last executing test programs: 2m52.958135072s ago: executing program 2 (id=5521): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x9}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb0, 0x2710c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x5}, 0x2a40, 0x3, 0x3, 0x0, 0x400da4f, 0x2000a, 0x0, 0x0, 0xfffffff8}, 0x0, 0xe, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0xa) r2 = socket$kcm(0x10, 0x5, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000700)={&(0x7f00000001c0), &(0x7f0000000340)=""/185, &(0x7f0000000500)="ef02176d4137fe0b4b8b93a3c1e061fe921a01845612de72ff213662b907a275a716bb43fac7c3ea5c5a1fa45501c008d702d375b29300f64bce8d419c9536384901412ef8c27c1b0565b9eb4af999eb253b428f1392a1655e662f39505c7fc347f0bbc926e8b4585956d9badb3fcd2032e903d366854320c4bcc9c4825f21f6c022c995ab27b4dbc7c43e7208fa44166749f07d651ee53163a4c5d61dd504059f37241be49cb96549956f32a462dbe068053013277e7b7ef1c8999752a6a2b46e91540ac7f8c99322f0acd33066e78a6c5c18c38c4454f5c48147df20acf54191795f9fed11f62874d158b597f359264bbd2708432eb1", &(0x7f0000000600)="2c9f60badc67a68899acd6f92948e9fd277fdb34b9d37627dae6e677d95ca13c9af2b1f203af09f77dd58e3accacad8cbc04ed68e047a89a4d28df4ba2e5f76b8f60243807599251fa02c9392a44d0b9bbbdfe5c60f44cfbe6b5dd0dd7254cd778c989e6a33bb1a500be094b0d50a187f272d4298014a981e90f93608e15a86ca72698cb145a6917b9b729b970609c2afbbd16768f5f8d3897e79211fd1cb35500265ba620a2e2b442155b1a82916557c3af9243c03c959057be0d67b392373eaf21d87fcf4f8b27dd37a6e1737316cae137ee", 0x6, r1}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6839}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, 0x0, 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x12) sendmsg$kcm(r2, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000007fffffff00000000", @ANYRES32=0x1, @ANYBLOB="0f2700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r7) socket$kcm(0x29, 0x5, 0x0) 2m52.643154276s ago: executing program 2 (id=5526): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/151, 0x97}, {&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000380)=""/22, 0x16}, {&(0x7f0000000000)=""/162, 0xa2}], 0x4, 0xfffffffffffffffe, 0xfffffffffffffe15}, 0x0) close(r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2m52.235377543s ago: executing program 2 (id=5531): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000540)="00000000700300003c8200f086ddb50876038ee00f5d4fe9dcdca73e0e8aadb464d593e2205ad35819aea7a29f9c1e783dfe96973b16", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="000000000000000000000000002f9c603b4e23a8ac79ab9774c9df632736"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r2, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000f40)={r3, &(0x7f0000000e00)="3882e9e07cb226f1f607758633ad9a31e33047597a21d05f7f5ba4381aa09bad9f2a15725571b0497dabfb59cd7100bc1960a308c63126eaa7cd39520bbdae74937c353600d8066fc199ce511a06b94b245b14a8bfd38b6261d1ffa42d4c32244275767dd5d28e8ce05f918b06347d53e3aa459aaa9d4480cfd9755972dab9d15a238288c8658d56126149535def5159484532de3365575e03cc032bcfcf804d89259d806d5eb75b65fc11d25e397715a603f8e288f8f157539786af0d0d53af0da8943b053d628f3b4a3dd2815bdf46b7", &(0x7f0000000f00)=""/32}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m51.823547079s ago: executing program 2 (id=5533): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x82c, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005300000095dbd0ff7fa57b0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000007", 0x33fe0}], 0x1}, 0x0) 2m51.559964203s ago: executing program 2 (id=5538): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0x3) 2m51.323926266s ago: executing program 2 (id=5540): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_clone(0x60208000, &(0x7f0000003bc0)="bb0ed529d06b4c625a24ebccdda3816ac14f3a9dce207cf969a862120878758af38a958d2c9e50ad58c1ab30142e936831977f0f8ea71c84856d85b97cd970066ccf08207ae2b1d144f6741489b7c4477ad8d09e7b04bf91376248d6c3a00fc60aeac34087105fca9d09a6c52638dd4fffb0121744272086a0d8d45e28c3", 0x7e, &(0x7f0000003c40), &(0x7f0000003c80), &(0x7f0000003cc0)="624425b65552d6c765a85bf5836c8b74f7") r8 = gettid() sendmsg$unix(r5, &(0x7f0000003dc0)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003b00)=[{&(0x7f00000001c0)="c31d4a508e3af0abbc6f329b3ba2c831461e18a800bfa10e305c99f92ce0aa1b41ef52a394d161ba0955410cd229adbe32e67a", 0x33}, {&(0x7f0000000240)="3e25cd3bf4e3db63653a240fe78038970a9d42a36354eebd423c5a7b05a725d43ad937b7d209b0e7bdaca058562defd3f4d4c0", 0x33}, {&(0x7f0000000640)="ae90733ae9870abb21dbfae073bd8c9fcbfaf667c70120d9c5565cf78ab9d0d0ff4a83aa1680614dac0dccfdf6c4bfdb16eeb2976d081eaf1f8501ffaa8506ecfe91e1b3c13f970111769bd8cffb2905d0b47f674f6994097034416bdb20f51793ac4f01b729ac2ef20f572d9a5cb33cb6dcd20a10981d0c7ff25c16630270263aee4d2d887fce86b9df876d4372b7250ee3c1a7d325b1f3fcf88369516c3fadfc7a473051ea31e2cb77f149b267f423dcfced2f2ee91c32e91a9ddf0b6963d531ad3b6dde4e9b42ed8c049711d6ba02c08305318ea7da7bb2931b1cc8363c7e5216fc900b896dccb6af635995fe5e490ae79b0d50", 0xf5}, {&(0x7f0000000880)="067f0f4af6ae21428a0113465cc05c0c9bd6d6d7071091181983c91cbef91674bf14288ae6bce9ba09ee61453ed4a5d00b6ed7f7b743597049b4a66e28bfecdfad176d62f919f37ee9daa8cfd407acc0733ff99661f5f5d6f3f8b1cd7a851ef7abbcd247af051bf6c8a58a9a46d6c63d25b521a9a905e410773ca1a2f723a18b24386723afb0358c7868448c1772529dba5a940bc0dc70811fb226b7ea57f9b72356e7c4beb9fc899c9640375b185198b97d4f65ebe7e587ab713822879fc8cdd53f6b617bca02da01a4a97a1309ef025b3843c367395a640a05e65cdcc406b18d452dc9ae3d984b27f8a6575fa82d017de0aab55926", 0xf6}, {&(0x7f0000000980)="5349c0ad55d9fb06a65b20c8c89a9aebd218e12c690be4b6a88d40a790a84e23351d5435af63f1defd91df2c481c6342c742fc023837b5a8fd3af5c6daa0c41d6f2985542655dd67150b199b1a97482d8cf101ea2e6612b4e7f0a51acc22a365a78649272a349c936713ba9765ea", 0x6e}, {&(0x7f0000000a00)="329b5584403fd3a59d46043ca4e7f0bf0c529b66af8b9381adab6279d5e35afbe6b72258704e99f0355ee76f8b4b7b2bffb19536227222bc5a3e90c6c96e120065e8f682580b2dbe2eb7c0e8bfcc3e1cfe90a0f022c2cdfbe82b86e0ff7833fb73ef4b33cebadc", 0x67}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="e752b56f811b043fafb8c436cabce00eb60b9c21e9c7f347df422fcb7cbecdb4918fbe2a6c14a82ad1dd69e98992a21a7c72f231c5237b57a893e10b0a9665bc85aef22420b9d54782ae20223840c621a395fb25589484509e6effd7f21190bfb003c9f0d19b532a7d8c2573", 0x6c}, {&(0x7f0000003a80)="dfdded076dc375041697a837782cefe9f7771dd7d9f571ac47a390aeff7dac19ff8569fe2974bc5c2c", 0x29}, {&(0x7f0000003ac0)="550d6bd16b246a68a5815f3c61b59b351a6c4050728685cd2e410d582c13f72ee124188084a9211032484049665a", 0x2e}], 0xa, &(0x7f0000003d00)=[@rights={{0x24, 0x1, 0x1, [r3, r2, r6, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, 0xee01}}}], 0xa0, 0x20008010}, 0x40800) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080)) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r12) r13 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r13, 0x1, 0x19, &(0x7f0000000180), 0x4) 2m36.132296475s ago: executing program 32 (id=5540): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_clone(0x60208000, &(0x7f0000003bc0)="bb0ed529d06b4c625a24ebccdda3816ac14f3a9dce207cf969a862120878758af38a958d2c9e50ad58c1ab30142e936831977f0f8ea71c84856d85b97cd970066ccf08207ae2b1d144f6741489b7c4477ad8d09e7b04bf91376248d6c3a00fc60aeac34087105fca9d09a6c52638dd4fffb0121744272086a0d8d45e28c3", 0x7e, &(0x7f0000003c40), &(0x7f0000003c80), &(0x7f0000003cc0)="624425b65552d6c765a85bf5836c8b74f7") r8 = gettid() sendmsg$unix(r5, &(0x7f0000003dc0)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003b00)=[{&(0x7f00000001c0)="c31d4a508e3af0abbc6f329b3ba2c831461e18a800bfa10e305c99f92ce0aa1b41ef52a394d161ba0955410cd229adbe32e67a", 0x33}, {&(0x7f0000000240)="3e25cd3bf4e3db63653a240fe78038970a9d42a36354eebd423c5a7b05a725d43ad937b7d209b0e7bdaca058562defd3f4d4c0", 0x33}, {&(0x7f0000000640)="ae90733ae9870abb21dbfae073bd8c9fcbfaf667c70120d9c5565cf78ab9d0d0ff4a83aa1680614dac0dccfdf6c4bfdb16eeb2976d081eaf1f8501ffaa8506ecfe91e1b3c13f970111769bd8cffb2905d0b47f674f6994097034416bdb20f51793ac4f01b729ac2ef20f572d9a5cb33cb6dcd20a10981d0c7ff25c16630270263aee4d2d887fce86b9df876d4372b7250ee3c1a7d325b1f3fcf88369516c3fadfc7a473051ea31e2cb77f149b267f423dcfced2f2ee91c32e91a9ddf0b6963d531ad3b6dde4e9b42ed8c049711d6ba02c08305318ea7da7bb2931b1cc8363c7e5216fc900b896dccb6af635995fe5e490ae79b0d50", 0xf5}, {&(0x7f0000000880)="067f0f4af6ae21428a0113465cc05c0c9bd6d6d7071091181983c91cbef91674bf14288ae6bce9ba09ee61453ed4a5d00b6ed7f7b743597049b4a66e28bfecdfad176d62f919f37ee9daa8cfd407acc0733ff99661f5f5d6f3f8b1cd7a851ef7abbcd247af051bf6c8a58a9a46d6c63d25b521a9a905e410773ca1a2f723a18b24386723afb0358c7868448c1772529dba5a940bc0dc70811fb226b7ea57f9b72356e7c4beb9fc899c9640375b185198b97d4f65ebe7e587ab713822879fc8cdd53f6b617bca02da01a4a97a1309ef025b3843c367395a640a05e65cdcc406b18d452dc9ae3d984b27f8a6575fa82d017de0aab55926", 0xf6}, {&(0x7f0000000980)="5349c0ad55d9fb06a65b20c8c89a9aebd218e12c690be4b6a88d40a790a84e23351d5435af63f1defd91df2c481c6342c742fc023837b5a8fd3af5c6daa0c41d6f2985542655dd67150b199b1a97482d8cf101ea2e6612b4e7f0a51acc22a365a78649272a349c936713ba9765ea", 0x6e}, {&(0x7f0000000a00)="329b5584403fd3a59d46043ca4e7f0bf0c529b66af8b9381adab6279d5e35afbe6b72258704e99f0355ee76f8b4b7b2bffb19536227222bc5a3e90c6c96e120065e8f682580b2dbe2eb7c0e8bfcc3e1cfe90a0f022c2cdfbe82b86e0ff7833fb73ef4b33cebadc", 