last executing test programs: 2.903822976s ago: executing program 2 (id=6088): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0x1, &(0x7f0000000000)="8b476eed9f840f1a15067f22156c", &(0x7f0000000040)=""/3}, 0x20) 2.63688792s ago: executing program 2 (id=6090): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={0x1, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000040000000a00000004000000c10010e4138f78cca78ffa2283c601dc0b20762d77e67ea0c2874fbbeef555171dd2546fa1faa9267e405debf995068b54d768e702b7d348ae230056c782a5d4d9700d14b6be3b27b8d6c16b4b7beaee0adddc06efc2c289177b243c9d60d457b3ed0359c4cd3636d0e7dbfc860d86e8bc44c6a470d597f917d298391c0ccff0acbb120263cab6b15b8425c5e27b38546ed95a7bcf92c24d4e0286c4cc0885bb58de130048eda005849bf8808528136517e469167cb407c2b0a4f49905f6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x93, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x4008, r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000500)=ANY=[@ANYRES8=r6, @ANYBLOB='\"\x00\n'], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x7, 0x1b, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x0, 0x1, 0xb, 0x9, 0x100, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit, @alu={0x7, 0x1, 0x2, 0x0, 0x7, 0x2, 0x1}, @generic={0x8, 0x4, 0x9, 0xf, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x1, 0xf5, &(0x7f0000000900)=""/245, 0x41000, 0x10, '\x00', r2, @fallback=0x27, r3, 0x8, &(0x7f0000000ac0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x1, 0x8, 0x10}, 0x10, r4, 0xffffffffffffffff, 0x4, &(0x7f0000000ec0)=[r5, r8, 0x1], &(0x7f0000000f00)=[{0x1, 0x4, 0xb, 0x8}, {0x0, 0x2, 0xe, 0xa}, {0x3, 0x4, 0x6, 0x8}, {0x1, 0x1, 0x0, 0x7}], 0x10, 0x40}, 0x94) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff892f00004000633277fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x5, 0xfffffff4, 0x3, 0x8, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r13 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r13, 0x1, 0x41, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)='%pK \x00'}, 0x20) 2.614691462s ago: executing program 0 (id=6091): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x3, 0x1, 0x0, 0x10004, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0xb9c0e44}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x5, 0x1, 0x0, 0x0, 0x0, 0xd99}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0}, 0xffffffffffffff88) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x3, 0x1, 0x0, 0x10004, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0xb9c0e44}, 0x0, 0x1, 0x0, 0x0, 0x1, 0x5, 0x1, 0x0, 0x0, 0x0, 0xd99}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0}, 0xffffffffffffff88) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) 2.504888631s ago: executing program 3 (id=6092): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000070000000000000000020000060400000000000000f300000000000000000000000000000000000009000000000000000000000016"], 0x0, 0x5a}, 0x20) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x9c) r2 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE(0x0, 0x0, 0x2e) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r5, 0x24, 0x0, 0x5, &(0x7f0000000440)=[0x0], 0x3ffffe70, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 2.473703504s ago: executing program 0 (id=6093): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0) r4 = getpid() write$cgroup_pid(r1, &(0x7f0000000140)=r4, 0x12) unlink(&(0x7f0000000180)='./file0\x00') r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x435, 0x0, 0x0, 0x0, 0x7a2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x51, &(0x7f00000002c0)=""/81, 0x41100, 0x12, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x274b7, r3, 0x2, &(0x7f0000000440)=[r3, 0xffffffffffffffff, r3, r3, r3], &(0x7f0000000480)=[{0x1, 0x2, 0x4, 0x1}, {0x4, 0x5, 0x10, 0x9}], 0x10, 0x1}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000580)={[{0x2b, 'hugetlb'}, {0x2d, 'io'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'cpuacct'}, {0x2d, 'blkio'}]}, 0x2a) write$cgroup_type(r3, &(0x7f00000005c0), 0x9) r8 = openat$cgroup_ro(r5, &(0x7f0000000600)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r8, 0x0, 0x3, &(0x7f0000000640)=',.\x00'}, 0x30) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x13, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x6, 0x5, 0x0, 0xfffffffffffffff8}, @generic={0x3, 0x5, 0x7, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1f1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0xcc9b, 0x1e, &(0x7f00000007c0)=""/30, 0x40f00, 0x2, '\x00', r6, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xe, 0x2, 0x7}, 0x10, 0x21ad5, r3, 0x0, &(0x7f0000000880)=[0xffffffffffffffff, r3], 0x0, 0x10, 0xed}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@ifindex=r6, 0x16, 0x0, 0x80000000, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@fallback=r5, r9, 0xe, 0x0, r8, @void, @value=r8, @void, @void, r10}, 0x20) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000b00)=r3, 0x4) socketpair(0x2b, 0x80000, 0x7, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="c93a8f5d9e3187824c76c0b32900bd74917e49cc3391ac80dc14bb0bd6004e8091d6025670c3caa580924f560979d749135fbdb0d480e740cadd1d3f5a5f38f643e11b5f6b32f3830899e8e6d67948bb6176c1aff24e4745", 0x58}, {&(0x7f0000000c00)="b6405ee29a36ac6c06d9920e9de680ddaee72a464d0df592ca52d8d861e12c70b2b88a0a831d16af03083195f3723775b17ae4a8f8817d39f041e0db5604c18c70ce4173417ac6b930709b29f1004ca23a9f7748e63017249e429e65b6c889ef", 0x60}], 0x2, &(0x7f0000000cc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000d40)={r12, r7}) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='./file0\x00', 0x0, 0x8, r1}, 0x18) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000e00)=r13) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000e40)={'syz_tun\x00', 0x10}) 2.298267029s ago: executing program 0 (id=6094): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x3, 0x2, 0x2}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x401, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1fb, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x7, 0x0, 0x0) r3 = socket$kcm(0x10, 0x6, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xffffffff, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r5, 0x4) close(r4) 1.918007913s ago: executing program 0 (id=6096): r0 = socket$kcm(0x2, 0x3, 0x84) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x9, 0x29002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x408002, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x48, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="e7efc905f5796bd1eeb5b62d35c3b00af80224c8bd494caafb14f19054d0"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async, rerun: 64) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000dc1dab30c86adc96965e40ccbeee546eae6baf8cfefb245765a83d36fa363c578a2fc33eb46bd88577e973970c3ab7154cb6c783e7349e89e711f4aa5a41fd174d5b589e6b7fcdb4d06de3dfff6e93b6699319479aa0b88656d62e1e45c4b159d14b2d1de8a8c17f7a843eebcbaa0e8595616a24d295cfd1801f1817e6343faab668353f9b599cc7610f42906f009b0472dec012685291573a19b91a2e02d28321f961b5d92dc6a5192a512ce28acd6f66d2d5c41f79b5690a5133df4e2797ac721c3064fa32e248038a85dfed9e88aeece7f81bad0dcd1157fcdc7c82caba4485c8d9006b29de51dca18b08c3a8d9af0682d2128800bfff"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700), 0x0, &(0x7f0000000580)}, 0x20000801) 1.902664774s ago: executing program 3 (id=6097): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0xffffffffffffffff, 0x30, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup=r2, 0xffffffffffffffff, 0x30, 0x30, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r1}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0xa, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @float={0x4, 0x0, 0x0, 0x10, 0x10}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x13, 0x0, 0x6f}, @union={0x10, 0x8, 0x0, 0x5, 0x0, 0x9, [{0x10, 0x1, 0x7ff}, {0x9, 0x1}, {0xd, 0x4, 0x5}, {0xb, 0x2, 0x40000}, {0x0, 0x2, 0x3}, {0xc, 0x4, 0x6}, {0xf, 0x2, 0x1000}, {0xf, 0x1}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x2e, 0x30, 0x61, 0x61, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000380)=""/180, 0xc2, 0xb4, 0x0, 0x0, 0x10000}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb, '\x00', r3, r4, 0x0, 0x2, 0x1}, 0x50) openat$cgroup_procs(r2, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x5, 0x76a2b7f6, 0x80000000, 0x1200, r5, 0x3, '\x00', 0x0, r4, 0x4, 0x3, 0x4, 0xc}, 0x50) r7 = openat$cgroup_freezer_state(r2, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000600)='THAWED\x00', 0x7) (async) r8 = gettid() r9 = perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x80, 0x7, 0xf5, 0xfe, 0x0, 0xd, 0x47482, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000640)}, 0x1000, 0x4, 0x8, 0x6, 0x4, 0x1, 0x8, 0x0, 0x10000, 0x0, 0xe}, r8, 0x9, 0xffffffffffffffff, 0x8) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700), 0x4) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x17, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x3ff, 0x1d, &(0x7f0000000840)=""/29, 0x40f00, 0x20, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xd, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000900)=[{0x0, 0x2, 0x1, 0x4}, {0x4, 0x3, 0x2, 0x7}, {0x3, 0x5, 0x7, 0x2}, {0x0, 0x3, 0x9, 0x4}, {0x2, 0x5, 0x2}, {0x1, 0x4, 0x1, 0x6}, {0x1, 0x1, 0x4, 0x8}, {0x5, 0x1, 0xf, 0x4}], 0x10, 0x6c4ecc55}, 0x94) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0], 0x0, 0xeb, &(0x7f0000000b80)=[{}, {}], 0x10, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@cgroup=r12, r10, 0x3, 0x3d, r11, @void, @void, @void, @value=r13, r1}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f80)={r10, 0x0, 0x7f, 0x35, &(0x7f0000000dc0)="296c29e62283a9959faebfe7072165ef016eb3d32676e17e96e3bd2569ba936048d4b482151dcb41a83cead5b2d5baba33cd821627ee32f2ddafa5f195a04d7c83227f1faeea12517bc38cb70639c0c6c2b4541f88aefa679bdcc3bf9817c38e7af2e321ae9ad8527d3cbde272949c3a49539d043a60702c3d0f8e1384afdb", &(0x7f0000000e40)=""/53, 0x5, 0x0, 0xc8, 0x1000, &(0x7f0000000e80)="92c4a767e3a79d4bd4eecf550c2234f287255a7c20dccac6ded24928896d0845fb6d966f6d20cdce9eff5e07672354c4ef38d80ab052d80d6ef4b7b8d7a50adc0407a1a8e9d8fd87a373d1ae38426c86843f1028d58f688c761ba52b0bcc4f097c99444cf7a1f350f508b5b09e147ddb139c270a864bb17888d0095ad7b04d95a42f501d79356947f42a73e22a595d1f63a39b539169b564f56ea2f964c8972d8ab21c678726c10d2065dda4b011fc58a48dbbfb6aa3e0d6e2552e7d3c7e2f5436d2150dbf8119ea", &(0x7f0000000f80)="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", 0x3, 0x0, 0x6}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002100)={@map=r6, 0xb, 0x1, 0x6, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000002040)=[0x0], &(0x7f0000002080)=[0x0, 0x0, 0x0], &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r9) (async) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002140)={0x1b, 0x0, 0x0, 0xe77, 0x0, r6, 0x1, '\x00', r14, r4, 0x1, 0x4, 0x5}, 0x50) r18 = openat$cgroup_ro(r11, &(0x7f00000021c0)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r18, 0x400454e2, &(0x7f0000002200)) (async) openat$cgroup_pressure(r12, &(0x7f0000002240)='cpu.pressure\x00', 0x2, 0x0) openat$cgroup_type(r12, &(0x7f0000002280), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002640)=@bpf_lsm={0x1d, 0x2b, &(0x7f00000022c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r18}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xb, 0x0, 0x9, 0x2, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r16, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5040ff2ec863fdc5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002440)='syzkaller\x00', 0xaeba, 0x1e, &(0x7f0000002480)=""/30, 0x41000, 0x10, '\x00', r3, 0x1b, r12, 0x8, &(0x7f00000024c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000002500)={0x0, 0x0, 0x4, 0x5}, 0x10, r15, 0x0, 0x9, &(0x7f0000002540)=[r0], &(0x7f0000002580)=[{0x3, 0x2, 0xa, 0xc}, {0x0, 0x5, 0x4, 0x6}, {0x5, 0x5, 0xd, 0x9}, {0x3, 0x3, 0x6, 0x1}, {0x0, 0x3, 0x10}, {0x3, 0x3, 0xb, 0xa}, {0x2, 0x3, 0x5}, {0x4, 0x3, 0x6}, {0x3, 0x4, 0x10}], 0x10, 0x4}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)) sendmsg$inet(r18, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002740)="3fb81633fd9f84dbff27cdeab5cbdafc842e085d5367aadc8f9f19d854883adebd172971fb6fdb2fb3c4a4fe523186c2bcc294d5bbc2b61093012aea55ed1f70bb7f5145ea72baedd858f6db760573d074b07d211d4a4347857cbd63e650e0ff5361d8c5ab824b57ac1d0d3bd77d307db529653e2fde4c8e38f265aab2312f8b24bed9dc52d311d134a803b1aca300aadeb0c2e6ec32378fbcd6e85a16bde4e920db6e1a215652822ed6853fbe992fc462ad68297998a33cef17fb70acbefe815e8879d4eac7af8483d770ef6361d84072eb1cfcad1780", 0xd7}, {&(0x7f0000002840)="2a33ca6190d3d21b89eb8d36c4c651b6b7dac0ad82ae10b48692ccc341dc890f820f4c33a9d6b934e2064d7a816f55fd2bc95ee86ab39e372f6a3832ac4f906bdf295b74a875c33d764a6347c2991b206ff5277883aef3040208f0fa45ec5356122ab7c484e1021031216b0656b5b1bb1f0e04e8cb00eb685d117041613f7fcfbdde3d56da13b97e5a925918bcda147e0a50", 0x92}, {&(0x7f0000002900)="2d22bb01b1416fad9f155d5546dd271427ce1043faf83206a674e57ab84a489ed3570000d28ff66f0424a3d7e90dd48b8be8547b", 0x34}, {&(0x7f0000002940)="7799f3cb8f8feb8cad5a5b0ce859b928dedadb9a6bbbb216bb0d3ca2e4e96787efebf0994bef46174b2c708e1b84af8bddb536128dc1bcba5f64cf30dd8c57dfab27d8a9f6f6a366f7f34a81f889ac3f364dcb99571379e593d6ff27cfa4602db56c46dc3a31d7ec5a9a5d5ee3e2612a5401f2cf6e62d2d69709035f6f97eb293f67538aaf122b32eb4b6b61d7c7070fe42faa7d65fa2df5d2e2857cb22457f514bf8384e187a0861e5b407277821a9bc4f4da2fcc73d34fc00ab9019c5ab0f41c61674cba73a917535f42c1dcaefa03f54b792d565ed9a387f2454b2dfd211c9e6064b95ba777", 0xe7}, {&(0x7f0000002a40)="e962e5ffbcaf4399a89fd0d0a66ab95952a945ea4449e4475c1a7e4eef81a4ff3c667598ab702efc15b12f76dfcb8c00bc33d294db04808af7e9d54338e2937137a1e114c7b31528dd5544fd2076a26fea4a6b6e58c15c125d3ac33a64bd643d159216c9be8f6e68fdc0040cb3874f18cfb99c1adfffc2652451d915aca9a9f5836751483d036aa483414de6efd66db922d633ceaa10afd7d862bfd1c3ab170af4205b1daf6b51c2f97ebe7973bb06be66f54c64fdcbd636e6625825a7afa4e3970c0e7fe799d29dce05942dba495cd790", 0xd1}, {&(0x7f0000002b40)="fc9c0b1af105f92a5c3e035f42e86cd48c5d44adcc467515e7518d179cb80c3ff5bd9d106ce9227dd75c527af648541df76608f1b776e4126bfb45ebe11a8450051365f455c7add4b9716aa4c2b0bab52ba68964171af9bca4c9955d7d96f9cfb1674a427b2001981e14f9aebcbde5130389a495e84d2fb26a4d0961817a9bda46cd5a8a0e580d8e46be49fa70ea1dfa65c7c580b53424d10eef484d9190f343b1362862338d50ef9861e1aa24b8125543bed99eff900c8b2b68b6e6976851b8d02cef5a3e", 0xc5}], 0x6, &(0x7f0000002cc0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}, 0x818) (async) sendmsg$kcm(r12, &(0x7f0000003140)={&(0x7f0000002d40)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002dc0)="ef519dfde95f67cc01f44706bfb28057feccc497377b58a147d39cf978737f134edaed488ed1e34f73a93fd7f6a96cac130b258c7698fd84998956855e599c9fecca073f24213a81247a7b23a65e0a6baa4707f0b0d18da2d4f828d71e5945f3d3a7b3c46fd17eda3ca5073efae9ba062fa2ea084f43f4a616541ff2c4667a588a89670229df28b3f8ff189ca3b6d56144490e219b34831352b2ef84b307299eb4df333d13630330ba25619edef74cee5ac448d187d5d3456ebfd9ed87787c186ce555ccaf82cc5109a1aaec29b3adb3a4b69a2420ada18839f0", 0xda}, {&(0x7f0000002ec0)="519c6b426bc38fea70fc28e92f837f09dc7a5ef7669a3df2a953227bb430090b5cafee721641895bc7ef264287ce06916942afeb9e287660a9312b7719fe3c261bcf2fc3508ebe15f6f5cb5c4d9103eec4d87dde2410d3abe6f78bff178cd6e404295445e6a9f3920ac6b8cdf661e6a8d71e993cf8e4f8451e", 0x79}, {&(0x7f0000002f40)="27d9be0b123397c8eef5d43626e775f3620fc4902a993ab070b71fae924f56368e1ffe864f06b26d3893a17f335660a15b40000d48b7806bef7ebccad7b3e12562a4da4c5d6b0107cdad253b94f128dce8106d1badd6db05ff22ae5d14fb2145b4d31d5bc40a5077fe5a311eb6883e9278205b682352c2e6c66f6324bd111210539b1bd746ad127b69375059447eb078813ef1b56c954da16bcef71c3b609589cadaa7371c31bd1cd10499cdff357e8a319bc7715d157f1b617180578c5bee61", 0xc0}], 0x3, &(0x7f0000003040)=[{0xd0, 0x10, 0x8000, "7cb1f7c6e01021b802c685bb973d9573d6f14bff23fcc877dfcdb1b0975badb10deadaf6ce58aceb4d8b072d99708c6a32638c862c508ec82e48905b88380f3ee8159eb946f191e2c2ff766516a7f3fb1abe92c50a3a7db8efe9f8e19e5aaae7a34a722fa3dd0558d85ba1864a3857c816490ebd5ef7c936c52005bf2ec761a0a982b9c39180dcef37c74cf2ce0716ca3af26107a974125c9e92b16be5c1e27bdd4c4dc999434d71091228ef3ed1aca7f15b898bd385dc58d0626706f2"}], 0xd0}, 0xcddadf611ca503) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004b00)={&(0x7f0000003180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003200)="d2d5a4bf7e0d5fadaeac798baa3e11384ee5656caab24004ba8ba8adddccb5e34c34b98a644333b7f68fc7f4ec84e5ec32d45aebeceeb9679bb841019e5d9cab135056788ad86266894454b440bc2d82f24a9c", 0x53}, {&(0x7f0000003280)="257cda944a4d118c1d0d2671642ce81de1d98c4c4a1bd048410068865715003585e64bdf8a757844239b2e6b74c1299c18ff355f925c6cee90053ee3f385de3e2a2830ca4f59609c511a3ad87124d03325c5e74a791d0dc93773", 0x5a}, {&(0x7f0000003300)="ddcb72fdfad3b2782d7962e7cccb0a9370f62f966cb6023c9c3dadafbf09afc667760435b972d5229fcfba11484f8406f65541b0cf8d09c57caad4828adc96c041f8dfd71c5fbf884593b15c48d5d552dd1436eeb82b2708d477041b5a8b222fe93d2e85e1eba062e620f7e07c074501a0cc3f3b0bde61c3c4de9be886e7e602b8bfe3cd6552be", 0x87}, {&(0x7f00000033c0)="6c9f475db32ce746da", 0x9}, {&(0x7f0000003400)="b1fd2e4d3b954e30262eda9e4626ea66c35226830c4782fceef8267a1b91311babf7b80a8d3e15d3078285e5eae367942489df8ea6398cff8c82208ce0023796e33a3827862ffe91fdc421ac7627202dced01ec69e521d8b6a33824d0d87bb83b8035f9848b1f0d480c9030693329c2bfdf16d192787ca39903d0595bb5cf6dc710c23151cad5afb6ee798c8cf8b37f2003b936453f6be7c67a6909e3c243a78a19c8340783dca0ce005e3e58d09fcc15c10db47e4c6e392860bd39e9772898744816bc170fdaa126e18a04f", 0xcc}], 0x5, &(0x7f0000003580)=[{0x1010, 0x10b, 0x6, "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"}, {0xe0, 0xb5d81fa612a67ce9, 0x3, "096d81e30826662c399cf8b632fca828dc6165f8c69bfdd419b9fa2d8f18bc333d75d9cc6bed148c97f290f9b6a283c0b652b2b5db47b8fc04ee97d888f62cdf1d791315647f54345638696c8b0a55b97a12698fc73e6c5c0239bdf345066a5a065f6a3ad4aa96eb002a5a9ddfbd63d74723e9329130061c87daaf58492d872d8c7a1e58f12b68bd550793c348c3585914a46b79e8bb012f2b9c3f5335e5580c1030309d33daa1e8cff607eb7a3373febe088d3f08ca9da6215f59900281a873afcdfd62adcad27f94"}, {0x98, 0x88, 0x1, "fe22a7e6466f91918d723683be0c81228552afb04c19ca30b3595663f2f976de14aef670518e0fd2d4a23ba1aadf7598a9aa5bf7aa2fe5d078e58d22695a96275d9b897cfa611ca08cd88c79045be5ab3b946be8c8dbe4a6b3691f7a47cdb02acf95bccd7adefa6ad76852acfbe7e7abe8aef0451c2da8f2fc2c5f047dc2d08bfa4af297"}, {0x98, 0x101, 0x2, "26e895e7fc88498f186b9a946bb3a29d3848d2386a82760001729eec06d9f0f717728d91b474347e6fa18d329b185cf47aa79011b60773a909343017921f1f9a16cfcd1bf3ac6dac0eb0d5a695056310d63e180ecb5b3e42719577c76331b64cb470bd521bf8437fb35c90edea8ae59f26cad97c0084564e4d588ed8e96dc7850b870f76"}, {0x60, 0x11, 0x800, "f8c6afcae8edce3633ff17b4a2acbcc3cf511ca34cbb08ffc9045ca487d707545ec4e29bf07d65bda3204cb42a8f5454f15087f56be30fee67a789639e66965ba86f523aa2dc2a17eb5a2b65"}, {0x108, 0x103, 0x7ff, "1a7e5d2ab169d3764e73b930ad68eb9f8cc0f4ffc9290dea44b49321b01fd0a26e787b6c198308a9e91faf30e4d0a1038a46fab3519ff0177604b3c04cf71a6991fa28406fc78f42a9cc4ed54ab0792216472a835e7b35d5088f0b0f66ea5dab1276bf3b6d4b993203a6960b874fafa66a02f5db11f00bc27a1112c3a4b65c689c0e75352a3b79d935e601ed59387f1e2e0ca5bd74171660bd7fbc04e5beda5de111a0513142826cf18570ca788f6a03f7238ba289c2a6137c95fa8a6cd1bdc43d1f7a4a27a06bc4510f59e741f2dc67585a06dd4dfa87d451c172ac6e6f127e8723c7d7e9edd54fd8f0722fdbb153a180"}, {0xd8, 0x118, 0x9, "01ebeef5f4489eb382c87e7f470523c9553d49372dc3ef2098cc5c48490ff71e15275798d16f04a581213284a412a24f1d9eab81ed43fa5107e61edfee5525b41b19adac85a93daf1a2e996ca1414599708ec7d514d369637bec6bae76ee927b3e1a67de211513738987dc3e066103d9fea66b601ff482e71b66b5d0bf1b998e9294d1dfc8120597618fb38d430b4d497d461ab75dda3afa7c0f1a32904cc378b5628db6eebfbb3e41d6d10c91074d90720c5868e4921228337050dc993bbea064"}, {0x100, 0x10e, 0x0, "d27c5295a4c6e5aa132e5ab5e6de7cdeec20340e6275df857290c3e947f0683399ad9f2a3d7331c4be60d715fbb145b173e1d7e866d26d426923f73c26cf54caaa6bde2df9aaeeb92529f45f52552e84414f9821c61611454800321f94a770d3b0a70df2930e938c153cf2bcb9d010768775f49997ba00ad99e894cc5eef6e7c79875da75f56f744c498e0d4a23c9fffc07bbca0129019acb8f092309415e4c0e2fceaa8c229a706066be209123db295c683baf4248a1e770ece9770ef019e6e5fb9dfcaca726335d4690e0db9e9007fcb0447bf0e967460834958037b6a439f5ddb5c9a99c266dbb0cc36ea"}], 