing attributes in process `syz.3.448'. [ 131.112014][ T5964] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.452'. [ 131.500731][ T5976] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.456'. [ 131.585103][ T5987] netlink: 76 bytes leftover after parsing attributes in process `syz.4.459'. [ 131.604792][ T5987] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.459'. [ 131.778187][ T5996] netlink: 196 bytes leftover after parsing attributes in process `syz.0.461'. [ 131.805820][ T6000] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.463'. [ 132.726216][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.733167][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.257911][ T6031] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.474'. [ 133.770267][ T6063] delete_channel: no stack [ 134.262344][ T6085] ÿÿÿÿÿÿ: renamed from vlan1 [ 134.743639][ T6096] device syzkaller0 entered promiscuous mode [ 135.599553][ T6136] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 136.897508][ T6149] __nla_validate_parse: 64 callbacks suppressed [ 136.897542][ T6149] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.509'. [ 137.391914][ T6165] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.513'. [ 137.619823][ T6168] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.514'. [ 138.186695][ T6181] netlink: 'syz.1.517': attribute type 3 has an invalid length. [ 138.255349][ T6181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.517'. [ 139.071028][ T6207] netlink: 'syz.4.521': attribute type 10 has an invalid length. [ 139.089542][ T6207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.521'. [ 139.145264][ T6207] batman_adv: batadv0: Adding interface: virt_wifi0 [ 139.151919][ T6207] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.282429][ T6207] batman_adv: batadv0: Interface activated: virt_wifi0 [ 143.602603][ T6229] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.526'. [ 143.938802][ T6240] netlink: 'syz.2.528': attribute type 29 has an invalid length. [ 143.998799][ T6240] netlink: 'syz.2.528': attribute type 29 has an invalid length. [ 144.017998][ T6236] netlink: 'syz.2.528': attribute type 29 has an invalid length. [ 144.248301][ T6251] netlink: 'syz.0.532': attribute type 3 has an invalid length. [ 144.313343][ T6249] IPv6: Can't replace route, no match found [ 144.331018][ T6251] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.532'. [ 144.740198][ T6263] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.536'. [ 144.757444][ T6267] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 144.776567][ T6267] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.537'. [ 144.902701][ T6271] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.538'. [ 144.988920][ T6263] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 145.088241][ T6278] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 145.112324][ T6278] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.540'. [ 145.413399][ T6281] netlink: 132 bytes leftover after parsing attributes in process `syz.3.541'. [ 145.462435][ T6283] netlink: 'syz.1.542': attribute type 4 has an invalid length. [ 145.512680][ T6285] device syzkaller0 left promiscuous mode [ 145.987926][ T6308] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 146.051237][ T6311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.550'. [ 146.054502][ T6308] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.077459][ T6308] bond0: (slave team0): Enslaving as an active interface with an up link [ 146.109341][ T6310] netlink: 156 bytes leftover after parsing attributes in process `syz.3.551'. [ 146.179149][ T6317] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.552'. [ 146.410834][ T6327] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 147.033749][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.360134][ T6344] device bridge_slave_0 left promiscuous mode [ 147.392364][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.681883][ T6373] netlink: 'syz.2.568': attribute type 16 has an invalid length. [ 147.697916][ T6373] netlink: 'syz.2.568': attribute type 3 has an invalid length. [ 148.725797][ T4277] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 149.077271][ T6404] validate_nla: 1 callbacks suppressed [ 149.077290][ T6404] netlink: 'syz.0.576': attribute type 39 has an invalid length. [ 149.461636][ T6414] __nla_validate_parse: 3 callbacks suppressed [ 149.461652][ T6414] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.579'. [ 149.643594][ T4452] tipc: Subscription rejected, illegal request [ 149.743057][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 149.786408][ T6434] netlink: 'syz.2.582': attribute type 3 has an invalid length. [ 149.829166][ T6434] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.582'. [ 153.064074][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 153.073854][ T6436] netlink: 763 bytes leftover after parsing attributes in process `syz.2.582'. [ 153.340186][ T6464] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.592'. [ 153.713574][ T6477] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 153.752947][ T6477] netlink: 2 bytes leftover after parsing attributes in process `syz.0.597'. [ 153.816635][ T6477] device batadv_slave_1 entered promiscuous mode [ 153.889715][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.918211][ T6477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.964188][ T6488] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.597'. [ 154.004284][ T6488] tc_dump_action: action bad kind [ 154.285440][ T6516] netlink: 830 bytes leftover after parsing attributes in process `syz.0.603'. [ 154.574678][ T6519] : port 1(ip6gretap0) entered blocking state [ 154.597735][ T6519] : port 1(ip6gretap0) entered disabled state [ 154.643108][ T6519] device ip6gretap0 entered promiscuous mode [ 154.708773][ T6532] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.607'. [ 154.750125][ T6514] device ip6gretap0 left promiscuous mode [ 154.797748][ T6514] : port 1(ip6gretap0) entered disabled state [ 154.812685][ T6534] netlink: 'syz.0.606': attribute type 3 has an invalid length. [ 154.857877][ T6534] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.606'. [ 155.260128][ T6535] netlink: 763 bytes leftover after parsing attributes in process `syz.0.606'. [ 158.904723][ T6568] netlink: 68 bytes leftover after parsing attributes in process `syz.4.617'. [ 159.101287][ T6575] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.618'. [ 159.667303][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.669205][ T6593] netlink: 'syz.1.623': attribute type 3 has an invalid length. [ 159.700617][ T6581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.702340][ T6593] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.623'. [ 159.897603][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.925162][ T6581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.063775][ T6597] netlink: 763 bytes leftover after parsing attributes in process `syz.1.623'. [ 160.078122][ T6598] netlink: 168 bytes leftover after parsing attributes in process `syz.3.624'. [ 160.101561][ T6604] netlink: 152 bytes leftover after parsing attributes in process `syz.4.625'. [ 160.750453][ T6625] netlink: 'syz.2.630': attribute type 9 has an invalid length. [ 160.784151][ T6625] netlink: 114980 bytes leftover after parsing attributes in process `syz.2.630'. [ 161.111225][ T6634] netlink: 60 bytes leftover after parsing attributes in process `syz.1.634'. [ 161.131757][ T6634] netlink: 60 bytes leftover after parsing attributes in process `syz.1.634'. [ 161.187163][ T6634] netlink: 60 bytes leftover after parsing attributes in process `syz.1.634'. [ 161.531193][ T6646] bridge0: port 3(dummy0) entered disabled state [ 161.537780][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.545252][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.954666][ T6660] netlink: 'syz.4.639': attribute type 2 has an invalid length. [ 162.052127][ T6660] device 0 entered promiscuous mode [ 162.378144][ T4277] Bluetooth: hci3: ISO packet for unknown connection handle 48 [ 163.533329][ T6715] C: renamed from team_slave_0 [ 163.579782][ T6715] netlink: 'syz.0.653': attribute type 3 has an invalid length. [ 163.623614][ T6715] netlink: 152 bytes leftover after parsing attributes in process `syz.0.653'. [ 163.670340][ T6721] netlink: 'syz.3.658': attribute type 21 has an invalid length. [ 163.679130][ T6721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.658'. [ 163.708196][ T6725] netlink: 'syz.2.660': attribute type 19 has an invalid length. [ 163.839887][ T6725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.660'. [ 163.904485][ T6733] netlink: 'syz.3.661': attribute type 10 has an invalid length. [ 163.973222][ T6733] team0: Port device wlan1 added [ 164.283208][ T6735] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 164.324449][ T6735] syzkaller0: linktype set to 769 [ 164.358929][ T6738] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 164.665535][ T6761] netlink: zone id is out of range [ 164.679302][ T6761] netlink: zone id is out of range [ 164.688157][ T6761] netlink: zone id is out of range [ 164.693539][ T6761] netlink: zone id is out of range [ 164.711662][ T6761] netlink: zone id is out of range [ 164.726610][ T6761] netlink: zone id is out of range [ 164.738774][ T6761] netlink: zone id is out of range [ 164.748590][ T6761] netlink: zone id is out of range [ 164.762993][ T6761] netlink: zone id is out of range [ 164.771628][ T6761] netlink: zone id is out of range [ 165.326801][ T6770] device