last executing test programs: 9.944858566s ago: executing program 4 (id=1402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r6) write$cgroup_devices(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 9.216104126s ago: executing program 1 (id=1408): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc6004000f000a7403000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 6.320666185s ago: executing program 1 (id=1411): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000180)=""/196, 0xc4}], 0x2, &(0x7f00000002c0)=""/97, 0x61}, 0x102) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x2404c8c5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004cc1) 6.221697412s ago: executing program 3 (id=1413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r6) write$cgroup_devices(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 6.015613926s ago: executing program 2 (id=1414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x20040000, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) 5.793503402s ago: executing program 0 (id=1415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x5a1c, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x100002, 0x0) 5.728008336s ago: executing program 2 (id=1416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="1c000000180081064e81f782db4cb90402200800fe02fe02e8fe50a1", 0x1c}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3d50, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000008c0)={&(0x7f0000000780)="68e0b2ccaa26a645454dbfe66ee3e338d9350303ac499bd254272fe1cb10430e645ba1d1960ddaf11bccfdfae5672b67b342e66184fd218b5e76b6f93853e22511f28abc43c3ff5af897744b7f9b5ce44535a22992fc715a07dd69ab", &(0x7f0000000800)=""/61, &(0x7f0000000840)="6bcb689b64230ab02d38e6a06c818475ef04be350549e9a3ef47c8496aed45a25bcc18a2a90ace795d10ee55e3e70236be474e89", &(0x7f0000000880)="4f592edee02c52c224b7e12fc88cc5112830ab020301ed68c1d922520c9d4f728189d704afbf0a2ce4b8a5a59379630c367600", 0x4, r0}, 0x38) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x3, 0x0, 0x8000, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="82eb00000919c0ff000063e348069d2546563956400004000000950000000000000071ed7191998297a364e24c58e462ad8fe087eb422b1b71bb11e203b833e69f2eea3259003cd5fa88fdf6659398f9ea307d65c85bc46315dba880dcad1f9f7e0b5b37a1369b3af19613ead6026df8fff03622bc3c797ff99ff82fafc17c301650b0"], &(0x7f0000000440)='GPL\x00', 0x0, 0x1, &(0x7f0000000500)=""/1, 0x1f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xc, 0x800, 0x3}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x5, 0x4, 0x5, 0x6}, {0x4, 0x5, 0x10, 0x2}, {0x0, 0x4, 0x2, 0xb}, {0x5, 0x1, 0x9, 0x3}], 0x10, 0x567b}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r5, r4, 0x2, 0x14, 0x0, @void, @value=r7, @void, @void, r6}, 0x20) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r8, r2, 0x2c, 0x34, 0x0, @void, @void, @void, @value=r9, r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r0}, &(0x7f0000001080), &(0x7f00000001c0)=r2}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000002100)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 5.5217812s ago: executing program 0 (id=1417): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYBLOB="1c"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5.250822129s ago: executing program 1 (id=1418): socket$kcm(0xa, 0x5, 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) socket$kcm(0xa, 0x7, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103d00000000007d400500000000002604000001ed00000f030000000000007c440000000000006b0a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c26fc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) (async) socket$kcm(0x1e, 0x4, 0x0) (async) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0xa, 0x3, 0xff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0xc, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x1) (async, rerun: 64) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) (rerun: 64) 5.021096884s ago: executing program 1 (id=1419): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext={0x9ae0067}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x18, 0x110, 0x2, 0xfffffffe}}], 0x18}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0xed61}, 0x8) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="0500000000000000000000b02159e0500eba7ae800", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x10000, 0x400000, 0x3, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000040)=""/215, 0xd7}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f00000003c0)=""/99, 0x63}], 0x4, &(0x7f0000000500)=""/56, 0x38}, 0x40000120) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r0, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x2, '\x00', r6, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) 2.434300463s ago: executing program 0 (id=1420): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ffe100000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x84, &(0x7f00000005c0)=""/132}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002900)={0xffffffffffffffff, &(0x7f00000018c0)="700ba0218f72a0ae24dd738c9bc76875f95ebf55f8498bc2941adfeca0c640be4a185c694a6f4997395667084d858373889bdd", &(0x7f0000001900)=""/4096, 0x4}, 0x20) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/4126, 0x101e}], 0x1}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="660a00000000000061117d00d019ad6b85000000440000090000000000000000f401d0d3576cdbd9b6fdcc4fa202c68290dec8e30631396cbca95bf4912166cd57fe6b9045f1755b0dd66ad35b680ae69944df39c00ab91e1088960839c664368c615c8b329ed4f8c87ee28f83f4841cf0eaf20f28ca468c1f3c5bc0a1628fb90bb107f51c7d4ae0a1ea95fe8ea4be93f2e7dbbd577ed263c6091c0aa72e77f8897634e18aeb30bfc9baaf8a3a4af2b164fef80d4372710d23d6b08169e0711461e3b32571768ef66e225a4bf0e15bfcfbaa816fbe0e6ab1c51cbe147428d27440c69287ee60b67c6b537c52b6940c10f4a78aba3fee57ff7255877a21d2254eaaa09af9b23d4f3a8c74bd71fa030600de44c974a24238cd7ec6cc2051da53583f7b9b21d590f1c9b14e63a4fa1cceddf727302f5db6fb3dc7388706314e958b0f8240be17f331a4a0a0f1817441cb05bb68f64db3c1a09fb1d3bb752d681537282feed8f3237e2fa51078650dbf0a1c1caf104c6b00ced28752b387bf07349e81d1ae9d9b208123619b17690a3e7f0a4bcf84"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x1, &(0x7f0000000440)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000001680)='syzkaller\x00', 0x82b, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001700)={0x2, 0xc, 0x3503, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001740)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1, 0xffffffffffffffff], &(0x7f0000001780)=[{0x4, 0x5, 0x10, 0x5}, {0x3, 0x1, 0xd, 0x6}, {0x0, 0x3, 0xb, 0x4}, {0x5, 0x1, 0x3, 0x9}, {0x2, 0x2, 0x7, 0x3}], 0x10, 0xb}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2201}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r0}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$kcm(0x29, 0x5, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='memory.swap.events\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001600)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xfffffffa, '\x00', r6, r7, 0x1, 0x4, 0x4}, 0x50) 2.337927459s ago: executing program 2 (id=1421): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000030000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x5, 0xfb, 0x3, 0xf3, 0x0, 0x9e8c, 0x8, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x672b18a9, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x110a4, 0x2, 0x0, 0x7, 0x0, 0xfffffffe, 0xd, 0x0, 0x806, 0x0, 0x2}, 0xffffffffffffffff, 0xe, r0, 0xa) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x3c, &(0x7f0000000040), 0x3b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000080000000}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, 0x0, 0x20000884) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91a24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2bc}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) 2.307382791s ago: executing program 4 (id=1422): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000880)=r0, 0x4) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010000)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32, @ANYBLOB="0000fdffffff0000000000000000000000000001a8000000240000000000e7268073782d80d410536387e6"], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000100c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, r3, 0x4, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000010400)={r2, 0x58, &(0x7f0000010380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000010540)={0xf, 0x1f, &(0x7f0000010140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xd11}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @tail_call, @jmp={0x5, 0x0, 0x3, 0x6, 0x5, 0xfffffffffffffff8, 0x10}, @cb_func={0x18, 0x18, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}]}, &(0x7f0000010280)='syzkaller\x00', 0x6, 0x81, &(0x7f00000102c0)=""/129, 0x40f00, 0x4, '\x00', r6, @fallback=0x1d, r3, 0x8, &(0x7f0000010440)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000010480)={0x2, 0xe, 0x2, 0x9}, 0x10, 0xffffffffffffffff, r3, 0x1, &(0x7f00000104c0)=[r3], &(0x7f0000010500)=[{0x1, 0x5, 0xb, 0x5}], 0x10, 0x2}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r8 = socket$kcm(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r11, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 2.276121823s ago: executing program 3 (id=1423): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x4}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00'}) syz_clone(0x6010000, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x9, 0x5, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x10005ff}, 0x0, 0x403, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020756c25000000000f2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002080000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x60040, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000440)={'veth0_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x44}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=r3], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1790b4f19797b34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r4}, 0x20) 2.181719629s ago: executing program 0 (id=1424): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xf1, 0x1, 0xe0, 0xff, 0x0, 0x80000000, 0x20801, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe005, 0x1, @perf_config_ext={0x7, 0x5}, 0x4, 0x6, 0x2, 0x2, 0x9, 0x20000000, 0x4, 0x0, 0xffc00000, 0x0, 0x6}) r2 = openat$cgroup_int(r1, &(0x7f0000000b80)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x202, 0x12) 2.024728051s ago: executing program 0 (id=1425): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x98, 0x0, 0x0, 0xfffffffffffffffd, 0x2e045, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x10c002, 0xac5d, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000200)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000005c0)="d7b96243fa0aa2cf211fe24dd6e8363dd33d822c0f5d1d0496c5f3f124dad02361749d00b944f84428d06c033f85361025c5c5264128d6909c1a8b308c245358e3cbae92f0630852c1b33878b905a95841c80d3d3823", 0x56}, {&(0x7f0000000640)="60b55c39eab4eb03aeb078ddfc4d5267e6f3933b2a9a205c29de98db15244bb63f6e9ddcb7f53b5c93ad50ceea9bc92a0de3bbf03fabcf60d87f4a1c8dbf135581d114cd2ee2aae8d51db96d1f364054106f7de7c0316aeef01e8bafbf8ad18f14016f60c6e6367cbfb30fea946119b5416a5a7f0d14fa9de613c37f0aabc61a9f4cfc27720b90a799ec2b8f74b7e7bab3362fca89b4ef79332e69e2ff14e304967a4d93245aa826d1b9ca75802f30d8e854a615926dcf4c2d34aa4d15eb63d11d029e2e4027c23c3b19bc50e242b84dc772c77cf4b2d14c2cd59a0da453e579004d7419671eac9d21", 0xe9}, {&(0x7f0000000840)="e95bb114dc1d00cd0a67e260f7a4a6085124d9f5c921cc79a248a0854c2b31b03dfd26a84f1dd391edd88945cbb5ac21bc932021b30d377a16f244d20b25b92fbc6a383cff4440c14c59db920226923532986775332d2aadefefaa4aff57a125187768d7dc765fa56c2cd5877dd9f6c66834b0c828f0413e78ab9b3ff92e71dc94f509799e7b12ec0bccddc869f4ad5e2dea871ffc893b9e979d770bcc0669a81f95c027f654ef9f311ff9ba52ad47c6f93945c43940b6388ef8750790ef45470e4cd504dc46b6b9e408db1a", 0xcc}, {&(0x7f0000000400)="b171ecf8fa4a45925df815", 0xb}, {&(0x7f0000000c40)="efe661dd07a65bdc1f1827baa6b57070b13b5d08223a18f61744ce507d16dd356e26fcd96f613f9cc23a9fb0aa2046f9d716f8b5b0e01cde07783a8fce4293eb9b4042ad611139fde2cb6ff01a01bcf08db64cbdb1271809973167e1054d0752c72fd16514a43da7419517f53d85591aaeabe62f56473173583c90c4adb960c88d39af495a58308437f5b6f213bb9c96bbbb2b6bd99907c41d92098601dfac49e83c57c9e247287076bac297f9f6149402b87a7b4967fe508b1623f76832eb41f80b", 0xc2}], 0x5, &(0x7f0000001840)=ANY=[@ANYRES32=r0], 0x90}, 0x20040010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r3) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000040) recvmsg(0xffffffffffffffff, 0x0, 0x102) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0xa74b18b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80768c63940d0124fc602f6e35400c000200001e000037153e370a000180dce4ba6f070000000206006ccdeb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) 1.921082697s ago: executing program 1 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200050085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x72bd864b82156744}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r3}, 0xc) 1.853793423s ago: executing program 3 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000010000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x20040000, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) 1.852293013s ago: executing program 2 (id=1428): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x18, 0x80000, 0x9, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) 1.812980705s ago: executing program 4 (id=1429): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000300000000000008050000000000000001000004a60100000300000004000000000000000100000000000012050008000400000000000012030000000600000000000010080000000061726a95"], 0x0, 0x67}, 0x28) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4020940d, &(0x7f0000000080)) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="020700090200001fe4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 1.753778939s ago: executing program 1 (id=1430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r5) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.244807904s ago: executing program 2 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000503d0000000000000600000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f00000013c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r0}, &(0x7f0000001080), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000002100)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.206207937s ago: executing program 4 (id=1432): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="00001082f54c7de5e4f595379f4ab697a5c4788b6c7e45302d807f83b8e8b2bfe0a3cb4be9f57376839b54b8d1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000010040000000000000000000009010000000000000001000005000000000000000002"], 0x0, 0x4a}, 0x28) socket$kcm(0x29, 0x7, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x1df7}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x0, 0x3, [@broadcast, @dev, @remote]}) 1.122362012s ago: executing program 0 (id=1433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r6) write$cgroup_devices(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.109547114s ago: executing program 3 (id=1434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xa2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xa2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x800, 0x169911bf578c68dd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x40001, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe51e}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') 860.96459ms ago: executing program 4 (id=1435): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xf1, 0x1, 0xe0, 0xff, 0x0, 0x80000000, 0x20801, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe005, 0x1, @perf_config_ext={0x7, 0x5}, 0x4, 0x6, 0x2, 0x2, 0x9, 0x20000000, 0x4, 0x0, 0xffc00000, 0x0, 0x6}) r2 = openat$cgroup_int(r1, &(0x7f0000000b80)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x202, 0x12) 621.595947ms ago: executing program 4 (id=1436): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="105449e0cc52ee3d1d60f882c3f5cf321f91ca40ee40212c74f2821aa728b92b99597b6e8553cde845d39dfd2d52fb512ba46686278562da2d58be34af6cd6e870999aa45e0dc1edf75ca89d51d46266eebe12873d36dac25a5ee9936296575f70e2b44388ad0fe0b6a4fd1200a2e129c8251bc8a7", @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES8=r1, @ANYRESDEC=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000100)}, 0x28) 578.25119ms ago: executing program 