0x1560}, 0x4005) 1.745089378s ago: executing program 3 (id=6098): syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x71, &(0x7f0000000000)=r2, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4, r3}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, r4}, 0x10) r5 = syz_clone(0x100100, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0xe4, 0x6, 0x27, 0x0, 0x9, 0x80, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000000c0), 0xc}, 0x101830, 0xb512, 0x3, 0x2, 0x8, 0x0, 0xfff, 0x0, 0xfffffff9, 0x0, 0x6b}, r5, 0x10, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/cgroup\x00') 1.72605963s ago: executing program 1 (id=6099): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0x8, 0x7, 0x5f, 0x5, 0x0, 0x4, 0x4a401, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xcf, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1, 0xfffffffffffffffc, 0xd7, 0x6, 0x0, 0x2000ffff, 0x8, 0x0, 0x3b, 0x0, 0x7}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000060000000000009500"/24], &(0x7f0000000340)='GPL\x00', 0x1, 0xc, &(0x7f0000000000)=""/12, 0x41000, 0x4e}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r7 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x1, 0x9, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x391, 0xffffffffffffffff, 0x4}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x4d, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) 1.671699604s ago: executing program 0 (id=6100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001700)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x9c, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000002000000000006accde43d1e39a5ecef9105fc06b5c82d990c1feb751d21d59822cf16fbde662331534313e2a61f4e56df5ce9e6a120af50d0d15f0ac20d5de7d6f1bbd768857bfdda6b52c38da2429951678e544a7f514696b26440d6afe305fd016e2ab5b0bbf01b7b9292659b2860806e1048a574d3808b30ae2964bf5fc1f43ee7d78ac6b4c276aa86ddaa"], 0x0, 0x1a}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00000003000000010100000180000003280000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0280000000216149bf000000450000000c00"/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffe8000000000, 0x200}, 0x200, 0x0, 0x0, 0x0, 0x1, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7101}) 1.61269348s ago: executing program 2 (id=6101): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x18, 0x2, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x5, 0xa, 0x0, 0x2, 0xfffffffffffffff0}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.438681295s ago: executing program 2 (id=6102): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x2828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xff7ffbfffffeffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x46695, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8010, 0x80, 0x53a1bd76, 0x3, 0x800009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r1}) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x658}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x6, &(0x7f0000000000), 0x84) r5 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xb80b) close(r5) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$kcm(0x28, 0x5, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x10, r0}, 0x18) 1.399402208s ago: executing program 1 (id=6103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0xa, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbbf7}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0x1], 0x0, 0x10, 0x3ff}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r1, 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f0000001a00), 0x0}, 0x20) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206150000040000a118000200ff05000000000e1208000f0100810401a80016eaa400080000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.264977369s ago: executing program 0 (id=6104): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000600f000000000000", @ANYRES32=0x1, @ANYBLOB="d80a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000500"/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000000)="2aeecd427cec089da1107afe2befb3b985332648a8d403e5de11612bb29083f2ecece1b3c23cd28c576b4ecb4d563ea0241c10d9463455f48ea6eb36f74a0a14b96031e64c644f0cdfe6c2a0eb1873def432d6a5699c6ec02b4d44a38ab5baa987e4d5485d52d426bf691a95989579edaba97ebd23", &(0x7f0000000080)=""/9, &(0x7f0000000280)="3e649dc9db40ce64aa6259174f8fc872694b4cba37f2e5824f33f8698feea80f40da11a6c5e447f68fc62b147172a62412841090820af4eb7b2ccda22e28b3f5d74fd52dbc6a62daa7aa12be013d03d22e4ae64b36cf1c7779d1243a756b7a7ada0938cf6b6a41191920d7949b90ac2cb6152f0fedf465e7843220640828b0949034a38be118c0b298460bd386ecad6d", &(0x7f0000000340)="c7604ed1ec171c6e4ca4ee0b5b14d7d01219bb956a400b9ef649bf164dbdac59de0f67de474f9e2b51dc59fd915839a98a0bd063ddd9418d2b00bc267bdd4ae41e135ea8", 0x4, r5}, 0x38) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x838) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc79, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000740)=@nl, 0x80, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/64, 0x40}, {&(0x7f0000000800)=""/144, 0x90}, {&(0x7f00000008c0)=""/220, 0xdc}, {&(0x7f00000009c0)=""/142, 0x8e}], 0x4, &(0x7f0000000ac0)=""/222, 0xde}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c1100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000008b1a0ba1fde0022ba06fbf090000000000000000000095008a040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000"], 0x48) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) 1.26460776s ago: executing program 2 (id=6105): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000b80)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRES64, @ANYRES32=r0, @ANYRES32=r0], 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0xad, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32=0x1, @ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085000000b000000072740200f6ffffffdd06300000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r2 = getpid() r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3efd7ab4c41335d9, @perf_config_ext, 0x4d, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x24}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1802000000000000950000004800000095000000000000000000000000000000802f107c6eefc99cd12c63f1059c0d423a0f9e0003628409c3e383eb6901e7d0cd1d7e429f36576bc8dfd816a157390735c8ff7fffffffffffff157a8220b67b6cc40eb50662a246c5f7ed904653b317bec368fdc8b26b706cb5d8085a791b71a9ac38af41bbd5fa9cebc525ce8c0bc88151e830f3f8b28d2ab50a169f3c44783a"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0x34, 0x1, 0x10001, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0]}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r5, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000009c0)={0x3, 0x80, 0x0, 0x7, 0xb, 0x2, 0x0, 0x8000, 0x10014, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0xffffffff, 0x7}, 0x8000, 0xd79a, 0x5, 0x1, 0x400, 0xd5b, 0x1, 0x0, 0xdb, 0x0, 0x1}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002a00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d516a807b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a40)={0x5}, 0x8) 1.26110274s ago: executing program 1 (id=6106): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}, {&(0x7f0000000240)="72d9e8ef55ad98beb6bb5c8d89f2a56c6a02bef037da42fccbfc1b97ef1427c23fd96e3115276ee9f34198d7d8d048c4de0bc3f4ed4e7af17a6ff02eafb34777738c7bf5b32d4ae8417018ea9daf1994a27e4d4b9522fda28cf55bba8dd055ae3382141973384e504297a9924cd0c39cc8", 0x71}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) close(r1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002940)=""/4055, 0xfd7}, {&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000140)=""/86, 0x56}], 0x3}, 0x0) (async) close(0xffffffffffffffff) 1.066458097s ago: executing program 1 (id=6107): socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="01000000040000000000000200000000000000", @ANYRES32=0x1, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1a91897d113df8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={&(0x7f00000000c0)="274580ee000f2514c6f7bd1bbe3cb5b389df8de114e01976ff834c4cf631d71cb4d52d079f7e60541d8895f1c999b5758d2fd5520a988be49eb392d372c9b4b53f6cbb6d0cc1a082b666da637bfb35472bfc51b0f4863e5ddda381e9082c9996ae8eb359ff52", &(0x7f0000000140)=""/114, &(0x7f00000001c0)="aeb94720c13faf940ded533632fcbb71665a5ec9ff5da06a52d8e6381227d139fdd56dcf57e1b59e9485591d549a232ac7d591ffdcaba9d3d896b74f103332bea924c930995c24342c2bcefdb42cb16df834a37e117763aed1a47b8a2b507260456b0255215488a71f971e2976d357f6bc17786b3e5f4054", &(0x7f0000000340)="39826f4dda5454a9e0598f7709a90be87933519d8d6a6ed341f90af5abd5b0c8a3a2557bb47c550383d76d37cc7f5ab8543071b5d7bbb5bc029f8bd89d2e0ad84e5e112174c36231decccc6a0da47f9c8dba51dc8e348b0f52829608ff91423dd5d24490ab349426874f74ccc910a4038899f7c0a448f736ca46a8815029846f805bf876699703bfb5b87915adc4cfbbc057c71d656c2e40a1a2a9fbe33f34c266e3a34e605dc434c6ba", 0x40, 0x1, 0x4}, 0x38) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89ef, &(0x7f0000000000)={r4}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000004200000000000000000000000bb2040000"], 0x0, 0x4a, 0x0, 0xfffffffd, 0x800, 0x10000}, 0x28) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) (async) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a005a86040000ff86b61001ee0505768a50f5231f8b106cdc2a1a832a0500000000000000e92c8922188216151814ba3b10c20400000000000000f178ab51c46e0cac097e5c47b2216a9dff8b624861aab3d4e751436d2753b7b86e7796cec258a8493a15782cfadf636cb3d67ff254d5f55fb52535029baefcb985941cebdab8a1c7ea233275c0d78bfdbe72d2b0f1a79824ef202c07b776f2bc967f9f9520545c33140f22514e3322d42ed0ffef998b18fa234e2aafbedd9c59991ae33f54190400000000000000959d113621c1c1f4c5ddab0dcc84bff8d02720e4bd611fe65c1edecdb6acd712013704fb0660", @ANYRES32=r2, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000ffffffff00"/28], 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e00130010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfe33) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) socket$kcm(0xa, 0x3, 0x106) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 796.344201ms ago: executing program 3 (id=6108): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d04000000000000000000000200000000040000000000001203000000000000006100157b0a09fb1d60a91f702a37ccf665d175755943e6eb5ca16146bc5fa62941f8fd388d0ce4201c65405c62840e1ae530b673ac6a653a9501f0bdc9a1a83dc64e0bec50059ff91b21842577e92809a10359b545f760bc0a36d5366fd949af207e17b191d013a6291f4a402a61ae0391875c8952a3a160bfd10359"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4}, 0x50) 676.695301ms ago: executing program 1 (id=6109): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x2006, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x9a, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x10, &(0x7f0000000040)=r3, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xf, 0x8, 0x7, 0x7, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x0, 0x2, 0x2, 0x9, 0x0, 0x50, 0xffffffffffffffff}], &(0x7f0000000180)='syzkaller\x00', 0x1e90, 0xff, &(0x7f0000000280)=""/255, 0x40f00, 0x12, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000000540)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r4], &(0x7f0000000840)=[{0x0, 0x2, 0x9, 0xa}, {0x0, 0x5, 0x3}], 0x10, 0x200}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0xb) ioctl$TUNSETLINK(r7, 0x400454cd, 0x6) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x2002) 597.652638ms ago: executing program 3 (id=6110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@alu={0x7, 0x1, 0x8, 0x2, 0x4, 0x1, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x4a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x4000) recvmsg$kcm(r2, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r3, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008110e00f80ecdb4cb9f207c804a018000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x4c0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x0) 43.363447ms ago: executing program 2 (id=6111): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000100)=""/219, 0x26, 0xdb, 0x1}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00d3ff71ef288563"], 0xffdd) syz_open_procfs$namespace(0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 42.396187ms ago: executing program 3 (id=6112): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f0000000100), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 1 (id=6113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x633ed79a1ee0bcd1, 0x0) close(r0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2006, 0x400000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) (async, rerun: 64) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) (async) r5 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC=r4, @ANYRES16], 0x48) (async) r7 = socket$kcm(0xa, 0x6, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0xfffffe08, {0xa, 0x4e21, 0x0, @mcast2}}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x2f, &(0x7f0000000100), 0x120) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='cpu&20\t&&') syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1752d315, 0x40000000000000a3, &(0x7f0000000400)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xea, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x11, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000200000000000000ffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000000950c00000000000018450000070000000000000000200000bf91000000000000b7020000010000008500000085000000b7000000000000009500"/98], &(0x7f0000000a80)='GPL\x00', 0x81, 0xf7, &(0x7f0000000f00)=""/247, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0xb, 0x6, 0xa9b7df4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000c40)=[r8, r6], &(0x7f0000000c80)=[{0x0, 0x3, 0x1, 0xc}, {0x4, 0x1, 0x9, 0x3}, {0x1, 0x4, 0xf, 0xb}, {0x1, 0x5, 0xa, 0x9}, {0x3, 0x5, 0x1, 0x7}, {0x5, 0x4, 0xc, 0x8}, {0x4, 0x5, 0x10}], 0x10, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x19, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1ff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x30, &(0x7f0000000600)=""/48, 0x41000, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r10, 0x1, 0x0, &(0x7f0000000dc0)=[{0x3, 0x5, 0xc, 0xa}], 0x10, 0x70f0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000680), &(0x7f0000000a40)=r3}, 0x20) (rerun: 32) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0xa, 0x0) (async, rerun: 64) openat$cgroup(r11, &(0x7f0000000ec0)='syz1\x00', 0x200002, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): no params data found [ 972.621102][T20876] netlink: 'syz.1.4947': attribute type 153 has an invalid length. [ 972.638817][T20876] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4947'. [ 973.139432][ T5779] Bluetooth: hci2: command tx timeout [ 975.218824][ T5779] Bluetooth: hci2: command tx timeout [ 975.505106][T20941] netlink: 'syz.2.4958': attribute type 3 has an invalid length. [ 975.526442][T20941] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4958'. [ 977.302416][ T5779] Bluetooth: hci2: command tx timeout [ 977.477201][T20841] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.484838][T20841] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.502316][T20841] bridge_slave_0: entered allmulticast mode [ 977.513737][T20841] bridge_slave_0: entered promiscuous mode [ 977.633012][T20841] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.644099][T20841] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.656068][T20841] bridge_slave_1: entered allmulticast mode [ 977.664008][T20841] bridge_slave_1: entered promiscuous mode [ 977.777527][T20949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4961'. [ 977.798520][T20841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.817567][T20841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.080588][T20841] team0: Port device team_slave_0 added [ 978.095139][T20841] team0: Port device team_slave_1 added [ 978.147613][T20964] netlink: 'syz.3.4963': attribute type 10 has an invalid length. [ 978.315230][T20964] batman_adv: batadv0: Adding interface: netdevsim0 [ 978.339845][T20964] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.383927][T20964] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 978.567988][T20841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.602144][T20841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.678966][T20841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.762329][T20841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.790245][T20841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.833145][T20841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.006926][T16914] bond0: (slave wlan1): Releasing backup interface [ 979.379636][ T5779] Bluetooth: hci2: command tx timeout [ 979.436141][T20841] hsr_slave_0: entered promiscuous mode [ 979.459525][T20841] hsr_slave_1: entered promiscuous mode [ 979.476726][T20841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.493090][T20841] Cannot create hsr debugfs directory [ 979.754761][T16914] vlan0: left allmulticast mode [ 979.763862][T16914] veth0_vlan: left allmulticast mode [ 979.772459][T16914] vlan0: left promiscuous mode [ 979.782347][T16914] À: port 1(vlan0) entered disabled state [ 979.808869][T16914] hsr_slave_0: left promiscuous mode [ 979.817282][T16914] hsr_slave_1: left promiscuous mode [ 979.852366][T16914] veth1_macvtap: left promiscuous mode [ 979.858205][T16914] veth0_macvtap: left promiscuous mode [ 979.875279][T16914] veth1_vlan: left promiscuous mode [ 979.880875][T16914] veth0_vlan: left promiscuous mode [ 979.973112][T21008] netlink: 'syz.1.4974': attribute type 29 has an invalid length. [ 980.182254][ T59] wlan1: Trigger new scan to find an IBSS to join [ 980.794336][T16914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.844903][T16914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.105743][T16914] bond0 (unregistering): Released all slaves [ 981.165817][T21002] netlink: 'syz.3.4971': attribute type 10 has an invalid length. [ 981.189920][T21002] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 981.260938][T21008] netlink: 'syz.1.4974': attribute type 29 has an invalid length. [ 982.940391][T20841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 982.971630][T20841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 983.013319][T20841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 983.023338][T21055] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4983'. [ 983.084137][T20841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 983.219893][T16914] wlan1: Trigger new scan to find an IBSS to join [ 983.648229][T21069] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4986'. [ 983.664982][T21069] bridge_slave_1: default FDB implementation only supports local addresses [ 983.797450][T20841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.886101][T20841] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.933337][T16914] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.940632][T16914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.003644][T16914] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.010909][T16914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.115881][T21086] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 984.133431][T21086] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 984.191616][T20841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 984.688006][T20841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.902036][T20841] veth0_vlan: entered promiscuous mode [ 984.963325][T20841] veth1_vlan: entered promiscuous mode [ 985.231072][T20841] veth0_macvtap: entered promiscuous mode [ 985.511466][T21123] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 985.532289][T21123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4995'. [ 985.602815][T20841] veth1_macvtap: entered promiscuous mode [ 985.719177][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.749724][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.780008][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.803000][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.828622][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 