syzkaller0 entered promiscuous mode [ 166.206524][ T6782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.249746][ T6782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.912523][ T6817] __nla_validate_parse: 2 callbacks suppressed [ 166.912540][ T6817] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.683'. [ 167.720818][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.684'. [ 167.742223][ T6824] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 167.932296][ T6830] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.684'. [ 167.975722][ T6832] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 167.983579][ T6832] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.685'. [ 170.351503][ T6816] netlink: 144 bytes leftover after parsing attributes in process `syz.4.683'. [ 170.363983][ T6816] net_ratelimit: 2 callbacks suppressed [ 170.363998][ T6816] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 170.391141][ T6817] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 170.396109][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.684'. [ 170.400981][ T6817] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 170.422822][ T6824] netlink: 60 bytes leftover after parsing attributes in process `syz.0.685'. [ 170.444190][ T6817] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 170.957721][ T6862] netlink: 'syz.4.692': attribute type 21 has an invalid length. [ 171.348670][ T6878] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 171.406085][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.439549][ T6878] bond0: (slave team0): Enslaving as an active interface with an up link [ 171.450611][ T6881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.699'. [ 171.470256][ T6883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.699'. [ 172.407805][ T6901] netlink: 'syz.4.707': attribute type 10 has an invalid length. [ 172.452544][ T6913] netlink: 'syz.1.705': attribute type 3 has an invalid length. [ 172.497111][ T6913] __nla_validate_parse: 5 callbacks suppressed [ 172.497129][ T6913] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.705'. [ 172.725818][ T6901] team0: Port device wlan1 added [ 172.759776][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.777604][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.838466][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.893111][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.269472][ T6934] netlink: 156 bytes leftover after parsing attributes in process `syz.2.714'. [ 173.662290][ T6956] netlink: 'syz.2.722': attribute type 4 has an invalid length. [ 173.671433][ T6956] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.722'. [ 174.214885][ T6988] netlink: 56 bytes leftover after parsing attributes in process `syz.1.731'. [ 174.720748][ T7019] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.738'. [ 174.841577][ T7023] netlink: 'syz.4.739': attribute type 21 has an invalid length. [ 174.884700][ T7023] netlink: 132 bytes leftover after parsing attributes in process `syz.4.739'. [ 175.870615][ T7055] netlink: 'syz.4.749': attribute type 2 has an invalid length. [ 176.017792][ T7064] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 176.108894][ T7064] dvmrp1: linktype set to 768 [ 176.113831][ T7075] device sit0 entered promiscuous mode [ 176.152487][ T7069] device sit0 left promiscuous mode [ 177.006537][ T7091] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.759'. [ 177.033619][ T7091] netlink: zone id is out of range [ 177.044182][ T7091] netlink: zone id is out of range [ 177.072696][ T7091] netlink: get zone limit has 8 unknown bytes [ 179.520886][ T7090] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.759'. [ 179.620669][ T7097] netlink: 'syz.1.761': attribute type 2 has an invalid length. [ 179.915141][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 180.014323][ T7112] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 180.299392][ T7130] netlink: 'syz.3.768': attribute type 21 has an invalid length. [ 180.352322][ T7130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.768'. [ 180.393584][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.768'. [ 180.486155][ T7137] device syzkaller0 entered promiscuous mode [ 180.549421][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 181.421369][ T7147] netlink: 'syz.2.778': attribute type 2 has an invalid length. [ 181.452035][ T7148] netlink: 'syz.0.777': attribute type 21 has an invalid length. [ 181.472525][ T7147] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 181.483602][ T7148] netlink: 'syz.0.777': attribute type 5 has an invalid length. [ 182.518763][ T7176] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.785'. [ 183.663813][ T7196] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.789'. [ 183.728450][ T7196] openvswitch: netlink: Flow actions attr not present in new flow. [ 184.568631][ T7217] netlink: 'syz.3.797': attribute type 29 has an invalid length. [ 184.668877][ T7224] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.796'. [ 184.710250][ T7217] netlink: 'syz.3.797': attribute type 29 has an invalid length. [ 184.746607][ T7225] netlink: 'syz.3.797': attribute type 29 has an invalid length. [ 184.779865][ T7219] device wlan1 entered promiscuous mode [ 185.086419][ T7231] netlink: 'syz.2.799': attribute type 39 has an invalid length. [ 185.636619][ T7242] netlink: 'syz.0.803': attribute type 2 has an invalid length. [ 186.004218][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 186.010324][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 186.016534][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 186.022560][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 186.049109][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 186.052372][ T7265] netlink: 'syz.1.806': attribute type 3 has an invalid length. [ 186.071510][ T7265] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.806'. [ 187.788844][ T7283] netlink: 132 bytes leftover after parsing attributes in process `syz.2.812'. [ 187.900891][ T7291] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.814'. [ 188.267437][ T7314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.297827][ T7314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.067872][ T7314] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 189.083008][ T7314] batman_adv: batadv0: Removing interface: virt_wifi0 [ 189.296527][ T7321] device syzkaller0 entered promiscuous mode [ 189.451987][ T7329] netlink: 'syz.3.824': attribute type 41 has an invalid length. [ 189.539871][ T7333] netlink: 'syz.0.825': attribute type 14 has an invalid length. [ 189.564294][ T7333] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.825'. [ 189.698159][ T7344] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.828'. [ 190.378319][ T7354] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.829'. [ 194.171229][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.177988][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.445084][ T7370] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 194.454775][ T7370] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 194.465302][ T7370] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 194.793013][ T7396] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.841'. [ 194.970254][ T7400] netlink: 'syz.4.844': attribute type 2 has an invalid length. [ 194.998886][ T7400] netlink: 'syz.4.844': attribute type 8 has an invalid length. [ 195.025296][ T7400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.844'. [ 195.082052][ T7409] netlink: 'syz.4.844': attribute type 19 has an invalid length. [ 195.100468][ T7409] netlink: 156 bytes leftover after parsing attributes in process `syz.4.844'. [ 195.130178][ T7411] netlink: 'syz.2.842': attribute type 41 has an invalid length. [ 197.060578][ T7449] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.854'. [ 197.226677][ T7459] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.340625][ T7457] netlink: 'syz.1.856': attribute type 29 has an invalid length. [ 197.350196][ T7457] netlink: 'syz.1.856': attribute type 29 has an invalid length. [ 198.075332][ T7492] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.864'. [ 198.251579][ T7498] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.867'. [ 198.516874][ T7507] netlink: 132 bytes leftover after parsing attributes in process `syz.2.871'. [ 198.663077][ T7513] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.023905][ T7532] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.880'. [ 200.090210][ T7558] tap0: tun_chr_ioctl cmd 1074025680 [ 201.011723][ T7574] netlink: 54183 bytes leftover after parsing attributes in process `syz.0.891'. [ 201.223971][ T7583] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.720272][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 201.793193][ T7605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.900191][ T7611] netlink: 54183 bytes leftover after parsing attributes in process `syz.0.903'. [ 202.295999][ T7625] netlink: 'syz.0.906': attribute type 7 has an invalid length. [ 202.521105][ T7631] netlink: 'syz.1.910': attribute type 25 has an invalid length. [ 202.542581][ T7631] netlink: 'syz.1.910': attribute type 9 has an invalid length. [ 202.834864][ T7639] delete_channel: no stack [ 203.172945][ T7644] device syzkaller0 entered promiscuous mode [ 203.215123][ T7646] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.916'. [ 203.590297][ T7651] netlink: 'syz.0.917': attribute type 3 has an invalid length. [ 203.617336][ T7651] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.917'. [ 