last executing test programs: 5.27527376s ago: executing program 1 (id=757): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.96794188s ago: executing program 1 (id=751): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200000018050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffc56aaaf8130f647c00b7030000500dff80850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x3c, &(0x7f0000000040)=""/60, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x17, 0x20}, 0x20) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x830) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000001a40)={&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000340)=""/119, 0x77}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/173, 0xad}, {&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f00000017c0)=""/172, 0xac}], 0x7, &(0x7f0000001a00)=""/41, 0x29}, 0x40013120) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="8f00000015006b05c84e21000ab16d8b230675f802000000440002005805530461bc24eeb556a705251e6182149a36c23d1b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) 4.147252197s ago: executing program 1 (id=755): r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xf8, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x4, @perf_config_ext={0x100000001, 0x1}, 0x2000, 0xc79, 0xff, 0x5, 0x0, 0x3, 0x670, 0x0, 0x0, 0x0, 0xc4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.09906089s ago: executing program 1 (id=766): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/447], 0x1c8}, 0x4000c010) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000005200)={0x1d, 0x19, &(0x7f00000006c0)=ANY=[@ANYBLOB="180006000f00000000000000e29ce3001811000059891249448073fa5e2d2caefd50e7b2d7719f735b4d8acd89f7a46d96b296f38fc51f3d7d2b46489523e517ea7806057220c404db2fe020b788ffeb4e6a70b8820530e91283b919e96114fe3a556368031bd036", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184700000700000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], 0x0, 0xffffff80, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xc1b3a6caf9398824, r3, 0x8, &(0x7f0000005100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000005140)={0x0, 0x7, 0xfffffffc, 0x7}, 0x10, 0x0, r2, 0x0, &(0x7f0000005180)=[r3, 0x1], &(0x7f00000051c0), 0x10, 0x6}, 0x94) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}, 0x10002) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000007c0)="76389e147583ddd0579ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x4, 0xa, 0x6, 0x0, 0x3, 0x5060, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x172f5e5b297d1662, 0xfffffffffffffff8, 0x7fffffff, 0x2, 0x6, 0x6, 0x0, 0x0, 0x9, 0x0, 0xf}, 0x0, 0xd, 0xffffffffffffffff, 0x7) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r8}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) 2.875457167s ago: executing program 2 (id=769): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x20000001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x25}, 0x0, 0x0, 0x0, 0x9, 0xd, 0xd, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000307000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x36, &(0x7f00000002c0)=""/54, 0x0, 0x27, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000400)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x421a, r5, 0x2, &(0x7f0000000480)=[r4, r4, r4, r4, r4, r4, r4, r4, r4, r4], &(0x7f00000004c0)=[{0x2, 0x1, 0x9, 0x7}, {0x2, 0x3, 0x0, 0x9}], 0x10, 0x10}, 0x94) 2.076322263s ago: executing program 1 (id=774): r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xf8, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x4, @perf_config_ext={0x100000001, 0x1}, 0x2000, 0xc79, 0xff, 0x5, 0x0, 0x3, 0x670, 0x0, 0x0, 0x0, 0xc4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={&(0x7f0000000440), 0x4}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.013343115s ago: executing program 2 (id=775): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1100"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffb0d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) sendmsg$inet(r7, 0x0, 0x48010) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, 0x0, 0x0}, 0x94) close(r2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@fallback=r4, r3, 0x0, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x7ff, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x80000001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.980312986s ago: executing program 0 (id=776): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) 1.882987529s ago: executing program 0 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'netpci0\x00', @multicast}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.87057046s ago: executing program 3 (id=778): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x104101, 0x10001, 0x0, 0x1, 0x8, 0x10000000, 0x3432}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1, 0xffffffffffffff80}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x28, 0x5, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2], 0x12) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 1.577293729s ago: executing program 2 (id=779): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000000000000018000000000000001001000001"], 0x30}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 1.576911969s ago: executing program 3 (id=780): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.567316179s ago: executing program 0 (id=787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000130000008500000023000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x7, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) 1.429873214s ago: executing program 3 (id=781): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x2000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x2000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x6, &(0x7f0000000000), 0x84) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="5c00000014006b08000000d86e6c1d000a117ea6e070d6060000000000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f003401}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b000000080000000900000003000020010000004a04939de1d5626ccf5bcc1aab8a090774da7a78f177cc25b93c263e52f281588c6818f94fcc966de9e08c03e4397076507107fe74a6a3d01727f450191209cb403db763ae7151b70e1e60e685f77c40144db62d51adfc6a75ffd4c940c32edb28b2a8a938743ffc208f796bdc8214028ff3e0db452b4f0cbc0fed44e959c8eca00ea199a51be0db0f7c99d89280ed8bddcb40dc558b5d07947d3e24d1b4a3b6d8ee9604e258c16872496b2f", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0x8}, 0x10180c, 0x8, 0x25, 0x0, 0x8001, 0x200, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x1, @perf_bp={0x0, 0x8}, 0x10180c, 0x8, 0x25, 0x0, 0x8001, 0x200, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close(r5) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000200), &(0x7f00000002c0)=r5}, 0x20) recvmsg$unix(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x46, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000680)}}, 0xfffffffffffffdac) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8}, &(0x7f00000000c0), &(0x7f0000000180)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000c40)={r12, &(0x7f0000000ac0)="2bf530066564450c82b8cba48bd62ae78fa0709859b5db0dab89ad29cce28c8503bb37664031bc98b047d6b1ca2e6f6417dcc6e24b35ec83ac2334f2adbcd83c1da8bbae52118b5372f70f01e00ee8aedf454873616e3927cb85f3cc412d13ff97cd8342f8151c2ff50f72e765d17ab6aa1f288684ff426ee1c66a0d5317ba85f2b0e80b3e5eecd5b4bf983048cf9f52e484821899152043a7dd0b4313915675715c42f57d0faafb7bcb2a78ccd9e71eef08797af024f6ff9724c1cb0d", &(0x7f0000000b80)=""/153}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x9, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="186000000f0020000000000001000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0xd9, &(0x7f0000000400)=""/217, 0x41000, 0x18, '\x00', r10, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0x2, 0xc2, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000940)=[r9], &(0x7f0000000980)=[{0x4, 0xff, 0x4, 0x2}, {0x2, 0x1, 0x2}, {0x5, 0x4, 0xffffff81, 0x5}, {0x4, 0x5, 0x0, 0x1}, {0x3, 0x5, 0x0, 0x1}, {0x2, 0x5, 0xd}], 0x10, 0x564}, 0x94) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000100000000000000000000850000002a000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000280), &(0x7f0000000140)=r3}, 0x22) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e40)={@fallback=r5, 0x5, 0x0, 0xfffffffe, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000e00)=[0x0]}, 0x40) 1.362243726s ago: executing program 0 (id=782): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x15, &(0x7f0000000040), 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x35, 0x1, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) (async) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r3, r1, 0xa, 0x0, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) 1.360590606s ago: executing program 2 (id=783): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x0, 0x4}, {}, {0x2}, {}, {}, {0x0, 0xfffffffe}]}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000, @value=r0}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, 0x0, 0x24040810) (async) socket$kcm(0x10, 0x3, 0x10) (async) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) mkdir(0x0, 0x90) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r6, 0x0, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14}, 0x8f) 1.145481353s ago: executing program 0 (id=784): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x20000001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x25}, 0x0, 0x0, 0x0, 0x9, 0xd, 0xd, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000f07000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000280)='syzkaller\x00', 0x800, 0x36, &(0x7f00000002c0)=""/54, 0x0, 0x27, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000400)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x421a, r5, 0x2, &(0x7f0000000480)=[r4, r4, r4, r4, r4, r4, r4, r4, r4, r4], &(0x7f00000004c0)=[{0x2, 0x1, 0x9, 0x7}, {0x2, 0x3, 0x0, 0x9}], 0x10, 0x10}, 0x94) 879.998922ms ago: executing program 1 (id=785): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x8008743f, &(0x7f0000000180)) r4 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x1, @ANYBLOB="00000000020000001c00"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES16=r3], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1000"}) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0x4, 0x0, 0xf000000) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="a0005bf8f1", 0x5}, {&(0x7f00000000c0)="d3a2845c", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000640)=""/4096) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0xc}, 0x11950, 0x4854, 0x5, 0x5, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x7d, 0x6, 0x4, 0xc7, 0x0, 0xe74e, 0x20404, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x10, 0x7fff, 0x1, 0x9, 0x793, 0x48, 0x0, 0x0, 0x0, 0x801}, 0xffffffffffffffff, 0x3, r1, 0x1) syz_clone(0x8000500, &(0x7f0000000100)="ff0cbb66c5931823f53ba5139e", 0xd, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001980)="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") socket$kcm(0x2, 