0x67}, {&(0x7f0000002a00)="bd2e07b9b6d4afba1231166ff5b84ea6c5d860955257336fdbaa4bc09015b2713b6563a72ee89f797d119b2afa004afc2199d41452b6839babdf37a572f8ef0d87bdeb7696d80247cb489bf5ff548899a90a66d9fb5fa3fba3d1f1517de394a2b6e64adce647f9d0a3ddb4ea48c419022c0259f2da1aff340fc1f20b8dcb6ea118f964a22fc9994264ce246c91c332e7543c0fada579ede20a8437d072693f1aca287e04263083f0946bf90054fb308303eef6aed552044a274136baf96b7964efbbea1f9801690f760f381e6506532f77dbee752623fad3b841f796b11c52bb33859cbc66c4cee06d157903c70005debcdcde8872c8b64466662d4778eea491306af077b4d49e6a13edbff2f344501db6f3bb7f21fa60c62d65ced1ca89c30f8235598047790e1dc6d5616e1678da712b38ef003e6f20fb92cea955a7496636e4072080868bd80b3a73ac0de4de5a6bd88a97ed1a40531651ba4bf72d4217f0d3036e70dee2bb7fbfaa827f96abac42e04f3271d48d9f5978d1de31cbf379732944dbc84524daad8ae9bdf9b1e9eb3769b294507547abc5ac70b2db151f04d977fc8b32e2c2ce23916d7516cd04496b63e68bc1cb692c8629cb20a2fe8ef1f65ea3b2141efed858717c1e9ecf0585157f870318ab8a02543ddd21ec0556ac6dfc997e531cac6d22feeddd8afdc4d6e9211e290324985f2365ae554da964460a1b61c3cf477e1b52ab15f2c1c9259a070b064e4b729b8cc1c3843b59e229a2378c413f36aa21abf5fd4fd7f18d24c853d64ba46c80ad61059f1ee08e2d452f9a59ea052d1c3cffc0ecb49176509074ec16e37f537bf97b243e082e883a52e4179adf434dc2c9fb6647672a41af7ce8dcc83498c1c7115196290b6a1395491de8a743f7615a74061c6a14fbd83215ef9b0cfd582e7ec9bf858cc28e30f2a1f673f455292a28778f760e4865b12f9db9ade3ddd5869185bd71f483bff2f962a60052adc37209c539d063ddb5696618911ef8b7958d2e1d33e71a6387ac693ea69e0ee32932e145cd6622624ab3b0373d00a90b4623cd098f77a636bd50f43cdfa0129f225034a889f38f5eaea949d9e849f8110f99224bc94293e2cfec2c438a89c2f525e74cdcaa02d1fca2a060365919127ab6655aa5f56437f4e5890de0e0fbd972080b304f8dce1a1922a78e3324eb76387377f6d381662719fc0965f522a556075b34271a648f11fefa21cd8b6f9a0b555f6448229028cb1638f4ca728c6a1221b4e03bd62f176c8a7a808b6fba4820964435d07a7099eb1369a322984bd3a22d7ddfb956d5f9f938cf730e4c0dcffd8b43436b7b8de0315a3f93f4468d8cb1524db4694c057d1c7703559ea5a4874f851f98ffa81eb2a2420f805ce08bbb62d37fdbb209cabdd0d75d399555761051a2339e7a8d0b79d6d53d5fd3b411b5fd343e29e69b2c21e51b4c8b543ea842879e60eeb9612fb2bfb001ac383bd046ecab252d97faa43abeb2809ff1b2580911c60ed1724e30e8e0f3e9a8f70ca355b391ced212c8c7f451157fe34ee3c9011a02762da39073f27d6f67cb0cd53d3f4c3a08baf511262c7b19dac52ffffc2daba552cecfb3dc28134c57dd4a6fc3fcdc4a8c0986f3188e78a307c61992c662b6b78e348d9ddbcf364c18a7c5ba0a143325c46171d03b5c4d7c8aba33978562b72280f9d8357b130227c10ac5f364a7ae40d9050d67e1d4475c9bee10dc2355c14a1415c6bae32e88868a989fbb8e4ccb46e67a0d06c588c79d1a42964b7b98b9bb02fea5718e577f5f074fdb8cc96b667acd5c1609041ac13c876cfc8c62f493d3bbcfafa30d21a5a40e45edfb3ffbf04b106ab3f331928f751968c4ca59c8fe8238534bcbe2be9e455feade985067ed3af9f0173fb5534b2aa699df350d4d61f9b59bdca2406d2a0e6574202d84dca13c53aad52c8402512b19b0a5f41e36505cd32a06bf53ba0e4b050709ba89bf23d18c9faa7ab6ad24b6edb713a389d67693b0e7ae7c574f825e2c15a6f98e9fd5bec2be841a6bf5e958f4a7dae9a5814ca69dba34f23662754a86f0af553cdb691256a8143dc48c12fc498e96348d6ffd0ea521289d8fadea805066619c473677752a4fecf5d150b8020715075a04afe30f7cb6f47da0b09c31403ddae21f1ec6379abc557a6b888f4fd2169ce85cc7f7a9be39d8a3ea357400d07bb38a191347e087241cb4212998a8faaceb91838e8010e31012d1a5d4d49ff675485086bc9c7e5dea5c1688b396fc7ef53f54a9a10a21d9747d22b88c298889794ef0ea0a819f239c3709c325887699bab3c8700c7a022b0c0b05de43b252d752eb753b0ae1758a6a25aafa116d8febf7b961c39a8531a3feeddb6297a00d5ee4c4b7f93c674566c2af7670a96402417bf970faa8a24bec664ef70de8655024017c1828f2bb546193cb5b1fb17b5010b6f0ac83e881bbe0265cf065d8d96ada94fe59306aba89172c15402b0851f2466af827fefded05aab8ecc7c5089cd1aacdd0126e37d4a770ee8630daee2d27eb74d45f44d640463073f1d08e6daf505a9809008f0a07d0aecba0ba78329210efe058d6e0da5d5bf64edf00e2a9af23419a6879de4ed5678af017d75a6c71efe18dc1c4e93f779e7c035ceb6d08129e4b598209c00f1bd87eef7e813c7ac9b1f58606b0e57dde3d6fd23f442a69ca96bc87b6f2c360578a6cdeff3d976eb9ccba9c1c453e3a8d1ac9d53607699856cc79c98f09c9b1d57f21ba3da32faec147a73e1ad1045b351de04264efe39bb7ca7761a87d4c9ce5f6f6c192d3f95e147e00caf69a4e794e8e7f68521e152dfd815719707a6ba6b90d5a8ba0139e898fc622ee37872fa7fd6a70c6a86d90ae667e07ec6386c7d3bcafc42ed358bdae61917985b67593bade7261a5e0bd925038b4179bca103bade997ee45b0b65ca16af9dff0cc97708d19adf2d669306863b2e276517da00c585088abe243b0509bacb73949f46c28c15e511d7f6eb787f69eb22dbc6fe0e2af76125ad17ec873fc58e5b4e842ded0b7b8da11569368b7b17b992da9111fc42d5e65628b87606dc312c543a718398144703b9b7eb0a5116c0eb04203eda301dab9eb0526ebbeba0094d5c2b91e38aad3d2aff39fdcf62f59364bc0f52f05dc86fb59b9174b28156c1251852a2a188ac69e100202c67117acb0ecd1ec3f31a530efd9f9a4134c2f83bde878107a3415f1d85d0b486603aa3e97edaae7a531c397ec632c203d1916f5b1a8f9005c5e2f6a1fa8151325e04122fe8692f59ddf684e0f40052c01006e0ea0486a08484df9bc69c9bd4b35158f360b458ddd49fd012a1630da07179538b955f94c6f787b9dfa5efb4198aa08b9ec6d5784095b62a4fd69ce3fa4af48a6b51e8a27011cb4b723f6a7854ca20c35234db37dbde8d2e9d88766a5b2110b9a49c26b79867ff1fa228855b3418b6a0a1de7535fab20f78857abfa2bb3560a12835cf03d03c7d6e2797935ee621158c7cd9ee02f44c2de48c6ab509f71211971f80a2cd2c6a61583bac36a2bf95c7691e002ced83c1dee79e1510aef02405ee0d0796b88ee317e6c324bb8ae2fab7ce5864f36b2081944e5ea70fa1749eb96b16b853e2cc5b9a98cf9b5cda6911020b4cebf2809a17ea9fa1460166aa8e61f3e56a1ff508890ec59b7dc8fa8584b162e6c8ff761db82b3f4b3cac4545d5ed39e1efc2e33c56479a5ff9487f78375a7439f375de6b0f6404f5aa9222914f167b71a7ee6dc3b7fee1d836fca7420614198de693625f1125862a0bae4ec3502ffaea01c2ca34a54585f0286793d0ee2796f4d2c39bcf6268c494aaa3438f7f2db05b7d4209c531849b9e6a9c97a996bde01b03689acade4aa85588bd4076c2a855520b252c97123929500a0bda732d9d9cbec9238d6e3e66a42e12025f6b35ac93aa3a54575f1769e32e91cec899fa851cbef80bb6e75913359251d50df9aee667d7a5c11efd041c417b89a649af4401befe8b646345bca953087526ee5f2ba258cc61f455334ba086f99246318311afeccef4273eb90ba361c4890d533bba47b99eb550708dc0f97a5cd10d50cbb610812350ba715d8f628109263c1a8359c8b9cf547305d430e25aa6f03bf364ff5328ab5a010db7a1ae73d2dc375f77521d04f3826d43e6e3f0b14cb6a7830214b9135b9e6aa0aed4856827633608154a41b33c44779a83572c486a746eccce200abc8720e582af7b5bc4722b5e86d29e21193203a5d8bc9619bce7bff1121aa7960a9a2d32f10b1440c6b1d67466fb93e74238d570cbe55d4e08ccb37d466811d64e722f604f196e8fef5dde448a0dfaabad527dfbebf364c73acd35b0cb2f1f2b5331b5b8c56b2af898ac20839d5bb0db114fa15880dda704d50f3f27e6841684b068f94f781702233e9c0a313655890fbce455bcb611d0e276967013e04df388a02e92207102120f58216c7271ff85212749874376cce828321c5600952b85551595c1e50d2dbec093a0a856e681d6f34892cb4f1996c66749f19bc6ccd438c4f3cdf3088afc12234bedf8fbed68ef5eaaf31e8196f6e66ed5616fe2be3f6fce7ba6a222d299e75c21e30ca7000be4ab7c64758eb93a9e6d340b7ed2a09cf6b7af0fd56604f9d21c33c8860ec4624a92700c6cf7679650aa30ef196a5545233adc24fc61402e4e21e2b37ff6fcc595d221bbc42935809e0a1e59ea75ee20bbeac6b0bb18c6ba3e0d2cc37a76379dd7647d6e56d24fe794544892b80b06baf95d89ea632eb6cf445b32f7119e831c20ba3efabd50ae9f80f541d06ad2db30daa5bea4f00ca41f250674c87b8e0d8f346b5055ffb12d851e638ad1c7a611b5f1341fa2bdea8933664b20b733445fb0cdee21779a271848de45ba25f6d9ea0831b3b23cb9fa08154a283bc2fefef2872be263a92e73865be58c701ceb49c7a3796071fbbd8fdf26696777fb9d8a6607f8299dd019b7f7138c41f3122f001bff5f1d56d66583465ae912300042ce59f2ba0bab316d195ce8ea8368fa601900e92b6dee1e770d964c1bb8d19425118f9f86d667209c96e4975a868c67223cc52cd0426952a146c8a0dc627c49b871588c41d51cca6693c55cd3fae4ecc48c90df23d20eaa9157dd64286b061f171ef6aa924b866f5b2f04140d5d27e664680694e27f2c5e6b0c6a1d1f70532024f4e0d5ec88083c90ebf008d66fd3aa8936bd1cba979d060eb52c487da71fbb656501d2911273b10b4ec830484b4a6fdf29c876458e471ac7124e2a7c1ce1c4672d3f6307eea807e9701be907b0bebbd6ef4cf60fdc10f5d99f75a85b3dbddc9f6d494cc490ba094f345cc75eab83ddfc32a5eb6d0dcf6fb526d5b5d41fe2ab791581e2f297a022258f1a1cc23303cbd70f9282b7add9ae39f8056f0c267151f65d71f037c6610c900e048caaf12a4176d340ef6e028d09437f20dbe37c79991e2248b9d85ca6dee15a81670e107deb1c591e4f33f0d4e2306b8d977917c37afb88fedb71a3ee7ba208ee2e1e594a1f896c6429d57e6082c0ab5d5235f01097ed612d9c77143ae087908d08173dca4d961325acb0a338b35567963e1603334e20b0c4848137f5f3e85e9cb09cc649c7b67c100b201afce6efb20e0c8b7b326bfe6235f9207489046b65a1cf1fbded5c97326e1a18c683a8149d8f40ff8c792a39e47e7151602200b6f714840be61f8582b1133a80e44367e3d867c3028f52c7125be373d98e855986cd7fa3fb9e35d985531dc3a6a4d45a1c2da45434fdf602c", 0x1000}, {&(0x7f0000003a00)="e752b56f811b043fafb8c436cabce00eb60b9c21e9c7f347df422fcb7cbecdb4918fbe2a6c14a82ad1dd69e98992a21a7c72f231c5237b57a893e10b0a9665bc85aef22420b9d54782ae20223840c621a395fb25589484509e6effd7f21190bfb003c9f0d19b532a7d8c2573", 0x6c}, {&(0x7f0000003a80)="dfdded076dc375041697a837782cefe9f7771dd7d9f571ac47a390aeff7dac19ff8569fe2974bc5c2c", 0x29}, {&(0x7f0000003ac0)="550d6bd16b246a68a5815f3c61b59b351a6c4050728685cd2e410d582c13f72ee124188084a9211032484049665a", 0x2e}], 0xa, &(0x7f0000003d00)=[@rights={{0x24, 0x1, 0x1, [r3, r2, r6, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, 0xee01}}}], 0xa0, 0x20008010}, 0x40800) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080)) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r12) r13 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r13, 0x1, 0x19, &(0x7f0000000180), 0x4) 5.535402666s ago: executing program 3 (id=6441): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 5.092009023s ago: executing program 3 (id=6444): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x21000000, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x30, 0x5f]}}, 0x0, 0x64}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r5 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={r3, 0x20, &(0x7f0000000b00)={&(0x7f00000009c0)=""/229, 0xe5, 0x0, &(0x7f0000000ac0)=""/33, 0x21}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x7f, 