205.494278][ T7658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.501535][ T7658] IPv6: NLM_F_CREATE should be set when creating new route [ 205.508843][ T7658] IPv6: NLM_F_CREATE should be set when creating new route [ 205.516103][ T7658] IPv6: NLM_F_CREATE should be set when creating new route [ 206.129975][ T7688] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.928'. [ 206.175122][ T7690] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 207.530496][ T7774] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 207.580599][ T7774] device netdevsim0 entered promiscuous mode [ 207.628125][ T7777] netlink: 'syz.1.940': attribute type 17 has an invalid length. [ 207.665695][ T7777] netlink: 'syz.1.940': attribute type 16 has an invalid length. [ 207.722713][ T7777] netlink: 152 bytes leftover after parsing attributes in process `syz.1.940'. [ 207.791953][ T7787] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.941'. [ 207.827793][ T7786] netlink: 'syz.1.940': attribute type 3 has an invalid length. [ 207.854855][ T7786] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.940'. [ 207.973516][ T7796] netlink: 'syz.4.946': attribute type 2 has an invalid length. [ 208.066249][ T7796] device 1 entered promiscuous mode [ 209.085417][ T7810] device syzkaller0 entered promiscuous mode [ 209.109525][ T7816] sctp: [Deprecated]: syz.3.952 (pid 7816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.109525][ T7816] Use struct sctp_sack_info instead [ 209.144447][ T7810] netlink: 'syz.0.949': attribute type 29 has an invalid length. [ 209.423655][ T7832] netlink: 54183 bytes leftover after parsing attributes in process `syz.3.957'. [ 209.593884][ T7836] netlink: 'syz.0.959': attribute type 10 has an invalid length. [ 209.610688][ T7836] netlink: 156 bytes leftover after parsing attributes in process `syz.0.959'. [ 210.197323][ T7854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.965'. [ 210.788339][ T7865] netlink: 'syz.4.968': attribute type 21 has an invalid length. [ 210.806230][ T7865] netlink: 128 bytes leftover after parsing attributes in process `syz.4.968'. [ 210.825889][ T7865] netlink: 'syz.4.968': attribute type 4 has an invalid length. [ 210.833577][ T7865] netlink: 'syz.4.968': attribute type 5 has an invalid length. [ 210.872472][ T7865] netlink: 3 bytes leftover after parsing attributes in process `syz.4.968'. [ 210.897286][ T7869] netlink: 128 bytes leftover after parsing attributes in process `syz.4.968'. [ 211.193311][ T7881] __nla_validate_parse: 2 callbacks suppressed [ 211.193327][ T7881] netlink: 152 bytes leftover after parsing attributes in process `syz.0.974'. [ 211.278547][ T7885] netlink: 152 bytes leftover after parsing attributes in process `syz.4.972'. [ 211.326222][ T7885] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 211.441617][ T7894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.977'. [ 211.763936][ T7904] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.978'. [ 211.997505][ T7917] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.983'. [ 212.321629][ T7923] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.986'. [ 212.442942][ T7930] bond0: (slave bond_slave_0): Releasing backup interface [ 212.748013][ T7943] FAULT_INJECTION: forcing a failure. [ 212.748013][ T7943] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 212.781306][ T7943] CPU: 1 PID: 7943 Comm: syz.2.989 Not tainted syzkaller #0 [ 212.788648][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.798731][ T7943] Call Trace: [ 212.802031][ T7943] [ 212.804981][ T7943] dump_stack_lvl+0x188/0x24e [ 212.809711][ T7943] ? show_regs_print_info+0x12/0x12 [ 212.814937][ T7943] ? load_image+0x400/0x400 [ 212.819463][ T7943] ? __might_fault+0xa6/0x120 [ 212.824166][ T7943] should_fail_ex+0x399/0x4d0 [ 212.828867][ T7943] copyin+0x1b/0x120 [ 212.832786][ T7943] _copy_from_iter+0x447/0x1130 [ 212.837660][ T7943] ? lockdep_hardirqs_on+0x94/0x140 [ 212.842883][ T7943] ? copyout_mc+0x110/0x110 [ 212.847409][ T7943] ? __virt_addr_valid+0x188/0x540 [ 212.852539][ T7943] ? __virt_addr_valid+0x188/0x540 [ 212.857679][ T7943] ? __virt_addr_valid+0x465/0x540 [ 212.862818][ T7943] ? __check_object_size+0x500/0xa40 [ 212.868131][ T7943] netlink_sendmsg+0x755/0xbd0 [ 212.872934][ T7943] ? netlink_getsockopt+0x550/0x550 [ 212.878156][ T7943] ? aa_sock_msg_perm+0x94/0x150 [ 212.883110][ T7943] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 212.888411][ T7943] ? security_socket_sendmsg+0x7c/0xa0 [ 212.893893][ T7943] ? netlink_getsockopt+0x550/0x550 [ 212.899110][ T7943] ____sys_sendmsg+0x5be/0x970 [ 212.903903][ T7943] ? __sys_sendmsg_sock+0x30/0x30 [ 212.908948][ T7943] ? __import_iovec+0x315/0x500 [ 212.913823][ T7943] ? import_iovec+0x6f/0xa0 [ 212.918344][ T7943] ___sys_sendmsg+0x2a2/0x360 [ 212.923045][ T7943] ? __sys_sendmsg+0x290/0x290 [ 212.927850][ T7943] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 212.933626][ T7943] __se_sys_sendmsg+0x1bb/0x2a0 [ 212.938502][ T7943] ? __x64_sys_sendmsg+0x80/0x80 [ 212.943474][ T7943] ? syscall_enter_from_user_mode+0x2a/0x80 [ 212.949391][ T7943] do_syscall_64+0x4c/0xa0 [ 212.954081][ T7943] ? clear_bhb_loop+0x60/0xb0 [ 212.958776][ T7943] ? clear_bhb_loop+0x60/0xb0 [ 212.963472][ T7943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 212.969382][ T7943] RIP: 0033:0x7f34a6b9c799 [ 212.973829][ T7943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.993472][ T7943] RSP: 002b:00007f34a7aad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.001918][ T7943] RAX: ffffffffffffffda RBX: 00007f34a6e15fa0 RCX: 00007f34a6b9c799 [ 213.009919][ T7943] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 213.017923][ T7943] RBP: 00007f34a7aad090 R08: 0000000000000000 R09: 0000000000000000 [ 213.025909][ T7943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.033878][ T7943] R13: 00007f34a6e16038 R14: 00007f34a6e15fa0 R15: 00007ffd466d5a28 [ 213.041864][ T7943] [ 213.331308][ T7955] netlink: 132 bytes leftover after parsing attributes in process `syz.4.992'. [ 213.361648][ T7959] validate_nla: 8 callbacks suppressed [ 213.361668][ T7959] netlink: 'syz.2.994': attribute type 10 has an invalid length. [ 213.662406][ T4277] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 213.721555][ T7970] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.995'. [ 213.939452][ T7986] netlink: 'syz.0.1001': attribute type 3 has an invalid length. [ 214.001727][ T7986] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1001'. [ 214.066508][ T7990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1003'. [ 214.096787][ T7990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 214.305554][ T7998] FAULT_INJECTION: forcing a failure. [ 214.305554][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 214.343529][ T7998] CPU: 1 PID: 7998 Comm: syz.3.1004 Not tainted syzkaller #0 [ 214.350963][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.361047][ T7998] Call Trace: [ 214.364363][ T7998] [ 214.367304][ T7998] dump_stack_lvl+0x188/0x24e [ 214.372008][ T7998] ? show_regs_print_info+0x12/0x12 [ 214.377255][ T7998] ? load_image+0x400/0x400 [ 214.381811][ T7998] ? verify_lock_unused+0x140/0x140 [ 214.387081][ T7998] should_fail_ex+0x399/0x4d0 [ 214.391817][ T7998] should_failslab+0x5/0x20 [ 214.396367][ T7998] slab_pre_alloc_hook+0x59/0x310 [ 214.401427][ T7998] kmem_cache_alloc+0x56/0x2f0 [ 214.406194][ T7998] ? skb_clone+0x1e7/0x370 [ 214.410631][ T7998] skb_clone+0x1e7/0x370 [ 214.414888][ T7998] __netlink_deliver_tap+0x3ed/0x800 [ 214.420212][ T7998] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.425421][ T7998] netlink_deliver_tap+0x19c/0x1b0 [ 214.430541][ T7998] netlink_unicast+0x728/0x8d0 [ 214.435334][ T7998] netlink_sendmsg+0x8ad/0xbd0 [ 214.440122][ T7998] ? netlink_getsockopt+0x550/0x550 [ 214.445333][ T7998] ? aa_sock_msg_perm+0x94/0x150 [ 214.450278][ T7998] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 214.455565][ T7998] ? security_socket_sendmsg+0x7c/0xa0 [ 214.461034][ T7998] ? netlink_getsockopt+0x550/0x550 [ 214.466240][ T7998] ____sys_sendmsg+0x5be/0x970 [ 214.471029][ T7998] ? __sys_sendmsg_sock+0x30/0x30 [ 214.476059][ T7998] ? __import_iovec+0x315/0x500 [ 214.480931][ T7998] ? import_iovec+0x6f/0xa0 [ 214.485445][ T7998] ___sys_sendmsg+0x2a2/0x360 [ 214.490142][ T7998] ? __sys_sendmsg+0x290/0x290 [ 214.494958][ T7998] ? ktime_get_real_ts64+0x440/0x440 [ 214.500300][ T7998] __se_sys_sendmsg+0x1bb/0x2a0 [ 214.505166][ T7998] ? __x64_sys_sendmsg+0x80/0x80 [ 214.510141][ T7998] ? lockdep_hardirqs_on+0x94/0x140 [ 214.515352][ T7998] do_syscall_64+0x4c/0xa0 [ 214.519785][ T7998] ? clear_bhb_loop+0x60/0xb0 [ 214.524467][ T7998] ? clear_bhb_loop+0x60/0xb0 [ 214.529242][ T7998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.535137][ T7998] RIP: 0033:0x7f0145f9c799 [ 214.539559][ T7998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.559171][ T7998] RSP: 002b:00007f0146da9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.567607][ T7998] RAX: ffffffffffffffda RBX: 00007f0146215fa0 RCX: 00007f0145f9c799 [ 214.575584][ T7998] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 214.583556][ T7998] RBP: 00007f0146da9090 R08: 0000000000000000 R09: 0000000000000000 [ 214.591525][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.599498][ T7998] R13: 00007f0146216038 R14: 00007f0146215fa0 R15: 00007ffe74dc9858 [ 214.607513][ T7998] [ 215.684731][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 216.007999][ T8031] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 216.231755][ T8037] sctp: [Deprecated]: syz.1.1014 (pid 8037) Use of int in maxseg socket option. [ 216.231755][ T8037] Use struct sctp_assoc_value instead [ 218.139111][ T8046] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 218.201004][ T8046] __nla_validate_parse: 3 callbacks suppressed [ 218.201021][ T8046] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1017'. [ 218.399488][ T8048] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1018'. [ 218.417742][ T8052] netlink: 'syz.1.1019': attribute type 10 has an invalid length. [ 218.434793][ T8052] bridge0: port 3(dummy0) entered blocking state [ 218.441329][ T8052] bridge0: port 3(dummy0) entered forwarding state [ 218.448166][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.455345][ T8052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.462766][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.469993][ T8052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.493042][ T8052] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 218.878573][ T8068] netlink: 'syz.4.1023': attribute type 1 has an invalid length. [ 218.924157][ T8068] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1023'. [ 219.146889][ T8074] netlink: 54183 bytes leftover after parsing attributes in process `syz.0.1024'. [ 219.257697][ T8082] netlink: 'syz.1.1025': attribute type 2 has an invalid length. [ 219.400566][ T8082] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 219.442845][ T8097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1030'. [ 219.454311][ T8082] netlink: 'syz.1.1025': attribute type 8 has an invalid length. [ 219.462312][ T8082] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1025'. [ 220.510750][ T8110] device syzkaller0 left promiscuous mode [ 220.727522][ T8114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1035'. [ 221.001166][ T8129] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.1040'. [ 221.193941][ T8138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1043'. [ 221.207027][ T8133] netlink: 'syz.2.1037': attribute type 39 has an invalid length. [ 221.515398][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 222.283175][ T8162] device syzkaller0 entered promiscuous mode [ 222.331602][ T8175] sctp: [Deprecated]: syz.1.1054 (pid 8175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.331602][ T8175] Use struct sctp_sack_info instead [ 222.339434][ T8170] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 222.810664][ T8193] netlink: 'syz.0.1061': attribute type 33 has an invalid length. [ 223.284084][ T8212] __nla_validate_parse: 5 callbacks suppressed [ 223.284101][ T8212] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.1067'. [ 223.596497][ T8220] netlink: 'syz.0.1065': attribute type 39 has an invalid length. [ 223.962310][ T8238] netlink: 'syz.4.1075': attribute type 4 has an invalid length. [ 224.014430][ T8238] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1075'. [ 224.020194][ T8241] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1075'. [ 224.066868][ T8242] netlink: 'syz.0.1074': attribute type 10 has an invalid length. [ 224.400146][ T8242] team0: Port device dummy0 added [ 225.194086][ T8245] netlink: 'syz.0.1074': attribute type 10 has an invalid length. [ 225.283980][ T8245] team0: Port device dummy0 removed [ 225.315768][ T8245] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 225.345069][ T8238] netlink: 'syz.4.1075': attribute type 5 has an invalid length. [ 225.364440][ T8238] netlink: 'syz.4.1075': attribute type 9 has an invalid length. [ 225.372435][ T8248] device hsr0 entered promiscuous mode [ 225.380248][ T8248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.777807][ T8264] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1078'. [ 226.263915][ T8276] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.1082'. [ 226.632969][ T8303] netlink: 'syz.2.1088': attribute type 2 has an invalid length. [ 226.694232][ T8303] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.1088'. [ 226.766915][ T8313] netlink: 'syz.0.1089': attribute type 21 has an invalid length. [ 227.040870][ T8322] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1095'. [ 227.108345][ T8325] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1094'. [ 227.143321][ T8326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1095'. [ 227.248154][ T8328] netlink: 54183 bytes leftover after parsing attributes in process `syz.0.1096'. [ 227.302433][ T8332] netlink: 'syz.4.1097': attribute type 17 has an invalid length. [ 228.209242][ T8371] FAULT_INJECTION: forcing a failure. [ 228.209242][ T8371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.265955][ T8371] CPU: 0 PID: 8371 Comm: syz.3.1107 Not tainted syzkaller #0 [ 228.273385][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.283458][ T8371] Call Trace: [ 228.286738][ T8371] [ 228.289660][ T8371] dump_stack_lvl+0x188/0x24e [ 228.294343][ T8371] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 228.300494][ T8371] ? show_regs_print_info+0x12/0x12 [ 228.305694][ T8371] ? load_image+0x400/0x400 [ 228.310199][ T8371] should_fail_ex+0x399/0x4d0 [ 228.314870][ T8371] _copy_to_user+0x2c/0x130 [ 228.319370][ T8371] simple_read_from_buffer+0xe3/0x150 [ 228.324744][ T8371] proc_fail_nth_read+0x1a6/0x220 [ 228.329762][ T8371] ? proc_fault_inject_write+0x310/0x310 [ 228.335388][ T8371] ? fsnotify_perm+0x248/0x550 [ 228.340146][ T8371] ? proc_fault_inject_write+0x310/0x310 [ 228.345772][ T8371] vfs_read+0x2de/0xa00 [ 228.349927][ T8371] ? kernel_read+0x1e0/0x1e0 [ 228.354520][ T8371] ? __fget_files+0x28/0x4b0 [ 228.359100][ T8371] ? __fget_files+0x28/0x4b0 [ 228.363688][ T8371] ? __fget_files+0x43d/0x4b0 [ 228.368362][ T8371] ? __fdget_pos+0x2ae/0x360 [ 228.372948][ T8371] ? ksys_read+0x71/0x250 [ 228.377273][ T8371] ksys_read+0x14c/0x250 [ 228.381512][ T8371] ? vfs_write+0xa30/0xa30 [ 228.385928][ T8371] ? lockdep_hardirqs_on+0x94/0x140 [ 228.391119][ T8371] do_syscall_64+0x4c/0xa0 [ 228.395527][ T8371] ? clear_bhb_loop+0x60/0xb0 [ 228.400196][ T8371] ? clear_bhb_loop+0x60/0xb0 [ 228.404953][ T8371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.410840][ T8371] RIP: 0033:0x7f0145f5cfce [ 228.415251][ T8371] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.434867][ T8371] RSP: 002b:00007f0146da8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.443281][ T8371] RAX: ffffffffffffffda RBX: 00007f0146da96c0 RCX: 00007f0145f5cfce [ 228.451246][ T8371] RDX: 000000000000000f RSI: 00007f0146da90a0 RDI: 000000000000000b [ 228.459206][ T8371] RBP: 00007f0146da9090 R08: 0000000000000000 R09: 0000000000000000 [ 228.467167][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.475126][ T8371] R13: 00007f0146216038 R14: 00007f0146215fa0 R15: 00007ffe74dc9858 [ 228.483100][ T8371] [ 228.516938][ T8376] __nla_validate_parse: 5 callbacks suppressed [ 228.516964][ T8376] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.1109'. [ 228.688295][ T8381] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1111'. [ 229.151371][ T8390] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1114'. [ 229.351153][ T8391] netlink: 'syz.0.1113': attribute type 10 has an invalid length. [ 229.419218][ T8391] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1113'. [ 230.561599][ T8402] netlink: 'syz.2.1117': attribute type 10 has an invalid length. [ 230.580070][ T8402] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1117'. [ 230.604256][ T8409] netlink: 'syz.4.1119': attribute type 21 has an invalid length. [ 230.612523][ T8409] netlink: 'syz.4.1119': attribute type 6 has an invalid length. [ 230.644364][ T8409] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1119'. [ 230.928438][ T8416] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.1121'. [ 231.152096][ T8425] netlink: 'syz.4.1124': attribute type 1 has an invalid length. [ 231.699725][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 231.917972][ T8449] device syzkaller0 entered promiscuous mode [ 232.196072][ T8459] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1132'. [ 235.309403][ T8474] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.1135'. [ 235.323591][ T8480] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 235.571349][ T8482] netlink: 'syz.3.1141': attribute type 6 has an invalid length. [ 235.645702][ T8482] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.1141'. [ 235.839899][ T8509] netlink: 'syz.0.1148': attribute type 17 has an invalid length. [ 235.848198][ T8509] netlink: 'syz.0.1148': attribute type 16 has an invalid length. [ 235.856682][ T8509] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1148'. [ 235.879414][ T8509] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1148'. [ 236.008318][ T8512] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 236.096482][ T8519] netlink: 54183 bytes leftover after parsing attributes in process `syz.3.1152'. [ 236.141073][ T8520] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1149'. [ 236.408119][ T8521] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1151'. [ 237.293899][ T8547] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1161'. [ 237.359023][ T8550] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.1163'. [ 238.197461][ T8573] netlink: 'syz.1.1168': attribute type 33 has an invalid length. [ 238.233320][ T8573] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1168'. [ 238.577217][ T4452] bridge0: port 3(dummy0) entered disabled state [ 238.617459][ T8578] netlink: 'syz.2.1169': attribute type 2 has an invalid length. [ 238.901154][ T8586] netlink: 'syz.4.1170': attribute type 29 has an invalid length. [ 