0x200000000000001, 0x0) 815.056614ms ago: executing program 2 (id=786): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@bloom_filter={0x1e, 0x8, 0x0, 0xff, 0x1004, 0x1, 0x681, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0xd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000000000000018000000000000001001000001"], 0x30}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 525.532933ms ago: executing program 3 (id=788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@generic={0x71, 0x1, 0x1, 0x7b}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 323.005219ms ago: executing program 0 (id=789): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000000700000000010000000000000800000000000000000100008500000000020000000200000000000000005f4f0018e4eaf16545bdd6118e891b44fdbaeeb8d78d5d5ce4299a613d9dcdab6428213c4a410b2be2475dcd53755f75c93a87db052eec8456d56ede086b762328b6693bfbeb99e640de3fafcd8ba5e54551d6b2e7e38f65ce4e38"], 0x0, 0x4c, 0x0, 0xa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d53888edfff70bf2dfe443b1b5e2a", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000180)}, 0x8000, 0x5, 0x42a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8081, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000000000000007000000890f04630b"], 0x20, 0x5}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f5, &(0x7f0000000000)={'gretap0\x00', @random="010000201000"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x4, @perf_config_ext={0x4, 0x4}, 0x8428, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2, 0x6}, 0x0, 0x7c, 0x0, 0x8, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) 304.68005ms ago: executing program 3 (id=790): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 226.101332ms ago: executing program 2 (id=791): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0xd6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffff0000, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, 0xffffffffffffffff, 0x20000000000, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff44, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0xe7, 0x8, 0x0, 0x0}}, 0xfea8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) socketpair(0x1, 0x1, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r7, 0x58, &(0x7f0000000500)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r9, 0x401, 0x18}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 0s ago: executing program 3 (id=792): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4080000000000007311340000000000000000b7000000000000009500c2000000000095e45700001200007e6c7790a2b9ee1bd008c47d85c4d412fada4a96c06bdfdd518095f3bafd13977b31457fcd83d4e7e767840965377c62215ac22e3e05a2e7ae492529c700e8e1ec006cd2ab8085317658eafa6f9e95cf7e262245f7ea2686379f51045041f092943adb658f630a040e0ec4f6ac6c9084b232028b9153cdcd98719658ed14f62ddf30429b6fba90f5e20e01b65d8e6edc1a143b9fade842b0c7f238f9a824"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r0 = gettid() r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9, 0xf9, 0x4, 0x9, 0x0, 0x7, 0xc010, 0x11, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5804, 0x489}, 0x440, 0x8000000000000000, 0x1, 0x4, 0x7, 0x4, 0xe, 0x0, 0x3}, r0, 0x3, r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4080000000000007311340000000000000000b7000000000000009500c2000000000095e45700001200007e6c7790a2b9ee1bd008c47d85c4d412fada4a96c06bdfdd518095f3bafd13977b31457fcd83d4e7e767840965377c62215ac22e3e05a2e7ae492529c700e8e1ec006cd2ab8085317658eafa6f9e95cf7e262245f7ea2686379f51045041f092943adb658f630a040e0ec4f6ac6c9084b232028b9153cdcd98719658ed14f62ddf30429b6fba90f5e20e01b65d8e6edc1a143b9fade842b0c7f238f9a824"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (async) gettid() (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9, 0xf9, 0x4, 0x9, 0x0, 0x7, 0xc010, 0x11, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5804, 0x489}, 0x440, 0x8000000000000000, 0x1, 0x4, 0x7, 0x4, 0xe, 0x0, 0x3}, r0, 0x3, r1, 0x1) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.23' (ED25519) to the list of known hosts. [ 79.659875][ T5763] cgroup: Unknown subsys name 'net' [ 79.795896][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.474274][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.160106][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.177674][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.187917][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.194479][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.200192][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.204730][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.216553][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.223630][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.224322][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.238107][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.240246][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.246002][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.256703][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.263782][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.275012][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.282719][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.297554][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.297570][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.338129][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.341917][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.353367][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.355016][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.368491][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.376763][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.818510][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.894975][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.993546][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.104914][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.141681][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.149871][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.157710][ T5776] bridge_slave_0: entered allmulticast mode [ 84.165088][ T5776] bridge_slave_0: entered promiscuous mode [ 84.181374][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.188834][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.196078][ T5776] bridge_slave_1: entered allmulticast mode [ 84.203651][ T5776] bridge_slave_1: entered promiscuous mode [ 84.211335][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.221090][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.229526][ T5775] bridge_slave_0: entered allmulticast mode [ 84.239038][ T5775] bridge_slave_0: entered promiscuous mode [ 84.280345][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.288375][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.295750][ T5775] bridge_slave_1: entered allmulticast mode [ 84.303899][ T5775] bridge_slave_1: entered promiscuous mode [ 84.353911][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.361279][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.368655][ T5774] bridge_slave_0: entered allmulticast mode [ 84.375902][ T5774] bridge_slave_0: entered promiscuous mode [ 84.395070][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.402340][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.409953][ T5774] bridge_slave_1: entered allmulticast mode [ 84.417841][ T5774] bridge_slave_1: entered promiscuous mode [ 84.428043][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.440644][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.467915][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.481051][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.578235][ T5775] team0: Port device team_slave_0 added [ 84.588124][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.600673][ T5776] team0: Port device team_slave_0 added [ 84.623161][ T5775] team0: Port device team_slave_1 added [ 84.641813][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.663447][ T5776] team0: Port device team_slave_1 added [ 84.680546][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.687963][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.695505][ T5777] bridge_slave_0: entered allmulticast mode [ 84.702920][ T5777] bridge_slave_0: entered promiscuous mode [ 84.735188][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.742415][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.769742][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.800108][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.807422][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.814685][ T5777] bridge_slave_1: entered allmulticast mode [ 84.822455][ T5777] bridge_slave_1: entered promiscuous mode [ 84.832007][ T5774] team0: Port device team_slave_0 added [ 84.841814][ T5774] team0: Port device team_slave_1 added [ 84.848545][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.855534][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.884680][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.905301][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.912351][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.938798][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.986273][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.997983][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.005067][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.031785][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.079757][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.112448][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.119744][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.145770][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.158970][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.166011][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.193756][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.239541][ T5777] team0: Port device team_slave_0 added [ 85.251966][ T5776] hsr_slave_0: entered promiscuous mode [ 85.259002][ T5776] hsr_slave_1: entered promiscuous mode [ 85.278690][ T5775] hsr_slave_0: entered promiscuous mode [ 85.287168][ T5775] hsr_slave_1: entered promiscuous mode [ 85.293588][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.301883][ T5775] Cannot create hsr debugfs directory [ 85.311835][ T5777] team0: Port device team_slave_1 added [ 85.343010][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.350432][ T5779] Bluetooth: hci0: command tx timeout [ 85.352169][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.382328][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.416993][ T5781] Bluetooth: hci1: command tx timeout [ 85.422708][ T5781] Bluetooth: hci2: command tx timeout [ 85.429171][ T5779] Bluetooth: hci3: command tx timeout [ 85.440321][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.450444][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.476955][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.569290][ T5774] hsr_slave_0: entered promiscuous mode [ 85.576109][ T5774] hsr_slave_1: entered promiscuous mode [ 