0x54, &(0x7f0000000540)=""/84, 0x40f00, 0x44, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f00000005c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x800, 0x101, 0x3}, 0x10, r7, 0x0, 0x0, &(0x7f0000000b80)=[r1, r1, r1, r1], 0x0, 0x10, 0x61}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT=r0, @ANYRES64=r8, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.862511067s ago: executing program 3 (id=6446): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) r2 = syz_clone(0x22820000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000140)="9e816d26afbc90ba0b39e9df8fda5e4033d5cc0fa17311e4560eda2dd0dc0bdbe86be6e39fb199e91c785baedf62a670d64dbf1fc8fdd1ab955163543045", 0x3e}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="f9211636430351c4f5dd16adec6f65d06deb37543124cf1469eb0c7b2ca2a2d06d78474fcacb47fec9a6b778e5cc5d6fa0d7", 0x32}, {&(0x7f0000002300)="40437ef3ca02240f313bb1da9bb1503b260fe1c84168b92137336a82757fb868e423910f4fe70531801ce1e833a5daa6ac9847204401345abf290162ece605a5ca9585116d6c479cfeaf33d69c", 0x4d}], 0x4, &(0x7f0000002400)=[@rights={{0x24, 0x1, 0x1, [r1, r3, r1, r1, r1]}}], 0x28, 0x20000040}, 0x80) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x6, 0x12109, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x3}, 0x828, 0x0, 0x1, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x7}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0, 0x8f, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f}, [@alu={0x0, 0x1, 0xa, 0xa, 0x9, 0xfffffffffffffff8, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000380)='syzkaller\x00', 0x10, 0x5f, &(0x7f00000003c0)=""/95, 0x0, 0x48, '\x00', r6, @fallback=0x8, r1, 0x8, &(0x7f0000000500)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xd, 0x6, 0x6}, 0x10, r7, r1, 0x6, &(0x7f0000000900)=[r1, r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000940)=[{0x4, 0x4, 0x7, 0x1}, {0x1, 0x4, 0xb}, {0x3, 0x3, 0x8, 0x8}, {0x4, 0x1, 0x5, 0x4}, {0x3, 0x1, 0xb, 0x1}, {0x1, 0x5, 0x10, 0x1}], 0x10, 0x70a}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x54001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x2000000, @dev, 0x39}, 0x80, 0x0}, 0xe07e872420dfefca) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8983, &(0x7f0000000080)) 3.271116051s ago: executing program 3 (id=6457): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x2c2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x1, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608", @ANYRES16=r2], 0xfe33) 3.26955653s ago: executing program 3 (id=6461): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b70300002400"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) syz_clone(0x40005000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x15, 0x5, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, &(0x7f0000000280)=r7, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2b, 0x1, 0x0) 3.031392364s ago: executing program 0 (id=6466): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000002000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x9200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x1, 0x2, 0x0, 0x0, 0xd, 0x0, 0xf1a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x4000}, 0x48) 2.396010794s ago: executing program 0 (id=6470): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x2c2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x1, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608", @ANYRES16=r2], 0xfe33) 2.369292994s ago: executing program 1 (id=6471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000001000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.99992795s ago: executing program 1 (id=6472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xc00007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x8000, 0x5, 0x5575, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.841554452s ago: executing program 1 (id=6474): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c}, [@call={0x25, 0x0, 0x0, 0x98000000}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) 1.696386675s ago: executing program 0 (id=6476): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d80)=ANY=[], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.441266288s ago: executing program 0 (id=6478): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000002c0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8994, &(0x7f0000000080)) 1.391635739s ago: executing program 4 (id=6479): r0 = socket$kcm(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffeaf) (async) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x9000, 0x10000, 0x13, 0x5, 0x1004, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x10, 0xffffffffffffffff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r3, 0x0, &(0x7f0000001540)=""/155}, 0x20) (async) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000380), 0x2, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r6 = socket$kcm(0x10, 0x5, 0x4) close(r6) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004004) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x4, 0x0, &(0x7f00000002c0)="0000ffff", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x1, 0xaea}, 0x4104, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r8, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000080), &(0x7f00000000c0)=r9}, 0x20) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x8000) 1.228103182s ago: executing program 4 (id=6480): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x3efd7ab4c41335d9, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (fail_nth: 89) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.102641744s ago: executing program 4 (id=6481): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x8, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) 1.048205564s ago: executing program 0 (id=6482): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x17, 0x78, 0x0, 0x7, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15e2}, 0x0, 0x2, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x32, 0x5}, 0x1e23d, 0x4, 0x40000000, 0x8, 0x1001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a08d, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x100000000, 0x5}, 0x18b3ec1085437484, 0x0, 0x0, 0x3, 0xfff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711240000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd8}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000580)='t\xd1\x81u\x10\xc8\x9d4\xc3J\xf8\x93&=\xa8g_\x055\xd6\xbdD\xd7&Nz\xc4\xe8\xc0:\xc1\xf3\xe1\x17\xf4;\xed\xe2\xf9\";\x00\xfb\xe9\xe6\xae\xa3\xf9v\x1ax\xea\x05\xfa-\x12R\xccvq0r\xc9IG\xd0!\xf1\x1d\xea\xb8\x84\x84:-\xae\x04\xee\x91FQ\x83\xba+\xa4\v\\Q3.L\x15\x81-\xf1~\a\xb0\xae\xd6(\x9f\x04\x00\x94\x8fD\"`\bK\xad\xd9\xc6Q\xc9\"\xdbF|\xb1\xdf\xf2\x1c\x0e\x99\xe0\xa5\xfa\xf5\xd6 *4p\xbf\xff\'\x88C\xd7\xd8\xad^\x86\xe8\xc2]\xd3\xee\x19\xb7gD\x7f\x96\xbbZ\x12{\x8ce\xa9\x96\xfev\xf2\xc6\x87\xd6\xe4\xb6Bv\xd8\t\xd4\x8a\x96\b2\x01\xb9\xcd\x91M^\x1ct.=\xf6e\xc8\x9d\x9fu\x94\x19\x8b`A=\x1dR\xc2w\xef\x04\xf4y#\x8b\x7fT\xd5l\xfb\x10\xa1\x85') 728.066739ms ago: executing program 4 (id=6483): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x485, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x80f4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x840) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 711.353359ms ago: executing program 1 (id=6484): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x2c2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x1, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r2], 0xfe33) 359.994145ms ago: executing program 4 (id=6485): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095006400000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 228.009946ms ago: executing program 0 (id=6486): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2, 0xb6, 0xd, 0xf2, 0x0, 0x7fffffff, 0x2000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x102000, 0x7fffffffffffffff, 0x1, 0x2, 0xf, 0x5, 0x7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r1, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x6}, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r2], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r3}, &(0x7f0000000200), &(0x7f00000009c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r3, &(0x7f0000000680), &(0x7f0000000700)=""/168}, 0x20) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0xb, 0xe, 0x9, 0x0, 0xc0, 0x2, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0xd1d, 0x8}, 0x304, 0x7, 0x9, 0x7, 0xfffffffffffffb48, 0x40, 0x6, 0x0, 0x80000001, 0x0, 0xc}, 0x0, 0xe, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x100000000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 215.228157ms ago: executing program 1 (id=6487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000540)="00000000700300003c8200f086ddb50876038ee00f5d4fe9dcdca73e0e8aadb464d593e2205ad35819aea7a29f9c1e783dfe96973b16", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="02000100"/20, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="000000000000000000000000002f9c603b4e23a8ac79ab9774c9df632736"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r2, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000f40)={r3, &(0x7f0000000e00)="3882e9e07cb226f1f607758633ad9a31e33047597a21d05f7f5ba4381aa09bad9f2a15725571b0497dabfb59cd7100bc1960a308c63126eaa7cd39520bbdae74937c353600d8066fc199ce511a06b94b245b14a8bfd38b6261d1ffa42d4c32244275767dd5d28e8ce05f918b06347d53e3aa459aaa9d4480cfd9755972dab9d15a238288c8658d56126149535def5159484532de3365575e03cc032bcfcf804d89259d806d5eb75b65fc11d25e397715a603f8e288f8f1", &(0x7f0000000f00)=""/32}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 