985.855554][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.881748][T20841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.951511][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.988659][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.011187][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.028615][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.038518][T20841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.078694][T20841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.108102][T20841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.142847][T20841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.155515][T20841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.193522][T16921] wlan1: Trigger new scan to find an IBSS to join [ 986.200394][T20841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.229326][T20841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.263110][T21149] netlink: 'syz.3.4999': attribute type 10 has an invalid length. [ 986.290535][T21149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4999'. [ 986.334965][T21149] team0: entered promiscuous mode [ 986.370041][T21149] team_slave_0: entered promiscuous mode [ 986.376223][T21149] team_slave_1: entered promiscuous mode [ 986.394379][T21149] team0: entered allmulticast mode [ 986.408904][T21149] team_slave_0: entered allmulticast mode [ 986.414783][T21149] team_slave_1: entered allmulticast mode [ 986.460640][T21149] bridge0: port 3(team0) entered blocking state [ 986.467444][T21149] bridge0: port 3(team0) entered disabled state [ 986.512032][T21149] bridge0: port 3(team0) entered blocking state [ 986.518898][T21149] bridge0: port 3(team0) entered forwarding state [ 986.953821][T21150] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.4998'. [ 987.262900][T16914] wlan1: Creating new IBSS network, BSSID 16:c1:04:e5:e2:bd [ 987.315369][T16914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.341703][T16914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.438475][T16915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.464325][T16915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.862852][T21183] netlink: 'syz.3.5005': attribute type 1 has an invalid length. [ 987.906098][T21183] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5005'. [ 987.916536][T21191] netlink: 'syz.0.5006': attribute type 10 has an invalid length. [ 988.021938][T21191] team0 (unregistering): Port device team_slave_0 removed [ 988.056524][T21191] team0 (unregistering): Port device team_slave_1 removed [ 988.784293][T21223] netlink: 'syz.2.5013': attribute type 21 has an invalid length. [ 989.237314][T21239] netlink: 'syz.0.5017': attribute type 1 has an invalid length. [ 989.264452][T21239] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5017'. [ 989.354651][T21239] netlink: 'syz.0.5017': attribute type 7 has an invalid length. [ 989.508332][T21246] netlink: 56847 bytes leftover after parsing attributes in process `syz.2.5019'. [ 990.521038][T21270] cgroup: fork rejected by pids controller in /syz2 [ 990.546041][T21251] netlink: 'syz.1.5020': attribute type 10 has an invalid length. [ 990.649441][T21251] hsr_slave_0: left promiscuous mode [ 990.784174][T21251] hsr_slave_1: left promiscuous mode [ 993.140616][T21428] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5034'. [ 993.190954][T21428] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 993.302719][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.314065][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.496476][T19828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 993.515874][T19828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 993.526101][T19828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 993.537363][T19828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 993.546991][T19828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 993.555772][T19828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 994.583815][T21440] chnl_net:caif_netlink_parms(): no params data found [ 994.872175][T21440] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.879861][T21440] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.887176][T21440] bridge_slave_0: entered allmulticast mode [ 994.923995][T21440] bridge_slave_0: entered promiscuous mode [ 994.971639][T21440] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.050783][T21440] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.058140][T21440] bridge_slave_1: entered allmulticast mode [ 995.099873][T21440] bridge_slave_1: entered promiscuous mode [ 995.123870][T21471] netlink: 'syz.3.5043': attribute type 9 has an invalid length. [ 995.202990][T21471] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5043'. [ 995.589386][T21469] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5043'. [ 995.618919][ T5779] Bluetooth: hci1: command tx timeout [ 995.761794][T21440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.821923][T21440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.955290][T21440] team0: Port device team_slave_0 added [ 995.987365][T21440] team0: Port device team_slave_1 added [ 996.125913][T21440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.158865][T21440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.267766][T21440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.309946][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5046'. [ 996.336800][T21440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.378693][T21440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.521864][T21440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.587874][T21486] netlink: 'syz.1.5047': attribute type 6 has an invalid length. [ 996.717453][T21486] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5047'. [ 997.092412][T21440] hsr_slave_0: entered promiscuous mode [ 997.136992][T21440] hsr_slave_1: entered promiscuous mode [ 997.261733][T21493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5049'. [ 997.281646][T21493] netlink: 'syz.3.5049': attribute type 15 has an invalid length. [ 997.298811][T21493] netlink: 'syz.3.5049': attribute type 5 has an invalid length. [ 997.306661][T21493] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5049'. [ 997.634330][T21440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.699142][ T5779] Bluetooth: hci1: command tx timeout [ 998.174215][T21440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.312167][T21440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.448311][T21440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.758514][T21440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 999.679358][T21440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 999.732995][T21440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 999.778826][ T5779] Bluetooth: hci1: command tx timeout [ 999.805340][T21440] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 999.902118][T21551] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.5065'. [ 1000.135390][T21440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.190910][T21558] netlink: 'syz.0.5068': attribute type 10 has an invalid length. [ 1000.202919][T21554] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1000.236451][T21558] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1000.261496][T21554] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1000.271884][T21559] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1000.292853][T21440] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.322083][T16919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.329372][T16919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.356713][T21554] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1000.392840][T21559] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5066'. [ 1000.454090][T16918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.461364][T16918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.673141][T21565] syzkaller0: entered promiscuous mode [ 1000.678846][T21565] syzkaller0: entered allmulticast mode [ 1000.696404][T21567] netlink: 'syz.1.5070': attribute type 19 has an invalid length. [ 1001.861359][ T5779] Bluetooth: hci1: command tx timeout [ 1003.345121][T21581] netlink: 142528 bytes leftover after parsing attributes in process `syz.0.5074'. [ 1003.370145][T21581] netlink: 'syz.0.5074': attribute type 1 has an invalid length. [ 1003.461134][T21581] IPv6: NLM_F_CREATE should be specified when creating new route [ 1003.529350][T21581] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5074'. [ 1003.900353][T21440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.978449][T21589] can: request_module (can-proto-0) failed. [ 1004.066143][T21440] veth0_vlan: entered promiscuous mode [ 1004.085441][T21440] veth1_vlan: entered promiscuous mode [ 1004.173373][T21440] veth0_macvtap: entered promiscuous mode [ 1004.198478][T21440] veth1_macvtap: entered promiscuous mode [ 1004.258367][T21598] netlink: 'syz.1.5080': attribute type 3 has an invalid length. [ 1004.270829][T21598] netlink: 'syz.1.5080': attribute type 1 has an invalid length. [ 1004.279255][T21598] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.5080'. [ 1004.293541][T21440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.318327][T21440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.346169][T21440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.360910][T21440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.370939][T21440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.381923][T21440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.391942][T21440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.402875][T21440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.414637][T21440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.445670][T21440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.465241][T21596] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5078'. [ 1004.475015][T21440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.485054][T21440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.495669][T21440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.505687][T21440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.516623][T21440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.526874][T21440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.542395][T21440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.559899][T21440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.572405][T21596] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5078'. [ 1004.604025][ T5779] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 1004.616176][T21601] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5078'. [ 1004.637432][T21440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.674459][T21440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.683372][T21440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.692736][T21440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.909825][T16921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.931102][T16921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.998151][T16918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.012988][T16918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.424713][T21624] netlink: 'syz.2.5086': attribute type 10 has an invalid length. [ 1005.449699][T21624] __nla_validate_parse: 1 callbacks suppressed [ 1005.449719][T21624] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5086'. [ 1005.512508][T21624] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1005.692259][T21624] syzkaller0: entered promiscuous mode [ 1005.698135][T21624] syzkaller0: entered allmulticast mode [ 1008.217504][T21677] netlink: 'syz.1.5100': attribute type 9 has an invalid length. [ 1008.237104][T21677] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5100'. [ 1009.662288][T21676] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5100'. [ 1010.350714][T21688] netlink: 'syz.3.5104': attribute type 2 has an invalid length. [ 1010.389109][T21688] netlink: 119 bytes leftover after parsing attributes in process `syz.3.5104'. [ 1010.553621][T21691] netlink: 'syz.0.5106': attribute type 27 has an invalid length. [ 1010.562666][T21691] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.5106'. [ 1010.587516][T21693] netlink: 'syz.1.5105': attribute type 1 has an invalid length. [ 1010.844843][T21700] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5109'. [ 1010.871824][T21707] netlink: 'syz.1.5109': attribute type 9 has an invalid length. [ 1010.884109][T21707] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5109'. [ 1011.343449][T21710] netlink: 'syz.3.5111': attribute type 10 has an invalid length. [ 1011.382658][T21710] bridge0: port 3(team0) entered disabled state [ 1011.448609][T21710] bridge0: port 3(team0) entered disabled state [ 1011.468207][T21710] team_slave_0: left promiscuous mode [ 1011.474028][T21710] team_slave_0: left allmulticast mode [ 1011.517085][T21710] team0 (unregistering): Port device team_slave_0 removed [ 1011.539151][T21710] team_slave_1: left promiscuous mode [ 1011.544780][T21710] team_slave_1: left allmulticast mode [ 1011.590695][T21720] syz.1.5113[21720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1011.590910][T21720] syz.1.5113[21720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1011.592949][T21710] team0 (unregistering): Port device team_slave_1 removed [ 1011.689615][T21711] netlink: 'syz.3.5111': attribute type 9 has an invalid length. [ 1011.708951][T21715] netlink: 'syz.0.5112': attribute type 33 has an invalid length. [ 1011.749464][T21715] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5112'. [ 1011.815367][T21716] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5112'. [ 1011.970215][T21735] netlink: 'syz.3.5116': attribute type 2 has an invalid length. [ 1012.105797][T21735] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5116'. [ 1012.386662][T21736] netlink: 'syz.2.5117': attribute type 10 has an invalid length. [ 1012.497704][T21736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.553939][T21736] team0: Port device bond0 added [ 1012.703881][T21748] netlink: 'syz.0.5119': attribute type 3 has an invalid length. [ 1012.739840][T21748] netlink: 'syz.0.5119': attribute type 1 has an invalid length. [ 1012.760086][T21748] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.5119'. [ 1012.896674][T21754] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5122'. [ 1013.015511][T21757] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5122'. [ 1013.389907][T21768] syzkaller0: entered promiscuous mode [ 1013.395471][T21768] syzkaller0: entered allmulticast mode [ 1013.424708][ T5779] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 1013.888002][T21796] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1016.025079][T21793] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5132'. [ 1016.051241][T21794] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5131'. [ 1016.325384][T21808] validate_nla: 2 callbacks suppressed [ 1016.325406][T21808] netlink: 'syz.1.5136': attribute type 29 has an invalid length. [ 1016.504997][T21808] netlink: 'syz.1.5136': attribute type 29 has an invalid length. [ 1016.550023][T21815] netlink: 'syz.1.5136': attribute type 29 has an invalid length. [ 1016.591595][T21806] netlink: 'syz.0.5135': attribute type 21 has an invalid length. [ 1017.373347][T16923] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1019.246789][T21825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5140'. [ 1019.837787][T21843] netlink: 'syz.2.5144': attribute type 9 has an invalid length. [ 1019.908944][T21843] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1019.956382][T21846] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1020.058028][T21848] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1020.071152][T21844] netlink: 'syz.1.5140': attribute type 4 has an invalid length. [ 1020.093673][T21844] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5140'. [ 1020.154922][T21844] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1020.634902][T21862] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5147'. [ 1021.035848][T21867] netlink: 'syz.3.5149': attribute type 10 has an invalid length. [ 1021.059743][T21867] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.5149'. [ 1021.105031][T21870] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1021.718038][T21888] netlink: 'syz.0.5153': attribute type 11 has an invalid length. [ 1021.726823][T21888] netlink: 212812 bytes leftover after parsing attributes in process `syz.0.5153'. [ 1021.756468][T21888] netlink: 'syz.0.5153': attribute type 11 has an invalid length. [ 1021.781611][T21888] netlink: 212812 bytes leftover after parsing attributes in process `syz.0.5153'. [ 1021.814956][T21888] netlink: 'syz.0.5153': attribute type 11 has an invalid length. [ 1021.839599][T21888] netlink: 212812 bytes leftover after parsing attributes in process `syz.0.5153'. [ 1021.877429][T21888] netlink: 'syz.0.5153': attribute type 11 has an invalid length. [ 1021.910310][T21888] netlink: 212812 bytes leftover after parsing attributes in process `syz.0.5153'. [ 1021.962409][T21888] netlink: 'syz.0.5153': attribute type 11 has an invalid length. [ 1021.979011][T21888] netlink: 212812 bytes leftover after parsing attributes in process `syz.0.5153'. [ 1021.991407][T21890] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5155'. [ 1022.020919][T21888] netlink: 'syz.0.5153': attribute type 11 has an invalid length. [ 1022.299143][T21888] netlink: 212812 bytes leftover after parsing attributes in process `syz.0.5153'. [ 1022.335579][T21893] netlink: 'syz.1.5155': attribute type 9 has an invalid length. [ 1022.387533][T21893] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5155'. [ 1022.442564][T21888] netlink: 'syz.0.5153': attribute type 11 has an invalid length. [ 1022.634917][T21902] netlink: 'syz.1.5158': attribute type 21 has an invalid length. [ 1023.370025][T21935] netlink: 'syz.3.5166': attribute type 9 has an invalid length. [ 1024.436960][T21949] netlink: 'syz.1.5170': attribute type 1 has an invalid length. [ 1025.251216][T21974] netlink: 'syz.1.5176': attribute type 9 has an invalid length. [ 1025.979354][T21991] can: request_module (can-proto-0) failed. [ 1025.995506][T21989] netlink: 'syz.1.5180': attribute type 10 has an invalid length. [ 1026.177489][T21989] veth0_vlan: left promiscuous mode [ 1026.230462][T21989] veth0_vlan: entered promiscuous mode [ 1026.296464][T21989] team0: Device veth0_vlan failed to register rx_handler [ 1026.538208][T22000] netlink: 'syz.2.5182': attribute type 41 has an invalid length. [ 1026.935885][ T5779] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 1027.042525][T22019] __nla_validate_parse: 8 callbacks suppressed [ 1027.042720][T22019] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5188'. [ 1027.166043][T22019] netlink: 'syz.2.5188': attribute type 9 has an invalid length. [ 1027.187041][T22019] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5188'. [ 1027.496615][T22033] IPv6: Can't replace route, no match found [ 1027.666322][T22038] netlink: 'syz.2.5194': attribute type 153 has an invalid length. [ 1027.677909][T22038] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5194'. [ 1028.259245][T22054] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1029.179256][T22054] netlink: 'syz.3.5198': attribute type 9 has an invalid length. [ 1029.187079][T22054] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1029.349484][T22050] netlink: 'syz.0.5196': attribute type 29 has an invalid length. [ 1029.359266][T22051] netlink: 'syz.0.5196': attribute type 29 has an invalid length. [ 1029.389727][T22051] netlink: 'syz.0.5196': attribute type 29 has an invalid length. [ 1029.410913][T22055] netlink: 'syz.0.5196': attribute type 29 has an invalid length. [ 1029.550240][T22061] netlink: 'syz.2.5200': attribute type 13 has an invalid length. [ 1029.576022][T22061] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5200'. [ 1029.597575][T22061] syz_tun: refused to change device tx_queue_len [ 