85.585595][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.593280][ T5774] Cannot create hsr debugfs directory [ 85.661880][ T5777] hsr_slave_0: entered promiscuous mode [ 85.668862][ T5777] hsr_slave_1: entered promiscuous mode [ 85.675194][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.683622][ T5777] Cannot create hsr debugfs directory [ 86.063587][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.092308][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.110662][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.122692][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.181745][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.201035][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.211491][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.223026][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.288808][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.316806][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.338683][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.385435][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.461653][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.472242][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.484289][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.495250][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.635445][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.649381][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.678838][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.723254][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.730819][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.749190][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.770747][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.777949][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.808107][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.815293][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.841420][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.848614][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.894953][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.928028][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.941487][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.980570][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.987936][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.019252][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.049680][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.056968][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.067588][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.074902][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.087058][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.094256][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.426664][ T5779] Bluetooth: hci0: command tx timeout [ 87.496789][ T5779] Bluetooth: hci3: command tx timeout [ 87.502357][ T5779] Bluetooth: hci2: command tx timeout [ 87.506720][ T5781] Bluetooth: hci1: command tx timeout [ 87.672553][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.827201][ T5775] veth0_vlan: entered promiscuous mode [ 87.846158][ T5775] veth1_vlan: entered promiscuous mode [ 87.979249][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.015788][ T5775] veth0_macvtap: entered promiscuous mode [ 88.062236][ T5775] veth1_macvtap: entered promiscuous mode [ 88.122813][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.158783][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.198383][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.240691][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.270987][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.281296][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.292549][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.302671][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.314470][ T5776] veth0_vlan: entered promiscuous mode [ 88.357370][ T5776] veth1_vlan: entered promiscuous mode [ 88.414030][ T5774] veth0_vlan: entered promiscuous mode [ 88.474387][ T5774] veth1_vlan: entered promiscuous mode [ 88.532347][ T5777] veth0_vlan: entered promiscuous mode [ 88.545983][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.562538][ T5776] veth0_macvtap: entered promiscuous mode [ 88.568844][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.589456][ T5776] veth1_macvtap: entered promiscuous mode [ 88.605928][ T5777] veth1_vlan: entered promiscuous mode [ 88.654328][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.672416][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.677722][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.693347][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.705585][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.744370][ T5777] veth0_macvtap: entered promiscuous mode [ 88.755579][ T5777] veth1_macvtap: entered promiscuous mode [ 88.779035][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.793736][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.810972][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.830757][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.843001][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.853445][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.867171][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.895619][ T5774] veth0_macvtap: entered promiscuous mode [ 88.946895][ T5774] veth1_macvtap: entered promiscuous mode [ 88.974996][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.006613][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.031375][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.043431][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.059430][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.114284][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.119895][ C0] hrtimer: interrupt took 78169 ns [ 89.139772][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.151424][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.153003][ T5843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.174118][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.187951][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.203340][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.214283][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.224718][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.237209][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.251904][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.276181][ T5846] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 89.286135][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.309131][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.318282][ T5843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.353169][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.371476][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.381449][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.390753][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.404372][ T5844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.423249][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.434065][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.445736][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.466823][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.478565][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.489795][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.500762][ T5792] Bluetooth: hci0: command tx timeout [ 89.511930][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.576814][ T5792] Bluetooth: hci2: command tx timeout [ 89.583314][ T5781] Bluetooth: hci3: command tx timeout [ 89.589270][ T5779] Bluetooth: hci1: command tx timeout [ 89.597672][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.614683][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.649956][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.661889][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.689569][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.757469][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.865384][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.879373][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.977761][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.985651][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.118737][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.138604][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.201083][ T5856] netlink: 'syz.3.4': attribute type 39 has an invalid length. [ 90.292030][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.318037][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.421073][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.449543][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.679447][ T5850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.355559][ T5862] Zero length message leads to an empty skb [ 91.444008][ T5867] netlink: 'syz.2.8': attribute type 49 has an invalid length. [ 91.551304][ T5864] syzkaller0: entered promiscuous mode [ 91.558803][ T5864] syzkaller0: entered allmulticast mode [ 91.579482][ T5779] Bluetooth: hci0: command tx timeout [ 91.658291][ T5779] Bluetooth: hci2: command tx timeout [ 91.662654][ T5792] Bluetooth: hci3: command tx timeout [ 91.664135][ T5779] Bluetooth: hci1: command tx timeout [ 92.229199][ T27] cfg80211: failed to load regulatory.db [ 92.250688][ T5878] netdevsim netdevsim0: Direct firmware load for %›ŒÑ/syz€ failed with error -2 [ 92.261954][ T5878] netdevsim netdevsim0: Falling back to sysfs fallback for: %›ŒÑ/syz€ [ 92.427004][ T5885] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 94.364323][ T5891] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 94.375382][ T5891] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12'. [ 94.401482][ T5891] hsr0: entered promiscuous mode [ 94.426970][ T5891] bridge0: port 3(hsr0) entered blocking state [ 94.433403][ T5891] bridge0: port 3(hsr0) entered disabled state [ 94.444567][ T5891] hsr0: entered allmulticast mode [ 94.453376][ T5891] hsr_slave_0: entered allmulticast mode [ 94.461825][ T5891] hsr_slave_1: entered allmulticast mode [ 94.471732][ T5891] bridge0: port 3(hsr0) entered blocking state [ 94.478418][ T5891] bridge0: port 3(hsr0) entered forwarding state [ 94.684226][ T5885] syz.2.10 (5885) used greatest stack depth: 19752 bytes left [ 95.541085][ T5911] netlink: 'syz.1.19': attribute type 49 has an invalid length. [ 95.919302][ T5913] syzkaller0: entered promiscuous mode [ 95.925031][ T5913] syzkaller0: entered allmulticast mode [ 95.932669][ T5899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.075269][ T5921] netlink: 'syz.3.21': attribute type 29 has an invalid length. [ 96.532798][ T5921] netlink: 'syz.3.21': attribute type 29 has an invalid length. [ 96.681296][ T5923] netlink: 'syz.3.21': attribute type 29 has an invalid length. [ 96.694501][ T5925] netlink: 'syz.3.21': attribute type 29 has an invalid length. [ 96.725702][ T5926] netlink: 'syz.3.21': attribute type 29 has an invalid