200.975627ms ago: executing program 3 (id=6488): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000018000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x23, 0x0, 0x0) 26.206549ms ago: executing program 4 (id=6489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="000000000000feff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 1 (id=6490): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x8, [{@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x2}, {@remote}]}]}}}], 0x30}, 0x4008804) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40086602, 0x110e22fff2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001500000008000000400000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) kernel console output (not intermixed with test programs): ][T20648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1076.091004][T19930] Bluetooth: hci3: command tx timeout [ 1076.470417][T20824] bridge0: port 3(batadv0) entered blocking state [ 1076.479731][T20824] bridge0: port 3(batadv0) entered disabled state [ 1076.517297][T20824] batadv0: entered allmulticast mode [ 1076.540590][T20824] batadv0: entered promiscuous mode [ 1076.560823][T10922] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1076.570287][T10922] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1076.588739][T20824] bridge0: port 3(batadv0) entered blocking state [ 1076.595516][T20824] bridge0: port 3(batadv0) entered forwarding state [ 1076.684413][T20820] syzkaller0: entered promiscuous mode [ 1076.690133][T20820] syzkaller0: entered allmulticast mode [ 1076.902953][T20823] sit0: entered allmulticast mode [ 1077.155124][T20827] sit0: entered promiscuous mode [ 1077.290391][T20648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.330704][T20648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.357375][T10922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.364636][T10922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.182068][T19736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.189452][T19736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.691292][T20874] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4954'. [ 1080.810941][T20879] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.4954'. [ 1080.982831][T20648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.208535][T20648] veth0_vlan: entered promiscuous mode [ 1081.279504][T20648] veth1_vlan: entered promiscuous mode [ 1081.426334][T20648] veth0_macvtap: entered promiscuous mode [ 1081.491321][T20648] veth1_macvtap: entered promiscuous mode [ 1081.775662][T20895] syzkaller0: entered promiscuous mode [ 1081.789965][T20895] syzkaller0: entered allmulticast mode [ 1081.846228][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.875588][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.904122][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.924271][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.934894][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.953754][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.977064][T20648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.993701][T20901] netlink: 'syz.1.4959': attribute type 21 has an invalid length. [ 1082.034559][T20901] netlink: 'syz.1.4959': attribute type 6 has an invalid length. [ 1082.042486][T20901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4959'. [ 1082.054142][T20905] netlink: 'syz.1.4959': attribute type 10 has an invalid length. [ 1082.072980][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.096091][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.114051][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.134052][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.154262][T20648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.174904][T20648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.197240][T20648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.435446][T20910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4962'. [ 1085.454361][T20648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.474197][T20648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.482985][T20648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.524134][T20648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.691066][T20933] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1085.792491][T10924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.826062][T10924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.951968][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.961460][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.610575][T20956] syzkaller0: entered promiscuous mode [ 1086.623209][T20956] syzkaller0: entered allmulticast mode [ 1087.172656][T12861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1087.186730][T12861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1087.217812][T12861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1087.227531][T12861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1087.249629][T12861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1087.257432][T12861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1087.561652][T20979] FAULT_INJECTION: forcing a failure. [ 1087.561652][T20979] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.587567][T20979] CPU: 0 PID: 20979 Comm: syz.2.4988 Not tainted syzkaller #0 [ 1087.595123][T20979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1087.605237][T20979] Call Trace: [ 1087.608563][T20979] [ 1087.611542][T20979] dump_stack_lvl+0x18c/0x250 [ 1087.616281][T20979] ? sctp_sendmsg+0x1519/0x27b0 [ 1087.621190][T20979] ? ___sys_sendmsg+0x2a6/0x360 [ 1087.626108][T20979] ? show_regs_print_info+0x20/0x20 [ 1087.631403][T20979] ? load_image+0x420/0x420 [ 1087.635982][T20979] should_fail_ex+0x394/0x4c0 [ 1087.640748][T20979] should_failslab+0x9/0x20 [ 1087.645315][T20979] slab_pre_alloc_hook+0x59/0x300 [ 1087.650386][T20979] ? sctp_add_bind_addr+0x8c/0x360 [ 1087.655544][T20979] __kmem_cache_alloc_node+0x53/0x250 [ 1087.660956][T20979] ? sctp_add_bind_addr+0x8c/0x360 [ 1087.666106][T20979] kmalloc_trace+0x2a/0xe0 [ 1087.670560][T20979] sctp_add_bind_addr+0x8c/0x360 [ 1087.675542][T20979] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1087.681225][T20979] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1087.686996][T20979] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1087.693112][T20979] ? sctp_v6_is_any+0x64/0x70 [ 1087.697825][T20979] ? sctp_copy_one_addr+0x8c/0x350 [ 1087.702996][T20979] sctp_bind_addr_copy+0xb3/0x3c0 [ 1087.708066][T20979] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1087.714447][T20979] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1087.719771][T20979] ? __sctp_connect+0xd80/0xd80 [ 1087.724655][T20979] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1087.730058][T20979] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1087.735632][T20979] ? security_sctp_bind_connect+0x89/0xb0 [ 1087.741388][T20979] sctp_sendmsg+0x1519/0x27b0 [ 1087.746136][T20979] ? sctp_getsockopt+0xb60/0xb60 [ 1087.751139][T20979] ? aa_sk_perm+0x83c/0x970 [ 1087.755701][T20979] ? aa_af_perm+0x330/0x330 [ 1087.760254][T20979] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1087.766716][T20979] ? sock_rps_record_flow+0x19/0x3f0 [ 1087.772141][T20979] ? inet_sendmsg+0xce/0x2a0 [ 1087.776878][T20979] ? inet_send_prepare+0x250/0x250 [ 1087.782192][T20979] ____sys_sendmsg+0x61b/0x980 [ 1087.787018][T20979] ? __sys_sendmsg_sock+0x30/0x30 [ 1087.792112][T20979] ? __import_iovec+0x5f2/0x850 [ 1087.797108][T20979] ? import_iovec+0x73/0xa0 [ 1087.801670][T20979] ___sys_sendmsg+0x2a6/0x360 [ 1087.806499][T20979] ? get_pid_task+0x20/0x1e0 [ 1087.811153][T20979] ? __sys_sendmsg+0x2b0/0x2b0 [ 1087.816005][T20979] ? __lock_acquire+0x7d80/0x7d80 [ 1087.821121][T20979] __se_sys_sendmsg+0x1d0/0x2c0 [ 1087.826050][T20979] ? __x64_sys_sendmsg+0x80/0x80 [ 1087.831048][T20979] ? lockdep_hardirqs_on+0x98/0x150 [ 1087.836313][T20979] do_syscall_64+0x55/0xb0 [ 1087.840786][T20979] ? clear_bhb_loop+0x40/0x90 [ 1087.845498][T20979] ? clear_bhb_loop+0x40/0x90 [ 1087.850307][T20979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1087.856285][T20979] RIP: 0033:0x7f8f1bd9ce59 [ 1087.860761][T20979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.880436][T20979] RSP: 002b:00007f8f1cd08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.888907][T20979] RAX: ffffffffffffffda RBX: 00007f8f1c015fa0 RCX: 00007f8f1bd9ce59 [ 1087.896924][T20979] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 1087.905027][T20979] RBP: 00007f8f1cd08090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.913036][T20979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1087.921151][T20979] R13: 00007f8f1c016038 R14: 00007f8f1c015fa0 R15: 00007ffe9ddf5c18 [ 1087.929177][T20979] [ 1089.373585][T12861] Bluetooth: hci1: command tx timeout [ 1089.873423][T20985] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4991'. [ 