3 (id=1437): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x5}, @ldst={0x1, 0x2, 0x0, 0x6, 0x6, 0xffffffffffffffff, 0x1}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000340), 0x0}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb6, 0xb6, 0x3, [@enum64={0x7, 0x7, 0x0, 0x13, 0x1, 0x0, [{0xe, 0xd9f, 0xc3a1}, {0x5, 0xd4d, 0x5}, {0x3, 0xff, 0x7fc}, {0x8, 0x0, 0x9}, {0x7, 0x7, 0x2}, {0x4, 0x3, 0x1}, {0x8, 0x5, 0x3}]}, @datasec={0x9, 0x6, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x8}, {0x2, 0x8001, 0x7fffffff}, {0x2, 0x8, 0x9}, {0x5, 0x7f, 0x101}, {0x1, 0x7, 0x4}, {0x2, 0x100, 0xffff}], "47cc"}]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/227, 0xd3, 0xe3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x18, 0x4169, 0x1, 0x0, 0x20, r0, 0xba7, '\x00', 0x0, r1, 0x4, 0x1}, 0x50) 21.466668ms ago: executing program 2 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f0000000300)="a88dce", &(0x7f00000005c0)=""/127, &(0x7f0000000400), &(0x7f0000000640), 0x4, r3}, 0x38) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, 0xc0000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x1ff}, 0x2, 0x5, 0x4f, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0xc35) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x11}, 0x94) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, 0x0, 0x600) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) write$cgroup_subtree(r8, &(0x7f0000000240)={[{0x2b, 'net_prio'}, {0x2d, 'memory'}, {0x2b, 'memory'}, {0x2b, 'cpuset'}, {0x2d, 'memory'}, {0x2b, 'pids'}, {0x2b, 'pids'}, {0x2d, 'net_prio'}, {0x2b, 'net_prio'}, {0x2d, 'blkio'}]}, 0x51) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=1439): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e80)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x5, 0x16, &(0x7f0000000840)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @generic={0x4, 0x5, 0x4, 0x83, 0x8}, @alu={0x4, 0x1, 0x1, 0xb, 0x6, 0xffffffffffffffc0, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0xf79e}], &(0x7f0000000900)='syzkaller\x00', 0x800, 0x58, &(0x7f0000000940)=""/88, 0x40f00, 0x33, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x2, 0xf, 0x275c, 0x6b67f573}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000f80)=[r1, r2, 0x1], &(0x7f0000000fc0)=[{0x4, 0x4, 0x7, 0xc}, {0x5, 0x5, 0x10, 0x7}, {0x4, 0x2, 0x5, 0x1}, {0x1, 0x2, 0xd, 0x3}, {0x2, 0x3, 0x7, 0x8}, {0x3, 0x3, 0xa, 0x4}, {0x5, 0x5, 0x1, 0xa}, {0x1, 0x1, 0xf, 0xb}, {0x5, 0x1, 0x5, 0x7}, {0x2, 0x2, 0xf}], 0x10, 0xba}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0xfdef) write$cgroup_devices(r4, &(0x7f0000000000)={'a', ' *:* ', 'rw\x00'}, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000380dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r8 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x40000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="d00000ff00000000dd0a000000000000730a36000000000095e300000000000073c6a555680959a465a0305f1473ed"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r9, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000280), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xbd, 0x8, 0x0, 0x0}}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 72.016296][ T4255] cgroup: Unknown subsys name 'net' [ 72.138134][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.723767][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.140040][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.149992][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.163896][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.173116][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.181129][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.189434][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.191805][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.197776][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.205248][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.212761][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.222001][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.229214][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.236258][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.243937][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.250768][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.259037][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.269171][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.276194][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.291085][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.293144][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.300905][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.316346][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.341870][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.350054][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.356324][ T4272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.358592][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.375747][ T4272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.380755][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.392301][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.400400][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.790523][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 75.842866][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 75.906464][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 75.972399][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 76.017338][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.025723][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.034213][ T4280] device bridge_slave_0 entered promiscuous mode [ 76.064751][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.072160][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.080129][ T4280] device bridge_slave_1 entered promiscuous mode [ 76.088639][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 76.171987][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.179421][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.188118][ T4270] device bridge_slave_0 entered promiscuous mode [ 76.207780][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.238937][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.247224][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.256269][ T4270] device bridge_slave_1 entered promiscuous mode [ 76.263611][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.270985][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.283129][ T4281] device bridge_slave_0 entered promiscuous mode [ 76.295055][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.311139][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.321784][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.329759][ T4271] device bridge_slave_0 entered promiscuous mode [ 76.351941][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.359074][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.370420][ T4281] device bridge_slave_1 entered promiscuous mode [ 76.391798][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.401383][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.409036][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.417305][ T4271] device bridge_slave_1 entered promiscuous mode [ 76.462263][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.497226][ T4280] team0: Port device team_slave_0 added [ 76.504623][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.513526][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.522235][ T4275] device bridge_slave_0 entered promiscuous mode [ 76.537856][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.545142][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.553781][ T4275] device bridge_slave_1 entered promiscuous mode [ 76.563061][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.577527][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.588377][ T4280] team0: Port device team_slave_1 added [ 76.600045][ T4270] team0: Port device team_slave_0 added [ 76.617718][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.628187][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.647608][ T4270] team0: Port device team_slave_1 added [ 76.689492][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.719455][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.729486][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.756020][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.775912][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.787732][ T4281] team0: Port device team_slave_0 added [ 76.796313][ T4271] team0: Port device team_slave_0 added [ 76.803350][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.810354][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.836968][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.848706][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.855865][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.882606][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.902339][ T4281] team0: Port device team_slave_1 added [ 76.909432][ T4271] team0: Port device team_slave_1 added [ 76.937382][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.947484][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.973994][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.003301][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.010478][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.036731][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.059034][ T4275] team0: Port device team_slave_0 added [ 77.074732][ T4275] team0: Port device team_slave_1 added [ 77.090266][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.097429][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.126909][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.150080][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.157528][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.185070][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.198292][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.205682][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.232208][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.289400][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.297267][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.323881][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.338846][ T4270] device hsr_slave_0 entered promiscuous mode [ 77.346566][ T4270] device hsr_slave_1 entered promiscuous mode [ 77.358065][ T4280] device hsr_slave_0 entered promiscuous mode [ 77.365593][ T4280] device hsr_slave_1 entered promiscuous mode [ 77.373707][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.381941][ T4280] Cannot create hsr debugfs directory [ 77.392503][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 77.400491][ T4271] device hsr_slave_0 entered promiscuous mode [ 77.408429][ T4271] device hsr_slave_1 entered promiscuous mode [ 77.416589][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.424869][ T4271] Cannot create hsr debugfs directory [ 77.431211][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.438995][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.466292][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.477738][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 77.481640][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 77.484171][ T4285] Bluetooth: hci4: command 0x0409 tx timeout [ 77.490227][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 77.597004][ T4281] device hsr_slave_0 entered promiscuous mode [ 77.604081][ T4281] device hsr_slave_1 entered promiscuous mode [ 77.611090][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.619155][ T4281] Cannot create hsr debugfs directory [ 77.676339][ T4275] device hsr_slave_0 entered promiscuous mode [ 77.684273][ T4275] device hsr_slave_1 entered promiscuous mode [ 77.691080][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.699419][ T4275] Cannot create hsr debugfs directory [ 78.004010][ T4271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.016202][ T4271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.027046][ T4271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.045950][ T4271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.095657][ T4270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.106939][ T4270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.118646][ T4270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.128829][ T4270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.227486][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.240370][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.250461][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.275678][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.304990][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.348024][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.365267][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.386505][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.398028][ T4281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.408756][ T4281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.423172][ T4281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.437218][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.447434][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.459529][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.467002][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.490109][ T4281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.504481][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.515626][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.528103][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.538326][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.545636][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.585064][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.639621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.649512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.660848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.671375][ T4275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.681134][ T4275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.696719][ T4275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.714931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.725181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.734809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.746133][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.764320][ T4275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.775665][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.786182][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.798129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.808045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.820832][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.830742][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.846452][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.861401][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.876322][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.909397][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.939025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.949510][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.963157][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.970489][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.981181][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.989421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.015867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.028401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.041382][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.048771][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.063357][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.072572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.081143][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.088335][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.102318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.110722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.126743][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.138295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.147817][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.155435][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.184863][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.206614][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.247234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.280940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.293180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.304497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.332406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.342260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.355953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.365232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.375922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.389969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.411039][ T4270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.426600][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.450568][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.460076][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.470804][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.479008][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 79.486768][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.496561][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.505687][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.514765][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.524274][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.533876][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.543557][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.552855][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 79.553406][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.559405][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 79.570496][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.573942][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 79.573981][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 79.618858][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.629650][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.640449][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.658088][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.689607][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.717176][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.726624][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.734183][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.760147][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.789003][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.802371][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.810122][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.846801][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.856769][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.873877][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.881398][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.905184][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.934033][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.962590][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.014202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.048223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.068167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.083264][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.105676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.122770][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.153545][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.169987][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.183888][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.199649][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.220325][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.234842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.263926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.283084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.302356][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.309995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.328405][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.361256][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.385563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.402416][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.421785][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.429212][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.439024][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.450322][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.459677][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.467160][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.475724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.500792][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.517152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.544861][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.565943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.610780][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.626661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.644032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.657757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.705829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.727582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.753543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.772648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.827211][ T4270] device veth0_vlan entered promiscuous mode [ 80.840068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.849970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.859005][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.868042][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.877985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.886992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.896315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.905007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.914401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.923417][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.937726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.946978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.968268][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.005388][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.018382][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.030117][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.047046][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.059791][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.079690][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.107096][ T4280] device veth0_vlan entered promiscuous mode [ 81.117022][ T4270] device veth1_vlan entered promiscuous mode [ 81.128163][ T4271] device veth0_vlan entered promiscuous mode [ 81.139401][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.149902][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.166432][ T4280] device veth1_vlan entered promiscuous mode [ 81.186531][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.203817][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.212809][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.220875][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.254810][ T4270] device veth0_macvtap entered promiscuous mode [ 81.275977][ T4271] device veth1_vlan entered promiscuous mode [ 81.294006][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.307676][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.318189][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.327846][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.344376][ T4270] device veth1_macvtap entered promiscuous mode [ 81.385423][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.396391][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.407525][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.416597][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.426002][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.452858][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.465914][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.486728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.496286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.507984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.518385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.527917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.538067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.548737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.558589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.562177][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 81.574801][ T4280] device veth0_macvtap entered promiscuous mode [ 81.602580][ T4270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.612326][ T4270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.621323][ T4270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.631791][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 81.631870][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 81.637916][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 81.644438][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 81.672517][ T4270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.686742][ T4271] device veth0_macvtap entered promiscuous mode [ 81.704828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.714153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.723578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.734197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.744930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.753129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.766378][ T4280] device veth1_macvtap entered promiscuous mode [ 81.778904][ T4281] device veth0_vlan entered promiscuous mode [ 81.790465][ T4271] device veth1_macvtap entered promiscuous mode [ 81.803061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.811284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.823489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.832270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.859040][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.889347][ T4281] device veth1_vlan entered promiscuous mode [ 81.910820][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.924845][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.938902][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.998570][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.009821][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.022649][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.033900][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.047232][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.055356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.065403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.074553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.086789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.100824][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.118285][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.129617][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.153037][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.170136][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.180883][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.191421][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.203920][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.215312][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.224335][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.233877][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.242998][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.253922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.266089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.278348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.288430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.299966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.309600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.322943][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.332270][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.341297][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.351143][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.426619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.436579][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.438346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.457123][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.457354][ T4281] device veth0_macvtap entered promiscuous mode [ 82.484987][ T4275] device veth0_vlan entered promiscuous mode [ 82.512843][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.521102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.530266][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.539767][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.550315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.558841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.592109][ T4281] device veth1_macvtap entered promiscuous mode [ 82.609413][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.634414][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.651112][ T4275] device veth1_vlan entered promiscuous mode [ 82.663060][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.677065][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.685890][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.741772][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.743266][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.750159][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.770577][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.782564][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.793289][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.804107][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.815034][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.842564][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.878891][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.912295][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.920747][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.937195][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.949832][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.969808][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.979960][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.990940][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.002929][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.013738][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.025123][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.064762][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.065223][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.075326][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.091446][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.107763][ T4281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.132168][ T4281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.147447][ T4281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.159829][ T4281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.199569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.219882][ T4275] device veth0_macvtap entered promiscuous mode [ 83.228308][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.238952][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.252521][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.255114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.260287][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.280067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.295990][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.310017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.328689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.343651][ T4275] device veth1_macvtap entered promiscuous mode [ 83.442797][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.501738][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.538242][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.552369][ C0] hrtimer: interrupt took 43028 ns [ 83.579955][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.608741][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.647899][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 83.668232][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.712658][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 83.712715][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 83.718811][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 