length. [ 96.756301][ T5929] netlink: 'syz.3.21': attribute type 29 has an invalid length. [ 97.008434][ T5934] netlink: 'syz.2.23': attribute type 10 has an invalid length. [ 97.024885][ T5934] netlink: 2 bytes leftover after parsing attributes in process `syz.2.23'. [ 97.034174][ T5934] hsr0: entered promiscuous mode [ 97.039754][ T5934] bridge0: port 3(hsr0) entered blocking state [ 97.046225][ T5934] bridge0: port 3(hsr0) entered disabled state [ 97.148568][ T5934] hsr0: entered allmulticast mode [ 97.172341][ T5934] hsr_slave_0: entered allmulticast mode [ 97.196723][ T5934] hsr_slave_1: entered allmulticast mode [ 97.206496][ T5934] bridge0: port 3(hsr0) entered blocking state [ 97.212995][ T5934] bridge0: port 3(hsr0) entered forwarding state [ 98.073358][ T5956] syzkaller0: entered promiscuous mode [ 98.099440][ T5956] syzkaller0: entered allmulticast mode [ 98.419480][ T5961] netlink: 'syz.2.34': attribute type 29 has an invalid length. [ 98.435501][ T5961] netlink: 'syz.2.34': attribute type 29 has an invalid length. [ 98.650563][ T5967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37'. [ 98.782619][ T5967] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 98.836332][ T5965] netlink: 2 bytes leftover after parsing attributes in process `syz.3.36'. [ 98.865270][ T5965] hsr0: entered promiscuous mode [ 98.888482][ T5965] bridge0: port 3(hsr0) entered blocking state [ 98.895982][ T5965] bridge0: port 3(hsr0) entered disabled state [ 98.910272][ T5965] hsr0: entered allmulticast mode [ 98.919144][ T5965] hsr_slave_0: entered allmulticast mode [ 98.928739][ T5965] hsr_slave_1: entered allmulticast mode [ 99.020072][ T5965] bridge0: port 3(hsr0) entered blocking state [ 99.027882][ T5965] bridge0: port 3(hsr0) entered forwarding state [ 100.393289][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.401628][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.461243][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.468617][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.476319][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.483659][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.512915][ T5986] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 100.526035][ T5990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.44'. [ 100.543334][ T5990] ipvlan1: entered promiscuous mode [ 100.553178][ T5990] ipvlan1: entered allmulticast mode [ 100.566933][ T5990] veth0_vlan: entered allmulticast mode [ 100.587135][ T5990] bridge0: port 4(ipvlan1) entered blocking state [ 100.609522][ T5990] bridge0: port 4(ipvlan1) entered disabled state [ 100.634640][ T5990] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 100.869420][ T6003] validate_nla: 9 callbacks suppressed [ 100.869505][ T6003] netlink: 'syz.0.48': attribute type 29 has an invalid length. [ 100.915141][ T6003] netlink: 'syz.0.48': attribute type 29 has an invalid length. [ 101.163027][ T6001] syzkaller0: entered promiscuous mode [ 101.171086][ T6001] syzkaller0: entered allmulticast mode [ 101.186299][ T6005] netlink: 'syz.0.48': attribute type 29 has an invalid length. [ 101.198901][ T6003] netlink: 'syz.0.48': attribute type 29 has an invalid length. [ 101.246113][ T6010] netlink: 'syz.0.48': attribute type 29 has an invalid length. [ 101.382652][ T6005] netlink: 'syz.0.48': attribute type 29 has an invalid length. [ 101.716273][ T6017] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 101.973471][ T6026] netlink: 'syz.0.50': attribute type 10 has an invalid length. [ 102.037747][ T6026] netlink: 2 bytes leftover after parsing attributes in process `syz.0.50'. [ 102.058006][ T6026] hsr0: entered promiscuous mode [ 102.063511][ T6026] bridge0: port 3(hsr0) entered blocking state [ 102.092223][ T6026] bridge0: port 3(hsr0) entered disabled state [ 102.102445][ T6026] hsr0: entered allmulticast mode [ 102.116730][ T6026] hsr_slave_0: entered allmulticast mode [ 102.131083][ T6026] hsr_slave_1: entered allmulticast mode [ 102.168083][ T6026] bridge0: port 3(hsr0) entered blocking state [ 102.174642][ T6026] bridge0: port 3(hsr0) entered forwarding state [ 102.707833][ T6032] netdevsim netdevsim1: Direct firmware load for %›ŒÑ/syz€ failed with error -2 [ 102.762740][ T6032] netdevsim netdevsim1: Falling back to sysfs fallback for: %›ŒÑ/syz€ [ 103.807066][ T6071] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.854039][ T6082] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.73'. [ 106.927288][ T6080] erspan0: entered allmulticast mode [ 107.993675][ T6112] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.79'. [ 108.108275][ T6112] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.79'. [ 108.255513][ T6106] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.79'. [ 108.319508][ T6112] netlink: 'syz.0.79': attribute type 10 has an invalid length. [ 108.380073][ T6112] netlink: 2 bytes leftover after parsing attributes in process `syz.0.79'. [ 108.402081][ T6106] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.79'. [ 108.648357][ T6117] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 108.673178][ T6117] hsr_slave_0: left promiscuous mode [ 108.723756][ T6117] hsr_slave_1: left promiscuous mode [ 108.841107][ T6117] bridge0: port 3(hsr0) entered disabled state [ 108.951492][ T6117] hsr0 (unregistering): left allmulticast mode [ 108.967879][ T6117] bridge0: port 3(hsr0) entered disabled state [ 109.959071][ T6147] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.90'. [ 109.968397][ T6147] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.90'. [ 109.980916][ T6143] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.90'. [ 110.189032][ T6150] FAULT_INJECTION: forcing a failure. [ 110.189032][ T6150] name failslab, interval 1, probability 0, space 0, times 1 [ 110.202503][ T6150] CPU: 1 PID: 6150 Comm: syz.1.92 Not tainted syzkaller #0 [ 110.209791][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 110.219911][ T6150] Call Trace: [ 110.223315][ T6150] [ 110.226284][ T6150] dump_stack_lvl+0x18c/0x250 [ 110.231024][ T6150] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.237241][ T6150] ? show_regs_print_info+0x20/0x20 [ 110.242509][ T6150] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.248759][ T6150] ? dump_stack+0x9/0x20 [ 110.253062][ T6150] should_fail_ex+0x39d/0x4d0 [ 110.257818][ T6150] should_failslab+0x9/0x20 [ 110.262397][ T6150] slab_pre_alloc_hook+0x59/0x310 [ 110.267486][ T6150] ? tomoyo_encode+0x28b/0x540 [ 110.272288][ T6150] ? tomoyo_encode+0x28b/0x540 [ 110.277082][ T6150] __kmem_cache_alloc_node+0x53/0x250 [ 110.282498][ T6150] ? tomoyo_encode+0x28b/0x540 [ 110.287293][ T6150] __kmalloc+0xa4/0x230 [ 110.291488][ T6150] tomoyo_encode+0x28b/0x540 [ 110.296113][ T6150] tomoyo_realpath_from_path+0x592/0x5d0 [ 110.301792][ T6150] tomoyo_path_number_perm+0x248/0x620 [ 110.307290][ T6150] ? tomoyo_path_number_perm+0x217/0x620 [ 110.312952][ T6150] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 110.318438][ T6150] ? perf_trace_preemptirq_template+0xac/0x330 [ 110.324630][ T6150] ? irqentry_enter+0x37/0x50 [ 110.329370][ T6150] ? __fget_files+0x28/0x4b0 [ 110.333994][ T6150] ? __fget_files+0x28/0x4b0 [ 110.338631][ T6150] security_file_ioctl+0x70/0xa0 [ 110.343604][ T6150] __se_sys_ioctl+0x48/0x170 [ 110.348266][ T6150] do_syscall_64+0x55/0xb0 [ 110.352720][ T6150] ? clear_bhb_loop+0x40/0x90 [ 110.357427][ T6150] ? clear_bhb_loop+0x40/0x90 [ 110.362134][ T6150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.368068][ T6150] RIP: 0033:0x7fb5bbf9ce59 [ 110.372526][ T6150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.392163][ T6150] RSP: 002b:00007fb5bcf04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.400613][ T6150] RAX: ffffffffffffffda RBX: 00007fb5bc215fa0 RCX: 00007fb5bbf9ce59 [ 110.408614][ T6150] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 110.416610][ T6150] RBP: 00007fb5bcf04090 R08: 0000000000000000 R09: 0000000000000000 [ 110.424614][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.432613][ T6150] R13: 00007fb5bc216038 R14: 00007fb5bc215fa0 R15: 00007ffeeec52728 [ 110.440627][ T6150] [ 110.562670][ T6143] netlink: 'syz.2.90': attribute type 10 has an invalid length. [ 110.567722][ T6150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.621368][ T6143] netlink: 2 bytes leftover after parsing attributes in process `syz.2.90'. [ 111.422420][ T6177] netlink: 'syz.2.100': attribute type 10 has an invalid length. [ 111.501987][ T6181] FAULT_INJECTION: forcing a failure. [ 111.501987][ T6181] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.526695][ T6181] CPU: 1 PID: 6181 Comm: syz.1.103 Not tainted syzkaller #0 [ 111.534085][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.544370][ T6181] Call Trace: [ 111.547695][ T6181] [ 111.550669][ T6181] dump_stack_lvl+0x18c/0x250 [ 111.555395][ T6181] ? show_regs_print_info+0x20/0x20 [ 111.560635][ T6181] ? load_image+0x420/0x420 [ 111.565194][ T6181] ? __might_fault+0xaa/0x120 [ 111.569930][ T6181] ? __lock_acquire+0x7d40/0x7d40 [ 111.575015][ T6181] should_fail_ex+0x39d/0x4d0 [ 111.579770][ T6181] _copy_from_user+0x2f/0xe0 [ 111.584439][ T6181] get_user_ifreq+0x6b/0x180 [ 111.589110][ T6181] sock_ioctl+0x6f1/0x7e0 [ 111.593496][ T6181] ? sock_poll+0x3e0/0x3e0 [ 111.598091][ T6181] ? bpf_lsm_file_ioctl+0x9/0x10 [ 111.603081][ T6181] ? security_file_ioctl+0x80/0xa0 [ 111.608245][ T6181] ? sock_poll+0x3e0/0x3e0 [ 111.612718][ T6181] __se_sys_ioctl+0xfd/0x170 [ 111.617369][ T6181] do_syscall_64+0x55/0xb0 [ 111.621837][ T6181] ? clear_bhb_loop+0x40/0x90 [ 111.626558][ T6181] ? clear_bhb_loop+0x40/0x90 [ 111.631289][ T6181] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.637284][ T6181] RIP: 0033:0x7fb5bbf9ce59 [ 111.641746][ T6181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.661410][ T6181] RSP: 002b:00007fb5bcf04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.669884][ T6181] RAX: ffffffffffffffda RBX: 00007fb5bc215fa0 RCX: 00007fb5bbf9ce59 [ 111.677910][ T6181] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 111.685945][ T6181] RBP: 00007fb5bcf04090 R08: 0000000000000000 R09: 0000000000000000 [ 111.694015][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.702045][ T6181] R13: 00007fb5bc216038 R14: 00007fb5bc215fa0 R15: 00007ffeeec52728 [ 111.710087][ T6181] [ 111.800396][ T6177] team0: Port device wlan1 added [ 111.830345][ T6183] netlink: 'syz.1.104': attribute type 27 has an invalid length. [ 111.844374][ T6183] netlink: 'syz.1.104': attribute type 4 has an invalid length. [ 111.861701][ T6183] __nla_validate_parse: 1 callbacks suppressed [ 111.861717][ T6183] netlink: 152 bytes leftover after parsing attributes in process `syz.1.104'. [ 112.925415][ T6193] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.106'. [ 113.018436][ T6193] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.106'. [ 113.074043][ T6192] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.106'. [ 113.143592][ T6193] netlink: 'syz.3.106': attribute type 10 has an invalid length. [ 113.152278][ T6193] netlink: 2 bytes leftover after parsing attributes in process `syz.3.106'. [ 113.164781][ T6192] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.106'. [ 113.432712][ T6199] warning: `syz.3.