239.207909][ T8609] netlink: 'syz.0.1178': attribute type 10 has an invalid length. [ 239.606617][ T8622] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 239.712497][ T8628] device syzkaller0 entered promiscuous mode [ 240.396554][ T8657] __nla_validate_parse: 3 callbacks suppressed [ 240.396571][ T8657] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.1192'. [ 240.432723][ T8658] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 240.464856][ T8658] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1191'. [ 240.495034][ T8658] netlink: zone id is out of range [ 240.500208][ T8658] netlink: zone id is out of range [ 240.525209][ T8658] netlink: zone id is out of range [ 240.543913][ T8658] netlink: zone id is out of range [ 240.589085][ T8658] netlink: zone id is out of range [ 240.614289][ T8658] netlink: zone id is out of range [ 240.660439][ T8658] netlink: zone id is out of range [ 240.714117][ T8658] netlink: zone id is out of range [ 240.719303][ T8658] netlink: zone id is out of range [ 240.751833][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 240.767311][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 240.815802][ T8674] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1196'. [ 240.901921][ T8677] netlink: 'syz.2.1197': attribute type 4 has an invalid length. [ 240.936628][ T8677] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1197'. [ 240.957658][ T8683] netlink: 'syz.2.1197': attribute type 2 has an invalid length. [ 241.030306][ T8683] device 0 entered promiscuous mode [ 241.282913][ T8698] netlink: 'syz.2.1202': attribute type 23 has an invalid length. [ 241.356958][ T8701] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.1205'. [ 241.391182][ T8704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1203'. [ 241.435491][ T8704] device hsr_slave_0 left promiscuous mode [ 241.471743][ T8704] device hsr_slave_1 left promiscuous mode [ 241.582295][ T8721] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1207'. [ 241.621847][ T8721] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 241.908684][ T8730] netlink: 3748 bytes leftover after parsing attributes in process `syz.3.1210'. [ 242.153849][ T8742] netlink: 'syz.3.1212': attribute type 2 has an invalid length. [ 242.370641][ T8751] netlink: 'syz.0.1216': attribute type 39 has an invalid length. [ 243.026922][ T8772] netlink: 'syz.4.1224': attribute type 10 has an invalid length. [ 243.153680][ T8780] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 243.269481][ T8772] team0 (unregistering): Port device team_slave_1 removed [ 243.317734][ T8772] team0 (unregistering): Port device wlan1 removed [ 243.545716][ T8799] netlink: 'syz.0.1232': attribute type 10 has an invalid length. [ 243.597055][ T8799] team0: Device bond0 is already an upper device of the team interface [ 244.885614][ T8849] tap0: tun_chr_ioctl cmd 1074025675 [ 244.911397][ T8849] tap0: persist enabled [ 244.937060][ T8849] tap0: tun_chr_ioctl cmd 1074025675 [ 244.957013][ T8849] tap0: persist disabled [ 245.551889][ T8873] __nla_validate_parse: 12 callbacks suppressed [ 245.551906][ T8873] netlink: 54183 bytes leftover after parsing attributes in process `syz.3.1257'. [ 246.610424][ T8892] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1259'. [ 246.631540][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1259'. [ 246.983637][ T8909] validate_nla: 6 callbacks suppressed [ 246.983654][ T8909] netlink: 'syz.4.1263': attribute type 10 has an invalid length. [ 247.059896][ T8909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1263'. [ 247.182282][ T8909] device ipvlan1 entered promiscuous mode [ 247.322292][ T8909] net_ratelimit: 204 callbacks suppressed [ 247.322314][ T8909] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 247.455959][ T8912] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1263'. [ 249.759135][ T8918] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.1268'. [ 250.430575][ T8945] netlink: 'syz.1.1276': attribute type 11 has an invalid length. [ 250.499706][ T8947] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 250.514267][ T8945] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1276'. [ 250.534157][ T8947] netlink: 'syz.3.1277': attribute type 1 has an invalid length. [ 250.554334][ T8947] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1277'. [ 250.826668][ T8963] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.1281'. [ 251.090164][ T8975] delete_channel: no stack [ 251.102618][ T8975] delete_channel: no stack [ 252.617052][ T9023] netlink: 54183 bytes leftover after parsing attributes in process `syz.3.1296'. [ 253.069480][ T9048] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.1304'. [ 254.514619][ T9058] netlink: 'syz.0.1305': attribute type 10 has an invalid length. [ 255.209551][ T9058] device netdevsim0 left promiscuous mode [ 255.249602][ T9058] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 255.272409][ T9066] netlink: 'syz.4.1307': attribute type 21 has an invalid length. [ 255.298493][ T9074] netlink: 'syz.1.1309': attribute type 21 has an invalid length. [ 255.316967][ T9074] netlink: 'syz.1.1309': attribute type 2 has an invalid length. [ 255.354852][ T9081] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.1310'. [ 255.608239][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.614716][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.826857][ T4278] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 255.827099][ T9093] netlink: 'syz.0.1311': attribute type 21 has an invalid length. [ 255.928451][ T9093] netlink: 'syz.0.1311': attribute type 6 has an invalid length. [ 255.973548][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1311'. [ 255.998267][ T9086] netlink: 'syz.1.1312': attribute type 21 has an invalid length. [ 256.112586][ T9096] netlink: 'syz.4.1314': attribute type 41 has an invalid length. [ 257.247811][ T9136] netlink: 'syz.1.1324': attribute type 2 has an invalid length. [ 257.286628][ T9136] netlink: 'syz.1.1324': attribute type 8 has an invalid length. [ 257.306473][ T9136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1324'. [ 257.488696][ T9141] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1326'. [ 258.351937][ T9165] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1331'. [ 258.417517][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 258.445004][ T9165] tc_dump_action: action bad kind [ 261.015628][ T9179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.112175][ T9192] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1340'. [ 261.312204][ T9200] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1343'. [ 261.709931][ T9209] Ÿë: port 1(gretap0) entered blocking state [ 261.794657][ T9209] Ÿë: port 1(gretap0) entered disabled state [ 261.809244][ T9209] device gretap0 entered promiscuous mode [ 263.165688][ T9255] can: request_module (can-proto-0) failed. [ 264.207297][ T9289] netlink: 'syz.1.1365': attribute type 11 has an invalid length. [ 264.215761][ T9289] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1365'. [ 265.030385][ T9287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.302821][ T9310] team0: Port device team_slave_0 removed [ 267.310523][ T9310] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 267.498483][ T9329] netlink: 'syz.2.1373': attribute type 11 has an invalid length. [ 267.560402][ T9329] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1373'. [ 267.590873][ T9331] netlink: 'syz.2.1373': attribute type 11 has an invalid length. [ 267.635066][ T9331] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1373'. [ 267.667312][ T9346] validate_nla: 3 callbacks suppressed [ 267.667353][ T9346] netlink: 'syz.0.1377': attribute type 25 has an invalid length. [ 267.729273][ T9346] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1377'. [ 267.747466][ T9331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.723456][ T9371] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1382'. [ 268.860037][ T9372] delete_channel: no stack [ 268.882991][ T9381] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1386'. [ 269.095009][ T9384] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1386'. [ 269.205680][ T9384] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 269.228778][ T9384] CPU: 0 PID: 9384 Comm: syz.4.1386 Not tainted syzkaller #0 [ 269.236207][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.246288][ T9384] Call Trace: [ 269.249592][ T9384] [ 269.252538][ T9384] dump_stack_lvl+0x188/0x24e [ 269.257237][ T9384] ? show_regs_print_info+0x12/0x12 [ 269.262435][ T9384] ? load_image+0x400/0x400 [ 269.266942][ T9384] sysfs_warn_dup+0x8a/0xa0 [ 269.271450][ T9384] sysfs_do_create_link_sd+0xc0/0x110 [ 269.276822][ T9384] device_add+0x7ed/0xfb0 [ 269.281159][ T9384] wiphy_register+0x1d9f/0x2ac0 [ 269.286027][ T9384] ? cfg80211_event_work+0x40/0x40 [ 269.291145][ T9384] ? minstrel_ht_alloc+0x894/0xa20 [ 269.296261][ T9384] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 269.302323][ T9384] ieee80211_register_hw+0x2d00/0x39f0 [ 269.307872][ T9384] ? ieee80211_register_hw+0xee1/0x39f0 [ 269.313412][ T9384] ? ieee80211_register_hw+0xee1/0x39f0 [ 269.318967][ T9384] ? ieee80211_tasklet_handler+0x20/0x20 [ 269.324602][ T9384] ? memset+0x1e/0x40 [ 269.328574][ T9384] ? __hrtimer_init+0x186/0x270 [ 269.333420][ T9384] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 269.339164][ T9384] hwsim_new_radio_nl+0xafa/0xce0 [ 269.344202][ T9384] genl_family_rcv_msg_doit+0x22a/0x330 [ 269.349750][ T9384] ? end_current_label_crit_section+0x170/0x170 [ 269.355992][ T9384] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 269.361885][ T9384] ? bpf_lsm_capable+0x5/0x10 [ 269.366558][ T9384] ? security_capable+0x85/0xb0 [ 269.371407][ T9384] genl_rcv_msg+0x604/0x790 [ 269.375909][ T9384] ? genl_bind+0x360/0x360 [ 269.380316][ T9384] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 269.386652][ T9384] netlink_rcv_skb+0x1fb/0x450 [ 269.391438][ T9384] ? genl_bind+0x360/0x360 [ 269.395845][ T9384] ? netlink_ack+0x1170/0x1170 [ 269.400614][ T9384] ? down_read+0x1a8/0x2d0 [ 269.405043][ T9384] genl_rcv+0x24/0x40 [ 269.409029][ T9384] netlink_unicast+0x74d/0x8d0 [ 269.413813][ T9384] netlink_sendmsg+0x8ad/0xbd0 [ 269.418592][ T9384] ? netlink_getsockopt+0x550/0x550 [ 269.423796][ T9384] ? aa_sock_msg_perm+0x94/0x150 [ 269.428752][ T9384] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 269.434046][ T9384] ? security_socket_sendmsg+0x7c/0xa0 [ 269.439522][ T9384] ? netlink_getsockopt+0x550/0x550 [ 269.444725][ T9384] ____sys_sendmsg+0x5be/0x970 [ 269.449502][ T9384] ? __sys_sendmsg_sock+0x30/0x30 [ 269.454526][ T9384] ? __import_iovec+0x315/0x500 [ 269.459378][ T9384] ? import_iovec+0x6f/0xa0 [ 269.463875][ T9384] ___sys_sendmsg+0x2a2/0x360 [ 269.468548][ T9384] ? try_to_wake_up+0x67c/0x1080 [ 269.473484][ T9384] ? __sys_sendmsg+0x290/0x290 [ 269.478282][ T9384] __se_sys_sendmsg+0x1bb/0x2a0 [ 269.483126][ T9384] ? ct_nmi_exit+0x145/0x1c0 [ 269.487711][ T9384] ? __x64_sys_sendmsg+0x80/0x80 [ 269.492656][ T9384] ? lockdep_hardirqs_on+0x94/0x140 [ 269.497850][ T9384] do_syscall_64+0x4c/0xa0 [ 269.502264][ T9384] ? clear_bhb_loop+0x60/0xb0 [ 269.506935][ T9384] ? clear_bhb_loop+0x60/0xb0 [ 269.511606][ T9384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.517507][ T9384] RIP: 0033:0x7f2800b9c799 [ 269.521924][ T9384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.541524][ T9384] RSP: 002b:00007f2801a3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.549932][ T9384] RAX: ffffffffffffffda RBX: 00007f2800e16090 RCX: 00007f2800b9c799 [ 269.557898][ T9384] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 269.565876][ T9384] RBP: 00007f2800c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 269.573870][ T9384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.581859][ T9384] R13: 00007f2800e16128 R14: 00007f2800e16090 R15: 00007ffc514a46b8 [ 269.589843][ T9384] [ 269.941147][ T9384] delete_channel: no stack [ 270.050544][ T9412] netlink: 'syz.1.1396': attribute type 3 has an invalid length. [ 270.074915][ T9410] netlink: 'syz.4.1395': attribute type 3 has an invalid length. [ 270.082702][ T9410] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1395'. [ 270.093475][ T9412] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1396'. [ 271.046054][ T9438] netlink: 'syz.3.1400': attribute type 10 has an invalid length. [ 271.208941][ T9438] device veth0_macvtap left promiscuous mode [ 271.445876][ T4278] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 272.347437][ T9479] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1410'. [ 272.685905][ T9481] netlink: 'syz.2.1411': attribute type 7 has an invalid length. [ 273.027923][ T9496] netlink: 'syz.2.1415': attribute type 27 has an invalid length. [ 273.045218][ T9496] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1415'. [ 273.075928][ T9489] device syzkaller0 entered promiscuous mode [ 273.543374][ T9508] netlink: 'syz.2.1418': attribute type 7 has an invalid length. [ 273.570180][ T9508] netlink: 'syz.2.1418': attribute type 1 has an invalid length. [ 273.596315][ T9508] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1418'. [ 273.858723][ T9512] netlink: 'syz.0.1419': attribute type 3 has an invalid length. [ 273.875824][ T9513] netlink: 'syz.0.1419': attribute type 3 has an invalid length. [ 273.896911][ T9512] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1419'. [ 273.917327][ T9513] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1419'. [ 275.723685][ T9515] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1420'. [ 279.911129][ T9571] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1437'. [ 280.135124][ T9575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.728237][ T9581] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1439'. [ 280.739829][ T9581] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 281.201154][ T9603] netlink: 'syz.0.1446': attribute type 2 has an invalid length. [ 281.259313][ T9603] device 0 entered promiscuous mode [ 281.665709][ T9616] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1452'. [ 282.575887][ T9644] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 282.747149][ T9650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.754669][ T9650] IPv6: NLM_F_CREATE should be set when creating new route [ 283.139725][ T9659] device syzkaller0 entered promiscuous mode [ 285.772778][ T9680] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1467'. [ 285.918554][ T9697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.925885][ T9697] IPv6: NLM_F_CREATE should be set when creating new route [ 285.946426][ T9703] netlink: 'syz.2.1475': attribute type 3 has an invalid length. [ 285.963510][ T9703] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1475'. [ 285.989360][ T9706] device syzkaller0 entered promiscuous mode [ 286.087884][ T9703] netlink: 'syz.2.1475': attribute type 21 has an invalid length. [ 286.135596][ T9703] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1475'. [ 286.185881][ T9703] netlink: 'syz.2.1475': attribute type 4 has an invalid length. [ 286.199607][ T9703] netlink: 'syz.2.1475': attribute type 5 has an invalid length. [ 286.209683][ T9703] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1475'. [ 286.370871][ T9727] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1481'. [ 286.412734][ T9727] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1481'. [ 286.448526][ T9727] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1481'. [ 286.471574][ T9734] netlink: 'syz.1.1483': attribute type 20 has an invalid length. [ 286.492662][ T9727] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1481'. [ 286.544140][ T9727] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1481'. [ 286.574917][ T9727] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1481'. [ 286.633894][ T9742] netlink: 'syz.4.1485': attribute type 12 has an invalid length. [ 286.656089][ T9744] netlink: 'syz.4.1485': attribute type 12 has an invalid length. [ 287.198920][ T9758] netlink: 'syz.0.1489': attribute type 21 has an invalid length. [ 287.209195][ T9758] netlink: 'syz.0.1489': attribute type 1 has an invalid length. [ 287.762036][ T9780] netlink: 'syz.4.1496': attribute type 10 has an invalid length. [ 287.797161][ T9780] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 288.135660][ T9785] netlink: 'syz.4.1497': attribute type 10 has an invalid length. [ 288.327931][ T9798] netlink: 'syz.1.1501': attribute type 25 has an invalid length. [ 288.353162][ T9795] netlink: 'syz.1.1501': attribute type 2 has an invalid length. [ 290.097183][ T9875] netlink: 'syz.3.1517': attribute type 1 has an invalid length. [ 290.806595][ T9895] __nla_validate_parse: 65 callbacks suppressed [ 290.806612][ T9895] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1521'. [ 291.118693][ T9914] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1528'. [ 291.145209][ T9920] device veth0_vlan left promiscuous mode [ 291.152361][ T9920] device veth0_vlan entered promiscuous mode [ 291.165267][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.198704][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.291322][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): ÿÿÿÿÿÿ: link becomes ready [ 291.757056][ T9943] validate_nla: 1 callbacks suppressed [ 291.757095][ T9943] netlink: 'syz.0.1537': attribute type 2 has an invalid length. [ 291.792601][ T9943] netlink: 'syz.0.1537': attribute type 8 has an invalid length. [ 291.808397][ T9943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1537'. [ 292.007686][ T9965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.029732][ T9964] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 292.091064][ T9964] team0: Device ipvlan1 failed to register rx_handler [ 292.702271][ T9970] netlink: 'syz.4.1545': attribute type 10 has an invalid length. [ 293.261935][ T9982] netlink: 'syz.1.1547': attribute type 3 has an invalid length. [ 293.272174][ T9982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1547'. [ 293.437389][ T9988] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1548'. [ 293.597342][T10003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1553'. [ 293.655365][T10003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1553'. [ 293.704557][T10006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1553'. [ 293.737066][T10008] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1555'. [ 293.758597][T10011] netlink: 'syz.1.1556': attribute type 8 has an invalid length. [ 293.799253][T10008] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 293.824838][T10011] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1556'. [ 296.068670][T10077] netlink: 'syz.2.1574': attribute type 29 has an invalid length. [ 296.094183][T10077] netlink: 'syz.2.1574': attribute type 29 has an invalid length. [ 296.260970][T10080] delete_channel: no stack [ 296.324981][T10080] delete_channel: no stack [ 296.426653][T10083] netlink: 'syz.1.1576': attribute type 10 has an invalid length. [ 296.499236][T10083] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1576'. [ 296.781086][T10101] netlink: 'syz.1.1581': attribute