1029.610195][T22061] netlink: 'syz.2.5200': attribute type 39 has an invalid length. [ 1029.805671][T22067] netlink: 'syz.2.5200': attribute type 2 has an invalid length. [ 1029.815281][T22067] netlink: 'syz.2.5200': attribute type 8 has an invalid length. [ 1029.840562][T22067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5200'. [ 1030.841787][T22095] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5209'. [ 1030.926930][T22095] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5209'. [ 1031.289072][T22105] C: renamed from team_slave_0 [ 1031.307266][T22105] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1031.324857][T22105] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1031.744639][T22128] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1031.765266][T22129] Q±6ã`Ò˜: renamed from lo (while UP) [ 1031.860413][T22126] ip6_vti0: mtu greater than device maximum [ 1032.672607][T22144] validate_nla: 2 callbacks suppressed [ 1032.672629][T22144] netlink: 'syz.1.5223': attribute type 2 has an invalid length. [ 1032.708689][T22144] netlink: 'syz.1.5223': attribute type 8 has an invalid length. [ 1032.732108][T22144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5223'. [ 1032.885031][T22153] netlink: 'syz.3.5225': attribute type 9 has an invalid length. [ 1032.904857][T22153] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5225'. [ 1033.047160][T22146] syzkaller0: entered promiscuous mode [ 1033.106260][T22146] syzkaller0: entered allmulticast mode [ 1033.129018][T22148] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5225'. [ 1036.618479][T22164] syzkaller0: entered promiscuous mode [ 1036.625493][T22164] syzkaller0: entered allmulticast mode [ 1039.037089][T22179] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5230'. [ 1039.899267][T22206] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5237'. [ 1040.217853][T22206] netlink: 'syz.2.5237': attribute type 9 has an invalid length. [ 1040.252640][T22206] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5237'. [ 1040.277119][T22217] netlink: 'syz.3.5240': attribute type 10 has an invalid length. [ 1041.046797][T22217] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1041.479809][T22227] sock: sock_timestamping_bind_phc: sock not bind to device [ 1041.546739][T22221] syzkaller0: entered promiscuous mode [ 1041.564138][T22221] syzkaller0: entered allmulticast mode [ 1041.701331][T22234] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5243'. [ 1045.083129][T22266] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5251'. [ 1045.205664][T22266] netlink: 'syz.3.5251': attribute type 9 has an invalid length. [ 1045.219270][T22266] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5251'. [ 1045.916873][T22283] syzkaller0: entered promiscuous mode [ 1045.922781][T22283] syzkaller0: entered allmulticast mode [ 1046.084265][T22294] netlink: 'syz.0.5259': attribute type 12 has an invalid length. [ 1046.096093][T22294] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5259'. [ 1048.333020][T22301] @0Ù: renamed from bond_slave_1 (while UP) [ 1048.364072][T22305] tap0: tun_chr_ioctl cmd 1074025677 [ 1048.375076][T22305] tap0: linktype set to 778 [ 1048.380659][T22306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5263'. [ 1048.520798][T22309] veth1_macvtap: left promiscuous mode [ 1048.551049][T22309] macsec0: entered allmulticast mode [ 1048.570084][T22312] netlink: 'syz.1.5266': attribute type 9 has an invalid length. [ 1048.589856][T22312] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5266'. [ 1048.935528][T22313] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5265'. [ 1049.039514][T22318] netlink: 'syz.3.5265': attribute type 9 has an invalid length. [ 1049.050582][T22324] netlink: 'syz.0.5268': attribute type 1 has an invalid length. [ 1049.058401][T22324] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5268'. [ 1049.070085][T22318] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5265'. [ 1049.263026][T22331] netlink: 'syz.2.5271': attribute type 12 has an invalid length. [ 1049.286806][T22331] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5271'. [ 1049.310960][T16921] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1052.270267][T22337] syzkaller0: entered promiscuous mode [ 1052.275863][T22337] syzkaller0: entered allmulticast mode [ 1052.354356][T22352] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5277'. [ 1052.621072][T22364] netlink: 'syz.2.5280': attribute type 9 has an invalid length. [ 1052.640665][T22364] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5280'. [ 1054.759246][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.765659][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.045418][T22362] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5280'. [ 1055.098075][T22369] netlink: 'syz.1.5282': attribute type 12 has an invalid length. [ 1055.106849][T22369] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5282'. [ 1055.345902][T22387] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5288'. [ 1055.446791][T22391] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.5285'. [ 1055.720318][T22396] netlink: 'syz.2.5290': attribute type 9 has an invalid length. [ 1055.728276][T22396] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.5290'. [ 1056.322397][T22407] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5293'. [ 1056.593951][T22407] netlink: 'syz.0.5293': attribute type 9 has an invalid length. [ 1056.628828][T22407] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5293'. [ 1056.912154][T22415] netlink: 'syz.1.5295': attribute type 12 has an invalid length. [ 1056.951594][T22415] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5295'. [ 1057.195397][T22417] syzkaller0: entered promiscuous mode [ 1057.248659][T22417] syzkaller0: entered allmulticast mode [ 1057.479297][T22433] syz.0.5299: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1057.559425][T22433] CPU: 0 PID: 22433 Comm: syz.0.5299 Not tainted syzkaller #0 [ 1057.566980][T22433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.577091][T22433] Call Trace: [ 1057.580418][T22433] [ 1057.583396][T22433] dump_stack_lvl+0x18c/0x250 [ 1057.588150][T22433] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1057.594391][T22433] ? show_regs_print_info+0x20/0x20 [ 1057.599674][T22433] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1057.605915][T22433] warn_alloc+0x246/0x340 [ 1057.610404][T22433] ? trace_call_bpf+0xc3/0x6c0 [ 1057.615237][T22433] ? stack_trace_save+0xaa/0x100 [ 1057.620251][T22433] ? zone_watermark_ok_safe+0x230/0x230 [ 1057.625881][T22433] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1057.631749][T22433] __vmalloc_node_range+0x126/0x1330 [ 1057.637107][T22433] ? mark_lock+0x94/0x320 [ 1057.641503][T22433] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1057.647545][T22433] ? lock_chain_count+0x20/0x20 [ 1057.652464][T22433] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1057.658681][T22433] ? lockdep_hardirqs_on+0x98/0x150 [ 1057.663941][T22433] ? free_vm_area+0x50/0x50 [ 1057.668518][T22433] vmalloc_user+0x74/0x80 [ 1057.672904][T22433] ? xskq_create+0xbf/0x170 [ 1057.677457][T22433] xskq_create+0xbf/0x170 [ 1057.681856][T22433] xsk_init_queue+0xad/0x100 [ 1057.686532][T22433] xsk_setsockopt+0x4e5/0x760 [ 1057.691285][T22433] ? xsk_poll+0x680/0x680 [ 1057.695679][T22433] ? lockdep_hardirqs_on+0x98/0x150 [ 1057.700944][T22433] ? __fget_files+0x28/0x4b0 [ 1057.705683][T22433] ? __fget_files+0x28/0x4b0 [ 1057.710336][T22433] ? aa_sock_opt_perm+0x74/0x100 [ 1057.715342][T22433] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1057.720952][T22433] ? security_socket_setsockopt+0x7e/0xa0 [ 1057.726734][T22433] ? xsk_poll+0x680/0x680 [ 1057.731121][T22433] do_sock_setsockopt+0x175/0x1a0 [ 1057.736208][T22433] ? __fdget+0x180/0x210 [ 1057.740510][T22433] __x64_sys_setsockopt+0x182/0x200 [ 1057.745777][T22433] do_syscall_64+0x55/0xa0 [ 1057.750247][T22433] ? clear_bhb_loop+0x40/0x90 [ 1057.754977][T22433] ? clear_bhb_loop+0x40/0x90 [ 1057.759703][T22433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.765646][T22433] RIP: 0033:0x7f75a779c629 [ 1057.770104][T22433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.789859][T22433] RSP: 002b:00007f75a8740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1057.798341][T22433] RAX: ffffffffffffffda RBX: 00007f75a7a15fa0 RCX: 00007f75a779c629 [ 1057.806360][T22433] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1057.814384][T22433] RBP: 00007f75a7832b39 R08: 0000000000000004 R09: 0000000000000000 [ 1057.822416][T22433] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1057.830438][T22433] R13: 00007f75a7a16038 R14: 00007f75a7a15fa0 R15: 00007fffd79e8f88 [ 1057.838482][T22433] [ 1057.882309][T22433] Mem-Info: [ 1057.888496][T22433] active_anon:5730 inactive_anon:0 isolated_anon:0 [ 1057.888496][T22433] active_file:17724 inactive_file:40311 isolated_file:0 [ 1057.888496][T22433] unevictable:768 dirty:70 writeback:0 [ 1057.888496][T22433] slab_reclaimable:10566 slab_unreclaimable:98246 [ 1057.888496][T22433] mapped:27091 shmem:1361 pagetables:521 [ 1057.888496][T22433] sec_pagetables:0 bounce:0 [ 1057.888496][T22433] kernel_misc_reclaimable:0 [ 1057.888496][T22433] free:1337496 free_pcp:8468 free_cma:0 [ 1057.994720][T22433] Node 0 active_anon:22936kB inactive_anon:0kB active_file:70896kB inactive_file:161040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108364kB dirty:316kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11712kB pagetables:2084kB sec_pagetables:0kB all_unreclaimable? no [ 1058.061486][T22433] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1058.115742][T22433] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1058.174916][T22433] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1058.183717][T22433] Node 0 DMA32 free:1436240kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22896kB inactive_anon:0kB active_file:70896kB inactive_file:160208kB unevictable:1536kB writepending:316kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:16716kB local_pcp:4636kB free_cma:0kB [ 1058.223924][T22433] lowmem_reserve[]: 0 0 0 0 0 [ 1058.229898][T22433] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1058.257687][T22433] lowmem_reserve[]: 0 0 0 0 0 [ 1058.263603][T22433] Node 1 Normal free:3898384kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17380kB local_pcp:9568kB free_cma:0kB [ 1058.294092][T22433] lowmem_reserve[]: 0 0 0 0 0 [ 1058.299816][T22433] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1058.324114][T22433] Node 0 DMA32: 224*4kB (UME) 1704*8kB (UME) 1017*16kB (UME) 397*32kB (ME) 188*64kB (ME) 237*128kB (UME) 90*256kB (UM) 48*512kB (UME) 26*1024kB (UM) 25*2048kB (UM) 299*4096kB (UM) = 1436016kB [ 1058.347710][T22433] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1058.379240][T22433] Node 1 Normal: 206*4kB (UME) 45*8kB (UME) 31*16kB (UME) 62*32kB (UME) 21*64kB (UME) 5*128kB (UE) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898384kB [ 1058.418710][T22433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.442100][T22433] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1058.454555][T22433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.476088][T22433] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1058.502066][T22433] 59396 total pagecache pages [ 1058.507935][T22433] 0 pages in swap cache [ 1058.512358][T22433] Free swap = 124996kB [ 1058.516567][T22433] Total swap = 124996kB [ 1058.520971][T22433] 2097051 pages RAM [ 1058.524960][T22433] 0 pages HighMem/MovableOnly [ 1058.529735][T22433] 416922 pages reserved [ 1058.534488][T22433] 0 pages cma reserved [ 1060.784592][T22443] netlink: 'syz.0.5301': attribute type 10 has an invalid length. [ 1060.800809][T22443] hsr_slave_0: left promiscuous mode [ 1060.807334][T22443] hsr_slave_1: left promiscuous mode [ 1060.950406][T16923] hsr_slave_0: left promiscuous mode [ 1060.984982][T16923] hsr_slave_1: left promiscuous mode [ 1061.028063][T16923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.052314][T16923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.074231][T16923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.100867][T16923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.183728][T16923] veth1_macvtap: left promiscuous mode [ 1061.199695][T16923] veth0_macvtap: left promiscuous mode [ 1061.208034][T16923] veth1_vlan: left promiscuous mode [ 1061.214124][T16923] veth0_vlan: left promiscuous mode [ 1061.268236][T22466] netlink: 'syz.0.5307': attribute type 9 has an invalid length. [ 1061.290833][T22466] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5307'. [ 1061.949633][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 1062.149948][T16923] team0 (unregistering): Port device team_slave_1 removed [ 1062.205505][T16923] team0 (unregistering): Port device team_slave_0 removed [ 1062.258088][T16923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.316159][T16923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.703424][T16923] bond0 (unregistering): Released all slaves [ 1062.753537][T22461] netlink: 'syz.3.5306': attribute type 12 has an invalid length. [ 1062.763893][T22461] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5306'. [ 1062.774568][T22462] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5307'. [ 1063.178331][T22481] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.5313'. [ 1063.290721][T22470] syzkaller0: entered promiscuous mode [ 1063.303873][T22470] syzkaller0: entered allmulticast mode [ 1063.498051][T22488] netlink: 'syz.1.5315': attribute type 41 has an invalid length. [ 1066.372902][T22492] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.5316'. [ 1066.481547][T22500] netlink: 'syz.1.5319': attribute type 12 has an invalid length. [ 1066.489788][T22500] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5319'. [ 1066.611500][T22502] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5318'. [ 1066.664160][T22502] netlink: 'syz.3.5318': attribute type 9 has an invalid length. [ 1066.679025][T22502] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5318'. [ 1067.155473][T22517] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5331'. [ 1067.236765][T22517] netlink: 'syz.0.5331': attribute type 9 has an invalid length. [ 1067.251292][T22517] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5331'. [ 1067.667413][T22520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5324'. [ 1068.486643][T22536] syzkaller0: entered promiscuous mode [ 1068.502901][T22536] syzkaller0: entered allmulticast mode [ 1068.674881][T22544] netlink: 'syz.3.5329': attribute type 12 has an invalid length. [ 1068.683086][T22544] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1069.169237][T22564] netlink: 'syz.2.5335': attribute type 9 has an invalid length. [ 1069.177089][T22564] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5335'. [ 1071.710164][T22562] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5335'. [ 1071.726823][T22578] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5341'. [ 1071.910472][T19828] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 1072.529224][T22605] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5350'. [ 1072.642224][T22605] netlink: 'syz.0.5350': attribute type 9 has an invalid length. [ 1072.668911][T22605] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5350'. [ 1072.701535][T22609] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5351'. [ 1072.846678][T22617] netlink: 763 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1073.055230][T22624] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5356'. [ 1073.086737][T22624] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1073.115473][T22625] netlink: 'syz.1.5356': attribute type 3 has an invalid length. [ 1073.124011][T22611] syzkaller0: entered promiscuous mode [ 1073.134496][T22611] syzkaller0: entered allmulticast mode [ 1073.144554][T22625] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5356'. [ 1073.464672][T22628] netlink: 'syz.0.5357': attribute type 4 has an invalid length. [ 1073.504710][T22628] netlink: 'syz.0.5357': attribute type 16 has an invalid length. [ 1073.544856][T22628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5357'. [ 1077.516901][T22644] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5361'. [ 1078.136247][T22667] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5370'. [ 1078.413308][T22678] netlink: 'syz.2.5371': attribute type 10 has an invalid length. [ 1078.433087][T22678] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5371'. [ 1078.802121][T22686] netlink: 'syz.3.5363': attribute type 9 has an invalid length. [ 1078.842567][T22686] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1079.258989][T22675] syzkaller0: entered promiscuous mode [ 1079.264594][T22675] syzkaller0: entered allmulticast mode [ 1079.272701][T22685] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5363'. [ 1081.570924][T22688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1081.776993][T22703] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1081.801944][T22703] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1081.922486][T22699] netlink: 'syz.3.5375': attribute type 4 has an invalid length. [ 1082.022905][T22713] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5380'. [ 1082.263913][T16918] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1082.421385][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 1082.665588][T22731] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5379'. [ 1083.553144][T22736] syzkaller0: entered promiscuous mode [ 1083.572115][T22736] syzkaller0: entered allmulticast mode [ 1087.183060][T22754] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5390'. [ 1087.414440][T22780] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5395'. [ 1088.152906][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1088.181413][T22801] syzkaller0: entered promiscuous mode [ 1088.208648][T22801] syzkaller0: entered allmulticast mode [ 1089.294788][T22833] netlink: 'syz.0.5409': attribute type 3 has an invalid length. [ 1089.318693][T22833] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5409'. [ 1089.347273][T22824] syzkaller0: entered promiscuous mode [ 1089.359148][T22824] syzkaller0: entered allmulticast mode [ 1092.727808][T19828] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 1093.018258][T22883] sctp: [Deprecated]: syz.3.5423 (pid 22883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1093.018258][T22883] Use struct sctp_sack_info instead [ 1093.168901][T22892] netlink: 'syz.0.5424': attribute type 10 has an invalid length. [ 1093.183347][T22892] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5424'. [ 1093.479985][T22890] syzkaller0: entered promiscuous mode [ 1093.485620][T22890] syzkaller0: entered allmulticast mode [ 1096.151279][T22901] syzkaller0: entered promiscuous mode [ 1096.157008][T22901] syzkaller0: entered allmulticast mode [ 1096.163660][T22910] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5429'. [ 1097.794705][T19828] Bluetooth: hci2: command 0x0406 tx timeout [ 1098.685002][T22933] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1098.698646][T22939] netlink: 'syz.0.5437': attribute type 10 has an invalid length. [ 1098.706619][T22939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5437'. [ 1098.882325][T22946] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5439'. [ 1098.905837][T22949] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5441'. [ 1099.365429][T22952] syzkaller0: entered promiscuous mode [ 1099.390816][T22952] syzkaller0: entered allmulticast mode [ 1099.414477][T22958] sit0: entered allmulticast mode [ 1099.803849][T22968] sit0: entered promiscuous mode [ 1102.528994][T22977] netlink: 'syz.0.5448': attribute type 33 has an invalid length. [ 1102.536897][T22977] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5448'. [ 1102.921394][T22997] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5453'. [ 1103.828394][T23014] syzkaller0: entered promiscuous mode [ 1103.847607][T23014] syzkaller0: entered allmulticast mode [ 1103.976464][T23028] netlink: 'syz.2.5463': attribute type 21 has an invalid length. [ 