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.445969][ T6200] netlink: 'syz.1.109': attribute type 3 has an invalid length. [ 113.467932][ T6200] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.109'. [ 114.593177][ T6230] FAULT_INJECTION: forcing a failure. [ 114.593177][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.647845][ T6230] CPU: 0 PID: 6230 Comm: syz.3.115 Not tainted syzkaller #0 [ 114.655239][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.665384][ T6230] Call Trace: [ 114.668797][ T6230] [ 114.671775][ T6230] dump_stack_lvl+0x18c/0x250 [ 114.676605][ T6230] ? show_regs_print_info+0x20/0x20 [ 114.681867][ T6230] ? load_image+0x420/0x420 [ 114.686421][ T6230] ? __might_fault+0xaa/0x120 [ 114.691154][ T6230] ? __lock_acquire+0x7d40/0x7d40 [ 114.696245][ T6230] should_fail_ex+0x39d/0x4d0 [ 114.701000][ T6230] _copy_from_user+0x2f/0xe0 [ 114.705654][ T6230] br_dev_siocdevprivate+0x119/0x1540 [ 114.711120][ T6230] ? rcu_is_watching+0x15/0xb0 [ 114.715944][ T6230] ? br_handle_local_finish+0x20/0x20 [ 114.721463][ T6230] ? trace_contention_end+0x39/0xe0 [ 114.726720][ T6230] ? __mutex_lock+0x315/0xcc0 [ 114.731460][ T6230] ? dev_load+0x21/0x1f0 [ 114.735758][ T6230] ? dev_ioctl+0x83c/0x1140 [ 114.740315][ T6230] ? __lock_acquire+0x7d40/0x7d40 [ 114.745384][ T6230] ? mutex_lock_nested+0x20/0x20 [ 114.750363][ T6230] ? full_name_hash+0x92/0xe0 [ 114.755115][ T6230] ? dev_ifsioc+0x958/0xc40 [ 114.759679][ T6230] dev_ioctl+0x84c/0x1140 [ 114.764066][ T6230] sock_ioctl+0x74c/0x7e0 [ 114.768455][ T6230] ? sock_poll+0x3e0/0x3e0 [ 114.772949][ T6230] ? bpf_lsm_file_ioctl+0x9/0x10 [ 114.777926][ T6230] ? security_file_ioctl+0x80/0xa0 [ 114.783075][ T6230] ? sock_poll+0x3e0/0x3e0 [ 114.787539][ T6230] __se_sys_ioctl+0xfd/0x170 [ 114.792178][ T6230] do_syscall_64+0x55/0xb0 [ 114.796633][ T6230] ? clear_bhb_loop+0x40/0x90 [ 114.801354][ T6230] ? clear_bhb_loop+0x40/0x90 [ 114.806068][ T6230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.812012][ T6230] RIP: 0033:0x7f541a39ce59 [ 114.816471][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.836131][ T6230] RSP: 002b:00007f541b2f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.844600][ T6230] RAX: ffffffffffffffda RBX: 00007f541a616090 RCX: 00007f541a39ce59 [ 114.852641][ T6230] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 114.860656][ T6230] RBP: 00007f541b2f0090 R08: 0000000000000000 R09: 0000000000000000 [ 114.868718][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.876713][ T6230] R13: 00007f541a616128 R14: 00007f541a616090 R15: 00007ffd625b3828 [ 114.884740][ T6230] [ 115.057025][ T6234] netlink: 'syz.1.117': attribute type 29 has an invalid length. [ 115.097720][ T6234] netlink: 'syz.1.117': attribute type 29 has an invalid length. [ 115.173074][ T6238] netlink: 'syz.1.117': attribute type 2 has an invalid length. [ 115.212859][ T6238] netlink: 'syz.1.117': attribute type 8 has an invalid length. [ 115.244530][ T6238] netlink: 132 bytes leftover after parsing attributes in process `syz.1.117'. [ 115.596867][ T6246] netlink: 'syz.2.120': attribute type 5 has an invalid length. [ 116.484472][ T6260] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 116.547452][ T6260] netlink: 'syz.3.124': attribute type 2 has an invalid length. [ 116.624851][ T6260] netlink: 132 bytes leftover after parsing attributes in process `syz.3.124'. [ 117.471098][ T6272] FAULT_INJECTION: forcing a failure. [ 117.471098][ T6272] name failslab, interval 1, probability 0, space 0, times 0 [ 117.499290][ T6272] CPU: 0 PID: 6272 Comm: syz.1.128 Not tainted syzkaller #0 [ 117.506678][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 117.516788][ T6272] Call Trace: [ 117.520109][ T6272] [ 117.523080][ T6272] dump_stack_lvl+0x18c/0x250 [ 117.527931][ T6272] ? show_regs_print_info+0x20/0x20 [ 117.533278][ T6272] ? load_image+0x420/0x420 [ 117.537833][ T6272] ? __might_sleep+0xe0/0xe0 [ 117.542478][ T6272] ? __lock_acquire+0x7d40/0x7d40 [ 117.547574][ T6272] should_fail_ex+0x39d/0x4d0 [ 117.552323][ T6272] should_failslab+0x9/0x20 [ 117.556905][ T6272] slab_pre_alloc_hook+0x59/0x310 [ 117.561996][ T6272] ? br_dev_siocdevprivate+0x623/0x1540 [ 117.567602][ T6272] ? br_dev_siocdevprivate+0x623/0x1540 [ 117.573306][ T6272] __kmem_cache_alloc_node+0x53/0x250 [ 117.578767][ T6272] ? br_dev_siocdevprivate+0x623/0x1540 [ 117.584730][ T6272] __kmalloc+0xa4/0x230 [ 117.588954][ T6272] br_dev_siocdevprivate+0x623/0x1540 [ 117.594388][ T6272] ? br_handle_local_finish+0x20/0x20 [ 117.599819][ T6272] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.606034][ T6272] ? lockdep_hardirqs_on+0x98/0x150 [ 117.611302][ T6272] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.617539][ T6272] ? dev_ifsioc+0x958/0xc40 [ 117.622122][ T6272] dev_ioctl+0x84c/0x1140 [ 117.626519][ T6272] sock_ioctl+0x74c/0x7e0 [ 117.630910][ T6272] ? sock_poll+0x3e0/0x3e0 [ 117.635442][ T6272] ? bpf_lsm_file_ioctl+0x9/0x10 [ 117.640432][ T6272] ? security_file_ioctl+0x80/0xa0 [ 117.645590][ T6272] ? sock_poll+0x3e0/0x3e0 [ 117.650060][ T6272] __se_sys_ioctl+0xfd/0x170 [ 117.654711][ T6272] do_syscall_64+0x55/0xb0 [ 117.659189][ T6272] ? clear_bhb_loop+0x40/0x90 [ 117.663914][ T6272] ? clear_bhb_loop+0x40/0x90 [ 117.668646][ T6272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.674620][ T6272] RIP: 0033:0x7fb5bbf9ce59 [ 117.679097][ T6272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.698770][ T6272] RSP: 002b:00007fb5bcee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.707262][ T6272] RAX: ffffffffffffffda RBX: 00007fb5bc216090 RCX: 00007fb5bbf9ce59 [ 117.715292][ T6272] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 117.723327][ T6272] RBP: 00007fb5bcee3090 R08: 0000000000000000 R09: 0000000000000000 [ 117.731355][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.739390][ T6272] R13: 00007fb5bc216128 R14: 00007fb5bc216090 R15: 00007ffeeec52728 [ 117.747442][ T6272] [ 119.122794][ T6282] netlink: 134736 bytes leftover after parsing attributes in process `syz.2.131'. [ 119.154256][ T6282] netlink: 9039 bytes leftover after parsing attributes in process `syz.2.131'. [ 119.214516][ T6282] netlink: 'syz.2.131': attribute type 29 has an invalid length. [ 119.238702][ T6282] netlink: 'syz.2.131': attribute type 29 has an invalid length. [ 119.656026][ T6294] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.137'. [ 119.783448][ T6298] netlink: 'syz.1.136': attribute type 10 has an invalid length. [ 119.809439][ T6298] hsr_slave_0: left promiscuous mode [ 119.872648][ T6298] hsr_slave_1: left promiscuous mode [ 119.940606][ T6298] bridge0: port 3(hsr0) entered disabled state [ 120.060238][ T6298] hsr0 (unregistering): left allmulticast mode [ 120.074797][ T6298] bridge0: port 3(hsr0) entered disabled state [ 120.148615][ T6300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.139'. [ 120.176304][ T6302] FAULT_INJECTION: forcing a failure. [ 120.176304][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 120.196649][ T6302] CPU: 0 PID: 6302 Comm: syz.2.138 Not tainted syzkaller #0 [ 120.204028][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.214142][ T6302] Call Trace: [ 120.217469][ T6302] [ 120.220442][ T6302] dump_stack_lvl+0x18c/0x250 [ 120.225200][ T6302] ? show_regs_print_info+0x20/0x20 [ 120.230453][ T6302] ? load_image+0x420/0x420 [ 120.235007][ T6302] ? __might_sleep+0xe0/0xe0 [ 120.239653][ T6302] ? __lock_acquire+0x7d40/0x7d40 [ 120.244736][ T6302] should_fail_ex+0x39d/0x4d0 [ 120.249490][ T6302] should_failslab+0x9/0x20 [ 120.254044][ T6302] slab_pre_alloc_hook+0x59/0x310 [ 120.259222][ T6302] ? br_dev_siocdevprivate+0x623/0x1540 [ 120.264815][ T6302] ? br_dev_siocdevprivate+0x623/0x1540 [ 120.270410][ T6302] __kmem_cache_alloc_node+0x53/0x250 [ 120.275838][ T6302] ? br_dev_siocdevprivate+0x623/0x1540 [ 120.281432][ T6302] __kmalloc+0xa4/0x230 [ 120.285643][ T6302] br_dev_siocdevprivate+0x623/0x1540 [ 120.291046][ T6302] ? do_raw_spin_unlock+0x121/0x230 [ 120.296276][ T6302] ? br_handle_local_finish+0x20/0x20 [ 120.301675][ T6302] ? __mutex_lock+0x956/0xcc0 [ 120.306390][ T6302] ? __mutex_lock+0x4f9/0xcc0 [ 120.311111][ T6302] ? dev_ioctl+0x83c/0x1140 [ 120.315666][ T6302] ? mutex_lock_nested+0x20/0x20 [ 120.320698][ T6302] ? full_name_hash+0x92/0xe0 [ 120.325434][ T6302] ? dev_ifsioc+0x958/0xc40 [ 120.329991][ T6302] dev_ioctl+0x84c/0x1140 [ 120.334368][ T6302] sock_ioctl+0x74c/0x7e0 [ 120.338737][ T6302] ? sock_poll+0x3e0/0x3e0 [ 120.343196][ T6302] ? __se_sys_ioctl+0x53/0x170 [ 120.348002][ T6302] ? sock_poll+0x3e0/0x3e0 [ 120.352465][ T6302] __se_sys_ioctl+0xfd/0x170 [ 120.357096][ T6302] do_syscall_64+0x55/0xb0 [ 120.361554][ T6302] ? clear_bhb_loop+0x40/0x90 [ 120.366257][ T6302] ? clear_bhb_loop+0x40/0x90 [ 120.370960][ T6302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.376896][ T6302] RIP: 0033:0x7f64a399ce59 [ 120.381357][ T6302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.401161][ T6302] RSP: 002b:00007f64a490f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.409613][ T6302] RAX: ffffffffffffffda RBX: 00007f64a3c15fa0 RCX: 00007f64a399ce59 [ 120.417632][ T6302] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 120.425645][ T6302] RBP: 00007f64a490f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.433641][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.441640][ T6302] R13: 00007f64a3c16038 R14: 00007f64a3c15fa0 R15: 00007ffedf731148 [ 120.449661][ T6302] [ 120.753992][ T6311] netlink: 'syz.0.141': attribute type 21 has an invalid length. [ 120.775487][ T6311] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.798074][ T6311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.806090][ T6311] IPv6: NLM_F_CREATE should be set when creating new route [ 120.814085][ T6311] IPv6: NLM_F_CREATE should be set when creating new route [ 120.821694][ T6311] IPv6: NLM_F_CREATE should be set when creating new route [ 121.192604][ T6321] netlink: 'syz.1.145': attribute type 2 has an invalid length. [ 121.238556][ T6321] netlink: 'syz.1.145': attribute type 8 has an invalid length. [ 121.277276][ T6321] netlink: 132 bytes leftover after parsing attributes in process `syz.1.145'. [ 121.541521][ T6335] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.147'. [ 121.638705][ T6337] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.149'. [ 122.454420][ T6363] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.157'. [ 122.797252][ T6380] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 122.860192][ T6380] netlink: 40 bytes leftover after parsing attributes in process `syz.3.160'. [ 122.875739][ T6380] ipvlan1: entered promiscuous mode [ 122.881628][ T6380] ipvlan1: entered allmulticast mode [ 122.936516][ T6380] veth0_vlan: entered allmulticast mode [ 122.981238][ T6380] bridge0: port 4(ipvlan1) entered blocking state [ 123.042514][ T6380] bridge0: port 4(ipvlan1) entered disabled state [ 123.069599][ T6380] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 123.278657][ T6389] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.165'. [ 