1090.108660][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.201942][T21000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.255866][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.416874][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.479028][T21006] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1090.580476][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.803265][T21018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1090.813110][T21019] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1090.854677][T21014] syzkaller0: entered promiscuous mode [ 1090.862351][T21014] syzkaller0: entered allmulticast mode [ 1090.870617][T21018] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1090.880716][T21020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1090.901248][T21018] netlink: 'syz.1.5000': attribute type 3 has an invalid length. [ 1090.909397][T21018] netlink: 'syz.1.5000': attribute type 1 has an invalid length. [ 1090.920855][T20973] chnl_net:caif_netlink_parms(): no params data found [ 1090.923007][T21018] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.5000'. [ 1091.451310][T12861] Bluetooth: hci1: command tx timeout [ 1093.225908][T21027] netlink: 'syz.1.5002': attribute type 10 has an invalid length. [ 1093.452090][T20973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.489810][T20973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.512683][T20973] bridge_slave_0: entered allmulticast mode [ 1093.524401][T12861] Bluetooth: hci1: command tx timeout [ 1093.543717][T20973] bridge_slave_0: entered promiscuous mode [ 1093.679700][T21044] FAULT_INJECTION: forcing a failure. [ 1093.679700][T21044] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.692470][T21044] CPU: 0 PID: 21044 Comm: syz.2.5006 Not tainted syzkaller #0 [ 1093.699987][T21044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1093.710091][T21044] Call Trace: [ 1093.713421][T21044] [ 1093.716402][T21044] dump_stack_lvl+0x18c/0x250 [ 1093.721137][T21044] ? show_regs_print_info+0x20/0x20 [ 1093.726435][T21044] ? load_image+0x420/0x420 [ 1093.731016][T21044] should_fail_ex+0x394/0x4c0 [ 1093.735772][T21044] should_failslab+0x9/0x20 [ 1093.740344][T21044] slab_pre_alloc_hook+0x59/0x300 [ 1093.745454][T21044] kmem_cache_alloc+0x5a/0x2c0 [ 1093.750275][T21044] ? skb_clone+0x1eb/0x370 [ 1093.754751][T21044] skb_clone+0x1eb/0x370 [ 1093.759060][T21044] bpf_clone_redirect+0x16d/0x4a0 [ 1093.764156][T21044] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 1093.769676][T21044] ? perf_prepare_sample+0x1990/0x1db0 [ 1093.775203][T21044] ? perf_trace_preemptirq_template+0x269/0x330 [ 1093.781520][T21044] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1093.787543][T21044] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1093.792885][T21044] ? lock_chain_count+0x20/0x20 [ 1093.797770][T21044] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1093.804057][T21044] ? __local_bh_disable_ip+0x108/0x1a0 [ 1093.809600][T21044] ? __cant_sleep+0x220/0x220 [ 1093.814358][T21044] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1093.819782][T21044] ? _local_bh_enable+0xa0/0xa0 [ 1093.824670][T21044] ? bpf_test_timer_continue+0x135/0x380 [ 1093.830527][T21044] ? bpf_test_run+0x174/0x870 [ 1093.835249][T21044] bpf_test_run+0x2df/0x870 [ 1093.839796][T21044] ? bpf_test_run+0x174/0x870 [ 1093.844516][T21044] ? dst_hold+0x70/0x70 [ 1093.848717][T21044] ? eth_get_headlen+0x210/0x210 [ 1093.853720][T21044] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1093.859146][T21044] ? cpu_online+0x60/0x60 [ 1093.863510][T21044] bpf_prog_test_run+0x31f/0x390 [ 1093.868484][T21044] __sys_bpf+0x49d/0x890 [ 1093.872763][T21044] ? bpf_link_show_fdinfo+0x390/0x390 [ 1093.878185][T21044] ? lock_chain_count+0x20/0x20 [ 1093.883075][T21044] __x64_sys_bpf+0x7c/0x90 [ 1093.887524][T21044] do_syscall_64+0x55/0xb0 [ 1093.891978][T21044] ? clear_bhb_loop+0x40/0x90 [ 1093.896684][T21044] ? clear_bhb_loop+0x40/0x90 [ 1093.901400][T21044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.907330][T21044] RIP: 0033:0x7f8f1bd9ce59 [ 1093.911776][T21044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.931516][T21044] RSP: 002b:00007f8f1cd08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1093.939983][T21044] RAX: ffffffffffffffda RBX: 00007f8f1c015fa0 RCX: 00007f8f1bd9ce59 [ 1093.947990][T21044] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1093.955989][T21044] RBP: 00007f8f1cd08090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.964015][T21044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1093.972113][T21044] R13: 00007f8f1c016038 R14: 00007f8f1c015fa0 R15: 00007ffe9ddf5c18 [ 1093.980220][T21044] [ 1094.152419][T20973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.169631][T20973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.194990][T20973] bridge_slave_1: entered allmulticast mode [ 1094.226073][T20973] bridge_slave_1: entered promiscuous mode [ 1094.607483][T20973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.644600][T20973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.965645][T21068] À: port 1(vlan0) entered blocking state [ 1095.012381][T21068] À: port 1(vlan0) entered disabled state [ 1095.019706][T21068] vlan0: entered allmulticast mode [ 1095.054044][T21068] veth0_vlan: entered allmulticast mode [ 1095.062142][T21068] vlan0: entered promiscuous mode [ 1095.246484][T21070] À: port 1(vlan0) entered blocking state [ 1095.252398][T21070] À: port 1(vlan0) entered forwarding state [ 1095.338947][T20973] team0: Port device team_slave_0 added [ 1095.408149][T20973] team0: Port device team_slave_1 added [ 1095.600272][T12861] Bluetooth: hci1: command tx timeout [ 1096.129448][T21100] netlink: 'syz.2.5018': attribute type 22 has an invalid length. [ 1096.144840][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5018'. [ 1096.272143][T20973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.283726][T20973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.319857][T20973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.342261][T20973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.349680][T20973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.382551][T20973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.871381][T20973] hsr_slave_0: entered promiscuous mode [ 1096.905366][T20973] hsr_slave_1: entered promiscuous mode [ 1096.916445][T21125] netlink: 'syz.3.5026': attribute type 4 has an invalid length. [ 1098.523380][ T11] hsr_slave_0: left promiscuous mode [ 1098.574469][ T11] hsr_slave_1: left promiscuous mode [ 1098.585462][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.593411][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.652079][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.676735][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.717454][ T11] batadv0: left allmulticast mode [ 1098.722580][ T11] batadv0: left promiscuous mode [ 1098.746310][ T11] bridge0: port 3(batadv0) entered disabled state [ 1098.789600][ T11] bridge0: port 2(team0) entered disabled state [ 1098.835543][ T11] bridge_slave_0: left promiscuous mode [ 1098.849913][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.533792][ T11] team_slave_1 (unregistering): left promiscuous mode [ 1099.541071][ T11] team_slave_1 (unregistering): left allmulticast mode [ 1099.555426][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1099.609444][ T11] team_slave_0 (unregistering): left promiscuous mode [ 1099.616487][ T11] team_slave_0 (unregistering): left allmulticast mode [ 1099.625122][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1100.195045][T21161] netlink: 'syz.1.5036': attribute type 13 has an invalid length. [ 1100.204168][T21161] netlink: 'syz.1.5036': attribute type 58 has an invalid length. [ 1100.212033][T21161] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5036'. [ 1100.280106][T21181] sit0: entered allmulticast mode [ 1100.549208][T21189] netlink: 'syz.2.5043': attribute type 1 has an invalid length. [ 1100.573462][T21189] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5043'. [ 1100.930642][T21186] syzkaller0: entered promiscuous mode [ 1100.936563][T21186] syzkaller0: entered allmulticast mode [ 1103.514963][T20973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1103.562880][T20973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1103.587972][T20973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1103.631379][T20973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1103.904773][T20973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.967339][T20973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.026660][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.033982][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.052729][T21239] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.5053'. [ 1104.064421][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.071632][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.093039][T21239] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.5053'. [ 1104.326516][T21252] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5057'. [ 1104.344774][T21252] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5057'. [ 1104.363623][T21252] bond0: (slave bond_slave_0): Releasing backup interface [ 1104.437166][T21252] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1104.536033][T21258] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5057'. [ 1105.208333][T20973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.346403][T20973] veth0_vlan: entered promiscuous mode [ 1105.383288][T20973] veth1_vlan: entered