1103.988778][T23028] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.5463'. [ 1104.036172][T23028] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5463'. [ 1107.460479][T23031] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5465'. [ 1107.469852][T23036] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1107.706691][T23063] netlink: 'syz.2.5472': attribute type 9 has an invalid length. [ 1107.718675][T23063] netlink: 399 bytes leftover after parsing attributes in process `syz.2.5472'. [ 1107.757106][T23063] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.5472'. [ 1107.838631][T23062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1108.370771][T23084] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5480'. [ 1108.628070][T23093] veth1_macvtap: entered promiscuous mode [ 1108.649259][T23093] veth1_macvtap: entered allmulticast mode [ 1108.655634][T23093] macsec0: entered promiscuous mode [ 1108.773568][T23086] syzkaller0: entered promiscuous mode [ 1108.793063][T23086] syzkaller0: entered allmulticast mode [ 1108.949820][T23107] netlink: 'syz.2.5485': attribute type 3 has an invalid length. [ 1108.969593][T23107] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5485'. [ 1111.345031][T23116] netlink: 'syz.3.5487': attribute type 10 has an invalid length. [ 1111.353963][T23116] netlink: 'syz.3.5487': attribute type 19 has an invalid length. [ 1111.366987][T23116] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.5487'. [ 1111.510015][ T5779] Bluetooth: hci1: unexpected subevent 0x03 length: 150 > 9 [ 1111.591444][T23130] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5491'. [ 1112.802347][T23160] syzkaller0: entered promiscuous mode [ 1112.812508][T23160] syzkaller0: entered allmulticast mode [ 1112.881621][T23165] netlink: 'syz.2.5500': attribute type 1 has an invalid length. [ 1112.904782][T23165] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.5500'. [ 1113.455438][T23173] netlink: 'syz.1.5502': attribute type 9 has an invalid length. [ 1113.475471][T23173] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5502'. [ 1113.910460][T16918] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1116.186824][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.194086][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.204032][T23178] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5503'. [ 1117.606961][T23199] sock: sock_timestamping_bind_phc: sock not bind to device [ 1117.672836][T23202] sock: sock_timestamping_bind_phc: sock not bind to device [ 1117.843046][T23212] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5511'. [ 1117.858882][T23212] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1117.884028][T23214] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5512'. [ 1118.124200][T23218] syzkaller0: entered promiscuous mode [ 1118.130179][T23218] syzkaller0: entered allmulticast mode [ 1118.260567][T19828] Bluetooth: hci1: command 0x0406 tx timeout [ 1118.606438][T23230] delete_channel: no stack [ 1118.618745][T23230] delete_channel: no stack [ 1118.883852][T23238] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.5519'. [ 1119.027261][T23241] netlink: 'syz.2.5519': attribute type 9 has an invalid length. [ 1119.065800][T23241] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5519'. [ 1119.513442][T23249] netlink: 'syz.3.5521': attribute type 153 has an invalid length. [ 1119.542693][T23249] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5521'. [ 1121.982096][T23229] netlink: 'syz.0.5516': attribute type 21 has an invalid length. [ 1121.990283][T23229] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5516'. [ 1122.000604][T23229] netlink: 'syz.0.5516': attribute type 4 has an invalid length. [ 1122.008397][T23229] netlink: 'syz.0.5516': attribute type 5 has an invalid length. [ 1122.016309][T23229] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5516'. [ 1122.148277][T23253] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5522'. [ 1122.351376][T23261] sock: sock_timestamping_bind_phc: sock not bind to device [ 1122.452246][T23267] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5527'. [ 1122.478068][T23267] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5527'. [ 1122.515778][T23269] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5527'. [ 1122.548068][T23267] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5527'. [ 1122.622370][T23269] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5527'. [ 1123.607308][T23284] syzkaller0: entered promiscuous mode [ 1123.623526][T23284] syzkaller0: entered allmulticast mode [ 1123.658976][T23291] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5535'. [ 1123.815608][T23294] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.5536'. [ 1124.890240][T23311] sock: sock_timestamping_bind_phc: sock not bind to device [ 1127.684685][T23307] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5539'. [ 1127.819505][T23314] netlink: 'syz.2.5542': attribute type 4 has an invalid length. [ 1127.891901][T23316] netlink: 'syz.1.5543': attribute type 19 has an invalid length. [ 1127.918836][T23316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5543'. [ 1128.074748][T23323] sock: sock_timestamping_bind_phc: sock not bind to device [ 1128.108289][T23327] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5545'. [ 1128.892645][T23351] sock: sock_timestamping_bind_phc: sock not bind to device [ 1129.104704][T23347] syzkaller0: entered promiscuous mode [ 1129.117731][T23347] syzkaller0: entered allmulticast mode [ 1133.212216][T23365] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5555'. [ 1133.229041][T23370] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5557'. [ 1133.241670][T23374] netlink: 'syz.3.5559': attribute type 10 has an invalid length. [ 1133.250715][T23374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5559'. [ 1133.265549][T23374] batman_adv: batadv0: Adding interface: vlan1 [ 1133.276042][T23374] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.308089][T23374] batman_adv: batadv0: Interface activated: vlan1 [ 1134.161876][T23410] sock: sock_timestamping_bind_phc: sock not bind to device [ 1134.380534][T23416] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5571'. [ 1134.464519][T23420] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5572'. [ 1134.485647][T23420] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1134.551437][T23413] syzkaller0: entered promiscuous mode [ 1134.557203][T23413] syzkaller0: entered allmulticast mode [ 1137.790756][T23438] netlink: 'syz.2.5577': attribute type 10 has an invalid length. [ 1138.013460][T23450] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5581'. [ 1138.543894][T23471] sock: sock_timestamping_bind_phc: sock not bind to device [ 1138.954250][T23481] netlink: 'syz.3.5590': attribute type 29 has an invalid length. [ 1138.974138][T23481] netlink: 'syz.3.5590': attribute type 29 has an invalid length. [ 1139.040214][T23481] netlink: 'syz.3.5590': attribute type 29 has an invalid length. [ 1139.076929][T23483] netlink: 'syz.3.5590': attribute type 29 has an invalid length. [ 1139.208116][T23484] netlink: 'syz.3.5590': attribute type 29 has an invalid length. [ 1139.241337][T23483] netlink: 'syz.3.5590': attribute type 29 has an invalid length. [ 1139.585717][T23487] syzkaller0: entered promiscuous mode [ 1139.591543][T23487] syzkaller0: entered allmulticast mode [ 1139.908202][T23498] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5594'. [ 1142.318979][T23505] netlink: 'syz.3.5596': attribute type 21 has an invalid length. [ 1142.334608][T23505] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5596'. [ 1143.018809][T23536] sock: sock_timestamping_bind_phc: sock not bind to device [ 1143.758779][T23545] sock: sock_timestamping_bind_phc: sock not bind to device [ 1144.455573][T23547] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5604'. [ 1144.940681][T16915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1145.379202][T23556] syzkaller0: entered promiscuous mode [ 1145.384782][T23556] syzkaller0: entered allmulticast mode [ 1145.840792][T23569] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.5609'. [ 1146.374185][T23572] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5610'. [ 1146.438718][T23572] openvswitch: netlink: Key type 29 is not supported [ 1150.511184][T23588] sock: sock_timestamping_bind_phc: sock not bind to device [ 1150.716756][T23598] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5616'. [ 1151.032355][T23607] syzkaller0: entered promiscuous mode [ 1151.039271][T23607] syzkaller0: left promiscuous mode [ 1151.569452][T23622] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.5622'. [ 1151.605112][T23613] syzkaller0: entered promiscuous mode [ 1151.633601][T23613] syzkaller0: entered allmulticast mode [ 1156.352329][T23642] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5626'. [ 1156.572692][T23655] sock: sock_timestamping_bind_phc: sock not bind to device [ 1156.686421][T23657] netlink: 'syz.1.5631': attribute type 1 has an invalid length. [ 1156.698858][T23657] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5631'. [ 1157.512424][T23675] syzkaller0: entered promiscuous mode [ 1157.518005][T23675] syzkaller0: entered allmulticast mode [ 1157.554716][T23680] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5637'. [ 1163.155874][T23714] sock: sock_timestamping_bind_phc: sock not bind to device [ 1163.935984][T23723] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5649'. [ 1164.505193][T23732] syzkaller0: entered promiscuous mode [ 1164.514994][T23732] syzkaller0: entered allmulticast mode [ 1164.531293][T23742] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5654'. [ 1164.704152][T23754] netlink: 'syz.2.5657': attribute type 1 has an invalid length. [ 1164.726224][T23754] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1164.819534][T23760] sock: sock_timestamping_bind_phc: sock not bind to device [ 1165.841892][ T5779] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1166.935061][T23759] veth1_macvtap: entered allmulticast mode [ 1166.943351][T23774] netlink: 'syz.0.5662': attribute type 27 has an invalid length. [ 1167.080222][T23777] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5663'. [ 1167.383941][T23789] netlink: 'syz.2.5669': attribute type 21 has an invalid length. [ 1167.490081][T23797] sock: sock_timestamping_bind_phc: sock not bind to device [ 1168.553915][T23802] syzkaller0: entered promiscuous mode [ 1168.562175][T23802] syzkaller0: entered allmulticast mode [ 1170.754892][T23810] netlink: 'syz.2.5675': attribute type 9 has an invalid length. [ 1170.764022][T23810] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5675'. [ 1170.794318][T23811] sock: sock_timestamping_bind_phc: sock not bind to device [ 1170.816518][T23813] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5675'. [ 1170.837289][T23813] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1171.542932][T23808] delete_channel: no stack [ 1172.907575][T23816] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5676'. [ 1173.171623][T23827] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5679'. [ 1173.203065][T23827] sit0: entered allmulticast mode [ 1176.168791][T16923] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1176.466989][T23846] sock: sock_timestamping_bind_phc: sock not bind to device [ 1176.765064][T23848] syzkaller0: entered promiscuous mode [ 1176.770782][T23848] syzkaller0: entered allmulticast mode [ 1177.594058][T23868] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5690'. [ 1177.636705][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.643374][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.116254][T23863] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5689'. [ 1179.128102][T23866] netlink: 'syz.2.5690': attribute type 4 has an invalid length. [ 1179.310720][T23873] pim6reg1: entered promiscuous mode [ 1179.317316][T23873] pim6reg1: entered allmulticast mode [ 1179.352120][T23879] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5694'. [ 1179.411283][T23879] C: renamed from team_slave_0 [ 1179.423786][T23879] netlink: 'syz.1.5694': attribute type 3 has an invalid length. [ 1179.456972][T23879] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5694'. [ 1179.511121][T23879] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1179.844277][T23896] sock: sock_timestamping_bind_phc: sock not bind to device [ 1179.979860][T23901] netlink: 'syz.0.5699': attribute type 3 has an invalid length. [ 1180.202514][T23904] syzkaller0: entered promiscuous mode [ 1180.208075][T23904] syzkaller0: entered allmulticast mode [ 1180.732375][T23917] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5703'. [ 1182.683604][T23912] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1182.694078][T23919] netlink: 'syz.1.5704': attribute type 4 has an invalid length. [ 1182.713740][T23919] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5704'. [ 1182.921852][T23931] netlink: 'syz.0.5708': attribute type 1 has an invalid length. [ 1182.958884][T23931] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.5708'. [ 1183.042768][T23937] netlink: 'syz.3.5707': attribute type 10 has an invalid length. [ 1183.115881][T23929] netlink: 'syz.3.5707': attribute type 10 has an invalid length. [ 1183.232127][T23942] sock: sock_timestamping_bind_phc: sock not bind to device [ 1183.248222][T23934] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1183.264325][T23934] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1183.428847][T23947] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5713'. [ 1183.508722][T23950] sock: sock_timestamping_bind_phc: sock not bind to device [ 1184.043656][T23960] syzkaller0: entered promiscuous mode [ 1184.058638][T23960] syzkaller0: entered allmulticast mode [ 1184.275423][T23977] sock: sock_timestamping_bind_phc: sock not bind to device [ 1186.782871][T23975] netlink: 'syz.2.5720': attribute type 10 has an invalid length. [ 1186.860983][T23975] team0 (unregistering): Port device team_slave_0 removed [ 1186.883495][T23975] team0 (unregistering): Port device team_slave_1 removed [ 1186.919967][T23975] team0 (unregistering): Port device bond0 removed [ 1186.944613][T23987] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1187.146386][T24007] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1187.243069][T24009] sock: sock_timestamping_bind_phc: sock not bind to device [ 1187.284855][T24010] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5727'. [ 1187.314951][T24001] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 1187.332692][T24001] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 1187.357889][T24012] netlink: 'syz.2.5731': attribute type 2 has an invalid length. [ 1187.379859][T24012] netlink: 'syz.2.5731': attribute type 1 has an invalid length. [ 1187.408366][T24012] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.5731'. [ 1187.728229][T24030] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5735'. [ 1187.970032][T24027] syzkaller0: entered promiscuous mode [ 1187.986292][T24027] syzkaller0: entered allmulticast mode [ 1188.505961][T24047] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5740'. [ 1188.703442][T24049] sock: sock_timestamping_bind_phc: sock not bind to device [ 1190.834635][T24040] netlink: 'syz.3.5738': attribute type 10 has an invalid length. [ 1190.843842][T24040] veth1_vlan: entered allmulticast mode [ 1190.867781][T24047] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1190.893304][T24047] CPU: 1 PID: 24047 Comm: syz.0.5740 Not tainted syzkaller #0 [ 1190.900865][T24047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1190.910984][T24047] Call Trace: [ 1190.914321][T24047] [ 1190.917305][T24047] dump_stack_lvl+0x18c/0x250 [ 1190.922050][T24047] ? show_regs_print_info+0x20/0x20 [ 1190.927304][T24047] ? load_image+0x400/0x400 [ 1190.931887][T24047] sysfs_warn_dup+0x8e/0xa0 [ 1190.936452][T24047] sysfs_do_create_link_sd+0xc0/0x110 [ 1190.941894][T24047] device_add_class_symlinks+0x1cf/0x240 [ 1190.947581][T24047] device_add+0x507/0xc20 [ 1190.951964][T24047] wiphy_register+0x1dad/0x2ae0 [ 1190.956905][T24047] ? cfg80211_event_work+0x40/0x40 [ 1190.962078][T24047] ? minstrel_ht_alloc+0x88a/0x990 [ 1190.967312][T24047] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1190.973553][T24047] ieee80211_register_hw+0x3464/0x4250 [ 1190.979114][T24047] ? ieee80211_tasklet_handler+0x20/0x20 [ 1190.984781][T24047] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1190.990696][T24047] ? __debug_object_init+0xec/0x450 [ 1190.995950][T24047] ? __asan_memset+0x22/0x40 [ 1191.000615][T24047] ? __hrtimer_init+0x186/0x270 [ 1191.005534][T24047] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1191.011351][T24047] ? mac80211_hwsim_free+0x220/0x220 [ 1191.016707][T24047] ? rcu_is_watching+0x15/0xb0 [ 1191.021625][T24047] ? kstrndup+0xbd/0x140 [ 1191.025945][T24047] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1191.031133][T24047] ? __nla_validate+0x50/0x50 [ 1191.035889][T24047] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1191.042298][T24047] ? __nla_parse+0x40/0x50 [ 1191.046778][T24047] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1191.053173][T24047] genl_family_rcv_msg_doit+0x211/0x310 [ 1191.058769][T24047] ? end_current_label_crit_section+0x170/0x170 [ 1191.065091][T24047] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1191.071072][T24047] ? bpf_lsm_capable+0x9/0x10 [ 1191.075803][T24047] ? security_capable+0x89/0xb0 [ 1191.080684][T24047] genl_rcv_msg+0x619/0x7a0 [ 1191.085218][T24047] ? genl_bind+0x360/0x360 [ 1191.089667][T24047] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1191.096068][T24047] ? ref_tracker_free+0x690/0x840 [ 1191.101200][T24047] netlink_rcv_skb+0x241/0x4d0 [ 1191.106047][T24047] ? genl_bind+0x360/0x360 [ 1191.110582][T24047] ? netlink_ack+0x1180/0x1180 [ 1191.115500][T24047] ? __lock_acquire+0x7d40/0x7d40 [ 1191.120587][T24047] ? down_read+0x1ac/0x2e0 [ 1191.125049][T24047] genl_rcv+0x28/0x40 [ 1191.129142][T24047] netlink_unicast+0x751/0x8d0 [ 1191.133945][T24047] netlink_sendmsg+0x8d0/0xbf0 [ 1191.138735][T24047] ? netlink_getsockopt+0x590/0x590 [ 1191.143961][T24047] ? aa_sock_msg_perm+0x94/0x150 [ 1191.148932][T24047] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1191.154250][T24047] ? security_socket_sendmsg+0x80/0xa0 [ 1191.159743][T24047] ? netlink_getsockopt+0x590/0x590 [ 1191.165020][T24047] ____sys_sendmsg+0x5ba/0x960 [ 1191.169829][T24047] ? __asan_memset+0x22/0x40 [ 1191.174447][T24047] ? __sys_sendmsg_sock+0x30/0x30 [ 1191.179489][T24047] ? __import_iovec+0x5f2/0x850 [ 1191.184377][T24047] ? import_iovec+0x73/0xa0 [ 1191.188907][T24047] ___sys_sendmsg+0x2a6/0x360 [ 1191.193605][T24047] ? __sys_sendmsg+0x2a0/0x2a0 [ 1191.198423][T24047] __se_sys_sendmsg+0x1c2/0x2b0 [ 1191.203324][T24047] ? __x64_sys_sendmsg+0x80/0x80 [ 1191.208297][T24047] ? lockdep_hardirqs_on+0x98/0x150 [ 1191.213529][T24047] do_syscall_64+0x55/0xa0 [ 1191.217980][T24047] ? clear_bhb_loop+0x40/0x90 [ 1191.222778][T24047] ? clear_bhb_loop+0x40/0x90 [ 1191.227496][T24047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1191.233421][T24047] RIP: 0033:0x7f75a779c629 [ 1191.237864][T24047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.257507][T24047] RSP: 002b:00007f75a8740028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1191.265944][T24047] RAX: ffffffffffffffda RBX: 00007f75a7a15fa0 RCX: 00007f75a779c629 [ 1191.273945][T24047] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1191.281953][T24047] RBP: 00007f75a7832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1191.289984][T24047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.297973][T24047] R13: 00007f75a7a16038 R14: 00007f75a7a15fa0 R15: 00007fffd79e8f88 [ 1191.306012][T24047] [ 1191.329352][T24058] netlink: 'syz.2.5743': attribute type 22 has an invalid length. [ 1191.337381][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1191.386767][T24064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.394540][T24064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.415025][T24064] bridge0: entered allmulticast mode [ 1191.439540][T24065] bridge_slave_1: left allmulticast mode [ 1191.445268][T24065] bridge_slave_1: left promiscuous mode [ 1191.460738][T24065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.494174][T24065] bridge_slave_0: left allmulticast mode [ 1191.500376][T24065] bridge_slave_0: left promiscuous mode [ 1191.506282][T24065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.605640][T24071] tap0: tun_chr_ioctl cmd 1074025673 [ 1191.618454][T24067] tap0: tun_chr_ioctl cmd 1074025677 [ 1191.624688][T24067] tap0: linktype set to 0 [ 1191.638631][T24070] tap0: tun_chr_ioctl cmd 1074025677 [ 1191.644114][T24070] tap0: linktype set to 0 [ 1191.661316][T24067] netlink: 'syz.2.5745': attribute type 4 has an invalid length. [ 1191.690208][T24067] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5745'. [ 1191.714633][T24070] netlink: 'syz.2.5745': attribute type 4 has an invalid length. [ 1191.725088][T24070] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5745'. [ 1191.827520][T24076] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5747'. [ 1191.915736][T24083] sock: sock_timestamping_bind_phc: sock not bind to device [ 1192.793528][T24100] syzkaller0: entered promiscuous mode [ 1192.803119][T24100] syzkaller0: entered allmulticast mode [ 1192.922474][T24106] netlink: 'syz.3.5757': attribute type 2 has an invalid length. [ 1192.931457][T24106] netlink: 51 bytes leftover after parsing attributes in process `syz.3.5757'. [ 1195.747705][T24121] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5762'. [ 1196.043304][T16923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.193480][T16923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.340858][T16923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.438225][T16923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.659052][T19828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1196.668962][T19828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1196.679209][T19828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1196.688077][T19828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1196.698166][T19828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1196.726858][T19828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1197.434160][T24157] syzkaller0: entered promiscuous mode [ 1197.448570][T24157] syzkaller0: entered allmulticast mode [ 1197.615641][T24177] netlink: 'syz.0.5774': attribute type 9 has an invalid length. [ 1197.639013][T24177] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5774'. [ 1197.673255][T24175] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5774'. [ 1198.353593][T24203] sock: sock_timestamping_bind_phc: sock not bind to device [ 1198.818911][ T5779] Bluetooth: hci1: command tx timeout [ 1200.277877][T24202] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.5781'. [ 1200.595235][T24144] chnl_net:caif_netlink_parms(): no params data found [ 1200.634952][T24218] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5785'. [ 1200.725799][T24218] netlink: 'syz.1.5785': attribute type 9 has an invalid length. [ 1200.745458][T24218] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5785'. [ 1200.898673][ T5779] Bluetooth: hci1: command tx timeout [ 1201.411002][T24144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.418203][T24144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.464458][T24144] bridge_slave_0: entered allmulticast mode [ 1201.476434][T24144] bridge_slave_0: entered promiscuous mode [ 1201.503730][T24144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.528739][T24144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.536043][T24144] bridge_slave_1: entered allmulticast mode [ 1201.549739][T24144] bridge_slave_1: entered promiscuous mode [ 1201.779006][T24144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.877028][T24144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.201933][T24144] team0: Port device team_slave_0 added [ 1202.242031][T24144] team0: Port device team_slave_1 added [ 1202.549941][T24144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.567541][T24144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.638694][T24144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.869991][T24256] syzkaller0: entered promiscuous mode [ 1202.885742][T24256] syzkaller0: entered allmulticast mode [ 1202.979098][ T5779] Bluetooth: hci1: command tx timeout [ 1205.069030][ T5779] Bluetooth: hci1: command tx timeout [ 1205.798402][T16923] hsr_slave_0: left promiscuous mode [ 1205.805839][T16923] hsr_slave_1: left promiscuous mode [ 1205.816931][T16923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.827908][T16923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.838927][T16923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.846426][T16923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.861810][T16923] bridge_slave_1: left allmulticast mode [ 1205.867567][T16923] bridge_slave_1: left promiscuous mode [ 1205.875019][T16923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.891090][T16923] bridge_slave_0: left allmulticast mode [ 1205.896840][T16923] bridge_slave_0: left promiscuous mode [ 1205.903775][T16923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.942217][T16923] veth1_macvtap: left allmulticast mode [ 1205.948069][T16923] veth1_macvtap: left promiscuous mode [ 1205.960904][T16923] veth0_macvtap: left promiscuous mode [ 1206.863722][T16923] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 1206.936610][T16923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.191567][T16921] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1207.465469][T16923] bond0 (unregistering): Released all slaves [ 1207.608274][T24144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.616183][T24144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.643604][T24144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.673478][T24276] netlink: 'syz.1.5794': attribute type 2 has an invalid length. [ 1207.688927][T24276] netlink: 'syz.1.5794': attribute type 8 has an invalid length. [ 1207.696759][T24276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5794'. [ 1207.712730][T24278] netlink: 'syz.1.5794': attribute type 3 has an invalid length. [ 1207.720850][T24278] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5794'. [ 1207.806827][T24272] syzkaller0: entered promiscuous mode [ 1207.812602][T24272] syzkaller0: entered allmulticast mode [ 1210.651501][T24144] hsr_slave_0: entered promiscuous mode [ 1210.669804][T24144] hsr_slave_1: entered promiscuous mode [ 1210.944662][T24286] netlink: 'syz.3.5795': attribute type 39 has an invalid length. [ 1211.086487][T24290] netlink: 'syz.3.5795': attribute type 39 has an invalid length. [ 1211.418359][T24302] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5797'. [ 1211.507138][T24302] netlink: 'syz.0.5797': attribute type 9 has an invalid length. [ 1211.538884][T24302] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5797'. [ 1212.024013][T24323] netlink: 'syz.0.5802': attribute type 10 has an invalid length. [ 1212.038697][T24323] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5802'. [ 1212.533014][T24144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1212.553800][T24144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1212.590306][T24144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1212.634994][T24144] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1212.727108][T24337] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5813'. [ 1212.857893][T24337] netlink: 'syz.0.5813': attribute type 9 has an invalid length. [ 1212.879043][T24337] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5813'. [ 1212.936455][T24339] syzkaller0: entered promiscuous mode [ 1212.944575][T24339] syzkaller0: entered allmulticast mode [ 1213.093988][T24144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.291284][T24144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1213.865689][T24346] delete_channel: no stack [ 1214.735774][T24364] netlink: 'syz.1.5808': attribute type 9 has an invalid length. [ 1214.824910][T24364] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1214.935949][T24365] FAULT_INJECTION: forcing a failure. [ 1214.935949][T24365] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.001779][T24365] CPU: 1 PID: 24365 Comm: syz.1.5808 Not tainted syzkaller #0 [ 1215.009358][T24365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1215.019498][T24365] Call Trace: [ 1215.022877][T24365] [ 1215.025874][T24365] dump_stack_lvl+0x18c/0x250 [ 1215.030651][T24365] ? show_regs_print_info+0x20/0x20 [ 1215.035939][T24365] ? load_image+0x400/0x400 [ 1215.040557][T24365] ? __might_sleep+0xe0/0xe0 [ 1215.045255][T24365] ? __lock_acquire+0x7d40/0x7d40 [ 1215.050391][T24365] should_fail_ex+0x39d/0x4d0 [ 1215.055180][T24365] should_failslab+0x9/0x20 [ 1215.059766][T24365] slab_pre_alloc_hook+0x59/0x310 [ 1215.064882][T24365] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1215.070682][T24365] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1215.076566][T24365] __kmem_cache_alloc_node+0x53/0x250 [ 1215.082054][T24365] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1215.087857][T24365] __kmalloc+0xa4/0x230 [ 1215.092110][T24365] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1215.097802][T24365] tomoyo_path_number_perm+0x248/0x620 [ 1215.103396][T24365] ? tomoyo_path_number_perm+0x217/0x620 [ 1215.109135][T24365] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1215.114690][T24365] ? trace_call_bpf+0xc3/0x6c0 [ 1215.119555][T24365] ? trace_call_bpf+0xc3/0x6c0 [ 1215.124504][T24365] ? trace_call_bpf+0x5e9/0x6c0 [ 1215.129572][T24365] ? __fget_files+0x28/0x4b0 [ 1215.134243][T24365] ? __fget_files+0x28/0x4b0 [ 1215.138963][T24365] security_file_ioctl+0x70/0xa0 [ 1215.144006][T24365] __se_sys_ioctl+0x48/0x170 [ 1215.148703][T24365] do_syscall_64+0x55/0xa0 [ 1215.153211][T24365] ? clear_bhb_loop+0x40/0x90 [ 1215.157975][T24365] ? clear_bhb_loop+0x40/0x90 [ 1215.162761][T24365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1215.168755][T24365] RIP: 0033:0x7febebf9c629 [ 1215.173250][T24365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.192943][T24365] RSP: 002b:00007febecdec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1215.201458][T24365] RAX: ffffffffffffffda RBX: 00007febec216180 RCX: 00007febebf9c629 [ 1215.209503][T24365] RDX: 00002000000002c0 RSI: 0000000000008924 RDI: 0000000000000003 [ 1215.217553][T24365] RBP: 00007febecdec090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.225599][T24365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.233640][T24365] R13: 00007febec216218 R14: 00007febec216180 R15: 00007ffce13551e8 [ 1215.241744][T24365] [ 1215.483848][T24365] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1218.096770][T24358] netlink: 'syz.0.5807': attribute type 21 has an invalid length. [ 1218.141881][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.149097][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.265724][T16922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.272968][T16922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.481139][T24377] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5811'. [ 1218.898122][T24377] netlink: 'syz.3.5811': attribute type 9 has an invalid length. [ 1218.917645][T24377] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5811'. [ 1219.326711][T24144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.451892][T24144] veth0_vlan: entered promiscuous mode [ 1219.493952][T24144] veth1_vlan: entered promiscuous mode [ 1219.566910][T24411] netlink: 'syz.3.5817': attribute type 2 has an invalid length. [ 1219.622872][T24411] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5817'. [ 1219.957663][T24423] netlink: 'syz.3.5819': attribute type 27 has an invalid length. [ 1219.978430][T24423] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5819'. [ 1220.152503][T24144] veth0_macvtap: entered promiscuous mode [ 1220.199648][T24144] veth1_macvtap: entered promiscuous mode [ 1220.266989][T24144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.293097][T24144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.365622][T24144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.453616][T24144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.511569][T24144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1220.603014][T24144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.651110][T24144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.736913][T24144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.785915][T24144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.806118][T24144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.831184][T24144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.847152][T24144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.857755][T24144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.871885][T24144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.922784][T24144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.953014][T24144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.978681][T24144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.987468][T24144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.223408][T16919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.248721][T16919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.381178][T24446] netlink: 'syz.3.5823': attribute type 2 has an invalid length. [ 1221.397244][T24446] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5823'. [ 1221.460856][T16915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.485134][T16915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.625767][T24458] FAULT_INJECTION: forcing a failure. [ 1221.625767][T24458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.666907][T24458] CPU: 0 PID: 24458 Comm: syz.0.5825 Not tainted syzkaller #0 [ 1221.674453][T24458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1221.684574][T24458] Call Trace: [ 1221.687909][T24458] [ 1221.690884][T24458] dump_stack_lvl+0x18c/0x250 [ 1221.695630][T24458] ? show_regs_print_info+0x20/0x20 [ 1221.700892][T24458] ? load_image+0x400/0x400 [ 1221.705452][T24458] ? __might_fault+0xaa/0x120 [ 1221.710186][T24458] ? __lock_acquire+0x7d40/0x7d40 [ 1221.715279][T24458] should_fail_ex+0x39d/0x4d0 [ 1221.720030][T24458] _copy_from_iter+0x1d9/0x12e0 [ 1221.724952][T24458] ? trace_event_raw_event_lock+0x250/0x250 [ 1221.730920][T24458] ? copyout_mc+0x70/0x70 [ 1221.735333][T24458] tun_get_user+0x38f/0x3ca0 [ 1221.740000][T24458] ? aa_file_perm+0x11b/0xee0 [ 1221.744746][T24458] ? rcu_read_unlock+0xa0/0xa0 [ 1221.749584][T24458] ? tun_get+0x1c/0x2e0 [ 1221.753788][T24458] ? __lock_acquire+0x7d40/0x7d40 [ 1221.758866][T24458] ? tun_get+0x1c/0x2e0 [ 1221.763089][T24458] tun_chr_write_iter+0x119/0x200 [ 1221.768172][T24458] vfs_write+0x46c/0x990 [ 1221.772462][T24458] ? file_end_write+0x250/0x250 [ 1221.777348][T24458] ? __fget_files+0x43d/0x4b0 [ 1221.782069][T24458] ? __fdget_pos+0x1d8/0x330 [ 1221.786687][T24458] ? ksys_write+0x75/0x260 [ 1221.791140][T24458] ksys_write+0x150/0x260 [ 1221.795508][T24458] ? __ia32_sys_read+0x90/0x90 [ 1221.800310][T24458] ? lockdep_hardirqs_on+0x98/0x150 [ 1221.805541][T24458] do_syscall_64+0x55/0xa0 [ 1221.809986][T24458] ? clear_bhb_loop+0x40/0x90 [ 1221.814686][T24458] ? clear_bhb_loop+0x40/0x90 [ 1221.819404][T24458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1221.825321][T24458] RIP: 0033:0x7f75a779c629 [ 1221.829764][T24458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.850798][T24458] RSP: 002b:00007f75a871f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1221.859245][T24458] RAX: ffffffffffffffda RBX: 00007f75a7a16090 RCX: 00007f75a779c629 [ 1221.867245][T24458] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007 [ 1221.875241][T24458] RBP: 00007f75a871f090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.883242][T24458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.891238][T24458] R13: 00007f75a7a16128 R14: 00007f75a7a16090 R15: 00007fffd79e8f88 [ 1221.899256][T24458] [ 1222.053660][T24455] syzkaller0: entered promiscuous mode [ 1222.068765][T24455] syzkaller0: entered allmulticast mode [ 1223.364749][T24498] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1223.408813][T24498] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1225.866513][T24512] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5835'. [ 1225.953471][T24517] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1226.155297][T24519] netlink: 'syz.0.5837': attribute type 10 has an invalid length. [ 1226.168442][T24519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.178283][T24519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.274070][T24519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.281928][T24519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.292520][T24519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.300811][T24519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.346345][T24519] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1227.114679][T24555] FAULT_INJECTION: forcing a failure. [ 1227.114679][T24555] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.164189][T24555] CPU: 0 PID: 24555 Comm: syz.3.5845 Not tainted syzkaller #0 [ 1227.171749][T24555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1227.181866][T24555] Call Trace: [ 1227.185193][T24555] [ 1227.188189][T24555] dump_stack_lvl+0x18c/0x250 [ 1227.192941][T24555] ? show_regs_print_info+0x20/0x20 [ 1227.198229][T24555] ? load_image+0x400/0x400 [ 1227.202814][T24555] ? __might_sleep+0xe0/0xe0 [ 1227.207469][T24555] ? __lock_acquire+0x7d40/0x7d40 [ 1227.210260][T24557] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5847'. [ 1227.212545][T24555] should_fail_ex+0x39d/0x4d0 [ 1227.212592][T24555] should_failslab+0x9/0x20 [ 1227.231035][T24555] slab_pre_alloc_hook+0x59/0x310 [ 1227.236138][T24555] kmem_cache_alloc_node+0x60/0x320 [ 1227.241393][T24555] ? __alloc_skb+0x103/0x2c0 [ 1227.246048][T24555] __alloc_skb+0x103/0x2c0 [ 1227.250545][T24555] alloc_skb_with_frags+0xca/0x7b0 [ 1227.255715][T24555] ? __lock_acquire+0x7d40/0x7d40 [ 1227.260811][T24555] sock_alloc_send_pskb+0x883/0x9a0 [ 1227.266074][T24555] ? __might_fault+0xaa/0x120 [ 1227.270818][T24555] ? sock_kzfree_s+0x50/0x50 [ 1227.275475][T24555] ? iov_iter_advance+0x88/0x1a0 [ 1227.280484][T24555] tun_get_user+0x82c/0x3ca0 [ 1227.285146][T24555] ? aa_file_perm+0x11b/0xee0 [ 1227.289888][T24555] ? rcu_read_unlock+0xa0/0xa0 [ 1227.294720][T24555] ? tun_get+0x1c/0x2e0 [ 1227.298936][T24555] ? __lock_acquire+0x7d40/0x7d40 [ 1227.304046][T24555] ? tun_get+0x1c/0x2e0 [ 1227.308265][T24555] tun_chr_write_iter+0x119/0x200 [ 1227.313349][T24555] vfs_write+0x46c/0x990 [ 1227.317658][T24555] ? file_end_write+0x250/0x250 [ 1227.322581][T24555] ? __fget_files+0x43d/0x4b0 [ 1227.327330][T24555] ? __fdget_pos+0x1d8/0x330 [ 1227.331987][T24555] ? ksys_write+0x75/0x260 [ 1227.336468][T24555] ksys_write+0x150/0x260 [ 1227.340868][T24555] ? __ia32_sys_read+0x90/0x90 [ 1227.345791][T24555] ? lockdep_hardirqs_on+0x98/0x150 [ 1227.351055][T24555] do_syscall_64+0x55/0xa0 [ 1227.355540][T24555] ? clear_bhb_loop+0x40/0x90 [ 1227.360378][T24555] ? clear_bhb_loop+0x40/0x90 [ 1227.365123][T24555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1227.371072][T24555] RIP: 0033:0x7f505d79c629 [ 1227.375537][T24555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.395296][T24555] RSP: 002b:00007f505e5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1227.403763][T24555] RAX: ffffffffffffffda RBX: 00007f505da16090 RCX: 00007f505d79c629 [ 1227.411867][T24555] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007 [ 1227.419893][T24555] RBP: 00007f505e5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.427907][T24555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.435916][T24555] R13: 00007f505da16128 R14: 00007f505da16090 R15: 00007ffc9b106b48 [ 1227.443948][T24555] [ 1227.475325][T24561] netlink: 'syz.1.5847': attribute type 9 has an invalid length. [ 1227.512842][T24561] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5847'. [ 1227.624379][T24550] syzkaller0: entered promiscuous mode [ 1227.630589][T24550] syzkaller0: entered allmulticast mode [ 1230.813785][T24568] netlink: 'syz.0.5848': attribute type 4 has an invalid length. [ 1230.821991][T24568] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5848'. [ 1230.846034][T24568] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1230.872196][T24583] netlink: 'syz.1.5853': attribute type 46 has an invalid length. [ 1230.880355][T24583] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5853'. [ 1231.364451][T24597] tap0: tun_chr_ioctl cmd 1074025677 [ 1231.378334][T24597] tap0: linktype set to 778 [ 1231.401295][T24597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5858'. [ 1231.749470][T24602] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5859'. [ 1232.113009][T24602] netlink: 'syz.0.5859': attribute type 9 has an invalid length. [ 1232.121216][T24602] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5859'. [ 1234.263051][T24612] netlink: 209032 bytes leftover after parsing attributes in process `syz.1.5862'. [ 1234.307501][T24615] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5863'. [ 1234.317079][T24615] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1234.328572][T24615] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1234.661750][T24621] syzkaller0: entered promiscuous mode [ 1234.674022][T24621] syzkaller0: entered allmulticast mode [ 1235.279675][T24646] netlink: 'syz.2.5871': attribute type 9 has an invalid length. [ 1235.298133][T24646] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1237.484026][T24635] netlink: 'syz.1.5868': attribute type 29 has an invalid length. [ 1237.493469][T24645] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1237.595943][T24654] syzkaller0: entered promiscuous mode [ 1237.603203][T24654] syzkaller0: entered allmulticast mode [ 1238.122201][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1239.062876][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.077795][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.883117][T24666] netlink: 'syz.1.5876': attribute type 4 has an invalid length. [ 1239.892722][T24666] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5876'. [ 1239.927126][T24666] .