126.033586][ T6434] __nla_validate_parse: 1 callbacks suppressed [ 126.033607][ T6434] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.178'. [ 126.135885][ T6434] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 126.316345][ T6441] netlink: 'syz.0.180': attribute type 10 has an invalid length. [ 126.346763][ T6441] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.180'. [ 128.508752][ T6487] netlink: 'syz.3.197': attribute type 10 has an invalid length. [ 128.606124][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.653398][ T6487] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.283994][ T6502] netlink: 'syz.2.202': attribute type 153 has an invalid length. [ 129.302594][ T6502] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.202'. [ 129.453449][ T6506] C: renamed from team_slave_0 (while UP) [ 129.569148][ T6506] netlink: 'syz.3.203': attribute type 3 has an invalid length. [ 129.616813][ T6506] netlink: 148 bytes leftover after parsing attributes in process `syz.3.203'. [ 130.311854][ T6513] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.205'. [ 132.466391][ T6545] netlink: 144 bytes leftover after parsing attributes in process `syz.2.214'. [ 132.637041][ T6551] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.215'. [ 133.192100][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.199289][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.238771][ T6581] netlink: 'syz.3.226': attribute type 29 has an invalid length. [ 134.277156][ T6581] netlink: 'syz.3.226': attribute type 29 has an invalid length. [ 134.318817][ T6581] netlink: 'syz.3.226': attribute type 29 has an invalid length. [ 134.871941][ T6597] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 135.161949][ T6597] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 135.864232][ T6623] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.609123][ T6687] netlink: 'syz.3.255': attribute type 10 has an invalid length. [ 138.617700][ T6687] netlink: 2 bytes leftover after parsing attributes in process `syz.3.255'. [ 138.879130][ T6695] netlink: 'syz.1.258': attribute type 5 has an invalid length. [ 139.860867][ T6713] syz.3.263 uses obsolete (PF_INET,SOCK_PACKET) [ 141.915029][ T6763] netlink: 'syz.2.279': attribute type 7 has an invalid length. [ 142.097791][ T6770] netlink: 'syz.1.282': attribute type 21 has an invalid length. [ 142.113176][ T6770] netlink: 'syz.1.282': attribute type 12 has an invalid length. [ 142.121674][ T6770] netlink: 'syz.1.282': attribute type 13 has an invalid length. [ 142.130671][ T6770] netlink: 'syz.1.282': attribute type 14 has an invalid length. [ 142.142192][ T6770] netlink: 'syz.1.282': attribute type 15 has an invalid length. [ 142.154452][ T6770] netlink: 'syz.1.282': attribute type 16 has an invalid length. [ 142.163534][ T6770] netlink: 'syz.1.282': attribute type 21 has an invalid length. [ 142.176529][ T6770] netlink: 'syz.1.282': attribute type 22 has an invalid length. [ 142.184422][ T6770] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.282'. [ 142.257079][ T6773] netlink: 'syz.3.283': attribute type 9 has an invalid length. [ 142.282139][ T6773] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.283'. [ 142.498210][ T6777] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.285'. [ 144.197176][ T6796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.275544][ T6796] netlink: 132 bytes leftover after parsing attributes in process `syz.0.292'. [ 145.634769][ T6828] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 145.681952][ T6828] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 147.469809][ T6853] netlink: 10 bytes leftover after parsing attributes in process `syz.0.319'. [ 148.512602][ T6900] syzkaller0: left promiscuous mode [ 148.518422][ T6900] syzkaller0: left allmulticast mode [ 148.878519][ T6908] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 148.886252][ T6908] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.329'. [ 148.906617][ T6908] netlink: 9 bytes leftover after parsing attributes in process `syz.2.329'. [ 149.041048][ T6911] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 149.103601][ T6911] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.120971][ T6911] bond0: (slave team0): Enslaving as an active interface with an up link [ 151.049098][ T6954] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.255977][ T6990] bridge_slave_1: left allmulticast mode [ 152.270188][ T6990] bridge_slave_1: left promiscuous mode [ 152.279777][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.323768][ T6995] netlink: 'syz.0.350': attribute type 1 has an invalid length. [ 152.339569][ T6995] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.350'. [ 152.400575][ T6990] bridge_slave_0: left allmulticast mode [ 152.511977][ T6990] bridge_slave_0: left promiscuous mode [ 152.752059][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.257694][ T7029] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 154.265520][ T7029] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.362'. [ 154.275497][ T7029] netlink: 9 bytes leftover after parsing attributes in process `syz.1.362'. [ 154.690177][ T7038] Dead loop on virtual device ip6_vti0, fix it urgently! [ 156.571459][ T7072] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 156.633420][ T7072] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.376'. [ 156.642990][ T7072] netlink: 9 bytes leftover after parsing attributes in process `syz.3.376'. [ 157.011222][ T7080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.377'. [ 157.955497][ T7107] netlink: 188 bytes leftover after parsing attributes in process `syz.1.385'. [ 158.086522][ T7105] netlink: 'syz.3.387': attribute type 13 has an invalid length. [ 158.117790][ T7105] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.387'. [ 158.184599][ T7105] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.387'. [ 158.194510][ T7105] openvswitch: netlink: Duplicate key (type 0). [ 158.205003][ T7105] netlink: 'syz.3.387': attribute type 21 has an invalid length. [ 158.213110][ T7105] netlink: 128 bytes leftover after parsing attributes in process `syz.3.387'. [ 158.224423][ T7105] netlink: 'syz.3.387': attribute type 4 has an invalid length. [ 158.412353][ T7114] netlink: 'syz.2.388': attribute type 17 has an invalid length. [ 158.423285][ T7114] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 159.292263][ T7125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.025521][ T7154] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.400'. [ 160.988743][ T7173] syzkaller0: entered promiscuous mode [ 161.004890][ T7173] syzkaller0: entered allmulticast mode [ 161.628323][ T7190] netlink: 'syz.0.410': attribute type 10 has an invalid length. [ 162.267520][ T7202] netlink: 'syz.0.414': attribute type 13 has an invalid length. [ 162.280515][ T7202] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.414'. [ 162.403347][ T7202] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.414'. [ 162.466130][ T7202] openvswitch: netlink: Duplicate key (type 0). [ 163.062839][ T7216] netlink: 'syz.0.414': attribute type 21 has an invalid length. [ 163.086649][ T7216] netlink: 128 bytes leftover after parsing attributes in process `syz.0.414'. [ 163.095784][ T7216] netlink: 'syz.0.414': attribute type 4 has an invalid length. [ 163.282143][ T7229] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.419'. [ 163.293172][ T7229] netlink: 'syz.1.419': attribute type 4 has an invalid length. [ 163.662643][ T7235] netlink: 60 bytes leftover after parsing attributes in process `syz.3.422'. [ 164.290833][ T7258] netlink: 'syz.2.430': attribute type 13 has an invalid length. [ 164.299702][ T7258] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.430'. [ 164.469226][ T7261] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.430'. [ 164.531972][ T7261] openvswitch: netlink: Duplicate key (type 0). [ 164.849716][ T7261] netlink: 'syz.2.430': attribute type 21 has an invalid length. [ 164.862668][ T7261] netlink: 128 bytes leftover after parsing attributes in process `syz.2.430'. [ 164.873031][ T7261] netlink: 'syz.2.430': attribute type 4 has an invalid length. [ 165.607267][ T7284] netlink: 14 bytes leftover after parsing attributes in process `syz.1.435'. [ 165.622726][ T7282] netlink: 'syz.3.434': attribute type 2 has an invalid length. [ 165.634849][ T7282] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.434'. [ 165.713115][ T7285] netlink: 14 bytes leftover after parsing attributes in process `syz.1.435'. [ 165.821152][ T7288] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.434'. [ 165.844328][ T7288] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 165.865568][ T7288] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 165.888409][ T7288] bridge0: port 3(hsr0) entered disabled state [ 165.895043][ T7288] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.902929][ T7288] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.934945][ T7288] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 166.004164][ T7288] bridge0: port 3(hsr0) entered blocking state [ 166.010639][ T7288] bridge0: port 3(hsr0) entered forwarding state [ 166.017371][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.024616][ T7288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.032255][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.039554][ T7288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.089550][ T7288] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 166.643971][ T7305] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan1 (while UP) [ 167.999704][ T7351] netlink: 'syz.3.452': attribute type 21 has an invalid length. [ 168.191441][ T7361] __nla_validate_parse: 1 callbacks suppressed [ 168.191457][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.459'. [ 168.630642][ T7375] netlink: 'syz.2.463': attribute type 2 has an invalid length. [ 168.666851][ T7375] netlink: 119 bytes leftover after parsing attributes in process `syz.2.463'. [ 168.909423][ T7388] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.469'. [ 168.982032][ T7392] netlink: 188 bytes leftover after parsing attributes in process `syz.1.471'. [ 168.993446][ T7394] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.472'. [ 170.199044][ T7427] netlink: 164 bytes leftover after parsing attributes in process `syz.0.483'. [ 170.891055][ T7438] netlink: 'syz.2.488': attribute type 6 has an invalid length. [ 170.972724][ T7438] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.488'. [ 171.473652][ T7448] netlink: 'syz.3.490': attribute type 21 has an invalid length. [ 172.426506][ T7479] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.501'. [ 172.435829][ T7479] openvswitch: netlink: Key type 4112 is out of range max 32 [ 173.441505][ T7509] netlink: 'syz.3.511': attribute type 13 has an invalid length. [ 173.476633][ T7509] netlink: 152 bytes leftover after parsing attributes in process `syz.3.511'. [ 173.530304][ T7509] : renamed from C (while UP) [ 175.540312][ T7547] syzkaller0: left promiscuous mode [ 175.546017][ T7547] syzkaller0: left allmulticast mode [ 175.644800][ T7547] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.521'. [ 175.841688][ T7552] netlink: 68 bytes leftover after parsing attributes in process `syz.1.524'. [ 176.832507][ T7570] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.531'. [ 176.857534][ T7570] netlink: zone id is out of range [ 176.862756][ T7570] netlink: zone id is out of range [ 176.870623][ T7570] netlink: zone id is out of range [ 176.875815][ T7570] netlink: zone id is out of range [ 176.884020][ T7570] netlink: zone id is out of range [ 176.889831][ T7570] netlink: zone id is out of range [ 176.895220][ T7570] netlink: zone id is out of range [ 176.901066][ T7570] netlink: zone id is out of range [ 176.906860][ T7570] netlink: zone id is out of range [ 177.002618][ T7576] raw_sendmsg: syz.2.532 forgot to set AF_INET. Fix it! [ 178.424655][ T5779] Bluetooth: hci3: Malformed LE Event: 0x1d [ 178.975484][ T7639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.547'. [ 179.159243][ T7643] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.551'. [ 180.496532][ T7664] netlink: 'syz.2.556': attribute type 22 has an invalid length. [ 180.799894][ T7676] netlink: 128 bytes leftover after parsing attributes in process `syz.0.561'. [ 180.928037][ T7676] net_ratelimit: 332 callbacks suppressed [ 180.928117][ T7676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.301592][ T7704] netlink: 'syz.0.566': attribute type 10 has an invalid length. [ 182.320701][ T7704] netlink: 2 bytes leftover after parsing attributes in process `syz.0.566'. [ 182.825051][ T7725] netlink: 10 bytes leftover after parsing attributes in process `syz.0.574'. [ 182.834642][ T7716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.572'. [ 182.900687][ T7716] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.572'. [ 182.976648][ T7725] netlink: 'syz.0.574': attribute type 11 has an invalid length. [ 183.009489][ T7725] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.574'. [ 183.099778][ T7731] sit0: entered allmulticast mode [ 183.130375][ T7731] sit0: entered promiscuous mode [ 188.818337][ T7776] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.588'. [ 188.860988][ T7780] netlink: 'syz.2.589': attribute type 10 has an invalid length. [ 188.872103][ T7780] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.589'. [ 189.374688][ T7788] netlink: 76 bytes leftover after parsing attributes in process `syz.0.591'. [ 189.478388][ T7792] syzkaller0: entered promiscuous mode [ 189.488502][ T7792] syzkaller0: entered allmulticast mode [ 191.087305][ T7812] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 191.100262][ T7812] team0: Port device wlan1 added [ 191.110211][ T7811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.309240][ T7815] veth0_to_bridge: entered allmulticast mode [ 191.347665][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.789554][ T7841] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.613'. [ 191.826091][ T7823] syzkaller0: left promiscuous mode [ 191.865805][ T7838] syzkaller0: left allmulticast mode [ 192.080080][ T7847] netlink: 'syz.3.608': attribute type 3 has an invalid length. [ 192.092454][ T7847] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 192.101831][ T7847] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.608'. [ 193.245886][ T7875] netlink: 128 bytes leftover after parsing attributes in process `syz.2.616'. [ 193.336024][ T7875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.080196][ T7875] syz.2.616 (7875) used greatest stack depth: 18856 bytes left [ 194.678177][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.684634][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.328694][ T7924] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.622'. [ 195.338148][ T7924] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.622'. [ 195.347911][ T7915] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.622'. [ 195.369068][ T7915] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.622'. [ 195.458396][ T7915] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 195.497895][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.622'. [ 195.539928][ T7915] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 195.553700][ T7915] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.616318][ T7915] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 195.822929][ T7934] netlink: 'syz.1.632': attribute type 2 has an invalid length. [ 195.834414][ T7934] netlink: 'syz.1.632': attribute type 8 has an invalid length. [ 195.846256][ T7934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.632'. [ 195.867181][ T7937] syzkaller0: entered promiscuous mode [ 195.872736][ T7937] syzkaller0: entered allmulticast mode [ 196.160367][ T7947] @ÿ: renamed from bond_slave_0 (while UP) [ 196.188125][ T7948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.635'. [ 196.216316][ T7948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.635'. [ 196.243510][ T7944] netlink: 60 bytes leftover after parsing attributes in process `syz.0.635'. [ 196.315660][ T7944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.488231][ T8017] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.659'. [ 200.822103][ T8084] netlink: 128 bytes leftover after parsing attributes in process `syz.2.678'. [ 200.847155][ T8084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.082387][ T8091] netlink: 826 bytes leftover after parsing attributes in process `syz.0.681'. [ 202.469076][ T8125] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.693'. [ 204.189692][ T8168] netlink: 'syz.3.706': attribute type 10 has an invalid length. [ 204.233712][ T8168] netlink: 40 bytes leftover after parsing attributes in process `syz.3.706'. [ 204.267737][ T8168] caif0: entered promiscuous mode [ 204.294506][ T8168] caif0: entered allmulticast mode [ 204.338899][ T8168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.622107][ T8174] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.707'. [ 204.650344][ T8174] netlink: zone id is out of range [ 204.659916][ T8174] netlink: zone id is out of range [ 204.665747][ T8174] netlink: zone id is out of range [ 204.722862][ T8174] netlink: zone id is out of range [ 204.742114][ T8174] netlink: zone id is out of range [ 204.760156][ T8174] netlink: zone id is out of range [ 204.783101][ T8174] netlink: zone id is out of range [ 204.795578][ T8174] netlink: zone id is out of range [ 205.035480][ T8184] netlink: 144 bytes leftover after parsing attributes in process `syz.1.710'. [ 206.699369][ T8210] netlink: 'syz.1.719': attribute type 2 has an invalid length. [ 206.736467][ T8210] netlink: 150748 bytes leftover after parsing attributes in process `syz.1.719'. [ 207.182645][ T8220] netlink: 'syz.0.721': attribute type 22 has an invalid length. [ 207.226522][ T8220] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.721'. [ 207.256687][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 207.262793][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 207.269022][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 207.275071][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 207.881793][ T8232] netlink: 'syz.2.724': attribute type 2 has an invalid length. [ 207.906566][ T8232] netlink: 51 bytes leftover after parsing attributes in process `syz.2.724'. [ 208.451104][ T8254] netlink: 'syz.2.729': attribute type 10 has an invalid length. [ 208.473403][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.729'. [ 208.490653][ T8254] batadv0: entered promiscuous mode [ 208.501913][ T8254] batadv0: entered allmulticast mode [ 208.515898][ T8254] bridge0: port 4(batadv0) entered blocking state [ 208.542314][ T8254] bridge0: port 4(batadv0) entered disabled state [ 208.568728][ T8254] bridge0: port 4(batadv0) entered blocking state [ 208.575422][ T8254] bridge0: port 4(batadv0) entered forwarding state [ 208.955700][ T1141] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 208.966025][ T1141] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 212.693254][ T8330] netlink: 'syz.1.751': attribute type 2 has an invalid length. [ 212.754321][ T8330] netlink: 51 bytes leftover after parsing attributes in process `syz.1.751'. [ 212.820299][ T8338] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 212.851349][ T8338] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.752'. [ 213.540396][ T8360] netlink: 'syz.2.759': attribute type 3 has an invalid length. [ 213.562121][ T8360] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.759'. [ 213.616762][ T8360] netlink: 'syz.2.759': attribute type 33 has an invalid length. [ 213.631826][ T8360] netlink: 164 bytes leftover after parsing attributes in process `syz.2.759'. [ 214.257106][ T51] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 214.258518][ T51] Bluetooth: hci0: hardware error 0x0f [ 214.554859][ T8380] netlink: 'syz.0.765': attribute type 2 has an invalid length. [ 214.562917][ T8380] netlink: 51 bytes leftover after parsing attributes in process `syz.0.765'. [ 214.754968][ T8391] netlink: 'syz.3.770': attribute type 2 has an invalid length. [ 214.796649][ T8391] netlink: 'syz.3.770': attribute type 8 has an invalid length. [ 214.816637][ T8391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.770'. [ 214.836167][ T8392] netlink: 14078 bytes leftover after parsing attributes in process `syz.3.770'. [ 215.318697][ T8411] netlink: 'syz.3.778': attribute type 25 has an invalid length. [ 215.340709][ T8411] netlink: 'syz.3.778': attribute type 28 has an invalid length. [ 215.344225][ T8409] netlink: 'syz.2.775': attribute type 3 has an invalid length. [ 215.377678][ T8409] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.775'. [ 215.995279][ T8428] team0: Device hsr_slave_0 failed to register rx_handler [ 216.297574][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 216.731545][ T8441] net_ratelimit: 334 callbacks suppressed [ 216.731583][ T8441] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 217.548342][ T8459] ================================================================== [ 217.556500][ T8459] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 217.564373][ T8459] Write of size 32 at addr ffff88802bf38290 by task syz.2.791/8459 [ 217.572305][ T8459] [ 217.574675][ T8459] CPU: 1 PID: 8459 Comm: syz.2.791 Not tainted syzkaller #0 [ 217.582115][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 217.592223][ T8459] Call Trace: [ 217.595546][ T8459] [ 217.598522][ T8459] dump_stack_lvl+0x18c/0x250 [ 217.603260][ T8459] ? __lock_acquire+0x7d40/0x7d40 [ 217.608339][ T8459] ? show_regs_print_info+0x20/0x20 [ 217.613598][ T8459] ? load_image+0x420/0x420 [ 217.618161][ T8459] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 217.623690][ T8459] ? __virt_addr_valid+0x18c/0x540 [ 217.628862][ T8459] ? __virt_addr_valid+0x469/0x540 [ 217.634035][ T8459] print_report+0xa8/0x210 [ 217.638510][ T8459] ? __bpf_get_stackid+0x6bf/0x900 [ 217.643680][ T8459] kasan_report+0x117/0x150 [ 217.648237][ T8459] ? __bpf_get_stackid+0x6bf/0x900 [ 217.653393][ T8459] kasan_check_range+0x241/0x290 [ 