type 4 has an invalid length. [ 296.854141][T10101] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1581'. [ 297.317604][T10113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1585'. [ 297.481853][T10123] netlink: 'syz.2.1587': attribute type 33 has an invalid length. [ 297.518824][T10123] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1587'. [ 297.574391][T10127] tipc: Started in network mode [ 297.576130][T10113] netlink: 'syz.4.1585': attribute type 29 has an invalid length. [ 297.579453][T10127] tipc: Node identity 9215a268, cluster identity 4711 [ 297.634303][T10127] tipc: Node number set to 2450891368 [ 297.745953][T10113] netlink: 'syz.4.1585': attribute type 29 has an invalid length. [ 297.790724][T10133] netlink: 'syz.4.1585': attribute type 29 has an invalid length. [ 298.333668][T10141] device syzkaller0 entered promiscuous mode [ 298.393267][T10149] netlink: 'syz.4.1592': attribute type 10 has an invalid length. [ 298.411351][T10149] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1592'. [ 298.598926][T10154] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1604'. [ 298.620719][T10154] netlink: 'syz.1.1604': attribute type 11 has an invalid length. [ 298.639114][T10154] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1604'. [ 299.474633][T10153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.737858][T10173] netlink: 'syz.1.1597': attribute type 10 has an invalid length. [ 299.754343][T10173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1597'. [ 299.808464][T10173] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 300.114573][T10196] netlink: 'syz.2.1603': attribute type 17 has an invalid length. [ 300.122424][T10196] netlink: 'syz.2.1603': attribute type 16 has an invalid length. [ 300.165906][T10196] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1603'. [ 300.524800][T10206] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.1607'. [ 300.797287][T10218] netlink: 'syz.4.1610': attribute type 12 has an invalid length. [ 301.997726][T10257] __nla_validate_parse: 4 callbacks suppressed [ 301.997746][T10257] netlink: 54183 bytes leftover after parsing attributes in process `syz.4.1623'. [ 302.758949][T10271] netlink: 'syz.4.1624': attribute type 1 has an invalid length. [ 302.836310][T10271] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1624'. [ 303.862463][T10284] netlink: 'syz.4.1629': attribute type 6 has an invalid length. [ 304.799806][T10297] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.1634'. [ 305.195593][T10315] netlink: 'syz.4.1640': attribute type 10 has an invalid length. [ 305.542682][T10330] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1646'. [ 305.721456][T10333] netlink: 'syz.3.1645': attribute type 2 has an invalid length. [ 305.744770][T10333] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1645'. [ 305.844592][T10343] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 305.854118][T10343] netlink: 'syz.1.1649': attribute type 3 has an invalid length. [ 305.861938][T10343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1649'. [ 306.212270][T10346] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.1648'. [ 307.995450][T10353] bridge0: port 3(dummy0) entered disabled state [ 308.003057][T10353] device bridge_slave_1 left promiscuous mode [ 308.009440][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.018075][T10353] device bridge_slave_0 left promiscuous mode [ 308.024653][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.066640][T10353] bond0: (slave bridge0): Releasing backup interface [ 308.345909][T10374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1657'. [ 308.385621][T10374] netlink: 'syz.2.1657': attribute type 11 has an invalid length. [ 308.393510][T10374] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1657'. [ 308.497127][T10382] netlink: 'syz.1.1658': attribute type 7 has an invalid length. [ 308.514641][T10382] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1658'. [ 308.795677][T10395] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.1663'. [ 309.061843][T10403] netlink: 'syz.2.1666': attribute type 21 has an invalid length. [ 309.320577][T10411] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 309.678269][T10430] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.1676'. [ 310.403536][T10471] netlink: 'syz.2.1687': attribute type 4 has an invalid length. [ 310.476985][T10478] ================================================================== [ 310.485094][T10478] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 310.492925][T10478] Write of size 72 at addr ffff88801ea5fe10 by task syz.1.1688/10478 [ 310.500999][T10478] [ 310.503330][T10478] CPU: 1 PID: 10478 Comm: syz.1.1688 Not tainted syzkaller #0 [ 310.510897][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 310.520961][T10478] Call Trace: [ 310.524249][T10478] [ 310.527192][T10478] dump_stack_lvl+0x188/0x24e [ 310.531892][T10478] ? __lock_acquire+0x7d10/0x7d10 [ 310.536941][T10478] ? show_regs_print_info+0x12/0x12 [ 310.542165][T10478] ? load_image+0x400/0x400 [ 310.546666][T10478] ? __virt_addr_valid+0x465/0x540 [ 310.551768][T10478] ? __bpf_get_stackid+0x6c9/0x920 [ 310.556865][T10478] print_report+0xa8/0x210 [ 310.561269][T10478] kasan_report+0x10b/0x140 [ 310.565762][T10478] ? __bpf_get_stackid+0x6c9/0x920 [ 310.570861][T10478] kasan_check_range+0x235/0x290 [ 310.575790][T10478] ? __bpf_get_stackid+0x6c9/0x920 [ 310.580892][T10478] memcpy+0x3c/0x60 [ 310.584686][T10478] __bpf_get_stackid+0x6c9/0x920 [ 310.589613][T10478] bpf_get_stackid_pe+0x33f/0x400 [ 310.594628][T10478] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 310.600076][T10478] bpf_overflow_handler+0x522/0x7c0 [ 310.605266][T10478] ? bpf_overflow_handler+0xd9/0x7c0 [ 310.610625][T10478] ? perf_event_switch_output+0x760/0x760 [ 310.616330][T10478] ? arch_stack_walk+0xf2/0x140 [ 310.621166][T10478] ? __perf_event_account_interrupt+0x187/0x280 [ 310.627401][T10478] __perf_event_overflow+0x448/0x610 [ 310.632680][T10478] ___perf_sw_event+0x49e/0x6e0 [ 310.637521][T10478] ? ___perf_sw_event+0x180/0x6e0 [ 310.642536][T10478] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 310.648938][T10478] ? __lock_acquire+0x13cf/0x7d10 [ 310.653973][T10478] ? ct_nmi_exit+0x145/0x1c0 [ 310.658552][T10478] ? ct_irq_exit_irqson+0x113/0x170 [ 310.663738][T10478] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 310.669706][T10478] ? lock_chain_count+0x20/0x20 [ 310.674544][T10478] __perf_sw_event+0x135/0x260 [ 310.679299][T10478] do_user_addr_fault+0xaea/0xb10 [ 310.684319][T10478] ? trace_hardirqs_off_finish+0x86/0x180 [ 310.690027][T10478] exc_page_fault+0x60/0x100 [ 310.694604][T10478] asm_exc_page_fault+0x22/0x30 [ 310.699449][T10478] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 310.706027][T10478] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 310.725618][T10478] RSP: 0018:ffffc9000d677b88 EFLAGS: 00050206 [ 310.731673][T10478] RAX: ffffffff84110b01 RBX: 0000000000000340 RCX: 0000000000000200 [ 310.739655][T10478] RDX: 0000000000000340 RSI: 0000200000002000 RDI: ffff888077a3c140 [ 310.747613][T10478] RBP: 0000000000000000 R08: ffff888077a3c33f R09: 1ffff1100ef47867 [ 310.755744][T10478] R10: dffffc0000000000 R11: ffffed100ef47868 R12: 00007fffffffecc0 [ 310.763699][T10478] R13: 1ffff92001acef8c R14: ffff888077a3c000 R15: 0000200000001ec0 [ 310.771660][T10478] ? _copy_from_user+0x21/0x170 [ 310.776508][T10478] _copy_from_user+0xf4/0x170 [ 310.781174][T10478] bpf_prog_test_run_xdp+0xbf3/0xf10 [ 310.786462][T10478] ? dev_put+0x80/0x80 [ 310.790522][T10478] ? dev_put+0x80/0x80 [ 310.794581][T10478] bpf_prog_test_run+0x31e/0x390 [ 310.799508][T10478] __sys_bpf+0x62b/0x780 [ 310.803742][T10478] ? bpf_link_show_fdinfo+0x380/0x380 [ 310.809108][T10478] ? lock_chain_count+0x20/0x20 [ 310.813950][T10478] __x64_sys_bpf+0x78/0x90 [ 310.818366][T10478] do_syscall_64+0x4c/0xa0 [ 310.822770][T10478] ? clear_bhb_loop+0x60/0xb0 [ 310.827438][T10478] ? clear_bhb_loop+0x60/0xb0 [ 310.832102][T10478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.837982][T10478] RIP: 0033:0x7f6cd939c799 [ 310.842380][T10478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.861969][T10478] RSP: 002b:00007f6cda1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.870370][T10478] RAX: ffffffffffffffda RBX: 00007f6cd9615fa0 RCX: 00007f6cd939c799 [ 310.878331][T10478] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 310.886291][T10478] RBP: 00007f6cd9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 310.894248][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.902203][T10478] R13: 00007f6cd9616038 R14: 00007f6cd9615fa0 R15: 00007ffc3e2ca538 [ 310.910166][T10478] [ 310.913169][T10478] [ 310.915486][T10478] Allocated by task 10478: [ 310.919891][T10478] kasan_set_track+0x4b/0x70 [ 310.924470][T10478] __kasan_kmalloc+0x8e/0xa0 [ 310.929046][T10478] __kmalloc_node+0xb0/0x240 [ 310.933625][T10478] bpf_map_area_alloc+0x47/0xe0 [ 310.938461][T10478] prealloc_elems_and_freelist+0x86/0x1c0 [ 310.944169][T10478] stack_map_alloc+0x390/0x520 [ 310.948917][T10478] map_create+0x534/0x1000 [ 310.953320][T10478] __sys_bpf+0x38b/0x780 [ 310.957549][T10478] __x64_sys_bpf+0x78/0x90 [ 310.961964][T10478] do_syscall_64+0x4c/0xa0 [ 310.966377][T10478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.972265][T10478] [ 310.974580][T10478] Last potentially related work creation: [ 310.980295][T10478] kasan_save_stack+0x3a/0x60 [ 310.984974][T10478] __kasan_record_aux_stack+0xb2/0xc0 [ 310.990330][T10478] call_rcu+0x14f/0x990 [ 310.994576][T10478] nf_unregister_net_hooks+0xc7/0x130 [ 310.999955][T10478] nf_defrag_ipv4_disable+0x91/0xe0 [ 311.005165][T10478] nf_ct_netns_put+0x2d6/0x510 [ 311.009929][T10478] nf_conncount_destroy+0x3d/0x150 [ 311.015035][T10478] ovs_ct_exit+0x98/0x200 [ 311.019358][T10478] ovs_exit_net+0xe9/0x7a0 [ 311.023759][T10478] cleanup_net+0x706/0xba0 [ 311.028172][T10478] process_one_work+0x8a2/0x1160 [ 311.033095][T10478] worker_thread+0xaa2/0x1270 [ 311.037757][T10478] kthread+0x29d/0x330 [ 311.041826][T10478] ret_from_fork+0x1f/0x30 [ 311.046233][T10478] [ 311.048542][T10478] Second to last potentially related work creation: [ 311.055109][T10478] kasan_save_stack+0x3a/0x60 [ 311.059785][T10478] __kasan_record_aux_stack+0xb2/0xc0 [ 311.065146][T10478] call_rcu+0x14f/0x990 [ 311.069293][T10478] __nf_register_net_hook+0x788/0x910 [ 311.074652][T10478] nf_register_net_hook+0xae/0x190 [ 311.079750][T10478] nf_register_net_hooks+0x40/0x1a0 [ 311.084934][T10478] nf_ct_netns_do_get+0x3bc/0x5b0 [ 311.089945][T10478] nf_ct_netns_inet_get+0x1f/0x150 [ 311.095053][T10478] nf_conncount_init+0x123/0x380 [ 311.099983][T10478] ovs_ct_init+0x312/0x480 [ 311.104387][T10478] ovs_init_net+0x1e2/0x240 [ 311.108872][T10478] ops_init+0x355/0x5f0 [ 311.113024][T10478] setup_net+0x4f2/0xbd0 [ 311.117255][T10478] copy_net_ns+0x348/0x5b0 [ 311.121655][T10478] create_new_namespaces+0x3d3/0x6f0 [ 311.126925][T10478] unshare_nsproxy_namespaces+0x116/0x160 [ 311.133067][T10478] ksys_unshare+0x4ca/0x8b0 [ 311.137554][T10478] __x64_sys_unshare+0x34/0x40 [ 311.142309][T10478] do_syscall_64+0x4c/0xa0 [ 311.146714][T10478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.152607][T10478] [ 311.154914][T10478] The buggy address belongs to the object at ffff88801ea5fe00 [ 311.154914][T10478] which belongs to the cache kmalloc-cg-64 of size 64 [ 311.169063][T10478] The buggy address is located 16 bytes inside of [ 311.169063][T10478] 64-byte region [ffff88801ea5fe00, ffff88801ea5fe40) [ 311.182146][T10478] [ 311.184455][T10478] The buggy address belongs to the physical page: [ 311.191144][T10478] page:ffffea00007a97c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ea5f [ 311.201371][T10478] memcg:ffff888020da3c01 [ 311.205592][T10478] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 311.213139][T10478] raw: 00fff00000000200 ffffea0001f2b5c0 dead000000000005 ffff888017442780 [ 311.221705][T10478] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888020da3c01 [ 311.230264][T10478] page dumped because: kasan: bad access detected [ 311.236666][T10478] page_owner tracks the page as allocated [ 311.242365][T10478] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x16cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY), pid 3645, tgid 3645 (udevd), ts 18137574013, free_ts 18123819826 [ 311.261798][T10478] post_alloc_hook+0x173/0x1a0 [ 311.266555][T10478] get_page_from_freelist+0x1a1e/0x1ab0 [ 311.272091][T10478] __alloc_pages+0x1ec/0x4f0 [ 311.276667][T10478] alloc_slab_page+0x5d/0x160 [ 311.281332][T10478] new_slab+0x87/0x2c0 [ 311.285394][T10478] ___slab_alloc+0xbc6/0x1240 [ 311.290062][T10478] __kmem_cache_alloc_node+0x1a0/0x260 [ 311.295506][T10478] __kmalloc+0xa0/0x240 [ 311.299649][T10478] inotify_handle_inode_event+0x17c/0x4e0 [ 311.305371][T10478] fsnotify+0x168c/0x1d00 [ 311.309683][T10478] __fsnotify_parent+0x683/0x820 [ 311.314603][T10478] notify_change+0xcbb/0xf40 [ 311.319183][T10478] chmod_common+0x24e/0x3f0 [ 311.323669][T10478] do_fchmodat+0xd4/0x1a0 [ 311.327982][T10478] __x64_sys_chmod+0x5c/0x70 [ 311.332557][T10478] do_syscall_64+0x4c/0xa0 [ 311.336960][T10478] page last free stack trace: [ 311.341609][T10478] free_unref_page_prepare+0x8b4/0x9a0 [ 311.347057][T10478] free_unref_page+0x2e/0x3f0 [ 311.351721][T10478] qlist_free_all+0x76/0xe0 [ 311.356207][T10478] kasan_quarantine_reduce+0x144/0x160 [ 311.361650][T10478] __kasan_slab_alloc+0x1e/0x80 [ 311.366496][T10478] slab_post_alloc_hook+0x4b/0x480 [ 311.371861][T10478] kmem_cache_alloc_lru+0x11a/0x2e0 [ 311.377047][T10478] shmem_alloc_inode+0x24/0x40 [ 311.381885][T10478] new_inode_pseudo+0x5f/0x1c0 [ 311.386636][T10478] new_inode+0x25/0x1c0 [ 311.390776][T10478] shmem_get_inode+0x347/0xbf0 [ 311.395527][T10478] shmem_mknod+0x55/0x1c0 [ 311.399844][T10478] path_openat+0x1181/0x2ee0 [ 311.404441][T10478] do_filp_open+0x1f1/0x430 [ 311.408931][T10478] do_sys_openat2+0x150/0x4b0 [ 311.413602][T10478] __x64_sys_openat+0x135/0x160 [ 311.418438][T10478] [ 311.420745][T10478] Memory state around the buggy address: [ 311.426358][T10478] ffff88801ea5fd00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 311.434405][T10478] ffff88801ea5fd80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 311.442443][T10478] >ffff88801ea5fe00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 311.450483][T10478] ^ [ 311.456007][T10478] ffff88801ea5fe80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 311.464053][T10478] ffff88801ea5ff00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 311.472105][T10478] ================================================================== [ 311.481278][T10478] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 311.488483][T10478] CPU: 1 PID: 10478 Comm: syz.1.1688 Not tainted syzkaller #0 [ 311.495927][T10478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.505989][T10478] Call Trace: [ 311.509262][T10478] [ 311.512177][T10478] dump_stack_lvl+0x188/0x24e [ 311.516848][T10478] ? memcpy+0x3c/0x60 [ 311.520813][T10478] ? show_regs_print_info+0x12/0x12 [ 311.526004][T10478] ? load_image+0x400/0x400 [ 311.530500][T10478] panic+0x2e5/0x730 [ 311.534389][T10478] ? bpf_jit_dump+0xd0/0xd0 [ 311.538877][T10478] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 311.544764][T10478] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 311.550640][T10478] ? _raw_spin_unlock+0x40/0x40 [ 311.555480][T10478] ? print_memory_metadata+0x314/0x400 [ 311.560924][T10478] check_panic_on_warn+0x80/0xa0 [ 311.565853][T10478] ? __bpf_get_stackid+0x6c9/0x920 [ 311.570948][T10478] end_report+0x66/0x110 [ 311.575182][T10478] kasan_report+0x118/0x140 [ 311.579674][T10478] ? __bpf_get_stackid+0x6c9/0x920 [ 311.584778][T10478] kasan_check_range+0x235/0x290 [ 311.589707][T10478] ? __bpf_get_stackid+0x6c9/0x920 [ 311.594814][T10478] memcpy+0x3c/0x60 [ 311.598613][T10478] __bpf_get_stackid+0x6c9/0x920 [ 311.603535][T10478] bpf_get_stackid_pe+0x33f/0x400 [ 311.608548][T10478] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 311.613998][T10478] bpf_overflow_handler+0x522/0x7c0 [ 311.619199][T10478] ? bpf_overflow_handler+0xd9/0x7c0 [ 311.624469][T10478] ? perf_event_switch_output+0x760/0x760 [ 311.630189][T10478] ? arch_stack_walk+0xf2/0x140 [ 311.635035][T10478] ? __perf_event_account_interrupt+0x187/0x280 [ 311.641268][T10478] __perf_event_overflow+0x448/0x610 [ 311.646544][T10478] ___perf_sw_event+0x49e/0x6e0 [ 311.651384][T10478] ? ___perf_sw_event+0x180/0x6e0 [ 311.656396][T10478] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 311.662797][T10478] ? __lock_acquire+0x13cf/0x7d10 [ 311.667990][T10478] ? ct_nmi_exit+0x145/0x1c0 [ 311.672564][T10478] ? ct_irq_exit_irqson+0x113/0x170 [ 311.677761][T10478] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 311.683732][T10478] ? lock_chain_count+0x20/0x20 [ 311.688580][T10478] __perf_sw_event+0x135/0x260 [ 311.693334][T10478] do_user_addr_fault+0xaea/0xb10 [ 311.698348][T10478] ? trace_hardirqs_off_finish+0x86/0x180 [ 311.704061][T10478] exc_page_fault+0x60/0x100 [ 311.708720][T10478] asm_exc_page_fault+0x22/0x30 [ 311.713558][T10478] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 311.720133][T10478] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 311.739722][T10478] RSP: 0018:ffffc9000d677b88 EFLAGS: 00050206 [ 311.745775][T10478] RAX: ffffffff84110b01 RBX: 0000000000000340 RCX: 0000000000000200 [ 311.753739][T10478] RDX: 0000000000000340 RSI: 0000200000002000 RDI: ffff888077a3c140 [ 311.761702][T10478] RBP: 0000000000000000 R08: ffff888077a3c33f R09: 1ffff1100ef47867 [ 311.769662][T10478] R10: dffffc0000000000 R11: ffffed100ef47868 R12: 00007fffffffecc0 [ 311.777618][T10478] R13: 1ffff92001acef8c R14: ffff888077a3c000 R15: 0000200000001ec0 [ 311.785577][T10478] ? _copy_from_user+0x21/0x170 [ 311.790423][T10478] _copy_from_user+0xf4/0x170 [ 311.795103][T10478] bpf_prog_test_run_xdp+0xbf3/0xf10 [ 311.800408][T10478] ? dev_put+0x80/0x80 [ 311.804478][T10478] ? dev_put+0x80/0x80 [ 311.808544][T10478] bpf_prog_test_run+0x31e/0x390 [ 311.813480][T10478] __sys_bpf+0x62b/0x780 [ 311.817715][T10478] ? bpf_link_show_fdinfo+0x380/0x380 [ 311.823083][T10478] ? lock_chain_count+0x20/0x20 [ 311.827926][T10478] __x64_sys_bpf+0x78/0x90 [ 311.832332][T10478] do_syscall_64+0x4c/0xa0 [ 311.836747][T10478] ? clear_bhb_loop+0x60/0xb0 [ 311.841410][T10478] ? clear_bhb_loop+0x60/0xb0 [ 311.846073][T10478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.852062][T10478] RIP: 0033:0x7f6cd939c799 [ 311.856463][T10478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.876053][T10478] RSP: 002b:00007f6cda1c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.884454][T10478] RAX: ffffffffffffffda RBX: 00007f6cd9615fa0 RCX: 00007f6cd939c799 [ 311.892412][T10478] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 311.900366][T10478] RBP: 00007f6cd9432c99 R08: 0000000000000000 R09: 0000000000000000 [ 311.908320][T10478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.916274][T10478] R13: 00007f6cd9616038 R14: 00007f6cd9615fa0 R15: 00007ffc3e2ca538 [ 311.924240][T10478] [ 311.927579][T10478] Kernel Offset: disabled [ 311.931885][T10478] Rebooting in 86400 seconds..