`: renamed from bond0 (while UP) [ 1240.108702][T24675] netlink: 'syz.0.5879': attribute type 39 has an invalid length. [ 1240.312117][T24688] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1240.464211][T24688] netlink: 'syz.0.5883': attribute type 9 has an invalid length. [ 1240.510935][T24688] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1240.810689][T24709] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5888'. [ 1240.951255][T24702] syzkaller0: entered promiscuous mode [ 1240.974944][T24702] syzkaller0: entered allmulticast mode [ 1241.083766][T24716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.092257][T24716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.100667][T24716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.108189][T24716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.122925][T24722] netlink: 'syz.0.5891': attribute type 3 has an invalid length. [ 1241.132345][T24722] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.5891'. [ 1241.188086][T24721] lo: entered allmulticast mode [ 1243.412551][T24717] lo: entered promiscuous mode [ 1243.417408][T24717] lo: left allmulticast mode [ 1243.780053][T24742] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5898'. [ 1243.828009][T24742] netlink: 'syz.0.5898': attribute type 21 has an invalid length. [ 1243.859058][T24742] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5898'. [ 1244.542570][T24763] syzkaller0: entered promiscuous mode [ 1244.548266][T24763] syzkaller0: entered allmulticast mode [ 1246.836606][T24788] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5912'. [ 1246.851821][T24786] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5911'. [ 1246.863032][T24786] openvswitch: netlink: Key type 29 is not supported [ 1247.081307][T24792] netlink: 'syz.1.5914': attribute type 3 has an invalid length. [ 1247.090430][T24792] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5914'. [ 1247.311325][T24803] netlink: 'syz.0.5919': attribute type 29 has an invalid length. [ 1247.321409][T24803] netlink: 'syz.0.5919': attribute type 29 has an invalid length. [ 1247.346420][T24803] netlink: 'syz.0.5919': attribute type 10 has an invalid length. [ 1247.595960][T24809] FAULT_INJECTION: forcing a failure. [ 1247.595960][T24809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.653313][T24809] CPU: 1 PID: 24809 Comm: syz.0.5920 Not tainted syzkaller #0 [ 1247.660865][T24809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1247.670994][T24809] Call Trace: [ 1247.674354][T24809] [ 1247.677368][T24809] dump_stack_lvl+0x18c/0x250 [ 1247.682143][T24809] ? show_regs_print_info+0x20/0x20 [ 1247.687454][T24809] ? load_image+0x400/0x400 [ 1247.692041][T24809] ? __might_fault+0xaa/0x120 [ 1247.696753][T24809] ? __lock_acquire+0x7d40/0x7d40 [ 1247.701849][T24809] should_fail_ex+0x39d/0x4d0 [ 1247.706577][T24809] _copy_from_iter+0x1d9/0x12e0 [ 1247.711487][T24809] ? __virt_addr_valid+0x18c/0x540 [ 1247.716691][T24809] ? __lock_acquire+0x7d40/0x7d40 [ 1247.721816][T24809] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1247.727298][T24809] ? copyout_mc+0x70/0x70 [ 1247.731726][T24809] ? __virt_addr_valid+0x18c/0x540 [ 1247.736928][T24809] ? __virt_addr_valid+0x18c/0x540 [ 1247.742131][T24809] ? __virt_addr_valid+0x469/0x540 [ 1247.747345][T24809] ? __check_object_size+0x506/0xa20 [ 1247.752735][T24809] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 1247.758557][T24809] ? skb_put+0x11b/0x210 [ 1247.762915][T24809] tun_get_user+0x15db/0x3ca0 [ 1247.767796][T24809] ? aa_file_perm+0x11b/0xee0 [ 1247.772578][T24809] ? rcu_read_unlock+0xa0/0xa0 [ 1247.777470][T24809] ? tun_get+0x1c/0x2e0 [ 1247.781709][T24809] ? __lock_acquire+0x7d40/0x7d40 [ 1247.786844][T24809] ? tun_get+0x1c/0x2e0 [ 1247.791112][T24809] tun_chr_write_iter+0x119/0x200 [ 1247.796256][T24809] vfs_write+0x46c/0x990 [ 1247.800611][T24809] ? file_end_write+0x250/0x250 [ 1247.805565][T24809] ? __fget_files+0x43d/0x4b0 [ 1247.810363][T24809] ? __fdget_pos+0x1d8/0x330 [ 1247.815124][T24809] ? ksys_write+0x75/0x260 [ 1247.819650][T24809] ksys_write+0x150/0x260 [ 1247.824089][T24809] ? __ia32_sys_read+0x90/0x90 [ 1247.829052][T24809] ? lockdep_hardirqs_on+0x98/0x150 [ 1247.834351][T24809] do_syscall_64+0x55/0xa0 [ 1247.838856][T24809] ? clear_bhb_loop+0x40/0x90 [ 1247.843607][T24809] ? clear_bhb_loop+0x40/0x90 [ 1247.848383][T24809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.854351][T24809] RIP: 0033:0x7f75a779c629 [ 1247.859271][T24809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.878959][T24809] RSP: 002b:00007f75a871f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1247.887639][T24809] RAX: ffffffffffffffda RBX: 00007f75a7a16090 RCX: 00007f75a779c629 [ 1247.895684][T24809] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007 [ 1247.903740][T24809] RBP: 00007f75a871f090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.911793][T24809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.919838][T24809] R13: 00007f75a7a16128 R14: 00007f75a7a16090 R15: 00007fffd79e8f88 [ 1247.927943][T24809] [ 1248.062317][T24806] syzkaller0: entered promiscuous mode [ 1248.073496][T24806] syzkaller0: entered allmulticast mode [ 1250.445457][T24827] netlink: 'syz.2.5925': attribute type 4 has an invalid length. [ 1250.467114][T24827] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5925'. [ 1250.497564][T24827] .`: renamed from bond0 (while UP) [ 1250.514545][T24831] netlink: 'syz.0.5926': attribute type 6 has an invalid length. [ 1250.535042][T24831] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5926'. [ 1250.805056][T24843] netlink: 'syz.2.5930': attribute type 9 has an invalid length. [ 1250.819308][T24843] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5930'. [ 1250.881348][T24846] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1250.895488][T24847] -1: renamed from syzkaller0 [ 1250.903065][T24846] netlink: 'syz.1.5932': attribute type 6 has an invalid length. [ 1254.067972][T24861] FAULT_INJECTION: forcing a failure. [ 1254.067972][T24861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1254.089407][T24861] CPU: 0 PID: 24861 Comm: syz.3.5935 Not tainted syzkaller #0 [ 1254.096956][T24861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1254.107061][T24861] Call Trace: [ 1254.110390][T24861] [ 1254.113359][T24861] dump_stack_lvl+0x18c/0x250 [ 1254.118099][T24861] ? show_regs_print_info+0x20/0x20 [ 1254.123360][T24861] ? load_image+0x400/0x400 [ 1254.127919][T24861] ? __might_fault+0xaa/0x120 [ 1254.132666][T24861] ? __lock_acquire+0x7d40/0x7d40 [ 1254.137749][T24861] ? __might_fault+0xaa/0x120 [ 1254.142570][T24861] should_fail_ex+0x39d/0x4d0 [ 1254.147290][T24861] _copy_from_iter+0x1d9/0x12e0 [ 1254.152183][T24861] ? __might_fault+0xaa/0x120 [ 1254.156898][T24861] ? _copy_from_iter+0x24e/0x12e0 [ 1254.161966][T24861] ? __virt_addr_valid+0x18c/0x540 [ 1254.167107][T24861] ? __lock_acquire+0x7d40/0x7d40 [ 1254.172168][T24861] ? copyout_mc+0x70/0x70 [ 1254.176530][T24861] ? copyout_mc+0x70/0x70 [ 1254.180916][T24861] ? __virt_addr_valid+0x18c/0x540 [ 1254.186075][T24861] ? page_copy_sane+0x16a/0x270 [ 1254.190960][T24861] copy_page_from_iter+0x7b/0x100 [ 1254.196024][T24861] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1254.201873][T24861] tun_get_user+0x15db/0x3ca0 [ 1254.206589][T24861] ? aa_file_perm+0x11b/0xee0 [ 1254.211305][T24861] ? rcu_read_unlock+0xa0/0xa0 [ 1254.216106][T24861] ? tun_get+0x1c/0x2e0 [ 1254.220290][T24861] ? __lock_acquire+0x7d40/0x7d40 [ 1254.225348][T24861] ? tun_get+0x1c/0x2e0 [ 1254.229547][T24861] tun_chr_write_iter+0x119/0x200 [ 1254.234606][T24861] vfs_write+0x46c/0x990 [ 1254.238892][T24861] ? file_end_write+0x250/0x250 [ 1254.243789][T24861] ? __fget_files+0x43d/0x4b0 [ 1254.248508][T24861] ? __fdget_pos+0x1d8/0x330 [ 1254.253134][T24861] ? ksys_write+0x75/0x260 [ 1254.257596][T24861] ksys_write+0x150/0x260 [ 1254.261961][T24861] ? __ia32_sys_read+0x90/0x90 [ 1254.266770][T24861] ? lockdep_hardirqs_on+0x98/0x150 [ 1254.272006][T24861] do_syscall_64+0x55/0xa0 [ 1254.276460][T24861] ? clear_bhb_loop+0x40/0x90 [ 1254.281162][T24861] ? clear_bhb_loop+0x40/0x90 [ 1254.285863][T24861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1254.291786][T24861] RIP: 0033:0x7f505d79c629 [ 1254.296226][T24861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.315870][T24861] RSP: 002b:00007f505e5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1254.324319][T24861] RAX: ffffffffffffffda RBX: 00007f505da16090 RCX: 00007f505d79c629 [ 1254.332315][T24861] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007 [ 1254.340312][T24861] RBP: 00007f505e5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.348315][T24861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1254.356310][T24861] R13: 00007f505da16128 R14: 00007f505da16090 R15: 00007ffc9b106b48 [ 1254.364411][T24861] [ 1254.392247][T24868] netlink: 'syz.0.5936': attribute type 21 has an invalid length. [ 1254.403855][T24868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1254.411449][T24870] netlink: 'syz.1.5938': attribute type 29 has an invalid length. [ 1254.477314][T24859] syzkaller0: entered promiscuous mode [ 1254.486629][T24859] syzkaller0: entered allmulticast mode [ 1254.495212][T24870] netlink: 'syz.1.5938': attribute type 29 has an invalid length. [ 1254.516789][T24874] netlink: 'syz.1.5938': attribute type 29 has an invalid length. [ 1254.667559][T24872] netlink: 'syz.1.5938': attribute type 29 has an invalid length. [ 1254.795204][T24883] sock: sock_timestamping_bind_phc: sock not bind to device [ 1254.870419][T24889] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5941'. [ 1257.141194][T24881] netlink: 'syz.2.5940': attribute type 21 has an invalid length. [ 1257.149563][T24881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5940'. [ 1257.275719][T24895] netlink: 'syz.0.5942': attribute type 21 has an invalid length. [ 1257.285015][T24895] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5942'. [ 1257.848242][T24914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5949'. [ 1258.017008][T24921] netlink: 'syz.0.5950': attribute type 10 has an invalid length. [ 1258.184336][T24919] netlink: 'syz.0.5950': attribute type 10 has an invalid length. [ 1258.388559][T24919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.469276][T24919] bridge_slave_1: left allmulticast mode [ 1258.559106][T24919] bridge_slave_1: left promiscuous mode [ 1258.590030][T24919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.728307][T24919] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1258.753324][T24930] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1259.001173][T24937] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5956'. [ 1259.272779][T24937] netlink: 157696 bytes leftover after parsing attributes in process `syz.0.5956'. [ 1259.308647][T24937] openvswitch: netlink: Key type 29 is not supported [ 1259.395662][T24935] netlink: 'syz.2.5954': attribute type 21 has an invalid length. [ 1259.414409][T24935] netlink: 'syz.2.5954': attribute type 1 has an invalid length. [ 1260.049292][T24945] sock: sock_timestamping_bind_phc: sock not bind to device [ 1260.300361][T24954] FAULT_INJECTION: forcing a failure. [ 1260.300361][T24954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.398755][T24954] CPU: 0 PID: 24954 Comm: syz.0.5960 Not tainted syzkaller #0 [ 1260.406306][T24954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1260.416418][T24954] Call Trace: [ 1260.419739][T24954] [ 1260.422708][T24954] dump_stack_lvl+0x18c/0x250 [ 1260.427456][T24954] ? show_regs_print_info+0x20/0x20 [ 1260.432809][T24954] ? load_image+0x400/0x400 [ 1260.437374][T24954] ? __might_fault+0xaa/0x120 [ 1260.442103][T24954] ? __lock_acquire+0x7d40/0x7d40 [ 1260.447184][T24954] should_fail_ex+0x39d/0x4d0 [ 1260.451925][T24954] _copy_from_user+0x2f/0xe0 [ 1260.456564][T24954] sk_setsockopt+0x2b2/0x2bc0 [ 1260.461299][T24954] ? sockopt_capable+0x60/0x60 [ 1260.466128][T24954] ? trace_call_bpf+0xc3/0x6c0 [ 1260.470949][T24954] ? trace_call_bpf+0x5e9/0x6c0 [ 1260.475868][T24954] ? aa_sk_perm+0x83c/0x970 [ 1260.480438][T24954] udp_lib_setsockopt+0xf7/0x8a0 [ 1260.485441][T24954] ? udp_destroy_sock+0x2c0/0x2c0 [ 1260.490532][T24954] ? __fget_files+0x28/0x4b0 [ 1260.495174][T24954] ? __fget_files+0x28/0x4b0 [ 1260.499828][T24954] udpv6_setsockopt+0x77/0xb0 [ 1260.504558][T24954] ? udp_v6_send_skb+0x1860/0x1860 [ 1260.509711][T24954] ? sock_common_recvmsg+0x190/0x190 [ 1260.515060][T24954] do_sock_setsockopt+0x175/0x1a0 [ 1260.520147][T24954] __x64_sys_setsockopt+0x182/0x200 [ 1260.525403][T24954] do_syscall_64+0x55/0xa0 [ 1260.529876][T24954] ? clear_bhb_loop+0x40/0x90 [ 1260.534615][T24954] ? clear_bhb_loop+0x40/0x90 [ 1260.539356][T24954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1260.545293][T24954] RIP: 0033:0x7f75a779c629 [ 1260.549760][T24954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.569422][T24954] RSP: 002b:00007f75a871f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1260.577888][T24954] RAX: ffffffffffffffda RBX: 00007f75a7a16090 RCX: 00007f75a779c629 [ 1260.585905][T24954] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000005 [ 1260.593929][T24954] RBP: 00007f75a871f090 R08: 0000000000000004 R09: 0000000000000000 [ 1260.601949][T24954] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1260.609960][T24954] R13: 00007f75a7a16128 R14: 00007f75a7a16090 R15: 00007fffd79e8f88 [ 1260.618013][T24954] [ 1260.925752][T24968] netlink: 'syz.3.5965': attribute type 21 has an invalid length. [ 1260.955334][T24968] netlink: 'syz.3.5965': attribute type 4 has an invalid length. [ 1260.982176][T24968] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5965'. [ 1261.000654][T24972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5966'. [ 1261.095827][T24980] sock: sock_timestamping_bind_phc: sock not bind to device [ 1261.335823][T24979] netlink: 'syz.0.5967': attribute type 21 has an invalid length. [ 1261.349048][T24979] netlink: 'syz.0.5967': attribute type 1 has an invalid length. [ 1261.813442][T24993] sock: sock_timestamping_bind_phc: sock not bind to device [ 1261.849249][T24993] FAULT_INJECTION: forcing a failure. [ 1261.849249][T24993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1261.914631][T24993] CPU: 1 PID: 24993 Comm: syz.1.5971 Not tainted syzkaller #0 [ 1261.922181][T24993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1261.932309][T24993] Call Trace: [ 1261.935635][T24993] [ 1261.938611][T24993] dump_stack_lvl+0x18c/0x250 [ 1261.943443][T24993] ? show_regs_print_info+0x20/0x20 [ 1261.948705][T24993] ? load_image+0x400/0x400 [ 1261.953280][T24993] ? __lock_acquire+0x7d40/0x7d40 [ 1261.958362][T24993] ? snprintf+0xe9/0x140 [ 1261.962675][T24993] should_fail_ex+0x39d/0x4d0 [ 1261.967431][T24993] _copy_to_user+0x2f/0xa0 [ 1261.971904][T24993] simple_read_from_buffer+0xe7/0x150 [ 1261.977352][T24993] proc_fail_nth_read+0x1e8/0x260 [ 1261.982446][T24993] ? proc_fault_inject_write+0x360/0x360 [ 1261.988137][T24993] ? fsnotify_perm+0x271/0x5e0 [ 1261.993011][T24993] ? proc_fault_inject_write+0x360/0x360 [ 1261.998704][T24993] vfs_read+0x28b/0x970 [ 1262.002932][T24993] ? kernel_read+0x1e0/0x1e0 [ 1262.007587][T24993] ? __fget_files+0x28/0x4b0 [ 1262.012233][T24993] ? __fget_files+0x28/0x4b0 [ 1262.016875][T24993] ? __fget_files+0x43d/0x4b0 [ 1262.021614][T24993] ? __fdget_pos+0x2a3/0x330 [ 1262.026248][T24993] ? ksys_read+0x75/0x260 [ 1262.030628][T24993] ksys_read+0x150/0x260 [ 1262.034928][T24993] ? vfs_write+0x990/0x990 [ 1262.039405][T24993] ? lockdep_hardirqs_on+0x98/0x150 [ 1262.044657][T24993] do_syscall_64+0x55/0xa0 [ 1262.049125][T24993] ? clear_bhb_loop+0x40/0x90 [ 1262.053860][T24993] ? clear_bhb_loop+0x40/0x90 [ 1262.058590][T24993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1262.064534][T24993] RIP: 0033:0x7febebf5cece [ 1262.069178][T24993] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1262.088925][T24993] RSP: 002b:00007febece2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1262.097494][T24993] RAX: ffffffffffffffda RBX: 00007febece2e6c0 RCX: 00007febebf5cece [ 1262.105602][T24993] RDX: 000000000000000f RSI: 00007febece2e0a0 RDI: 0000000000000006 [ 1262.113717][T24993] RBP: 00007febece2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.121739][T24993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.129766][T24993] R13: 00007febec216038 R14: 00007febec215fa0 R15: 00007ffce13551e8 [ 1262.137815][T24993] [ 1262.294982][T24997] delete_channel: no stack [ 1262.309060][T24997] delete_channel: no stack [ 1262.542138][T25013] sock: sock_timestamping_bind_phc: sock not bind to device [ 1263.014178][T25019] netlink: 'syz.1.5980': attribute type 21 has an invalid length. [ 1263.026886][T25019] netlink: 'syz.1.5980': attribute type 1 has an invalid length. [ 1263.173475][T25019] netlink: 'syz.1.5980': attribute type 16 has an invalid length. [ 1263.196379][T25019] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5980'. [ 1263.296464][T25019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.684006][T25029] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5982'. [ 1263.774422][T25029] netlink: 'syz.2.5982': attribute type 9 has an invalid length. [ 1263.799129][T25029] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5982'. [ 1264.134255][T25039] netlink: 'syz.0.5985': attribute type 30 has an invalid length. [ 1267.132181][T25054] netlink: 'syz.2.5988': attribute type 19 has an invalid length. [ 1267.362907][T25069] sock: sock_timestamping_bind_phc: sock not bind to device [ 1269.045743][T16922] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1269.302196][T25079] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.5995'. [ 1269.328732][T25079] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1269.367816][T25079] openvswitch: netlink: Message has 4 unknown bytes. [ 1269.574730][T25079] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5995'. [ 1269.592786][T25082] netlink: 'syz.3.5993': attribute type 