83.718843][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 83.781849][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.801614][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.834452][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.884919][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.931490][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.982338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.995210][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.020638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.058967][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.079102][ T4356] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 84.103611][ T4356] syzkaller0: linktype set to 778 [ 84.137222][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.157454][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.176080][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.200898][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.219636][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.248865][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.276656][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.303790][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.333281][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.100405][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.122732][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.139565][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.164539][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.173980][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.184424][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.520105][ T4372] device syzkaller0 entered promiscuous mode [ 90.021992][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.030711][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.437229][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.652705][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.660678][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.743513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.779873][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.831275][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.904370][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.681849][ T35] cfg80211: failed to load regulatory.db [ 93.151951][ T4419] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 93.606596][ T4433] device syzkaller0 entered promiscuous mode [ 93.815599][ T4445] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.26'. [ 93.875858][ T4450] netlink: 'syz.1.28': attribute type 3 has an invalid length. [ 93.966146][ T4450] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.28'. [ 94.578516][ T4445] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.26'. [ 98.794306][ T4493] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 98.802365][ T4493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.55'. [ 98.841899][ T4493] device team0 entered promiscuous mode [ 98.847630][ T4493] device team_slave_0 entered promiscuous mode [ 98.945118][ T4493] device team_slave_1 entered promiscuous mode [ 99.049562][ T4493] bridge0: port 3(team0) entered blocking state [ 99.095667][ T4493] bridge0: port 3(team0) entered disabled state [ 99.164837][ T4493] bridge0: port 3(team0) entered blocking state [ 99.171637][ T4493] bridge0: port 3(team0) entered forwarding state [ 101.194871][ T4534] device syzkaller0 entered promiscuous mode [ 101.895253][ T4551] Zero length message leads to an empty skb [ 102.512553][ T4572] netlink: 'syz.0.74': attribute type 3 has an invalid length. [ 102.561729][ T4572] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.74'. [ 106.518070][ T4556] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.69'. [ 106.527818][ T4556] bridge_slave_1: default FDB implementation only supports local addresses [ 109.250155][ T4599] device syzkaller0 entered promiscuous mode [ 111.116062][ T4637] device syzkaller0 entered promiscuous mode [ 111.475723][ T4659] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 111.490883][ T4659] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.101'. [ 114.099694][ T4658] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.101'. [ 114.664346][ T4691] IPv6: Can't replace route, no match found [ 117.783569][ T4721] device syzkaller0 entered promiscuous mode [ 117.945689][ T4727] device syzkaller0 entered promiscuous mode [ 123.419133][ T4754] GPL: port 1(team0) entered blocking state [ 123.434397][ T4754] GPL: port 1(team0) entered disabled state [ 123.459987][ T4754] device team0 entered promiscuous mode [ 123.471898][ T4754] device team_slave_0 entered promiscuous mode [ 123.478760][ T4754] device team_slave_1 entered promiscuous mode [ 123.514015][ T4760] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 123.542331][ T4760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.136'. [ 123.562687][ T4760] batman_adv: batadv0: Adding interface: veth0_vlan [ 123.581601][ T4760] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.640505][ T4760] batman_adv: batadv0: Interface activated: veth0_vlan [ 124.704186][ T4813] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 125.421204][ T4837] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 125.478831][ T4837] syzkaller0: linktype set to 778 [ 127.096861][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 128.076301][ T4887] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.177'. [ 128.304071][ T4887] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.177'. [ 128.672198][ T11] wlan1: Trigger new scan to find an IBSS to join [ 129.141900][ T4904] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.186'. [ 131.731153][ T11] wlan1: Creating new IBSS network, BSSID 9e:39:12:9f:bf:b7 [ 132.163980][ T4955] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.196'. [ 132.364508][ T4955] bridge_slave_1: default FDB implementation only supports local addresses [ 133.642804][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.649466][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.068367][ T4962] device syzkaller0 entered promiscuous mode [ 141.424335][ T4983] netlink: 156 bytes leftover after parsing attributes in process `syz.3.204'. [ 141.436558][ T4986] netlink: 'syz.2.205': attribute type 21 has an invalid length. [ 141.445014][ T4986] netlink: 168 bytes leftover after parsing attributes in process `syz.2.205'. [ 141.484845][ T4989] netlink: 'syz.2.205': attribute type 10 has an invalid length. [ 141.553986][ T4989] device dummy0 entered promiscuous mode [ 141.560784][ T4989] team0: Port device dummy0 added [ 141.970749][ T5033] netlink: 'syz.4.218': attribute type 2 has an invalid length. [ 141.979229][ T5033] netlink: 'syz.4.218': attribute type 9 has an invalid length. [ 141.988429][ T5033] netlink: 132 bytes leftover after parsing attributes in process `syz.4.218'. [ 142.622919][ T5053] device syzkaller0 entered promiscuous mode [ 148.280553][ T5107] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 148.327528][ T5104] netlink: 'syz.1.240': attribute type 46 has an invalid length. [ 148.366279][ T5104] netlink: 55 bytes leftover after parsing attributes in process `syz.1.240'. [ 148.400249][ T5107] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.240'. [ 148.462204][ T5115] netlink: 164 bytes leftover after parsing attributes in process `syz.2.243'. [ 149.040132][ T5125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.247'. [ 149.989279][ T5146] device syzkaller0 entered promiscuous mode [ 150.172647][ T5163] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 150.324785][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.468995][ T5163] device bridge_slave_1 left promiscuous mode [ 150.582008][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.652813][ T5163] device bridge_slave_1 entered promiscuous mode [ 150.660391][ T5163] team0: Port device bridge_slave_1 added [ 159.709056][ T5197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.266'. [ 159.731690][ T5210] netlink: 'syz.4.269': attribute type 10 has an invalid length. [ 159.739489][ T5210] netlink: 'syz.4.269': attribute type 19 has an invalid length. [ 159.743246][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 159.753358][ T5210] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.269'. [ 160.225349][ T5231] netlink: 'syz.1.273': attribute type 29 has an invalid length. [ 160.370064][ T4285] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 160.602110][ T5242] netlink: 'syz.3.276': attribute type 13 has an invalid length. [ 160.632950][ T5242] netlink: 152 bytes leftover after parsing attributes in process `syz.3.276'. [ 161.251052][ T5251] netlink: 'syz.2.278': attribute type 39 has an invalid length. [ 162.546907][ T5290] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.289'. [ 162.780009][ T5271] device syzkaller0 entered promiscuous mode [ 162.798816][ T5290] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.289'. [ 167.458576][ T5301] netlink: 'syz.4.292': attribute type 10 has an invalid length. [ 167.469979][ T5301] netlink: 55 bytes leftover after parsing attributes in process `syz.4.292'. [ 167.824837][ T5324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.298'. [ 168.640193][ T5353] device syzkaller0 entered promiscuous mode [ 169.180521][ T5387] netlink: 'syz.0.315': attribute type 2 has an invalid length. [ 174.514349][ T5376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.313'. [ 174.531804][ T5379] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 174.573814][ T5383] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.313'. [ 174.608346][ T5387] device 0 entered promiscuous mode [ 174.953146][ T5421] netlink: 'syz.1.326': attribute type 13 has an invalid length. [ 174.962452][ T5421] netlink: 152 bytes leftover after parsing attributes in process `syz.1.326'. [ 174.973506][ T5424] netlink: 'syz.3.327': attribute type 2 has an invalid length. [ 175.032342][ T5424] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 175.034475][ T5421] syz_tun: refused to change device tx_queue_len [ 175.040066][ T5424] netlink: 185292 bytes leftover after parsing attributes in process `syz.3.327'. [ 175.082596][ T5421] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 175.136542][ T5428] netlink: 'syz.1.326': attribute type 13 has an invalid length. [ 175.168240][ T5428] netlink: 152 bytes leftover after parsing attributes in process `syz.1.326'. [ 175.199133][ T5428] syz_tun: refused to change device tx_queue_len [ 175.234402][ T5428] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 175.289302][ T5431] netlink: 'syz.1.326': attribute type 10 has an invalid length. [ 175.407343][ T5431] team0: Port device netdevsim0 added [ 175.428981][ T5441] netlink: 'syz.3.331': attribute type 21 has an invalid length. [ 175.516161][ T5446] netlink: 'syz.0.332': attribute type 153 has an invalid length. [ 175.550281][ T5446] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.332'. [ 176.127240][ T5458] netlink: 'syz.0.337': attribute type 41 has an invalid length. [ 176.867022][ T5455] device syzkaller0 entered promiscuous mode [ 178.393590][ T5497] netlink: 'syz.4.347': attribute type 1 has an invalid length. [ 178.399679][ T5499] netlink: 5 bytes leftover after parsing attributes in process `syz.4.347'. [ 178.453949][ T5497] netlink: 5 bytes leftover after parsing attributes in process `syz.4.347'. [ 183.301576][ T5515] netlink: 152 bytes leftover after parsing attributes in process `syz.4.352'. [ 183.904750][ T5542] validate_nla: 1 callbacks suppressed [ 183.904771][ T5542] netlink: 'syz.1.357': attribute type 10 has an invalid length. [ 184.133167][ T5542] team0: Port device wlan1 added [ 184.210375][ T5550] sock: sock_set_timeout: `syz.0.360' (pid 5550) tries to set negative timeout [ 184.412468][ T5550] netlink: 132 bytes leftover after parsing attributes in process `syz.0.360'. [ 184.849482][ T5564] device syzkaller0 entered promiscuous mode [ 185.002366][ T5569] netlink: 'syz.2.367': attribute type 3 has an invalid length. [ 185.049231][ T5569] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.367'. [ 185.082961][ T5573] netlink: 'syz.2.367': attribute type 3 has an invalid length. [ 185.154805][ T5573] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.367'. [ 186.200025][ T5587] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 186.215785][ T5587] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.372'. [ 186.643997][ T5593] FAULT_INJECTION: forcing a failure. [ 186.643997][ T5593] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 186.736376][ T5593] CPU: 1 PID: 5593 Comm: syz.0.373 Not tainted syzkaller #0 [ 186.743972][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 186.754433][ T5593] Call Trace: [ 186.757783][ T5593] [ 186.760926][ T5593] dump_stack_lvl+0x188/0x24e [ 186.765847][ T5593] ? show_regs_print_info+0x12/0x12 [ 186.771198][ T5593] ? load_image+0x400/0x400 [ 186.775762][ T5593] ? __lock_acquire+0x7d10/0x7d10 [ 186.780853][ T5593] ? snprintf+0xe5/0x140 [ 186.785153][ T5593] should_fail_ex+0x399/0x4d0 [ 186.789863][ T5593] _copy_to_user+0x2c/0x130 [ 186.794387][ T5593] simple_read_from_buffer+0xe3/0x150 [ 186.799781][ T5593] proc_fail_nth_read+0x1a6/0x220 [ 186.804944][ T5593] ? proc_fault_inject_write+0x310/0x310 [ 186.810624][ T5593] ? fsnotify_perm+0x248/0x550 [ 186.815715][ T5593] ? proc_fault_inject_write+0x310/0x310 [ 186.821386][ T5593] vfs_read+0x2de/0xa00 [ 186.825663][ T5593] ? kernel_read+0x1e0/0x1e0 [ 186.830680][ T5593] ? __fget_files+0x28/0x4b0 [ 186.835397][ T5593] ? __fget_files+0x28/0x4b0 [ 186.840016][ T5593] ? __fget_files+0x43d/0x4b0 [ 186.844754][ T5593] ? __fdget_pos+0x2ae/0x360 [ 186.849472][ T5593] ? ksys_read+0x71/0x250 [ 186.854030][ T5593] ksys_read+0x14c/0x250 [ 186.858696][ T5593] ? vfs_write+0xa30/0xa30 [ 186.863330][ T5593] ? lockdep_hardirqs_on+0x94/0x140 [ 186.868591][ T5593] do_syscall_64+0x4c/0xa0 [ 186.873120][ T5593] ? clear_bhb_loop+0x60/0xb0 [ 186.877831][ T5593] ? clear_bhb_loop+0x60/0xb0 [ 186.882545][ T5593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.888462][ T5593] RIP: 0033:0x7f45eb95d04e [ 186.892982][ T5593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.913040][ T5593] RSP: 002b:00007f45ec873fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.921993][ T5593] RAX: ffffffffffffffda RBX: 00007f45ec8746c0 RCX: 00007f45eb95d04e [ 186.930168][ T5593] RDX: 000000000000000f RSI: 00007f45ec8740a0 RDI: 0000000000000004 [ 186.938241][ T5593] RBP: 00007f45ec874090 R08: 0000000000000000 R09: 0000000000000000 [ 186.946248][ T5593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.954535][ T5593] R13: 00007f45ebc16128 R14: 00007f45ebc16090 R15: 00007ffd4b8ced38 [ 186.962745][ T5593] [ 193.286210][ T5635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.305221][ T5635] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.757208][ T26] audit: type=1800 audit(1775463375.634:2): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.383" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 193.796742][ T5621] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 193.887218][ T5621] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 193.959313][ T5621] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 194.720537][ T5654] device syzkaller0 entered promiscuous mode [ 195.080292][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.086833][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.257715][ T5621] syz.0.383 (5621) used greatest stack depth: 16984 bytes left [ 199.989647][ T5698] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.407'. [ 201.548280][ T5711] netlink: 'syz.2.410': attribute type 2 has an invalid length. [ 201.557532][ T5711] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.410'. [ 201.622482][ T5681] netlink: 'syz.3.401': attribute type 4 has an invalid length. [ 201.782718][ T5714] netlink: 72 bytes leftover after parsing attributes in process `syz.0.411'. [ 202.271694][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 202.277935][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 202.284191][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 202.284213][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 202.290306][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 203.417036][ T5763] netlink: 'syz.2.427': attribute type 29 has an invalid length. [ 203.656945][ T5760] device syzkaller0 entered promiscuous mode [ 203.931618][ T5770] tap0: tun_chr_ioctl cmd 1074025688 [ 204.057672][ T5778] netlink: 'syz.1.429': attribute type 2 has an