promiscuous mode [ 1105.530715][T20973] veth0_macvtap: entered promiscuous mode [ 1105.577911][T20973] veth1_macvtap: entered promiscuous mode [ 1105.667303][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.707778][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.721088][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.736485][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.758188][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.784188][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.806119][T20973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1105.832774][T21294] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5067'. [ 1105.862381][T21294] bridge_slave_1: default FDB implementation only supports local addresses [ 1105.901323][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.926511][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.938987][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.954855][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.970128][T20973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1105.989592][T20973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.020076][T20973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.060413][T20973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.081900][T20973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.102123][T20973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.132533][T20973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.411305][T19738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.435449][T19738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.514370][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.522263][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.684903][T21321] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5076'. [ 1108.152409][T21365] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5089'. [ 1108.224174][T21365] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5089'. [ 1108.233398][T21365] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5089'. [ 1108.265262][T21370] netlink: 'syz.1.5091': attribute type 10 has an invalid length. [ 1108.502743][T21370] team0 (unregistering): Port device team_slave_0 removed [ 1108.547398][T21370] team0 (unregistering): Port device team_slave_1 removed [ 1108.751431][T21382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.593274][T21399] netlink: 'syz.2.5098': attribute type 27 has an invalid length. [ 1109.671021][T21399] __nla_validate_parse: 7 callbacks suppressed [ 1109.671040][T21399] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.5098'. [ 1111.082294][T21372] syzkaller0: entered promiscuous mode [ 1111.095573][T21372] syzkaller0: entered allmulticast mode [ 1111.323118][T21407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5102'. [ 1113.853101][T21437] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5111'. [ 1114.463110][T21446] syzkaller0: entered promiscuous mode [ 1114.473159][T21446] syzkaller0: entered allmulticast mode [ 1114.493717][T21452] netlink: 'syz.3.5116': attribute type 10 has an invalid length. [ 1114.505290][T21452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5116'. [ 1114.556589][T21452] bridge0: port 4(team0) entered blocking state [ 1114.576585][T21452] bridge0: port 4(team0) entered disabled state [ 1114.590686][T21452] team0: entered allmulticast mode [ 1114.601550][T21452] team_slave_0: entered allmulticast mode [ 1114.608730][T21452] team_slave_1: entered allmulticast mode [ 1114.637883][T21452] team0: entered promiscuous mode [ 1114.644947][T21452] team_slave_0: entered promiscuous mode [ 1114.652303][T21452] team_slave_1: entered promiscuous mode [ 1114.673802][T21452] bridge0: port 4(team0) entered blocking state [ 1114.682222][T21452] bridge0: port 4(team0) entered forwarding state [ 1114.701270][T21461] netlink: 'syz.1.5119': attribute type 10 has an invalid length. [ 1115.999301][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.007750][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.313893][T21466] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5122'. [ 1117.384200][T21477] bridge0: port 3(batadv0) entered blocking state [ 1117.391247][T21477] bridge0: port 3(batadv0) entered disabled state [ 1117.408348][T21477] batadv0: entered allmulticast mode [ 1117.429848][T21477] batadv0: entered promiscuous mode [ 1117.449437][T21477] bridge0: port 3(batadv0) entered blocking state [ 1117.456113][T21477] bridge0: port 3(batadv0) entered forwarding state [ 1117.558603][T21484] netlink: 'syz.3.5127': attribute type 25 has an invalid length. [ 1117.589994][T21484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5127'. [ 1117.664363][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1117.673693][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1117.758224][T21493] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5130'. [ 1118.094871][T21504] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.5136'. [ 1118.266154][T21497] syzkaller0: entered promiscuous mode [ 1118.271983][T21497] syzkaller0: entered allmulticast mode [ 1118.339340][T21512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5138'. [ 1121.129718][T21554] netlink: 'syz.2.5155': attribute type 10 has an invalid length. [ 1121.158365][T21554] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5155'. [ 1121.173237][T21554] bridge0: port 4(team0) entered blocking state [ 1121.195775][T21554] bridge0: port 4(team0) entered disabled state [ 1121.202698][T21554] team0: entered allmulticast mode [ 1121.234085][T21554] team_slave_0: entered allmulticast mode [ 1121.240016][T21554] team_slave_1: entered allmulticast mode [ 1121.252767][T21554] team0: entered promiscuous mode [ 1121.258531][T21554] team_slave_0: entered promiscuous mode [ 1121.269485][T21554] team_slave_1: entered promiscuous mode [ 1121.288108][T21554] bridge0: port 4(team0) entered blocking state [ 1121.294626][T21554] bridge0: port 4(team0) entered forwarding state [ 1121.332701][T21561] netlink: 16394 bytes leftover after parsing attributes in process `syz.1.5156'. [ 1122.275650][T21583] syzkaller0: entered promiscuous mode [ 1122.281520][T21583] syzkaller0: entered allmulticast mode [ 1123.529763][T21628] netlink: 'syz.2.5184': attribute type 2 has an invalid length. [ 1123.538497][T21628] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.5184'. [ 1123.686793][T21635] netlink: 'syz.2.5184': attribute type 2 has an invalid length. [ 1123.721774][T21635] netlink: 'syz.2.5184': attribute type 1 has an invalid length. [ 1123.747450][T21635] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5184'. [ 1125.223194][T21628] netlink: 'syz.2.5184': attribute type 4 has an invalid length. [ 1125.231253][T21628] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5184'. [ 1125.255352][T21628] .`: renamed from bond0 (while UP) [ 1125.300131][T21635] netlink: 'syz.2.5184': attribute type 2 has an invalid length. [ 1126.026271][T21654] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5199'. [ 1126.254507][T21660] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5193'. [ 1126.351489][T21664] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1126.400519][T21664] bridge_slave_1: default FDB implementation only supports local addresses [ 1126.529879][T21671] netlink: 'syz.1.5196': attribute type 10 has an invalid length. [ 1126.546004][T21673] netlink: 38831 bytes leftover after parsing attributes in process `syz.0.5198'. [ 1126.561874][T21671] syz_tun: entered promiscuous mode [ 1126.785028][T21667] syzkaller0: entered promiscuous mode [ 1126.790601][T21667] syzkaller0: entered allmulticast mode [ 1129.198133][T21693] Ù: renamed from bond_slave_1 (while UP) [ 1129.590453][T21704] netlink: 'syz.0.5208': attribute type 3 has an invalid length. [ 1129.603596][T21704] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5208'. [ 1130.210266][T21720] syzkaller0: entered promiscuous mode [ 1130.218223][T21720] syzkaller0: entered allmulticast mode [ 1132.842692][T21739] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5221'. [ 1132.912745][T21746] syzkaller0: entered promiscuous mode [ 1132.918534][T21746] syzkaller0: entered allmulticast mode [ 1132.983602][T21761] netlink: 'syz.3.5226': attribute type 25 has an invalid length. [ 1132.991810][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5226'. [ 1133.200246][T21773] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5229'. [ 1135.975313][T21794] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 1135.989428][T21794] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 1136.420905][T21819] netlink: 'syz.1.5244': attribute type 15 has an invalid length. [ 1136.444441][T21819] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5244'. [ 1136.793321][T21819] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1136.847483][T21828] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5244'. [ 1137.143217][T21837] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5250'. [ 1137.180382][T21837] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5250'. [ 1137.518564][T21847] netlink: 'syz.3.5254': attribute type 3 has an invalid length. [ 1137.531322][T21847] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5254'. [ 1138.125744][T21873] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5263'. [ 1138.143685][T21873] bridge_slave_1: default FDB implementation only supports local