21 has an invalid length. [ 1269.607220][T25082] netlink: 'syz.3.5993': attribute type 1 has an invalid length. [ 1269.637310][T25088] netlink: 'syz.3.5993': attribute type 16 has an invalid length. [ 1269.646162][T25088] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1269.657008][T25088] bridge_slave_0: entered allmulticast mode [ 1270.031956][T25104] netlink: 'syz.3.6000': attribute type 22 has an invalid length. [ 1270.045035][T25106] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.5999'. [ 1270.054832][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6000'. [ 1270.117136][T25106] netlink: 6116 bytes leftover after parsing attributes in process `syz.2.5999'. [ 1270.148687][T25106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5999'. [ 1271.314750][T25136] netlink: 'syz.2.6007': attribute type 9 has an invalid length. [ 1271.330800][T25136] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6007'. [ 1273.275646][T25132] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6007'. [ 1273.286668][T25137] netlink: 'syz.3.6008': attribute type 17 has an invalid length. [ 1273.295236][T25137] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6008'. [ 1275.024915][T25163] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1275.118710][T25163] netlink: 6116 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1275.208319][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1276.177030][T25179] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6018'. [ 1276.543250][T25183] netlink: 'syz.1.6018': attribute type 9 has an invalid length. [ 1276.695765][T25183] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6018'. [ 1279.979702][T25218] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1279.989790][T25218] netlink: 6116 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1280.001279][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1280.645618][T25226] netlink: 'syz.2.6031': attribute type 27 has an invalid length. [ 1280.694961][T25226] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.6031'. [ 1281.575900][T25256] wg2: entered allmulticast mode [ 1282.040574][T25264] sock: sock_timestamping_bind_phc: sock not bind to device [ 1282.770262][T25280] netlink: 'syz.3.6043': attribute type 9 has an invalid length. [ 1282.789476][T25280] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6043'. [ 1282.834848][T25285] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6043'. [ 1282.859486][T25285] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1283.846144][T25298] netlink: 'syz.3.6048': attribute type 153 has an invalid length. [ 1283.992445][T25298] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.6048'. [ 1286.211074][T25320] netlink: 'syz.1.6055': attribute type 7 has an invalid length. [ 1286.576558][T25339] sock: sock_timestamping_bind_phc: sock not bind to device [ 1286.882423][T25349] syz.2.6061[25349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1287.215499][T25383] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6064'. [ 1287.345764][T25389] netlink: 'syz.2.6064': attribute type 9 has an invalid length. [ 1287.365624][T25389] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6064'. [ 1287.880153][T25405] netlink: 'syz.2.6071': attribute type 10 has an invalid length. [ 1287.922873][T25405] .`: entered promiscuous mode [ 1287.939000][T25405] bond_slave_0: entered promiscuous mode [ 1287.948926][T25405] bond_slave_1: entered promiscuous mode [ 1287.978722][T25405] .`: entered allmulticast mode [ 1287.983716][T25405] bond_slave_0: entered allmulticast mode [ 1288.005613][T25405] bond_slave_1: entered allmulticast mode [ 1288.019120][T25405] 8021q: adding VLAN 0 to HW filter on device .` [ 1288.026082][T25405] team0: Device .` is up. Set it down before adding it as a team port [ 1288.049452][T25401] netlink: 'syz.1.6070': attribute type 4 has an invalid length. [ 1288.069034][T25401] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1289.269334][T25429] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6078'. [ 1289.302129][T25429] netlink: 'syz.1.6078': attribute type 9 has an invalid length. [ 1289.328640][T25429] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6078'. [ 1289.516705][T25435] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6078'. [ 1289.901526][T25447] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6079'. [ 1289.939211][T25446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6081'. [ 1289.974598][T25446] netlink: 'syz.3.6081': attribute type 3 has an invalid length. [ 1289.988754][T25446] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6081'. [ 1290.100204][T25442] sctp: [Deprecated]: syz.1.6079 (pid 25442) Use of int in maxseg socket option. [ 1290.100204][T25442] Use struct sctp_assoc_value instead [ 1290.726252][T25466] netlink: 'syz.0.6087': attribute type 13 has an invalid length. [ 1290.970735][T25480] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.6091'. [ 1291.036371][T25464] netlink: 'syz.1.6086': attribute type 2 has an invalid length. [ 1291.679745][T25503] sock: sock_timestamping_bind_phc: sock not bind to device [ 1291.862531][T25511] netlink: 'syz.1.6099': attribute type 21 has an invalid length. [ 1291.878038][T25511] netlink: 'syz.1.6099': attribute type 1 has an invalid length. [ 1292.321055][T25530] netlink: 'syz.2.6105': attribute type 10 has an invalid length. [ 1292.381628][T25533] netlink: 'syz.2.6105': attribute type 9 has an invalid length. [ 1292.400931][T25533] __nla_validate_parse: 3 callbacks suppressed [ 1292.400952][T25533] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6105'. [ 1293.100397][T25546] tap0: tun_chr_ioctl cmd 1074025677 [ 1293.148906][T25546] tap0: linktype set to 6 [ 1293.277810][T25535] netlink: 'syz.2.6105': attribute type 9 has an invalid length. [ 1293.304442][T25535] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6105'. [ 1293.315166][T25548] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6110'. [ 1293.678922][T25559] netlink: 'syz.3.6112': attribute type 1 has an invalid length. [ 1293.707620][T25559] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6112'. [ 1293.738564][T25557] ================================================================== [ 1293.746711][T25557] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 1293.754600][T25557] Write of size 56 at addr ffff88801c716f10 by task syz.2.6111/25557 [ 1293.762716][T25557] [ 1293.765086][T25557] CPU: 0 PID: 25557 Comm: syz.2.6111 Not tainted syzkaller #0 [ 1293.772591][T25557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1293.782697][T25557] Call Trace: [ 1293.786022][T25557] [ 1293.789004][T25557] dump_stack_lvl+0x18c/0x250 [ 1293.793751][T25557] ? read_lock_is_recursive+0x20/0x20 [ 1293.799190][T25557] ? show_regs_print_info+0x20/0x20 [ 1293.804463][T25557] ? load_image+0x400/0x400 [ 1293.809025][T25557] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1293.814551][T25557] ? __virt_addr_valid+0x18c/0x540 [ 1293.819807][T25557] ? __virt_addr_valid+0x469/0x540 [ 1293.824983][T25557] print_report+0xa8/0x210 [ 1293.829469][T25557] ? __bpf_get_stackid+0x6bf/0x900 [ 1293.834650][T25557] kasan_report+0x117/0x150 [ 1293.839206][T25557] ? __bpf_get_stackid+0x6bf/0x900 [ 1293.844397][T25557] kasan_check_range+0x241/0x290 [ 1293.849421][T25557] ? __bpf_get_stackid+0x6bf/0x900 [ 1293.854580][T25557] __asan_memcpy+0x40/0x70 [ 1293.859051][T25557] __bpf_get_stackid+0x6bf/0x900 [ 1293.864026][T25557] bpf_get_stackid_pe+0x343/0x410 [ 1293.869084][T25557] bpf_prog_16fa1569821187d5+0x29/0x39 [ 1293.874573][T25557] bpf_overflow_handler+0x43f/0x510 [ 1293.879805][T25557] ? bpf_overflow_handler+0xde/0x510 [ 1293.885121][T25557] ? tp_perf_event_destroy+0x20/0x20 [ 1293.890450][T25557] ? __perf_event_account_interrupt+0x187/0x280 [ 1293.896722][T25557] __perf_event_overflow+0x447/0x630 [ 1293.902048][T25557] perf_swevent_event+0x324/0x630 [ 1293.907129][T25557] ? perf_tp_event+0x1450/0x1450 [ 1293.912109][T25557] ___perf_sw_event+0x4a7/0x730 [ 1293.916992][T25557] ? ___perf_sw_event+0x199/0x730 [ 1293.922043][T25557] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1293.928504][T25557] ? rep_movs_alternative+0x33/0x90 [ 1293.933764][T25557] ? mark_lock+0x94/0x320 [ 1293.938150][T25557] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1293.944292][T25557] ? lock_chain_count+0x20/0x20 [ 1293.949202][T25557] __perf_sw_event+0x139/0x270 [ 1293.954018][T25557] do_user_addr_fault+0x123e/0x12c0 [ 1293.959257][T25557] ? rcu_is_watching+0x15/0xb0 [ 1293.964060][T25557] exc_page_fault+0x64/0x100 [ 1293.968679][T25557] asm_exc_page_fault+0x26/0x30 [ 1293.973559][T25557] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1293.979405][T25557] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 1293.999047][T25557] RSP: 0018:ffffc90010127d50 EFLAGS: 00050202 [ 1294.005144][T25557] RAX: 656c6c616b7a7973 RBX: 0000000000000028 RCX: 0000000000000028 [ 1294.013144][T25557] RDX: 0000000000000000 RSI: ffffc90010127df0 RDI: 0000200000000040 [ 1294.021152][T25557] RBP: ffffc90010127ed8 R08: ffffc90010127e17 R09: 1ffff92002024fc2 [ 1294.029177][T25557] R10: dffffc0000000000 R11: fffff52002024fc3 R12: 0000200000000068 [ 1294.037199][T25557] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc90010127df0 [ 1294.045221][T25557] _copy_to_user+0x85/0xa0 [ 1294.049680][T25557] __tun_chr_ioctl+0xaf6/0x2000 [ 1294.054666][T25557] ? tun_flow_create+0x310/0x310 [ 1294.059656][T25557] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1294.064639][T25557] ? security_file_ioctl+0x80/0xa0 [ 1294.069811][T25557] ? tun_chr_poll+0x630/0x630 [ 1294.074616][T25557] __se_sys_ioctl+0xfd/0x170 [ 1294.079246][T25557] do_syscall_64+0x55/0xa0 [ 1294.083735][T25557] ? clear_bhb_loop+0x40/0x90 [ 1294.088465][T25557] ? clear_bhb_loop+0x40/0x90 [ 1294.093192][T25557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1294.099130][T25557] RIP: 0033:0x7f2706d9c629 [ 1294.103586][T25557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.123230][T25557] RSP: 002b:00007f2707c18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.131689][T25557] RAX: ffffffffffffffda RBX: 00007f2707015fa0 RCX: 00007f2706d9c629 [ 1294.139691][T25557] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000009 [ 1294.147692][T25557] RBP: 00007f2706e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1294.155694][T25557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1294.163694][T25557] R13: 00007f2707016038 R14: 00007f2707015fa0 R15: 00007ffce5dda1d8 [ 1294.172055][T25557] [ 1294.175104][T25557] [ 1294.177449][T25557] Allocated by task 25557: [ 1294.181875][T25557] kasan_set_track+0x4e/0x70 [ 1294.186507][T25557] __kasan_kmalloc+0x8f/0xa0 [ 1294.191262][T25557] __kmalloc_node+0xb4/0x230 [ 1294.195882][T25557] bpf_map_area_alloc+0x5e/0x110 [ 1294.200856][T25557] prealloc_elems_and_freelist+0x86/0x1c0 [ 1294.206608][T25557] stack_map_alloc+0x33a/0x4c0 [ 1294.211411][T25557] map_create+0x877/0x12f0 [ 1294.215853][T25557] __sys_bpf+0x651/0x890 [ 1294.220127][T25557] __x64_sys_bpf+0x7c/0x90 [ 1294.224570][T25557] do_syscall_64+0x55/0xa0 [ 1294.229020][T25557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1294.234948][T25557] [ 1294.237296][T25557] Last potentially related work creation: [ 1294.243034][T25557] kasan_save_stack+0x3e/0x60 [ 1294.247752][T25557] __kasan_record_aux_stack+0xaf/0xc0 [ 1294.253162][T25557] kvfree_call_rcu+0xee/0x790 [ 1294.257870][T25557] trie_update_elem+0xa3f/0xea0 [ 1294.262749][T25557] bpf_map_update_value+0x660/0x720 [ 1294.268233][T25557] generic_map_update_batch+0x5ec/0x810 [ 1294.273806][T25557] bpf_map_do_batch+0x3d7/0x610 [ 1294.278684][T25557] __sys_bpf+0x381/0x890 [ 1294.282968][T25557] __x64_sys_bpf+0x7c/0x90 [ 1294.287411][T25557] do_syscall_64+0x55/0xa0 [ 1294.291857][T25557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1294.297770][T25557] [ 1294.300108][T25557] Second to last potentially related work creation: [ 1294.306728][T25557] kasan_save_stack+0x3e/0x60 [ 1294.311443][T25557] __kasan_record_aux_stack+0xaf/0xc0 [ 1294.316851][T25557] call_rcu+0x153/0x950 [ 1294.321039][T25557] nf_unregister_net_hooks+0xcb/0x130 [ 1294.326458][T25557] brnf_exit_net+0x61/0x120 [ 1294.330988][T25557] cleanup_net+0x70a/0xbb0 [ 1294.335437][T25557] process_scheduled_works+0xa5d/0x15d0 [ 1294.341023][T25557] worker_thread+0xa55/0xfc0 [ 1294.345664][T25557] kthread+0x2fa/0x390 [ 1294.349762][T25557] ret_from_fork+0x48/0x80 [ 1294.354209][T25557] ret_from_fork_asm+0x11/0x20 [ 1294.359004][T25557] [ 1294.361342][T25557] The buggy address belongs to the object at ffff88801c716f00 [ 1294.361342][T25557] which belongs to the cache kmalloc-cg-64 of size 64 [ 1294.375529][T25557] The buggy address is located 16 bytes inside of [ 1294.375529][T25557] allocated 40-byte region [ffff88801c716f00, ffff88801c716f28) [ 1294.389534][T25557] [ 1294.391880][T25557] The buggy address belongs to the physical page: [ 1294.398321][T25557] page:ffffea000071c580 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801c716c00 pfn:0x1c716 [ 1294.409804][T25557] memcg:ffff8880771b1201 [ 1294.414065][T25557] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1294.422069][T25557] page_type: 0xffffffff() [ 1294.426510][T25557] raw: 00fff00000000800 ffff888017c4da00 ffffea0000978540 dead000000000005 [ 1294.435138][T25557] raw: ffff88801c716c00 000000008020001f 00000001ffffffff ffff8880771b1201 [ 1294.443743][T25557] page dumped because: kasan: bad access detected [ 1294.450185][T25557] page_owner tracks the page as allocated [ 1294.455924][T25557] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5780, tgid 5780 (syz-executor), ts 96766279822, free_ts 96765250828 [ 1294.474544][T25557] post_alloc_hook+0x1c1/0x200 [ 1294.479341][T25557] get_page_from_freelist+0x1951/0x19e0 [ 1294.484906][T25557] __alloc_pages+0x1f0/0x460 [ 1294.489542][T25557] alloc_slab_page+0x5d/0x160 [ 1294.494269][T25557] new_slab+0x87/0x2d0 [ 1294.498376][T25557] ___slab_alloc+0xc5d/0x12f0 [ 1294.503101][T25557] __kmem_cache_alloc_node+0x19e/0x250 [ 1294.508603][T25557] kmalloc_trace+0x2a/0xe0 [ 1294.513058][T25557] alloc_fdtable+0xca/0x2c0 [ 1294.517587][T25557] dup_fd+0x786/0xa50 [ 1294.521592][T25557] copy_files+0xc3/0x120 [ 1294.525859][T25557] copy_process+0x15ab/0x3d80 [ 1294.530575][T25557] kernel_clone+0x24b/0x8a0 [ 1294.535113][T25557] __x64_sys_clone+0x1b7/0x230 [ 1294.539903][T25557] do_syscall_64+0x55/0xa0 [ 1294.544361][T25557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1294.550283][T25557] page last free stack trace: [ 1294.554993][T25557] free_unref_page_prepare+0x7b2/0x8c0 [ 1294.560498][T25557] free_unref_page+0x32/0x2e0 [ 1294.565214][T25557] vfree+0x1a6/0x320 [ 1294.569137][T25557] __do_replace+0x858/0x990 [ 1294.573671][T25557] do_ip6t_set_ctl+0xb48/0xe10 [ 1294.578469][T25557] nf_setsockopt+0x263/0x280 [ 1294.583128][T25557] do_sock_setsockopt+0x175/0x1a0 [ 1294.588187][T25557] __x64_sys_setsockopt+0x182/0x200 [ 1294.593425][T25557] do_syscall_64+0x55/0xa0 [ 1294.597879][T25557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1294.603808][T25557] [ 1294.606156][T25557] Memory state around the buggy address: [ 1294.611820][T25557] ffff88801c716e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1294.619912][T25557] ffff88801c716e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1294.627998][T25557] >ffff88801c716f00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1294.636096][T25557] ^ [ 1294.641493][T25557] ffff88801c716f80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1294.649686][T25557] ffff88801c717000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1294.657770][T25557] ================================================================== [ 1294.670683][T25557] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1294.677952][T25557] CPU: 0 PID: 25557 Comm: syz.2.6111 Not tainted syzkaller #0 [ 1294.685449][T25557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1294.695589][T25557] Call Trace: [ 1294.698907][T25557] [ 1294.701886][T25557] dump_stack_lvl+0x18c/0x250 [ 1294.706616][T25557] ? show_regs_print_info+0x20/0x20 [ 1294.712130][T25557] ? load_image+0x400/0x400 [ 1294.716685][T25557] panic+0x2dc/0x730 [ 1294.720622][T25557] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1294.726827][T25557] ? bpf_jit_dump+0xd0/0xd0 [ 1294.731383][T25557] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1294.737318][T25557] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1294.743263][T25557] ? _raw_spin_unlock+0x40/0x40 [ 1294.748597][T25557] ? __bpf_get_stackid+0x6bf/0x900 [ 1294.753764][T25557] check_panic_on_warn+0x84/0xa0 [ 1294.758764][T25557] ? __bpf_get_stackid+0x6bf/0x900 [ 1294.763931][T25557] end_report+0x6f/0x130 [ 1294.768221][T25557] kasan_report+0x128/0x150 [ 1294.772780][T25557] ? __bpf_get_stackid+0x6bf/0x900 [ 1294.777957][T25557] kasan_check_range+0x241/0x290 [ 1294.782987][T25557] ? __bpf_get_stackid+0x6bf/0x900 [ 1294.788167][T25557] __asan_memcpy+0x40/0x70 [ 1294.792643][T25557] __bpf_get_stackid+0x6bf/0x900 [ 1294.797636][T25557] bpf_get_stackid_pe+0x343/0x410 [ 1294.802713][T25557] bpf_prog_16fa1569821187d5+0x29/0x39 [ 1294.808221][T25557] bpf_overflow_handler+0x43f/0x510 [ 1294.813485][T25557] ? bpf_overflow_handler+0xde/0x510 [ 1294.818999][T25557] ? tp_perf_event_destroy+0x20/0x20 [ 1294.824345][T25557] ? __perf_event_account_interrupt+0x187/0x280 [ 1294.830640][T25557] __perf_event_overflow+0x447/0x630 [ 1294.835986][T25557] perf_swevent_event+0x324/0x630 [ 1294.841080][T25557] ? perf_tp_event+0x1450/0x1450 [ 1294.846073][T25557] ___perf_sw_event+0x4a7/0x730 [ 1294.850975][T25557] ? ___perf_sw_event+0x199/0x730 [ 1294.856067][T25557] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1294.862543][T25557] ? rep_movs_alternative+0x33/0x90 [ 1294.867820][T25557] ? mark_lock+0x94/0x320 [ 1294.872207][T25557] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1294.878233][T25557] ? lock_chain_count+0x20/0x20 [ 1294.883137][T25557] __perf_sw_event+0x139/0x270 [ 1294.887959][T25557] do_user_addr_fault+0x123e/0x12c0 [ 1294.893246][T25557] ? rcu_is_watching+0x15/0xb0 [ 1294.898075][T25557] exc_page_fault+0x64/0x100 [ 1294.902713][T25557] asm_exc_page_fault+0x26/0x30 [ 1294.907605][T25557] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1294.913487][T25557] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 1294.933161][T25557] RSP: 0018:ffffc90010127d50 EFLAGS: 00050202 [ 1294.939285][T25557] RAX: 656c6c616b7a7973 RBX: 0000000000000028 RCX: 0000000000000028 [ 1294.947302][T25557] RDX: 0000000000000000 RSI: ffffc90010127df0 RDI: 0000200000000040 [ 1294.955324][T25557] RBP: ffffc90010127ed8 R08: ffffc90010127e17 R09: 1ffff92002024fc2 [ 1294.963347][T25557] R10: dffffc0000000000 R11: fffff52002024fc3 R12: 0000200000000068 [ 1294.971367][T25557] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc90010127df0 [ 1294.979400][T25557] _copy_to_user+0x85/0xa0 [ 1294.983877][T25557] __tun_chr_ioctl+0xaf6/0x2000 [ 1294.988788][T25557] ? tun_flow_create+0x310/0x310 [ 1294.993792][T25557] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1294.998783][T25557] ? security_file_ioctl+0x80/0xa0 [ 1295.003955][T25557] ? tun_chr_poll+0x630/0x630 [ 1295.008691][T25557] __se_sys_ioctl+0xfd/0x170 [ 1295.013333][T25557] do_syscall_64+0x55/0xa0 [ 1295.017805][T25557] ? clear_bhb_loop+0x40/0x90 [ 1295.022535][T25557] ? clear_bhb_loop+0x40/0x90 [ 1295.027262][T25557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.033215][T25557] RIP: 0033:0x7f2706d9c629 [ 1295.037686][T25557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.057345][T25557] RSP: 002b:00007f2707c18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1295.065810][T25557] RAX: ffffffffffffffda RBX: 00007f2707015fa0 RCX: 00007f2706d9c629 [ 1295.073843][T25557] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000009 [ 1295.081868][T25557] RBP: 00007f2706e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1295.089880][T25557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.097900][T25557] R13: 00007f2707016038 R14: 00007f2707015fa0 R15: 00007ffce5dda1d8 [ 1295.105941][T25557] [ 1295.109592][T25557] Kernel Offset: disabled [ 1295.113946][T25557] Rebooting in 86400 seconds..