invalid length. [ 204.799300][ T5778] device 0 entered promiscuous mode [ 205.430968][ T5801] netlink: 'syz.0.437': attribute type 1 has an invalid length. [ 205.458083][ T5801] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.437'. [ 213.595204][ T5815] netlink: 'syz.1.440': attribute type 10 has an invalid length. [ 213.676638][ T5815] team0: Device wg1 is of different type [ 213.805773][ T5830] device syzkaller0 entered promiscuous mode [ 213.983984][ T5841] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 214.012493][ T5841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.448'. [ 214.783241][ T5868] netlink: 'syz.2.453': attribute type 2 has an invalid length. [ 218.539369][ T5844] netlink: 'syz.1.448': attribute type 1 has an invalid length. [ 218.568736][ T5868] device 0 entered promiscuous mode [ 218.794515][ T5876] device syzkaller0 entered promiscuous mode [ 218.830866][ T5886] netlink: 'syz.3.459': attribute type 2 has an invalid length. [ 218.861832][ T5886] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.459'. [ 223.620095][ T5887] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 223.642597][ T5897] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.462'. [ 223.737353][ T5926] device syzkaller0 entered promiscuous mode [ 228.800009][ T5977] device syzkaller0 entered promiscuous mode [ 229.261182][ T5985] delete_channel: no stack [ 229.827872][ T6005] netlink: 'syz.1.490': attribute type 3 has an invalid length. [ 229.842270][ T6005] netlink: 'syz.1.490': attribute type 8 has an invalid length. [ 229.860618][ T6005] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.490'. [ 236.695269][ T6064] device syzkaller0 entered promiscuous mode [ 236.813988][ T6065] tap0: tun_chr_ioctl cmd 1074025684 [ 236.952615][ T6075] netlink: 1 bytes leftover after parsing attributes in process `syz.0.512'. [ 237.932909][ T6093] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.515'. [ 242.392927][ T6118] netlink: 'syz.0.524': attribute type 2 has an invalid length. [ 242.400862][ T6118] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.524'. [ 243.308438][ T4287] Bluetooth: hci4: Malformed Event: 0x13 [ 247.673690][ T6160] device syzkaller0 entered promiscuous mode [ 252.391667][ T6200] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 253.680215][ T6232] device syzkaller0 entered promiscuous mode [ 253.814661][ T6227] netlink: 'syz.2.552': attribute type 9 has an invalid length. [ 253.854849][ T6227] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.552'. [ 256.514938][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.521583][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.001359][ T6287] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 259.130058][ T6300] syz.4.572 uses obsolete (PF_INET,SOCK_PACKET) [ 259.154254][ T6303] netlink: 'syz.4.572': attribute type 9 has an invalid length. [ 259.237320][ T6303] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.572'. [ 259.443703][ T6311] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 259.498419][ T6311] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 259.551737][ T6311] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.576'. [ 261.041326][ T6325] tipc: Started in network mode [ 261.080471][ T6325] tipc: Node identity 9215a268, cluster identity 4711 [ 261.111750][ T6325] tipc: Node number set to 2450891368 [ 261.147010][ T6327] netlink: 'syz.1.581': attribute type 10 has an invalid length. [ 261.393791][ T6327] team0: Device hsr_slave_0 failed to register rx_handler [ 261.490712][ T6341] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.585'. [ 261.602095][ T6335] netlink: 'syz.0.587': attribute type 1 has an invalid length. [ 261.704395][ T6343] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.585'. [ 262.046781][ T6345] netlink: 'syz.2.586': attribute type 2 has an invalid length. [ 262.165568][ T6345] device 1 entered promiscuous mode [ 262.584454][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.593'. [ 262.701052][ T6364] device syzkaller0 entered promiscuous mode [ 267.925683][ T6428] tun0: tun_chr_ioctl cmd 1074025675 [ 267.960534][ T6428] tun0: persist enabled [ 268.388048][ T6440] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 268.675045][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.719918][ T6440] device bond0 entered promiscuous mode [ 268.726863][ T6440] device bond_slave_0 entered promiscuous mode [ 268.735250][ T6440] device bond_slave_1 entered promiscuous mode [ 268.753147][ T6440] team0: Port device bond0 added [ 268.973681][ T6465] netlink: 'syz.2.627': attribute type 2 has an invalid length. [ 269.526492][ T6437] delete_channel: no stack [ 269.854761][ T6472] device syzkaller0 entered promiscuous mode [ 271.390243][ T6516] delete_channel: no stack [ 271.430676][ T6516] delete_channel: no stack [ 271.528377][ T4287] Bluetooth: hci4: ISO packet for unknown connection handle 6 [ 273.418628][ T6486] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.635'. [ 273.447185][ T6500] netlink: 'syz.4.639': attribute type 11 has an invalid length. [ 273.467993][ T6500] netlink: 148 bytes leftover after parsing attributes in process `syz.4.639'. [ 273.660341][ T6537] netlink: 'syz.3.649': attribute type 10 has an invalid length. [ 273.717895][ T6537] team0: Port device macvlan1 added [ 273.968733][ T6547] netlink: 'syz.0.651': attribute type 4 has an invalid length. [ 274.131515][ T6547] netlink: 132 bytes leftover after parsing attributes in process `syz.0.651'. [ 275.042978][ T6566] netlink: 152 bytes leftover after parsing attributes in process `syz.1.660'. [ 275.551399][ T6572] device syzkaller0 entered promiscuous mode [ 276.276038][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.665'. [ 276.322291][ T6588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.265636][ T6583] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.663'. [ 283.302789][ T6607] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 283.329481][ T6607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.468884][ T6679] device syzkaller0 entered promiscuous mode [ 284.651743][ T6693] sock: sock_set_timeout: `syz.4.693' (pid 6693) tries to set negative timeout [ 286.350348][ T6722] netlink: 'syz.0.703': attribute type 3 has an invalid length. [ 286.407978][ T6722] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.703'. [ 289.431503][ T6713] netlink: 188 bytes leftover after parsing attributes in process `syz.4.701'. [ 290.580459][ T6769] netlink: 'syz.1.717': attribute type 39 has an invalid length. [ 290.800877][ T6776] device syzkaller0 entered promiscuous mode [ 290.848741][ T6781] netlink: 'syz.0.720': attribute type 7 has an invalid length. [ 291.572213][ T6807] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.727'. [ 291.586091][ T6807] netlink: zone id is out of range [ 291.594536][ T6807] netlink: zone id is out of range [ 291.611837][ T6807] netlink: zone id is out of range [ 291.618285][ T6807] netlink: zone id is out of range [ 291.630607][ T6807] netlink: zone id is out of range [ 291.671648][ T6807] netlink: zone id is out of range [ 291.680769][ T6807] netlink: zone id is out of range [ 291.701682][ T6807] netlink: zone id is out of range [ 291.707782][ T6807] netlink: zone id is out of range [ 291.757824][ T6807] netlink: get zone limit has 8 unknown bytes [ 297.028151][ T6865] netlink: 'syz.2.743': attribute type 15 has an invalid length. [ 297.061935][ T6865] netlink: 'syz.2.743': attribute type 5 has an invalid length. [ 297.085400][ T6865] netlink: 144 bytes leftover after parsing attributes in process `syz.2.743'. [ 297.410925][ T6885] netlink: 'syz.2.749': attribute type 3 has an invalid length. [ 297.441101][ T6885] netlink: 'syz.2.749': attribute type 8 has an invalid length. [ 297.457909][ T6885] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.749'. [ 297.493491][ T6876] device syzkaller0 entered promiscuous mode [ 297.725344][ T6885] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 301.632060][ T58] wlan1: Trigger new scan to find an IBSS to join [ 302.120449][ T6908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.757'. [ 302.369619][ T6928] netlink: 'syz.4.764': attribute type 3 has an invalid length. [ 302.412722][ T6928] netlink: 'syz.4.764': attribute type 8 has an invalid length. [ 302.445733][ T6927] netlink: 144 bytes leftover after parsing attributes in process `syz.1.765'. [ 302.459510][ T6928] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.764'. [ 302.556623][ T6929] netlink: 'syz.3.763': attribute type 17 has an invalid length. [ 302.584851][ T6929] netlink: 152 bytes leftover after parsing attributes in process `syz.3.763'. [ 302.614157][ T6929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.671028][ T6928] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 304.125430][ T6956] netlink: 'syz.3.771': attribute type 17 has an invalid length. [ 304.201858][ T6956] netlink: 'syz.3.771': attribute type 41 has an invalid length. [ 304.261508][ T6956] netlink: 152 bytes leftover after parsing attributes in process `syz.3.771'. [ 304.672227][ T11] wlan1: Trigger new scan to find an IBSS to join [ 304.689282][ T6962] device syzkaller0 entered promiscuous mode [ 305.299935][ T6991] netlink: 'syz.0.782': attribute type 3 has an invalid length. [ 305.308384][ T6991] netlink: 'syz.0.782': attribute type 8 has an invalid length. [ 305.319046][ T6991] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.782'. [ 305.652406][ T58] wlan1: Creating new IBSS network, BSSID ba:4e:61:3b:a1:2e [ 306.419114][ T7008] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.788'. [ 308.627164][ T6991] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 308.661838][ T7008] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.788'. [ 309.096384][ T7020] netlink: 'syz.0.790': attribute type 13 has an invalid length. [ 309.115963][ T7020] netlink: 152 bytes leftover after parsing attributes in process `syz.0.790'. [ 309.194569][ T7020] syz_tun: refused to change device tx_queue_len [ 309.277398][ T7020] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 309.458939][ T7038] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 309.514535][ T7038] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 309.559408][ T7039] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 309.590448][ T7038] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 309.622871][ T7038] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 309.674988][ T7038] netlink: 'syz.2.798': attribute type 29 has an invalid length. [ 309.836206][ T7049] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.803'. [ 310.042407][ T7050] device syzkaller0 entered promiscuous mode [ 310.078423][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.105016][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.139974][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.153582][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.329336][ T7054] netlink: 763 bytes leftover after parsing attributes in process `syz.0.804'. [ 310.673472][ T58] wlan1: Trigger new scan to find an IBSS to join [ 310.861165][ T7067] netlink: 'syz.2.808': attribute type 10 has an invalid length. [ 310.888166][ T7067] device hsr0 entered promiscuous mode [ 310.923492][ T7067] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.971599][ T7067] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 310.992677][ T7067] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 311.023511][ T7067] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 311.074459][ T7071] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.809'. [ 313.712569][ T32] wlan1: Trigger new scan to find an IBSS to join [ 316.671784][ T32] wlan1: Trigger new scan to find an IBSS to join [ 317.579634][ T58] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 317.956827][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.966307][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.126658][ T7112] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.820'. [ 318.456918][ T7117] device syzkaller0 entered promiscuous mode [ 318.465263][ T7125] netlink: 'syz.4.824': attribute type 17 has an invalid length. [ 318.475768][ T7123] netlink: 128 bytes leftover after parsing attributes in process `syz.2.825'. [ 318.486012][ T7123] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 318.529393][ T7117] netlink: 'syz.3.821': attribute type 13 has an invalid length. [ 318.542608][ T7117] netlink: 152 bytes leftover after parsing attributes in process `syz.3.821'. [ 318.582775][ T7117] netlink: 'syz.3.821': attribute type 13 has an invalid length. [ 318.601753][ T7117] netlink: 152 bytes leftover after parsing attributes in process `syz.3.821'. [ 318.626226][ T11] bridge0: port 3(team0) entered disabled state [ 321.207363][ T7168] tipc: Started in network mode [ 321.212605][ T7168] tipc: Node identity 9215a268, cluster identity 4711 [ 321.227537][ T7168] tipc: Node number set to 2450891368 [ 321.238129][ T7169] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.835'. [ 321.261965][ T7174] netlink: 'syz.4.837': attribute type 10 has an invalid length. [ 321.279725][ T7174] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 322.617446][ T7199] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.847'. [ 323.395262][ T7223] netlink: 'syz.0.855': attribute type 3 has an invalid length. [ 323.471533][ T7223] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.855'. [ 323.635595][ T58] wlan1: Trigger new scan to find an IBSS to join [ 323.769168][ T7232] device bridge_slave_1 left promiscuous mode [ 323.818121][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.954666][ T7232] device bridge_slave_0 left promiscuous mode [ 323.981981][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.591181][ T7247] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.860'. [ 325.353302][ T7263] netlink: 'syz.4.866': attribute type 10 has an invalid length. [ 326.180581][ T7263] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 326.194603][ T7267] netlink: 180 bytes leftover after parsing attributes in process `syz.4.866'. [ 326.907792][ T7293] netlink: 68 bytes leftover after parsing attributes in process `syz.3.874'. [ 328.686916][ T58] wlan1: Trigger new scan to find an IBSS to join [ 329.623204][ T9] wlan1: Creating new IBSS network, BSSID ca:93:20:32:b5:34 [ 332.375426][ T7323] device syzkaller0 entered promiscuous mode [ 332.995299][ T7351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.891'. [ 335.667450][ T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.183367][ T7351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.891'. [ 337.516832][ T7374] device syzkaller0 entered promiscuous mode [ 337.540561][ T7384] netlink: 'syz.3.900': attribute type 3 has an invalid length. [ 337.569219][ T7384] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.900'. [ 338.220749][ T7405] device syzkaller0 entered promiscuous mode [ 342.455440][ T7423] device syzkaller0 entered promiscuous mode [ 346.303939][ T7472] netlink: 'syz.4.922': attribute type 39 has an invalid length. [ 346.651953][ T7475] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.922'. [ 346.820076][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 346.899483][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 346.983044][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.091819][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.117362][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.151978][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.171798][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.191848][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.225273][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.259456][ T7488] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 347.646474][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.082308][ T7515] device syzkaller0 entered promiscuous mode [ 350.242620][ T7522] device syzkaller0 entered promiscuous mode [ 350.264185][ T7533] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.940'. [ 350.792117][ T7551] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.946'. [ 350.838449][ T7552] netlink: 'syz.2.944': attribute type 4 has an invalid length. [ 350.848622][ T7552] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.944'. [ 354.507784][ T7546] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 354.512008][ T26] audit: type=1800 audit(1775463536.424:3): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.944" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 354.517436][ T7546] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 