addresses [ 1138.280750][T21876] syzkaller0: entered promiscuous mode [ 1138.291011][T21876] syzkaller0: entered allmulticast mode [ 1139.051226][T19738] wlan1: Trigger new scan to find an IBSS to join [ 1141.378993][T21923] netlink: 'syz.2.5279': attribute type 4 has an invalid length. [ 1141.395596][T21923] netlink: 155896 bytes leftover after parsing attributes in process `syz.2.5279'. [ 1141.996245][ T59] wlan1: Trigger new scan to find an IBSS to join [ 1142.151826][T21949] syzkaller0: entered promiscuous mode [ 1142.178531][T21949] syzkaller0: entered allmulticast mode [ 1142.370602][T21955] À: port 1(vlan0) entered disabled state [ 1142.584619][T21955] vlan0 (unregistering): left allmulticast mode [ 1142.590929][T21955] veth0_vlan (unregistering): left allmulticast mode [ 1142.604259][T21955] vlan0 (unregistering): left promiscuous mode [ 1142.610948][T21955] À: port 1(vlan0) entered disabled state [ 1142.777687][T21960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.040455][T19736] wlan1: Trigger new scan to find an IBSS to join [ 1145.326231][T21974] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 1145.342131][T21974] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 1145.676127][T21985] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5303'. [ 1146.017570][T19736] wlan1: Creating new IBSS network, BSSID c6:f2:ad:11:2f:b8 [ 1147.677403][T22020] syzkaller0: entered promiscuous mode [ 1147.683182][T22020] syzkaller0: entered allmulticast mode [ 1148.804655][T21998] Bluetooth: hci2: command 0x0406 tx timeout [ 1148.809027][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 1150.855350][T22024] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5313'. [ 1150.866585][T22024] bridge_slave_1: default FDB implementation only supports local addresses [ 1150.928089][T22036] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 1150.944137][T22036] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 1151.232870][T22050] netlink: 'syz.0.5316': attribute type 10 has an invalid length. [ 1151.264878][T22050] syz_tun: entered promiscuous mode [ 1151.314402][T22050] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1152.045612][T22069] netlink: 'syz.3.5330': attribute type 1 has an invalid length. [ 1152.063211][T22069] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.5330'. [ 1152.155114][T22072] syzkaller0: entered promiscuous mode [ 1152.161023][T22072] syzkaller0: entered allmulticast mode [ 1152.184248][T22073] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1152.483071][T22083] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.5333'. [ 1154.718472][T22082] netlink: 'syz.2.5332': attribute type 10 has an invalid length. [ 1154.735555][T22082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.749643][T22082] bridge_slave_1: left allmulticast mode [ 1154.760358][T22082] bridge_slave_1: left promiscuous mode [ 1154.766451][T22082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.780880][T22082] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1155.041899][T22094] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5336'. [ 1155.140373][T22097] netlink: 'syz.3.5337': attribute type 4 has an invalid length. [ 1155.806970][T22115] netlink: 'syz.2.5345': attribute type 25 has an invalid length. [ 1156.031637][T22121] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5348'. [ 1156.362141][T19930] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1156.394529][T22131] sit0: entered allmulticast mode [ 1157.272363][T22172] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5368'. [ 1157.292305][T22172] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5368'. [ 1157.308442][T22172] bond0: (slave bond_slave_0): Releasing backup interface [ 1157.330812][T22172] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1157.428677][T22176] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5368'. [ 1157.812761][T22182] netlink: 'syz.1.5372': attribute type 27 has an invalid length. [ 1158.511254][T22189] netlink: 'syz.2.5374': attribute type 10 has an invalid length. [ 1158.660183][T22197] syzkaller0: entered promiscuous mode [ 1158.698610][T22197] syzkaller0: entered allmulticast mode [ 1158.745721][T22206] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5381'. [ 1160.953582][T22215] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5384'. [ 1160.968628][T22215] bridge_slave_1: default FDB implementation only supports local addresses [ 1161.079577][T22216] syzkaller0: entered promiscuous mode [ 1161.107983][T22216] syzkaller0: entered allmulticast mode [ 1161.199131][T22224] netlink: 'syz.1.5386': attribute type 21 has an invalid length. [ 1166.950547][T22231] netlink: 'syz.3.5388': attribute type 4 has an invalid length. [ 1166.962898][T22252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1166.970427][T22252] IPv6: NLM_F_CREATE should be set when creating new route [ 1166.978042][T22252] IPv6: NLM_F_CREATE should be set when creating new route [ 1166.985468][T22252] IPv6: NLM_F_CREATE should be set when creating new route [ 1167.004108][T22275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.359755][T22299] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5412'. [ 1168.451346][T22299] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.486247][T22299] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.762861][T22299] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1168.803340][T22299] .` (unregistering): Released all slaves [ 1168.855372][T22313] FAULT_INJECTION: forcing a failure. [ 1168.855372][T22313] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.868195][T22313] CPU: 0 PID: 22313 Comm: syz.1.5417 Not tainted syzkaller #0 [ 1168.875721][T22313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1168.885944][T22313] Call Trace: [ 1168.889272][T22313] [ 1168.892252][T22313] dump_stack_lvl+0x18c/0x250 [ 1168.897035][T22313] ? show_regs_print_info+0x20/0x20 [ 1168.902305][T22313] ? load_image+0x420/0x420 [ 1168.906874][T22313] should_fail_ex+0x394/0x4c0 [ 1168.911633][T22313] should_failslab+0x9/0x20 [ 1168.916203][T22313] slab_pre_alloc_hook+0x59/0x300 [ 1168.921305][T22313] kmem_cache_alloc+0x5a/0x2c0 [ 1168.926131][T22313] ? skb_clone+0x1eb/0x370 [ 1168.930606][T22313] skb_clone+0x1eb/0x370 [ 1168.934909][T22313] bpf_clone_redirect+0x16d/0x4a0 [ 1168.940006][T22313] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 1168.945496][T22313] ? perf_prepare_sample+0x1990/0x1db0 [ 1168.951074][T22313] ? perf_trace_preemptirq_template+0x269/0x330 [ 1168.957359][T22313] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1168.963369][T22313] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1168.968692][T22313] ? lock_chain_count+0x20/0x20 [ 1168.973613][T22313] ? __local_bh_disable_ip+0x108/0x1a0 [ 1168.979221][T22313] ? __cant_sleep+0x220/0x220 [ 1168.983943][T22313] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1168.989364][T22313] ? _local_bh_enable+0xa0/0xa0 [ 1168.994266][T22313] ? bpf_test_timer_continue+0x135/0x380 [ 1168.999946][T22313] ? bpf_test_run+0x174/0x870 [ 1169.004684][T22313] bpf_test_run+0x2df/0x870 [ 1169.009241][T22313] ? bpf_test_run+0x174/0x870 [ 1169.014104][T22313] ? dst_hold+0x70/0x70 [ 1169.018335][T22313] ? eth_get_headlen+0x210/0x210 [ 1169.023314][T22313] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1169.028751][T22313] ? cpu_online+0x60/0x60 [ 1169.033644][T22313] bpf_prog_test_run+0x31f/0x390 [ 1169.038621][T22313] __sys_bpf+0x49d/0x890 [ 1169.042902][T22313] ? bpf_link_show_fdinfo+0x390/0x390 [ 1169.048342][T22313] ? lock_chain_count+0x20/0x20 [ 1169.053279][T22313] __x64_sys_bpf+0x7c/0x90 [ 1169.057758][T22313] do_syscall_64+0x55/0xb0 [ 1169.062218][T22313] ? clear_bhb_loop+0x40/0x90 [ 1169.066954][T22313] ? clear_bhb_loop+0x40/0x90 [ 1169.071713][T22313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1169.077696][T22313] RIP: 0033:0x7f9c10b9ce59 [ 1169.082155][T22313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.101799][T22313] RSP: 002b:00007f9c119f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1169.110247][T22313] RAX: ffffffffffffffda RBX: 00007f9c10e15fa0 RCX: 00007f9c10b9ce59 [ 1169.118335][T22313] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1169.126348][T22313] RBP: 00007f9c119f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.134451][T22313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.142450][T22313] R13: 00007f9c10e16038 R14: 00007f9c10e15fa0 R15: 00007fffbe505568 [ 1169.150490][T22313] [ 1169.613346][T22323] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1169.655352][T22323] netlink: 'syz.1.5423': attribute type 10 has an invalid length. [ 1169.683732][T22329] netlink: 'syz.2.5421': attribute type 10 has an invalid length. [ 1169.706336][T22329] syz_tun: entered promiscuous mode [ 1169.877071][T22332] Ÿë: port 1(gretap0) entered blocking state [ 1169.902249][T22332] Ÿë: port 1(gretap0) entered disabled state [ 1169.927926][T22332] gretap0: entered allmulticast mode [ 1169.947109][T22332] gretap0: entered promiscuous mode [ 1170.162433][T22339] netlink: 'syz.0.5427': attribute type 10 has an invalid length. [ 1170.182747][T22339] ipvlan1: entered promiscuous mode [ 1170.201279][T22339] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1170.251846][T22341] netlink: 'syz.1.5428': attribute type 10 has an invalid length. [ 1170.855490][T22355] netlink: 'syz.0.5433': attribute type 4 has an invalid