217.658364][ T8459] ? __bpf_get_stackid+0x6bf/0x900 [ 217.663520][ T8459] __asan_memcpy+0x40/0x70 [ 217.668001][ T8459] __bpf_get_stackid+0x6bf/0x900 [ 217.673016][ T8459] bpf_get_stackid_pe+0x2f0/0x410 [ 217.678083][ T8459] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 217.683606][ T8459] bpf_overflow_handler+0x1fc/0x510 [ 217.688850][ T8459] ? trace_call_bpf+0xc3/0x6c0 [ 217.693661][ T8459] ? bpf_overflow_handler+0xde/0x510 [ 217.698985][ T8459] ? tp_perf_event_destroy+0x20/0x20 [ 217.704401][ T8459] ? perf_trace_preemptirq_template+0xac/0x330 [ 217.710622][ T8459] ? __perf_event_account_interrupt+0x187/0x280 [ 217.716917][ T8459] __perf_event_overflow+0x447/0x630 [ 217.722314][ T8459] perf_swevent_event+0x319/0x570 [ 217.727379][ T8459] ? perf_tp_event+0x1520/0x1520 [ 217.732351][ T8459] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 217.738307][ T8459] ___perf_sw_event+0x4a7/0x730 [ 217.743205][ T8459] ? ___perf_sw_event+0x199/0x730 [ 217.748260][ T8459] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 217.754729][ T8459] ? perf_trace_preemptirq_template+0xac/0x330 [ 217.760929][ T8459] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 217.766943][ T8459] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.772180][ T8459] ? lock_chain_count+0x20/0x20 [ 217.777071][ T8459] __perf_sw_event+0x139/0x270 [ 217.781868][ T8459] do_user_addr_fault+0x123e/0x12c0 [ 217.787104][ T8459] ? rcu_is_watching+0x15/0xb0 [ 217.791933][ T8459] exc_page_fault+0x64/0x100 [ 217.796572][ T8459] ? clear_bhb_loop+0x40/0x90 [ 217.801288][ T8459] asm_exc_page_fault+0x26/0x30 [ 217.806451][ T8459] RIP: 0033:0x7ffedf7d3a21 [ 217.810904][ T8459] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 217.830550][ T8459] RSP: 002b:00007f64a490eff0 EFLAGS: 00010202 [ 217.836662][ T8459] RAX: 001d5a2bff28d9fe RBX: 00007ffedf7cf0b0 RCX: 0000000000000018 [ 217.844666][ T8459] RDX: 000000001deb65fd RSI: 00007f64a490f0b0 RDI: 7fffffffffffffff [ 217.852665][ T8459] RBP: 00007f64a490f030 R08: 00000000000000d9 R09: 0000000000745d1e [ 217.860660][ T8459] R10: 000000716961588a R11: 000000000000a210 R12: 0000000000000010 [ 217.868659][ T8459] R13: 00007f64a3c16038 R14: 00007ffedf7cf080 R15: 000000000000a210 [ 217.876699][ T8459] [ 217.879742][ T8459] [ 217.882087][ T8459] Allocated by task 8459: [ 217.886435][ T8459] kasan_set_track+0x4e/0x70 [ 217.891064][ T8459] __kasan_kmalloc+0x8f/0xa0 [ 217.895683][ T8459] __kmalloc_node+0xb4/0x230 [ 217.900306][ T8459] bpf_map_area_alloc+0x5e/0x110 [ 217.905283][ T8459] prealloc_elems_and_freelist+0x86/0x1c0 [ 217.911036][ T8459] stack_map_alloc+0x33a/0x4c0 [ 217.915847][ T8459] map_create+0x877/0x12f0 [ 217.920313][ T8459] __sys_bpf+0x651/0x890 [ 217.924589][ T8459] __x64_sys_bpf+0x7c/0x90 [ 217.929040][ T8459] do_syscall_64+0x55/0xb0 [ 217.933497][ T8459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.939424][ T8459] [ 217.941765][ T8459] Last potentially related work creation: [ 217.947499][ T8459] kasan_save_stack+0x3e/0x60 [ 217.952202][ T8459] __kasan_record_aux_stack+0xaf/0xc0 [ 217.957607][ T8459] call_rcu+0x153/0x950 [ 217.961793][ T8459] __nf_register_net_hook+0x788/0x910 [ 217.967225][ T8459] nf_register_net_hook+0xb2/0x190 [ 217.972372][ T8459] nf_register_net_hooks+0x44/0x1b0 [ 217.977599][ T8459] nf_ct_netns_do_get+0x213/0x5c0 [ 217.982661][ T8459] nf_ct_netns_inet_get+0x3b/0x150 [ 217.987828][ T8459] nf_conncount_init+0x127/0x380 [ 217.992793][ T8459] ovs_ct_init+0x316/0x490 [ 217.997263][ T8459] ovs_init_net+0x1e6/0x250 [ 218.001805][ T8459] ops_init+0x397/0x640 [ 218.005988][ T8459] setup_net+0x3b6/0xa30 [ 218.010266][ T8459] copy_net_ns+0x36d/0x5e0 [ 218.014712][ T8459] create_new_namespaces+0x3d3/0x6f0 [ 218.020031][ T8459] copy_namespaces+0x430/0x4a0 [ 218.024837][ T8459] copy_process+0x1724/0x3dc0 [ 218.029558][ T8459] kernel_clone+0x24b/0x8a0 [ 218.034097][ T8459] __x64_sys_clone+0x1b7/0x230 [ 218.038902][ T8459] do_syscall_64+0x55/0xb0 [ 218.043349][ T8459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.049360][ T8459] [ 218.051708][ T8459] Second to last potentially related work creation: [ 218.058396][ T8459] kasan_save_stack+0x3e/0x60 [ 218.063099][ T8459] __kasan_record_aux_stack+0xaf/0xc0 [ 218.068497][ T8459] call_rcu+0x153/0x950 [ 218.072687][ T8459] nf_unregister_net_hooks+0xcb/0x130 [ 218.078094][ T8459] cleanup_net+0x70a/0xbb0 [ 218.082538][ T8459] process_scheduled_works+0xa5d/0x15d0 [ 218.088118][ T8459] worker_thread+0xa55/0xfc0 [ 218.092732][ T8459] kthread+0x2fa/0x390 [ 218.096825][ T8459] ret_from_fork+0x48/0x80 [ 218.101289][ T8459] ret_from_fork_asm+0x11/0x20 [ 218.106112][ T8459] [ 218.108474][ T8459] The buggy address belongs to the object at ffff88802bf38280 [ 218.108474][ T8459] which belongs to the cache kmalloc-cg-64 of size 64 [ 218.123439][ T8459] The buggy address is located 16 bytes inside of [ 218.123439][ T8459] allocated 40-byte region [ffff88802bf38280, ffff88802bf382a8) [ 218.137453][ T8459] [ 218.139802][ T8459] The buggy address belongs to the physical page: [ 218.146255][ T8459] page:ffffea0000afce00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bf38 [ 218.156447][ T8459] memcg:ffff888025b58801 [ 218.160715][ T8459] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 218.168667][ T8459] page_type: 0xffffffff() [ 218.173071][ T8459] raw: 00fff00000000800 ffff888017c4da00 ffffea000072c080 dead000000000003 [ 218.181689][ T8459] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888025b58801 [ 218.190299][ T8459] page dumped because: kasan: bad access detected [ 218.196780][ T8459] page_owner tracks the page as allocated [ 218.202613][ T8459] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5777, tgid 5777 (syz-executor), ts 148703494704, free_ts 148702855204 [ 218.221056][ T8459] post_alloc_hook+0x1c1/0x200 [ 218.225864][ T8459] get_page_from_freelist+0x1951/0x19e0 [ 218.232221][ T8459] __alloc_pages+0x1f0/0x460 [ 218.236845][ T8459] alloc_slab_page+0x5d/0x160 [ 218.241553][ T8459] new_slab+0x87/0x2d0 [ 218.245843][ T8459] ___slab_alloc+0xc5d/0x12f0 [ 218.250560][ T8459] __kmem_cache_alloc_node+0x19e/0x250 [ 218.256072][ T8459] kmalloc_trace+0x2a/0xe0 [ 218.260527][ T8459] alloc_fdtable+0xca/0x2c0 [ 218.265062][ T8459] dup_fd+0x786/0xa50 [ 218.269079][ T8459] copy_files+0xc3/0x120 [ 218.273345][ T8459] copy_process+0x15ab/0x3dc0 [ 218.278073][ T8459] kernel_clone+0x24b/0x8a0 [ 218.282611][ T8459] __x64_sys_clone+0x1b7/0x230 [ 218.287398][ T8459] do_syscall_64+0x55/0xb0 [ 218.291840][ T8459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.297769][ T8459] page last free stack trace: [ 218.302461][ T8459] free_unref_page_prepare+0x7b2/0x8c0 [ 218.307954][ T8459] free_unref_page+0x32/0x2e0 [ 218.312666][ T8459] vfree+0x1a6/0x320 [ 218.316601][ T8459] __do_replace+0x858/0x990 [ 218.321176][ T8459] do_ip6t_set_ctl+0xb48/0xe10 [ 218.325979][ T8459] nf_setsockopt+0x263/0x280 [ 218.330598][ T8459] do_sock_setsockopt+0x175/0x1a0 [ 218.335649][ T8459] __x64_sys_setsockopt+0x182/0x200 [ 218.340890][ T8459] do_syscall_64+0x55/0xb0 [ 218.345441][ T8459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.351377][ T8459] [ 218.353729][ T8459] Memory state around the buggy address: [ 218.359382][ T8459] ffff88802bf38180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 218.367465][ T8459] ffff88802bf38200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 218.375551][ T8459] >ffff88802bf38280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 218.383652][ T8459] ^ [ 218.389080][ T8459] ffff88802bf38300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 218.397188][ T8459] ffff88802bf38380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 218.405269][ T8459] ================================================================== [ 218.413446][ T8459] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 218.420664][ T8459] CPU: 1 PID: 8459 Comm: syz.2.791 Not tainted syzkaller #0 [ 218.427978][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.438142][ T8459] Call Trace: [ 218.441445][ T8459] [ 218.444395][ T8459] dump_stack_lvl+0x18c/0x250 [ 218.449107][ T8459] ? show_regs_print_info+0x20/0x20 [ 218.454332][ T8459] ? load_image+0x420/0x420 [ 218.458873][ T8459] panic+0x2dc/0x730 [ 218.462805][ T8459] ? __lock_acquire+0x7d40/0x7d40 [ 218.468037][ T8459] ? bpf_jit_dump+0xd0/0xd0 [ 218.472604][ T8459] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 218.478537][ T8459] ? _raw_spin_unlock+0x40/0x40 [ 218.483433][ T8459] ? __bpf_get_stackid+0x6bf/0x900 [ 218.488579][ T8459] check_panic_on_warn+0x84/0xa0 [ 218.493551][ T8459] ? __bpf_get_stackid+0x6bf/0x900 [ 218.498699][ T8459] end_report+0x6f/0x130 [ 218.502973][ T8459] kasan_report+0x128/0x150 [ 218.507512][ T8459] ? __bpf_get_stackid+0x6bf/0x900 [ 218.512660][ T8459] kasan_check_range+0x241/0x290 [ 218.517652][ T8459] ? __bpf_get_stackid+0x6bf/0x900 [ 218.522826][ T8459] __asan_memcpy+0x40/0x70 [ 218.527295][ T8459] __bpf_get_stackid+0x6bf/0x900 [ 218.532344][ T8459] bpf_get_stackid_pe+0x2f0/0x410 [ 218.537439][ T8459] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 218.542953][ T8459] bpf_overflow_handler+0x1fc/0x510 [ 218.548216][ T8459] ? trace_call_bpf+0xc3/0x6c0 [ 218.553031][ T8459] ? bpf_overflow_handler+0xde/0x510 [ 218.558354][ T8459] ? tp_perf_event_destroy+0x20/0x20 [ 218.563674][ T8459] ? perf_trace_preemptirq_template+0xac/0x330 [ 218.569876][ T8459] ? __perf_event_account_interrupt+0x187/0x280 [ 218.576156][ T8459] __perf_event_overflow+0x447/0x630 [ 218.581477][ T8459] perf_swevent_event+0x319/0x570 [ 218.586631][ T8459] ? perf_tp_event+0x1520/0x1520 [ 218.591606][ T8459] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 218.597549][ T8459] ___perf_sw_event+0x4a7/0x730 [ 218.602431][ T8459] ? ___perf_sw_event+0x199/0x730 [ 218.607492][ T8459] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 218.614135][ T8459] ? perf_trace_preemptirq_template+0xac/0x330 [ 218.620333][ T8459] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 218.626353][ T8459] ? _raw_spin_unlock_irq+0x23/0x50 [ 218.631607][ T8459] ? lock_chain_count+0x20/0x20 [ 218.636497][ T8459] __perf_sw_event+0x139/0x270 [ 218.641310][ T8459] do_user_addr_fault+0x123e/0x12c0 [ 218.646549][ T8459] ? rcu_is_watching+0x15/0xb0 [ 218.651362][ T8459] exc_page_fault+0x64/0x100 [ 218.655984][ T8459] ? clear_bhb_loop+0x40/0x90 [ 218.660772][ T8459] asm_exc_page_fault+0x26/0x30 [ 218.665672][ T8459] RIP: 0033:0x7ffedf7d3a21 [ 218.670125][ T8459] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 218.689772][ T8459] RSP: 002b:00007f64a490eff0 EFLAGS: 00010202 [ 218.695871][ T8459] RAX: 001d5a2bff28d9fe RBX: 00007ffedf7cf0b0 RCX: 0000000000000018 [ 218.703877][ T8459] RDX: 000000001deb65fd RSI: 00007f64a490f0b0 RDI: 7fffffffffffffff [ 218.711881][ T8459] RBP: 00007f64a490f030 R08: 00000000000000d9 R09: 0000000000745d1e [ 218.719962][ T8459] R10: 000000716961588a R11: 000000000000a210 R12: 0000000000000010 [ 218.727959][ T8459] R13: 00007f64a3c16038 R14: 00007ffedf7cf080 R15: 000000000000a210 [ 218.735971][ T8459] [ 218.739601][ T8459] Kernel Offset: disabled [ 218.743963][ T8459] Rebooting in 86400 seconds..