354.555599][ T7546] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 354.682794][ T7561] Ÿë: port 1(veth0_to_team) entered blocking state [ 354.689634][ T7561] Ÿë: port 1(veth0_to_team) entered disabled state [ 354.724310][ T7561] device veth0_to_team entered promiscuous mode [ 356.441581][ T7575] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.950'. [ 356.719682][ T7585] netlink: 'syz.1.954': attribute type 7 has an invalid length. [ 357.416025][ T7598] device syzkaller0 entered promiscuous mode [ 357.429895][ T7606] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.960'. [ 357.469841][ T7606] net_ratelimit: 19677 callbacks suppressed [ 357.469906][ T7606] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 358.848970][ T4287] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 361.348176][ T7616] device syzkaller0 entered promiscuous mode [ 361.548201][ T7659] sctp: [Deprecated]: syz.3.971 (pid 7659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.548201][ T7659] Use struct sctp_sack_info instead [ 363.272010][ T7654] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.969'. [ 363.610571][ T7677] device syzkaller0 entered promiscuous mode [ 363.650189][ T7669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.657620][ T7669] IPv6: NLM_F_CREATE should be set when creating new route [ 363.664980][ T7669] IPv6: NLM_F_CREATE should be set when creating new route [ 363.672404][ T7669] IPv6: NLM_F_CREATE should be set when creating new route [ 368.224548][ T7689] device syzkaller0 entered promiscuous mode [ 371.315277][ T7724] device syzkaller0 entered promiscuous mode [ 374.784280][ T7759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.998'. [ 374.926878][ T7765] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.1000'. [ 374.999156][ T7765] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1000'. [ 375.655706][ T7782] device syzkaller0 entered promiscuous mode [ 379.185728][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 379.394658][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.401241][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.475905][ T7799] netlink: 'syz.0.1008': attribute type 10 has an invalid length. [ 381.485028][ T7799] bond0: (slave bond_slave_0): Releasing backup interface [ 381.493988][ T7799] device bond_slave_0 left promiscuous mode [ 381.521601][ T7811] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1011'. [ 381.998819][ T7820] device syzkaller0 entered promiscuous mode [ 382.168365][ T7837] netlink: 'syz.1.1019': attribute type 11 has an invalid length. [ 382.253516][ T7837] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1019'. [ 382.549673][ T7847] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 382.576522][ T7847] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 382.588516][ T7847] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1021'. [ 387.096803][ T7863] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1026'. [ 387.202267][ T7859] device syzkaller0 entered promiscuous mode [ 388.084007][ T7903] netlink: 'syz.4.1037': attribute type 2 has an invalid length. [ 388.127915][ T7903] netlink: 'syz.4.1037': attribute type 1 has an invalid length. [ 388.153106][ T7903] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1037'. [ 391.949198][ T7879] netlink: 'syz.3.1031': attribute type 6 has an invalid length. [ 391.966278][ T7885] netlink: 'syz.2.1033': attribute type 2 has an invalid length. [ 391.974201][ T7885] netlink: 'syz.2.1033': attribute type 8 has an invalid length. [ 391.992331][ T7885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1033'. [ 392.015334][ T7893] device sit0 entered promiscuous mode [ 392.235550][ T7916] device syzkaller0 entered promiscuous mode [ 397.042830][ T7957] device syzkaller0 entered promiscuous mode [ 397.265478][ T7966] tap0: tun_chr_ioctl cmd 1074025677 [ 397.284657][ T7966] tap0: linktype set to 823 [ 397.290883][ T4287] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 397.811072][ T7988] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1061'. [ 398.478956][ T7993] FAULT_INJECTION: forcing a failure. [ 398.478956][ T7993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.492630][ T7993] CPU: 1 PID: 7993 Comm: syz.4.1062 Not tainted syzkaller #0 [ 398.500316][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 398.510603][ T7993] Call Trace: [ 398.513927][ T7993] [ 398.516887][ T7993] dump_stack_lvl+0x188/0x24e [ 398.521630][ T7993] ? show_regs_print_info+0x12/0x12 [ 398.526943][ T7993] ? load_image+0x400/0x400 [ 398.531551][ T7993] ? __lock_acquire+0x7d10/0x7d10 [ 398.536605][ T7993] ? trace_call_bpf+0x5d6/0x6b0 [ 398.541587][ T7993] should_fail_ex+0x399/0x4d0 [ 398.546381][ T7993] _copy_from_user+0x2c/0x170 [ 398.551078][ T7993] __sys_bpf+0x2ea/0x780 [ 398.555440][ T7993] ? bpf_link_show_fdinfo+0x380/0x380 [ 398.561021][ T7993] ? lock_chain_count+0x20/0x20 [ 398.565912][ T7993] __x64_sys_bpf+0x78/0x90 [ 398.570571][ T7993] do_syscall_64+0x4c/0xa0 [ 398.575182][ T7993] ? clear_bhb_loop+0x60/0xb0 [ 398.579880][ T7993] ? clear_bhb_loop+0x60/0xb0 [ 398.584601][ T7993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.590609][ T7993] RIP: 0033:0x7f1b86b9c819 [ 398.595061][ T7993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.614876][ T7993] RSP: 002b:00007f1b8798b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.623407][ T7993] RAX: ffffffffffffffda RBX: 00007f1b86e15fa0 RCX: 00007f1b86b9c819 [ 398.631396][ T7993] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 398.639469][ T7993] RBP: 00007f1b8798b090 R08: 0000000000000000 R09: 0000000000000000 [ 398.647454][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.655437][ T7993] R13: 00007f1b86e16038 R14: 00007f1b86e15fa0 R15: 00007ffda1f58218 [ 398.663454][ T7993] [ 402.201717][ T7988] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 402.211125][ T7988] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 402.221178][ T26] audit: type=1800 audit(1775463584.114:4): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1061" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 402.277877][ T7988] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 402.288760][ T8003] netlink: 'syz.2.1064': attribute type 2 has an invalid length. [ 402.379768][ T8003] device 0 entered promiscuous mode [ 402.499760][ T8008] device syzkaller0 entered promiscuous mode [ 405.494226][ T8031] FAULT_INJECTION: forcing a failure. [ 405.494226][ T8031] name failslab, interval 1, probability 0, space 0, times 1 [ 405.570765][ T8031] CPU: 0 PID: 8031 Comm: syz.3.1073 Not tainted syzkaller #0 [ 405.578335][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 405.588517][ T8031] Call Trace: [ 405.591828][ T8031] [ 405.594773][ T8031] dump_stack_lvl+0x188/0x24e [ 405.604479][ T8031] ? show_regs_print_info+0x12/0x12 [ 405.609710][ T8031] ? load_image+0x400/0x400 [ 405.614232][ T8031] ? __lock_acquire+0x7d10/0x7d10 [ 405.619283][ T8031] should_fail_ex+0x399/0x4d0 [ 405.624070][ T8031] should_failslab+0x5/0x20 [ 405.628763][ T8031] slab_pre_alloc_hook+0x59/0x310 [ 405.633814][ T8031] ? verify_lock_unused+0x140/0x140 [ 405.639037][ T8031] ? bpf_test_init+0x9f/0x140 [ 405.643821][ T8031] __kmem_cache_alloc_node+0x4f/0x260 [ 405.649301][ T8031] ? bpf_test_init+0x9f/0x140 [ 405.653993][ T8031] __kmalloc+0xa0/0x240 [ 405.658179][ T8031] bpf_test_init+0x9f/0x140 [ 405.662724][ T8031] bpf_prog_test_run_xdp+0x484/0xf10 [ 405.668060][ T8031] ? dev_put+0x80/0x80 [ 405.672168][ T8031] ? dev_put+0x80/0x80 [ 405.676288][ T8031] bpf_prog_test_run+0x31e/0x390 [ 405.681277][ T8031] __sys_bpf+0x62b/0x780 [ 405.685545][ T8031] ? bpf_link_show_fdinfo+0x380/0x380 [ 405.691948][ T8031] ? lock_chain_count+0x20/0x20 [ 405.696837][ T8031] __x64_sys_bpf+0x78/0x90 [ 405.701373][ T8031] do_syscall_64+0x4c/0xa0 [ 405.705823][ T8031] ? clear_bhb_loop+0x60/0xb0 [ 405.710634][ T8031] ? clear_bhb_loop+0x60/0xb0 [ 405.715507][ T8031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.721429][ T8031] RIP: 0033:0x7ffaf6d9c819 [ 405.725859][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.745607][ T8031] RSP: 002b:00007ffaf7d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.754131][ T8031] RAX: ffffffffffffffda RBX: 00007ffaf7015fa0 RCX: 00007ffaf6d9c819 [ 405.762114][ T8031] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 405.770626][ T8031] RBP: 00007ffaf7d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 405.778614][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.786706][ T8031] R13: 00007ffaf7016038 R14: 00007ffaf7015fa0 R15: 00007fff80481278 [ 405.794706][ T8031] [ 405.925023][ T8035] device syzkaller0 entered promiscuous mode [ 407.822208][ T8051] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1079'. [ 408.392917][ T8071] device syzkaller0 entered promiscuous mode [ 410.110680][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 412.960075][ T8098] device syzkaller0 entered promiscuous mode [ 413.016292][ T8114] netlink: 'syz.3.1098': attribute type 2 has an invalid length. [ 416.703986][ T8131] netlink: 'syz.4.1100': attribute type 41 has an invalid length. [ 417.945598][ T8114] device 0 entered promiscuous mode [ 417.951163][ T8118] netlink: 'syz.3.1098': attribute type 10 has an invalid length. [ 417.960272][ T8118] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1098'. [ 418.014132][ T8131] netlink: 'syz.4.1100': attribute type 41 has an invalid length. [ 419.123471][ T8166] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 419.218644][ T8166] netlink: 'syz.0.1112': attribute type 2 has an invalid length. [ 419.578510][ T8166] device 0 entered promiscuous mode [ 419.810247][ T8172] device syzkaller0 entered promiscuous mode [ 419.871768][ T8185] netlink: 39083 bytes leftover after parsing attributes in process `syz.2.1115'. [ 420.115229][ T8191] FAULT_INJECTION: forcing a failure. [ 420.115229][ T8191] name failslab, interval 1, probability 0, space 0, times 0 [ 420.226085][ T8191] CPU: 1 PID: 8191 Comm: syz.2.1119 Not tainted syzkaller #0 [ 420.233579][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 420.243678][ T8191] Call Trace: [ 420.247000][ T8191] [ 420.249972][ T8191] dump_stack_lvl+0x188/0x24e [ 420.254712][ T8191] ? show_regs_print_info+0x12/0x12 [ 420.260063][ T8191] ? load_image+0x400/0x400 [ 420.264625][ T8191] ? __might_sleep+0xd0/0xd0 [ 420.269268][ T8191] ? __lock_acquire+0x7d10/0x7d10 [ 420.274362][ T8191] should_fail_ex+0x399/0x4d0 [ 420.279099][ T8191] should_failslab+0x5/0x20 [ 420.283662][ T8191] slab_pre_alloc_hook+0x59/0x310 [ 420.288754][ T8191] kmem_cache_alloc_node+0x5a/0x320 [ 420.293994][ T8191] ? lock_chain_count+0x20/0x20 [ 420.299004][ T8191] ? dup_task_struct+0x57/0x6b0 [ 420.303876][ T8191] dup_task_struct+0x57/0x6b0 [ 420.308570][ T8191] ? lockdep_hardirqs_on+0x94/0x140 [ 420.313788][ T8191] copy_process+0x5fa/0x4030 [ 420.318483][ T8191] ? __lock_acquire+0x7d10/0x7d10 [ 420.323834][ T8191] ? idle_dummy+0x10/0x10 [ 420.328205][ T8191] kernel_clone+0x24b/0x900 [ 420.332740][ T8191] ? ksys_write+0x1c0/0x250 [ 420.337291][ T8191] ? create_io_thread+0x170/0x170 [ 420.342360][ T8191] __x64_sys_clone+0x1a7/0x220 [ 420.347137][ T8191] ? __fget_files+0x43d/0x4b0 [ 420.351847][ T8191] ? __ia32_sys_vfork+0x140/0x140 [ 420.356893][ T8191] ? lock_chain_count+0x20/0x20 [ 420.361765][ T8191] ? lockdep_hardirqs_on+0x94/0x140 [ 420.366982][ T8191] do_syscall_64+0x4c/0xa0 [ 420.371413][ T8191] ? clear_bhb_loop+0x60/0xb0 [ 420.376105][ T8191] ? clear_bhb_loop+0x60/0xb0 [ 420.380903][ T8191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.386844][ T8191] RIP: 0033:0x7f83f259c819 [ 420.391448][ T8191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.411354][ T8191] RSP: 002b:00007f83f3455fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 420.419816][ T8191] RAX: ffffffffffffffda RBX: 00007f83f2815fa0 RCX: 00007f83f259c819 [ 420.428110][ T8191] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000020040000 [ 420.436182][ T8191] RBP: 00007f83f3456090 R08: 0000000000000000 R09: 0000000000000000 [ 420.444167][ T8191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 420.452270][ T8191] R13: 00007f83f2816038 R14: 00007f83f2815fa0 R15: 00007fff089c5218 [ 420.460309][ T8191] [ 425.380619][ T8196] netlink: 'syz.3.1120': attribute type 2 has an invalid length. [ 425.626343][ T8217] netlink: 'syz.2.1126': attribute type 3 has an invalid length. [ 425.705937][ T8217] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1126'. [ 425.739470][ T8227] netlink: 'syz.4.1125': attribute type 1 has an invalid length. [ 425.803295][ T8227] netlink: 'syz.4.1125': attribute type 3 has an invalid length. [ 425.839789][ T8227] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1125'. [ 425.942507][ T8231] netlink: 'syz.3.1130': attribute type 21 has an invalid length. [ 426.003333][ T8231] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1130'. [ 426.013563][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 426.254765][ T8241] FAULT_INJECTION: forcing a failure. [ 426.254765][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 426.289921][ T8241] CPU: 0 PID: 8241 Comm: syz.3.1133 Not tainted syzkaller #0 [ 426.297397][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 426.307590][ T8241] Call Trace: [ 426.310909][ T8241] [ 426.314069][ T8241] dump_stack_lvl+0x188/0x24e [ 426.318812][ T8241] ? show_regs_print_info+0x12/0x12 [ 426.324159][ T8241] ? load_image+0x400/0x400 [ 426.328725][ T8241] ? __lock_acquire+0x7d10/0x7d10 [ 426.333812][ T8241] ? get_random_u64+0x16c/0x8d0 [ 426.338715][ T8241] ? get_random_u64+0x53a/0x8d0 [ 426.343714][ T8241] should_fail_ex+0x399/0x4d0 [ 426.348446][ T8241] should_failslab+0x5/0x20 [ 426.352992][ T8241] slab_pre_alloc_hook+0x59/0x310 [ 426.358062][ T8241] ? memset+0x1e/0x40 [ 426.362097][ T8241] kmem_cache_alloc+0x56/0x2f0 [ 426.366907][ T8241] ? prepare_creds+0x3c/0x610 [ 426.371647][ T8241] prepare_creds+0x3c/0x610 [ 426.376199][ T8241] copy_creds+0x146/0xd50 [ 426.380696][ T8241] copy_process+0x932/0x4030 [ 426.385449][ T8241] ? perf_trace_lock+0xf8/0x390 [ 426.390370][ T8241] ? idle_dummy+0x10/0x10 [ 426.394776][ T8241] kernel_clone+0x24b/0x900 [ 426.399431][ T8241] ? ksys_write+0x1c0/0x250 [ 426.404083][ T8241] ? create_io_thread+0x170/0x170 [ 426.409179][ T8241] __x64_sys_clone+0x1a7/0x220 [ 426.414346][ T8241] ? __fget_files+0x43d/0x4b0 [ 426.419191][ T8241] ? __ia32_sys_vfork+0x140/0x140 [ 426.424371][ T8241] ? lock_chain_count+0x20/0x20 [ 426.429376][ T8241] ? lockdep_hardirqs_on+0x94/0x140 [ 426.434723][ T8241] do_syscall_64+0x4c/0xa0 [ 426.439201][ T8241] ? clear_bhb_loop+0x60/0xb0 [ 426.443934][ T8241] ? clear_bhb_loop+0x60/0xb0 [ 426.448660][ T8241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.454603][ T8241] RIP: 0033:0x7ffaf6d9c819 [ 426.459073][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.478731][ T8241] RSP: 002b:00007ffaf7d0efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 426.487207][ T8241] RAX: ffffffffffffffda RBX: 00007ffaf7015fa0 RCX: 00007ffaf6d9c819 [ 426.495405][ T8241] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000020040000 [ 426.503492][ T8241] RBP: 00007ffaf7d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 426.511515][ T8241] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 426.519532][ T8241] R13: 00007ffaf7016038 R14: 00007ffaf7015fa0 R15: 00007fff80481278 [ 426.527574][ T8241] [ 427.266071][ T8259] device syzkaller0 entered promiscuous mode [ 427.276853][ T8256] netlink: 'syz.0.1139': attribute type 21 has an invalid length. [ 427.314576][ T8256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1139'. [ 428.984318][ T8305] FAULT_INJECTION: forcing a failure. [ 428.984318][ T8305] name failslab, interval 1, probability 0, space 0, times 0 [ 429.045503][ T8305] CPU: 1 PID: 8305 Comm: syz.0.1152 Not tainted syzkaller #0 [ 429.053056][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.063159][ T8305] Call Trace: [ 429.066477][ T8305] [ 429.069443][ T8305] dump_stack_lvl+0x188/0x24e [ 429.074187][ T8305] ? show_regs_print_info+0x12/0x12 [ 429.079441][ T8305] ? load_image+0x400/0x400 [ 429.084002][ T8305] ? __lock_acquire+0x7d10/0x7d10 [ 429.089085][ T8305] should_fail_ex+0x399/0x4d0 [ 429.093809][ T8305] should_failslab+0x5/0x20 [ 429.098350][ T8305] slab_pre_alloc_hook+0x59/0x310 [ 429.103424][ T8305] kmem_cache_alloc_node+0x5a/0x320 [ 429.108650][ T8305] ? alloc_vmap_area+0x18e/0x18c0 [ 429.113698][ T8305] alloc_vmap_area+0x18e/0x18c0 [ 429.118602][ T8305] ? vm_map_ram+0xab0/0xab0 [ 429.123117][ T8305] ? rcu_is_watching+0x11/0xa0 [ 429.127907][ T8305] __get_vm_area_node+0x158/0x330 [ 429.133032][ T8305] ? mod_objcg_state+0x50d/0x8a0 [ 429.137990][ T8305] __vmalloc_node_range+0x357/0x13b0 [ 429.143293][ T8305] ? copy_process+0x5fa/0x4030 [ 429.148086][ T8305] ? free_vm_area+0x50/0x50 [ 429.152607][ T8305] ? rcu_is_watching+0x11/0xa0 [ 429.157400][ T8305] dup_task_struct+0x3d3/0x6b0 [ 429.162182][ T8305] ? copy_process+0x5fa/0x4030 [ 429.167002][ T8305] copy_process+0x5fa/0x4030 [ 429.171605][ T8305] ? __lock_acquire+0x7d10/0x7d10 [ 429.176694][ T8305] ? idle_dummy+0x10/0x10 [ 429.181055][ T8305] kernel_clone+0x24b/0x900 [ 429.185574][ T8305] ? ksys_write+0x1c0/0x250 [ 429.190098][ T8305] ? create_io_thread+0x170/0x170 [ 429.195148][ T8305] __x64_sys_clone+0x1a7/0x220 [ 429.199921][ T8305] ? __fget_files+0x43d/0x4b0 [ 429.204620][ T8305] ? __ia32_sys_vfork+0x140/0x140 [ 429.209666][ T8305] ? lock_chain_count+0x20/0x20 [ 429.214570][ T8305] ? lockdep_hardirqs_on+0x94/0x140 [ 429.219782][ T8305] do_syscall_64+0x4c/0xa0 [ 429.224213][ T8305] ? clear_bhb_loop+0x60/0xb0 [ 429.228903][ T8305] ? clear_bhb_loop+0x60/0xb0 [ 429.233604][ T8305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.239514][ T8305] RIP: 0033:0x7f45eb99c819 [ 429.243948][ T8305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.263571][ T8305] RSP: 002b:00007f45ec894fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 429.272005][ T8305] RAX: ffffffffffffffda RBX: 00007f45ebc15fa0 RCX: 00007f45eb99c819 [ 429.279995][ T8305] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000020040000 [ 429.287975][ T8305] RBP: 00007f45ec895090 R08: 0000000000000000 R09: 0000000000000000 [ 429.295960][ T8305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 429.303944][ T8305] R13: 00007f45ebc16038 R14: 00007f45ebc15fa0 R15: 00007ffd4b8ced38 [ 429.311961][ T8305] [ 429.331852][ T8305] syz.0.1152: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 429.406428][ T8305] CPU: 0 PID: 8305 Comm: syz.0.1152 Not tainted syzkaller #0 [ 429.413893][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 429.424268][ T8305] Call Trace: [ 429.427609][ T8305] [ 429.430590][ T8305] dump_stack_lvl+0x188/0x24e [ 429.435503][ T8305] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 429.442071][ T8305] ? show_regs_print_info+0x12/0x12 [ 429.447328][ T8305] ? load_image+0x400/0x400 [ 429.451971][ T8305] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 429.458459][ T8305] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 429.465025][ T8305] warn_alloc+0x242/0x330 [ 429.469484][ T8305] ? slab_free_freelist_hook+0x131/0x1a0 [ 429.475186][ T8305] ? zone_watermark_ok_safe+0x270/0x270 [ 429.480797][ T8305] ? __get_vm_area_node+0x16d/0x330 [ 429.486066][ T8305] ? __get_vm_area_node+0x16d/0x330 [ 429.491327][ T8305] ? mod_objcg_state+0x50d/0x8a0 [ 429.496326][ T8305] __vmalloc_node_range+0x37c/0x13b0 [ 429.501715][ T8305] ? free_vm_area+0x50/0x50 [ 429.506264][ T8305] ? rcu_is_watching+0x11/0xa0 [ 429.511083][ T8305] dup_task_struct+0x3d3/0x6b0 [ 429.515875][ T8305] ? copy_process+0x5fa/0x4030 [ 429.520660][ T8305] copy_process+0x5fa/0x4030 [ 429.525266][ T8305] ? __lock_acquire+0x7d10/0x7d10 [ 429.530331][ T8305] ? idle_dummy+0x10/0x10 [ 429.534700][ T8305] kernel_clone+0x24b/0x900 [ 429.539231][ T8305] ? ksys_write+0x1c0/0x250 [ 429.543761][ T8305] ? create_io_thread+0x170/0x170 [ 429.548902][ T8305] __x64_sys_clone+0x1a7/0x220 [ 429.553679][ T8305] ? __fget_files+0x43d/0x4b0 [ 429.558378][ T8305] ? __ia32_sys_vfork+0x140/0x140 [ 429.563426][ T8305] ? lock_chain_count+0x20/0x20 [ 429.568303][ T8305] ? lockdep_hardirqs_on+0x94/0x140 [ 429.573523][ T8305] do_syscall_64+0x4c/0xa0 [ 429.577964][ T8305] ? clear_bhb_loop+0x60/0xb0 [ 429.582747][ T8305] ? clear_bhb_loop+0x60/0xb0 [ 429.587563][ T8305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.593472][ T8305] RIP: 0033:0x7f45eb99c819 [ 429.597927][ T8305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.617573][ T8305] RSP: 002b:00007f45ec894fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 429.626011][ T8305] RAX: ffffffffffffffda RBX: 00007f45ebc15fa0 RCX: 00007f45eb99c819 [ 429.633998][ T8305] RDX: 0000000000000000 RSI: ffffffffffffff90 RDI: 0000000020040000 [ 429.642009][ T8305] RBP: 00007f45ec895090 R08: 0000000000000000 R09: 0000000000000000 [ 429.649995][ T8305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 429.658154][ T8305] R13: 00007f45ebc16038 R14: 00007f45ebc15fa0 R15: 00007ffd4b8ced38 [ 429.666328][ T8305] [ 430.100639][ T8305] Mem-Info: [ 430.121647][ T8305] active_anon:38524 inactive_anon:0 isolated_anon:0 [ 430.121647][ T8305] active_file:23355 inactive_file:40057 isolated_file:0 [ 430.121647][ T8305] unevictable:768 dirty:325 writeback:0 [ 430.121647][ T8305] slab_reclaimable:21265 slab_unreclaimable:97113 [ 430.121647][ T8305] mapped:40967 shmem:33535 pagetables:789 [ 430.121647][ T8305] sec_pagetables:0 bounce:0 [ 430.121647][ T8305] kernel_misc_reclaimable:0 [ 430.121647][ T8305] free:1286160 free_pcp:6753 free_cma:0 [ 430.285292][ T8305] Node 0 active_anon:166596kB inactive_anon:0kB active_file:93420kB inactive_file:160028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165568kB dirty:1300kB writeback:0kB shmem:145004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10384kB pagetables:3156kB sec_pagetables:0kB all_unreclaimable? no [ 430.433246][ T8305] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 430.494338][ T8305] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.537125][ T8305] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 430.559518][ T8305] Node 0 DMA32 free:1201672kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:186196kB inactive_anon:0kB active_file:93420kB inactive_file:160028kB unevictable:1536kB writepending:1300kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:7644kB local_pcp:3536kB free_cma:0kB [ 430.601552][ T8305] lowmem_reserve[]: 0 0 1 1 1 [ 430.606460][ T8305] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 430.711630][ T8305] lowmem_reserve[]: 0 0 0 0 0 [ 430.744230][ T8305] Node 1 Normal free:3895352kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:20064kB local_pcp:6368kB free_cma:0kB [ 430.895587][ T8305] lowmem_reserve[]: 0 0 0 0 0 [ 430.941460][ T8305] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 430.970308][ T8305] Node 0 DMA32: 3*4kB (UME) 137*8kB (UM) 424*16kB (UE) 504*32kB (UE) 91*64kB (UME) 34*128kB (UME) 96*256kB (UME) 27*512kB (UME) 48*1024kB (UM) 23*2048kB (UME) 250*4096kB (UM) = 1192852kB [ 431.051585][ T8305] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 431.101758][ T8305] Node 1 Normal: 242*4kB (UME) 46*8kB (UE) 32*16kB (UME) 60*32kB (UME) 34*64kB (UME) 8*128kB (UME) 9*256kB (UME) 2*512kB (UM) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3895352kB [ 431.176637][ T8305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.210957][ T8305] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.268863][ T8305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.347908][ T8305] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.371656][ T8305] 99347 total pagecache pages [ 431.388246][ T8305] 0 pages in swap cache [ 431.412370][ T8305] Free swap = 124996kB [ 431.448259][ T8305] Total swap = 124996kB [ 431.474865][ T8305] 2097051 pages RAM [ 431.478783][ T8305] 0 pages HighMem/MovableOnly [ 431.508987][ T8305] 415207 pages reserved [ 431.522849][ T8305] 0 pages cma reserved [ 433.971497][ T8300] netlink: 'syz.1.1149': attribute type 10 has an invalid length. [ 433.979479][ T8300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1149'. [ 433.995128][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.016790][ T8300] batman_adv: batadv0: Adding interface: vlan1 [ 434.025023][ T8300] batman_adv: batadv0: The MTU of interface vlan1 is too small (1024) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.059339][ T8300] batman_adv: batadv0: Interface activated: vlan1 [ 434.066973][ T8300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.239194][ T8312] device syzkaller0 entered promiscuous mode [ 434.385385][ T8326] netlink: 'syz.1.1157': attribute type 9 has an invalid length. [ 434.431309][ T8325] sock: sock_set_timeout: `syz.2.1156' (pid 8325) tries to set negative timeout [ 435.040819][ T8336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1159'. [ 435.107605][ T8322] delete_channel: no stack [ 435.132162][ T8322] delete_channel: no stack [ 435.617561][ T8358] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1160'. [ 439.706630][ T8347] bridge0: port 3(team0) entered blocking state [ 439.716195][ T8347] bridge0: port 3(team0) entered disabled state [ 439.725413][ T8347] device team0 entered promiscuous mode [ 439.731251][ T8347] device team_slave_0 entered promiscuous mode [ 439.738114][ T8347] device team_slave_1 entered promiscuous mode [ 439.745848][ T8347] device netdevsim0 entered promiscuous mode [ 439.752394][ T8347] device wlan1 entered promiscuous mode [ 439.766296][ T8347] bridge0: port 3(team0) entered blocking state [ 439.773308][ T8347] bridge0: port 3(team0) entered forwarding state [ 439.868269][ T8360] netlink: 'syz.4.1164': attribute type 6 has an invalid length. [ 439.887081][ T8360] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1164'. [ 440.343655][ T8370] device syzkaller0 entered promiscuous mode [ 440.470528][ T8391] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1169'. [ 440.833810][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.840199][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.139872][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 444.495935][ T8421] netlink: 'syz.0.1177': attribute type 21 has an invalid length. [ 444.558228][ T8421] netlink: 'syz.0.1177': attribute type 12 has an invalid length. [ 444.610101][ T8421] netlink: 'syz.0.1177': attribute type 13 has an invalid length. [ 444.661008][ T8421] netlink: 'syz.0.1177': attribute type 14 has an invalid length. [ 444.710744][ T8421] netlink: 'syz.0.1177': attribute type 15 has an invalid length. [ 444.730490][ T8421] netlink: 'syz.0.1177': attribute type 16 has an invalid length. [ 444.754341][ T8421] netlink: 'syz.0.1177': attribute type 19 has an invalid length. [ 444.754371][ T8441] sctp: [Deprecated]: syz.4.1182 (pid 8441) Use of int in max_burst socket option deprecated. [ 444.754371][ T8441] Use struct sctp_assoc_value instead [ 444.767903][ T8421] netlink: 'syz.0.1177': attribute type 21 has an invalid length. [ 444.797327][ T8421] netlink: 'syz.0.1177': attribute type 22 has an invalid length. [ 444.821479][ T8421] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.1177'. [ 446.255261][ T8469] device syzkaller0 entered promiscuous mode [ 447.055247][ T8539] netlink: 'syz.3.1189': attribute type 10 has an invalid length. [ 447.813967][ T8539] team0: Port device geneve1 added [ 451.856391][ T8584] bridge0: port 2(ip6gretap0) entered blocking state [ 451.871696][ T8584] bridge0: port 2(ip6gretap0) entered disabled state [ 451.893577][ T8584] device ip6gretap0 entered promiscuous mode [ 451.921943][ T8584] bridge0: port 2(ip6gretap0) entered blocking state [ 451.928901][ T8584] bridge0: port 2(ip6gretap0) entered forwarding state [ 452.337874][ T8604] netlink: 'syz.1.1206': attribute type 10 has an invalid length. [ 452.477618][ T8601] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1206'. [ 452.529182][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.604663][ T8604] device bridge_slave_1 left promiscuous mode [ 452.611928][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.637902][ T8604] device bridge_slave_1 entered promiscuous mode [ 452.650484][ T8604] team0: Port device bridge_slave_1 added [ 452.669189][ T8608] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1208'. [ 452.719418][ T8610] netlink: 64019 bytes leftover after parsing attributes in process `syz.0.1207'. [ 453.052679][ T8624] netlink: 'syz.4.1210': attribute type 33 has an invalid length. [ 453.060605][ T8624] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1210'. [ 454.409538][ T8680] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1227'. [ 454.480189][ T8680] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 454.714389][ T8689] delete_channel: no stack [ 455.477462][ T8712] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1236'. [ 455.699492][ T8716] netlink: 'syz.0.1239': attribute type 10 has an invalid length. [ 455.716319][ T8716] device netdevsim0 entered promiscuous mode [ 456.123569][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.145299][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.290077][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.428740][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.257513][ T8725] batman_adv: batadv0: Removing interface: veth0_vlan [ 459.905323][ T8727] netlink: 'syz.2.1242': attribute type 21 has an invalid length. [ 459.961208][ T8727] netlink: 'syz.2.1242': attribute type 6 has an invalid length. [ 460.000190][ T8727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1242'. [ 462.238809][ T8794] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 464.398313][ T8845] syz.4.1272[8845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.398609][ T8845] syz.4.1272[8845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.882798][ T8865] netlink: 'syz.0.1277': attribute type 2 has an invalid length. [ 464.965467][ T8867] netlink: 'syz.0.1277': attribute type 2 has an invalid length. [ 465.817439][ T8873] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 465.916657][ T8873] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1279'. [ 466.744687][ T8890] device syzkaller0 entered promiscuous mode [ 466.802611][ T8886] netlink: 'syz.0.1283': attribute type 10 has an invalid length. [ 466.857365][ T8886] device netdevsim0 left promiscuous mode [ 466.950618][ T8886] device netdevsim0 entered promiscuous mode [ 466.989039][ T8886] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 472.270800][ T8524] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 473.582731][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.589981][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.865467][ T8927] ªªªªªª: renamed from vlan0 [ 474.010988][ T8935] device syzkaller0 entered promiscuous mode [ 478.080810][ T8971] device veth1_macvtap left promiscuous mode [ 478.326964][ T8968] device syzkaller0 entered promiscuous mode [ 478.499157][ T8986] netlink: 'syz.2.1308': attribute type 4 has an invalid length. [ 478.572365][ T8986] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1308'. [ 484.112822][ T9052] device syzkaller0 entered promiscuous mode [ 489.812222][ T9072] netlink: 'syz.4.1335': attribute type 21 has an invalid length. [ 489.820198][ T9072] netlink: 'syz.4.1335': attribute type 5 has an invalid length. [ 489.866287][ T9100] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 489.893661][ T9100] team0: Port device wlan1 added [ 491.437704][ T9139] device syzkaller0 entered promiscuous mode [ 491.920840][ T9153] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1357'. [ 491.930478][ T9153] ksmbd: Unknown IPC event: 10, ignore. [ 497.179063][ T9155] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.187213][ T9155] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1358'. [ 497.336281][ T9171] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 497.567675][ T9180] netlink: 'syz.0.1362': attribute type 11 has an invalid length. [ 497.585876][ T9180] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1362'. [ 497.613631][ T9180] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 497.635218][ T9180] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1362'. [ 497.818182][ T9177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.106218][ T9186] netlink: 'syz.4.1364': attribute type 2 has an invalid length. [ 498.143852][ T9186] netlink: 'syz.4.1364': attribute type 8 has an invalid length. [ 498.167108][ T9186] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1364'. [ 498.251298][ T9188] device sit0 entered promiscuous mode [ 498.718495][ T9186] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1364'. [ 499.697760][ T9218] device syzkaller0 entered promiscuous mode [ 499.973447][ T9241] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 500.002320][ T9241] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1377'. [ 500.554422][ T9257] netlink: 'syz.1.1379': attribute type 29 has an invalid length. [ 500.786431][ T4278] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 501.822817][ T9278] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1385'. [ 502.036031][ T9283] can: request_module (can-proto-3) failed. [ 502.274315][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.280740][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.832853][ T4278] Bluetooth: hci4: command 0x2016 tx timeout [ 503.294470][ T8524] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 503.969315][ T9242] device syzkaller0 entered promiscuous mode [ 503.977070][ T9257] netlink: 'syz.1.1379': attribute type 29 has an invalid length. [ 506.826884][ T9316] netlink: 'syz.1.1393': attribute type 2 has an invalid length. [ 506.858496][ T9316] netlink: 'syz.1.1393': attribute type 10 has an invalid length. [ 506.902227][ T9316] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1393'. [ 506.950530][ T9316] batman_adv: batadv0: Interface deactivated: vlan1 [ 507.489736][ T9316] batman_adv: batadv0: Removing interface: vlan1 [ 507.679387][ T9334] netlink: 'syz.3.1396': attribute type 10 has an invalid length. [ 507.900304][ T9334] bond0: (slave bond_slave_0): Releasing backup interface [ 508.148783][ T9345] netlink: 'syz.1.1399': attribute type 2 has an invalid length. [ 508.182406][ T9345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1399'. [ 508.498063][ T9357] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.1403'. [ 508.596374][ T9355] device syzkaller0 entered promiscuous mode [ 509.112665][ T9377] netlink: 'syz.1.1408': attribute type 3 has an invalid length. [ 509.132909][ T9377] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1408'. [ 511.729829][ T9370] netlink: 'syz.3.1404': attribute type 10 has an invalid length. [ 511.738796][ T9370] device hsr0 entered promiscuous mode [ 511.745446][ T9370] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 511.765079][ T9378] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1408'. [ 512.685204][ T9408] netlink: 'syz.2.1416': attribute type 2 has an invalid length. [ 515.758763][ T9408] device 2 entered promiscuous mode [ 516.135626][ T9427] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.1421'. [ 516.593144][ T9446] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1425'. [ 516.642329][ T9446] openvswitch: netlink: Message has 6 unknown bytes. [ 517.066376][ T9453] device syzkaller0 entered promiscuous mode [ 518.294414][ T9480] ================================================================== [ 518.302565][ T9480] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 518.310431][ T9480] Write of size 56 at addr ffff88803000be10 by task syz.2.1438/9480 [ 518.318443][ T9480] [ 518.320791][ T9480] CPU: 1 PID: 9480 Comm: syz.2.1438 Not tainted syzkaller #0 [ 518.328206][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 518.338465][ T9480] Call Trace: [ 518.341774][ T9480] [ 518.344734][ T9480] dump_stack_lvl+0x188/0x24e [ 518.349473][ T9480] ? __lock_acquire+0x7d10/0x7d10 [ 518.354638][ T9480] ? show_regs_print_info+0x12/0x12 [ 518.359980][ T9480] ? load_image+0x400/0x400 [ 518.364797][ T9480] ? __virt_addr_valid+0x465/0x540 [ 518.369950][ T9480] ? __bpf_get_stackid+0x6c9/0x920 [ 518.375098][ T9480] print_report+0xa8/0x210 [ 518.379640][ T9480] kasan_report+0x10b/0x140 [ 518.384369][ T9480] ? __bpf_get_stackid+0x6c9/0x920 [ 518.389707][ T9480] kasan_check_range+0x235/0x290 [ 518.394858][ T9480] ? __bpf_get_stackid+0x6c9/0x920 [ 518.399990][ T9480] memcpy+0x3c/0x60 [ 518.403810][ T9480] __bpf_get_stackid+0x6c9/0x920 [ 518.408849][ T9480] bpf_get_stackid_pe+0x33f/0x400 [ 518.413982][ T9480] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 518.419461][ T9480] bpf_overflow_handler+0x522/0x7c0 [ 518.424701][ T9480] ? bpf_overflow_handler+0xd9/0x7c0 [ 518.430123][ T9480] ? perf_swevent_overflow+0x230/0x230 [ 518.435596][ T9480] ? ct_irq_exit_irqson+0x113/0x170 [ 518.440818][ T9480] ? __perf_event_account_interrupt+0x187/0x280 [ 518.447088][ T9480] __perf_event_overflow+0x448/0x610 [ 518.452403][ T9480] perf_swevent_event+0x315/0x570 [ 518.457624][ T9480] ? perf_tp_event+0xc30/0xc30 [ 518.462412][ T9480] ___perf_sw_event+0x49e/0x6e0 [ 518.467371][ T9480] ? ___perf_sw_event+0x180/0x6e0 [ 518.472410][ T9480] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 518.478930][ T9480] ? __lock_acquire+0x13cf/0x7d10 [ 518.483984][ T9480] ? verify_lock_unused+0x140/0x140 [ 518.489216][ T9480] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 518.495225][ T9480] ? lock_chain_count+0x20/0x20 [ 518.500090][ T9480] ? perf_trace_lock+0xf8/0x390 [ 518.504952][ T9480] __perf_sw_event+0x135/0x260 [ 518.509825][ T9480] do_user_addr_fault+0xaea/0xb10 [ 518.514889][ T9480] ? trace_hardirqs_off_finish+0x86/0x180 [ 518.520623][ T9480] exc_page_fault+0x60/0x100 [ 518.525268][ T9480] asm_exc_page_fault+0x22/0x30 [ 518.530173][ T9480] RIP: 0010:strncpy_from_user+0x14b/0x350 [ 518.535916][ T9480] Code: 4c 89 e6 e8 77 e6 49 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 [ 518.555623][ T9480] RSP: 0018:ffffc90003917b50 EFLAGS: 00050246 [ 518.561704][ T9480] RAX: ffffffff843891f9 RBX: ffffc90003917c70 RCX: ffff88802cfdbb80 [ 518.569688][ T9480] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 518.577672][ T9480] RBP: ffffc90003917c70 R08: ffff88802cfdbb80 R09: 0000000000000003 [ 518.585655][ T9480] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 518.593720][ T9480] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 518.601708][ T9480] ? strncpy_from_user+0x129/0x350 [ 518.606850][ T9480] bpf_prog_load+0x1f3/0x1560 [ 518.611553][ T9480] ? map_freeze+0x390/0x390 [ 518.616079][ T9480] ? __might_fault+0xa6/0x120 [ 518.620795][ T9480] ? __might_fault+0xa6/0x120 [ 518.625485][ T9480] ? __might_fault+0xc2/0x120 [ 518.630179][ T9480] ? __might_fault+0xa6/0x120 [ 518.634885][ T9480] ? bpf_lsm_bpf+0x5/0x10 [ 518.639263][ T9480] ? security_bpf+0x7a/0xa0 [ 518.643792][ T9480] __sys_bpf+0x5b8/0x780 [ 518.648282][ T9480] ? bpf_link_show_fdinfo+0x380/0x380 [ 518.653882][ T9480] ? lock_chain_count+0x20/0x20 [ 518.658840][ T9480] __x64_sys_bpf+0x78/0x90 [ 518.663279][ T9480] do_syscall_64+0x4c/0xa0 [ 518.667713][ T9480] ? clear_bhb_loop+0x60/0xb0 [ 518.672414][ T9480] ? clear_bhb_loop+0x60/0xb0 [ 518.677114][ T9480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.683117][ T9480] RIP: 0033:0x7f83f259c819 [ 518.687660][ T9480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.707382][ T9480] RSP: 002b:00007f83f3456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.715815][ T9480] RAX: ffffffffffffffda RBX: 00007f83f2815fa0 RCX: 00007f83f259c819 [ 518.723890][ T9480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 518.731874][ T9480] RBP: 00007f83f2632c91 R08: 0000000000000000 R09: 0000000000000000 [ 518.740031][ T9480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.748248][ T9480] R13: 00007f83f2816038 R14: 00007f83f2815fa0 R15: 00007fff089c5218 [ 518.756250][ T9480] [ 518.759289][ T9480] [ 518.761645][ T9480] Allocated by task 9480: [ 518.765979][ T9480] kasan_set_track+0x4b/0x70 [ 518.770590][ T9480] __kasan_kmalloc+0x8e/0xa0 [ 518.775288][ T9480] __kmalloc_node+0xb0/0x240 [ 518.780119][ T9480] bpf_map_area_alloc+0x47/0xe0 [ 518.784988][ T9480] prealloc_elems_and_freelist+0x86/0x1c0 [ 518.790725][ T9480] stack_map_alloc+0x390/0x520 [ 518.795514][ T9480] map_create+0x534/0x1000 [ 518.800032][ T9480] __sys_bpf+0x38b/0x780 [ 518.804311][ T9480] __x64_sys_bpf+0x78/0x90 [ 518.808738][ T9480] do_syscall_64+0x4c/0xa0 [ 518.813168][ T9480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.819077][ T9480] [ 518.821417][ T9480] Last potentially related work creation: [ 518.827135][ T9480] kasan_save_stack+0x3a/0x60 [ 518.831831][ T9480] __kasan_record_aux_stack+0xb2/0xc0 [ 518.837210][ T9480] call_rcu+0x14f/0x990 [ 518.841383][ T9480] nf_unregister_net_hooks+0xc7/0x130 [ 518.846767][ T9480] nf_defrag_ipv6_disable+0x91/0xe0 [ 518.851981][ T9480] nf_ct_netns_put+0x371/0x510 [ 518.856752][ T9480] nf_conncount_destroy+0x3d/0x150 [ 518.861876][ T9480] ovs_ct_exit+0x98/0x200 [ 518.866218][ T9480] ovs_exit_net+0xe9/0x7a0 [ 518.870637][ T9480] cleanup_net+0x706/0xba0 [ 518.875065][ T9480] process_one_work+0x8a2/0x1160 [ 518.880011][ T9480] worker_thread+0xaa2/0x1270 [ 518.884697][ T9480] kthread+0x29d/0x330 [ 518.888771][ T9480] ret_from_fork+0x1f/0x30 [ 518.893203][ T9480] [ 518.895535][ T9480] Second to last potentially related work creation: [ 518.902128][ T9480] kasan_save_stack+0x3a/0x60 [ 518.906821][ T9480] __kasan_record_aux_stack+0xb2/0xc0 [ 518.912201][ T9480] call_rcu+0x14f/0x990 [ 518.916383][ T9480] __nf_register_net_hook+0x788/0x910 [ 518.921773][ T9480] nf_register_net_hook+0xae/0x190 [ 518.926894][ T9480] nf_register_net_hooks+0x40/0x1a0 [ 518.932279][ T9480] ebt_register_table+0xc97/0x1020 [ 518.937409][ T9480] find_inlist_lock_noload+0x178/0x260 [ 518.942881][ T9480] do_ebt_get_ctl+0x2c7/0x1cf0 [ 518.947656][ T9480] nf_getsockopt+0x25e/0x280 [ 518.952261][ T9480] ip_getsockopt+0x19b/0x230 [ 518.956875][ T9480] __sys_getsockopt+0x1b0/0x230 [ 518.961749][ T9480] __x64_sys_getsockopt+0xb1/0xc0 [ 518.966787][ T9480] do_syscall_64+0x4c/0xa0 [ 518.971221][ T9480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.977125][ T9480] [ 518.979465][ T9480] The buggy address belongs to the object at ffff88803000be00 [ 518.979465][ T9480] which belongs to the cache kmalloc-cg-64 of size 64 [ 518.993617][ T9480] The buggy address is located 16 bytes inside of [ 518.993617][ T9480] 64-byte region [ffff88803000be00, ffff88803000be40) [ 519.006723][ T9480] [ 519.009050][ T9480] The buggy address belongs to the physical page: [ 519.015463][ T9480] page:ffffea0000c002c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3000b [ 519.025622][ T9480] memcg:ffff888074c92201 [ 519.029868][ T9480] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 519.037435][ T9480] raw: 00fff00000000200 ffffea0001de3ac0 dead000000000005 ffff888017442780 [ 519.046029][ T9480] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888074c92201 [ 519.054613][ T9480] page dumped because: kasan: bad access detected [ 519.061029][ T9480] page_owner tracks the page as allocated [ 519.066835][ T9480] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 26171359782, free_ts 26169217747 [ 519.084395][ T9480] post_alloc_hook+0x173/0x1a0 [ 519.089176][ T9480] get_page_from_freelist+0x1a1e/0x1ab0 [ 519.094739][ T9480] __alloc_pages+0x1ec/0x4f0 [ 519.099345][ T9480] alloc_page_interleave+0x24/0x1e0 [ 519.104562][ T9480] alloc_slab_page+0x5d/0x160 [ 519.109251][ T9480] new_slab+0x87/0x2c0 [ 519.113333][ T9480] ___slab_alloc+0xbc6/0x1240 [ 519.118018][ T9480] __kmem_cache_alloc_node+0x1a0/0x260 [ 519.123483][ T9480] __kmalloc_node+0xa0/0x240 [ 519.128110][ T9480] kvmalloc_node+0x6c/0x180 [ 519.132626][ T9480] nf_hook_entries_grow+0x309/0x730 [ 519.137832][ T9480] __nf_register_net_hook+0x2c9/0x910 [ 519.143216][ T9480] nf_register_net_hook+0xae/0x190 [ 519.148343][ T9480] nf_register_net_hooks+0x40/0x1a0 [ 519.153551][ T9480] nf_defrag_ipv4_enable+0x83/0x110 [ 519.158760][ T9480] nf_ct_netns_do_get+0x189/0x5b0 [ 519.163791][ T9480] page last free stack trace: [ 519.168464][ T9480] free_unref_page_prepare+0x8b4/0x9a0 [ 519.173945][ T9480] free_unref_page+0x2e/0x3f0 [ 519.178638][ T9480] __vunmap+0x856/0xa00 [ 519.182904][ T9480] free_work+0x56/0x80 [ 519.186985][ T9480] process_one_work+0x8a2/0x1160 [ 519.192021][ T9480] worker_thread+0xaa2/0x1270 [ 519.196712][ T9480] kthread+0x29d/0x330 [ 519.200787][ T9480] ret_from_fork+0x1f/0x30 [ 519.205223][ T9480] [ 519.207558][ T9480] Memory state around the buggy address: [ 519.213201][ T9480] ffff88803000bd00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 519.221277][ T9480] ffff88803000bd80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 519.229474][ T9480] >ffff88803000be00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 519.237542][ T9480] ^ [ 519.242918][ T9480] ffff88803000be80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 519.251025][ T9480] ffff88803000bf00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 519.259091][ T9480] ================================================================== [ 519.267160][ T9480] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 519.274445][ T9480] CPU: 1 PID: 9480 Comm: syz.2.1438 Not tainted syzkaller #0 [ 519.281828][ T9480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.292155][ T9480] Call Trace: [ 519.295447][ T9480] [ 519.298389][ T9480] dump_stack_lvl+0x188/0x24e [ 519.303088][ T9480] ? memcpy+0x3c/0x60 [ 519.307111][ T9480] ? show_regs_print_info+0x12/0x12 [ 519.312412][ T9480] ? load_image+0x400/0x400 [ 519.317027][ T9480] panic+0x2e5/0x730 [ 519.320938][ T9480] ? bpf_jit_dump+0xd0/0xd0 [ 519.325453][ T9480] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 519.331444][ T9480] ? _raw_spin_unlock+0x40/0x40 [ 519.336400][ T9480] ? print_memory_metadata+0x314/0x400 [ 519.341876][ T9480] check_panic_on_warn+0x80/0xa0 [ 519.346829][ T9480] ? __bpf_get_stackid+0x6c9/0x920 [ 519.351949][ T9480] end_report+0x66/0x110 [ 519.356297][ T9480] kasan_report+0x118/0x140 [ 519.360816][ T9480] ? __bpf_get_stackid+0x6c9/0x920 [ 519.365943][ T9480] kasan_check_range+0x235/0x290 [ 519.370900][ T9480] ? __bpf_get_stackid+0x6c9/0x920 [ 519.376025][ T9480] memcpy+0x3c/0x60 [ 519.379845][ T9480] __bpf_get_stackid+0x6c9/0x920 [ 519.384798][ T9480] bpf_get_stackid_pe+0x33f/0x400 [ 519.389853][ T9480] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 519.395325][ T9480] bpf_overflow_handler+0x522/0x7c0 [ 519.400541][ T9480] ? bpf_overflow_handler+0xd9/0x7c0 [ 519.405835][ T9480] ? perf_swevent_overflow+0x230/0x230 [ 519.411394][ T9480] ? ct_irq_exit_irqson+0x113/0x170 [ 519.416609][ T9480] ? __perf_event_account_interrupt+0x187/0x280 [ 519.422874][ T9480] __perf_event_overflow+0x448/0x610 [ 519.428179][ T9480] perf_swevent_event+0x315/0x570 [ 519.433224][ T9480] ? perf_tp_event+0xc30/0xc30 [ 519.438008][ T9480] ___perf_sw_event+0x49e/0x6e0 [ 519.442876][ T9480] ? ___perf_sw_event+0x180/0x6e0 [ 519.447928][ T9480] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 519.454547][ T9480] ? __lock_acquire+0x13cf/0x7d10 [ 519.459623][ T9480] ? verify_lock_unused+0x140/0x140 [ 519.464940][ T9480] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 519.471030][ T9480] ? lock_chain_count+0x20/0x20 [ 519.475898][ T9480] ? perf_trace_lock+0xf8/0x390 [ 519.480763][ T9480] __perf_sw_event+0x135/0x260 [ 519.485547][ T9480] do_user_addr_fault+0xaea/0xb10 [ 519.490590][ T9480] ? trace_hardirqs_off_finish+0x86/0x180 [ 519.496331][ T9480] exc_page_fault+0x60/0x100 [ 519.500938][ T9480] asm_exc_page_fault+0x22/0x30 [ 519.505800][ T9480] RIP: 0010:strncpy_from_user+0x14b/0x350 [ 519.511539][ T9480] Code: 4c 89 e6 e8 77 e6 49 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 [ 519.531165][ T9480] RSP: 0018:ffffc90003917b50 EFLAGS: 00050246 [ 519.537251][ T9480] RAX: ffffffff843891f9 RBX: ffffc90003917c70 RCX: ffff88802cfdbb80 [ 519.545273][ T9480] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 519.553255][ T9480] RBP: ffffc90003917c70 R08: ffff88802cfdbb80 R09: 0000000000000003 [ 519.561412][ T9480] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 519.569392][ T9480] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 519.577552][ T9480] ? strncpy_from_user+0x129/0x350 [ 519.582695][ T9480] bpf_prog_load+0x1f3/0x1560 [ 519.587393][ T9480] ? map_freeze+0x390/0x390 [ 519.591913][ T9480] ? __might_fault+0xa6/0x120 [ 519.596706][ T9480] ? __might_fault+0xa6/0x120 [ 519.601393][ T9480] ? __might_fault+0xc2/0x120 [ 519.606077][ T9480] ? __might_fault+0xa6/0x120 [ 519.610766][ T9480] ? bpf_lsm_bpf+0x5/0x10 [ 519.615193][ T9480] ? security_bpf+0x7a/0xa0 [ 519.619704][ T9480] __sys_bpf+0x5b8/0x780 [ 519.623960][ T9480] ? bpf_link_show_fdinfo+0x380/0x380 [ 519.629387][ T9480] ? lock_chain_count+0x20/0x20 [ 519.634267][ T9480] __x64_sys_bpf+0x78/0x90 [ 519.638707][ T9480] do_syscall_64+0x4c/0xa0 [ 519.643137][ T9480] ? clear_bhb_loop+0x60/0xb0 [ 519.647859][ T9480] ? clear_bhb_loop+0x60/0xb0 [ 519.652574][ T9480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.658488][ T9480] RIP: 0033:0x7f83f259c819 [ 519.662920][ T9480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.682551][ T9480] RSP: 002b:00007f83f3456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 519.691094][ T9480] RAX: ffffffffffffffda RBX: 00007f83f2815fa0 RCX: 00007f83f259c819 [ 519.699076][ T9480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 519.707146][ T9480] RBP: 00007f83f2632c91 R08: 0000000000000000 R09: 0000000000000000 [ 519.715141][ T9480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.723152][ T9480] R13: 00007f83f2816038 R14: 00007f83f2815fa0 R15: 00007fff089c5218 [ 519.731341][ T9480] [ 519.734521][ T9480] Kernel Offset: disabled [ 519.738863][ T9480] Rebooting in 86400 seconds..