length. [ 1171.491048][T22371] netlink: 'syz.0.5438': attribute type 153 has an invalid length. [ 1171.499912][T22371] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5438'. [ 1173.379382][T22434] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5466'. [ 1173.467428][T22434] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5466'. [ 1174.017219][T22449] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1174.413583][T22458] netlink: 'syz.2.5479': attribute type 29 has an invalid length. [ 1174.445153][T22458] netlink: 'syz.2.5479': attribute type 29 has an invalid length. [ 1174.675696][T22468] netlink: 'syz.1.5482': attribute type 10 has an invalid length. [ 1175.225288][T22474] netlink: 'syz.0.5485': attribute type 10 has an invalid length. [ 1176.155549][T22474] team0 (unregistering): Port device team_slave_0 removed [ 1176.178904][T22474] team0 (unregistering): Port device team_slave_1 removed [ 1176.822548][T22510] Ÿë: port 1(gretap0) entered blocking state [ 1176.857807][T22510] Ÿë: port 1(gretap0) entered disabled state [ 1176.897444][T22510] gretap0: entered allmulticast mode [ 1176.930200][T22510] gretap0: entered promiscuous mode [ 1176.962748][T22513] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5499'. [ 1177.438264][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.445696][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.083864][T19743] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1178.340364][T22513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.406163][T22513] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1178.429031][T22513] bond0 (unregistering): Released all slaves [ 1178.458116][T22519] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5499'. [ 1178.615683][T22535] netlink: 'syz.2.5507': attribute type 4 has an invalid length. [ 1178.651057][T22535] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5507'. [ 1178.962784][T22551] netlink: 'syz.2.5513': attribute type 10 has an invalid length. [ 1178.971040][T22551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5513'. [ 1180.168525][T22591] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1180.608892][T22604] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5533'. [ 1180.627859][T22604] openvswitch: netlink: Tunnel attr 8626 out of range max 16 [ 1180.709749][T22606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5534'. [ 1180.992403][T22608] netlink: 'syz.1.5535': attribute type 10 has an invalid length. [ 1181.041416][T22608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5535'. [ 1181.941350][T22631] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5543'. [ 1182.334672][T22635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.490056][T22641] netlink: 'syz.3.5547': attribute type 4 has an invalid length. [ 1184.503158][T22641] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5547'. [ 1189.821920][T22665] syzkaller0: entered promiscuous mode [ 1189.836510][T22665] syzkaller0: entered allmulticast mode [ 1190.011451][T22670] Ù: renamed from bond_slave_1 [ 1194.876742][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 1197.803252][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1197.817273][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1197.826521][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1197.837628][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1197.846362][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1197.854532][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1199.936273][T19930] Bluetooth: hci4: command tx timeout [ 1200.289878][T22701] chnl_net:caif_netlink_parms(): no params data found [ 1200.809711][T22701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.818276][T22701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.831769][T22701] bridge_slave_0: entered allmulticast mode [ 1200.845739][T22701] bridge_slave_0: entered promiscuous mode [ 1200.867528][T22701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.884172][T22701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.901486][T22701] bridge_slave_1: entered allmulticast mode [ 1200.927905][T22701] bridge_slave_1: entered promiscuous mode [ 1201.891352][T22744] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1201.994136][T19930] Bluetooth: hci4: command tx timeout [ 1204.075850][T19930] Bluetooth: hci4: command tx timeout [ 1204.918006][T22701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1204.927394][T22733] netlink: 'syz.0.5571': attribute type 13 has an invalid length. [ 1204.936870][T22733] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5571'. [ 1204.959806][T22733] erspan0: refused to change device tx_queue_len [ 1205.091832][T22701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.180223][T22701] team0: Port device team_slave_0 added [ 1205.349648][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.398578][T22701] team0: Port device team_slave_1 added [ 1205.566433][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.592512][T22701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.604810][T22701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.697584][T22701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.711516][T22701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.724591][T22701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1205.751190][T22701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.814688][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.999828][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.032719][T22701] hsr_slave_0: entered promiscuous mode [ 1206.046542][T22701] hsr_slave_1: entered promiscuous mode [ 1206.053138][T22701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1206.061856][T22701] Cannot create hsr debugfs directory [ 1206.084898][T22776] netlink: 'syz.1.5586': attribute type 2 has an invalid length. [ 1206.169698][T19930] Bluetooth: hci4: command tx timeout [ 1207.397134][T22701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1207.422363][T22701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1207.571317][T22811] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1207.579295][T22811] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1207.608299][T22701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1207.629226][T22701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1207.915987][ T59] gretap0 (unregistering): left allmulticast mode [ 1207.939605][ T59] gretap0 (unregistering): left promiscuous mode [ 1207.959977][ T59] Ÿë: port 1(gretap0) entered disabled state [ 1208.667115][ T59] hsr_slave_0: left promiscuous mode [ 1208.706389][ T59] hsr_slave_1: left promiscuous mode [ 1208.728743][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.754264][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.772665][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.783717][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.799299][ T59] team0: left allmulticast mode [ 1208.810734][ T59] team_slave_0: left allmulticast mode [ 1208.823236][ T59] team_slave_1: left allmulticast mode [ 1208.831265][ T59] team0: left promiscuous mode [ 1208.840156][ T59] team_slave_0: left promiscuous mode [ 1208.848602][ T59] team_slave_1: left promiscuous mode [ 1208.859004][ T59] bridge0: port 4(team0) entered disabled state [ 1208.872117][ T59] batadv0: left allmulticast mode [ 1208.883855][ T59] batadv0: left promiscuous mode [ 1208.892451][ T59] bridge0: port 3(batadv0) entered disabled state [ 1208.906140][ T59] bridge_slave_0: left allmulticast mode [ 1208.918479][ T59] bridge_slave_0: left promiscuous mode [ 1208.930667][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.993237][ T59] veth1_macvtap: left promiscuous mode [ 1209.001714][ T59] veth0_macvtap: left promiscuous mode [ 1209.106748][T22847] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5604'. [ 1209.435753][T19733] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1209.860933][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1209.917950][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1210.236349][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 1210.577091][T22701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.587519][T22839] netlink: 'syz.0.5602': attribute type 10 has an invalid length. [ 1210.596806][T22839] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5602'. [ 1210.611844][T22839] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1210.634568][T22842] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 1210.652847][T22842] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 1210.752882][T22701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.857602][T19736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.864855][T19736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.914973][T19736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.922611][T19736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.804104][T22701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.904393][T22883] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5611'. [ 1212.406712][T22897] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 1212.424169][T22897] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 1212.556546][T22897] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5614'. [ 1212.785347][T22909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.901815][T22701] veth0_vlan: entered promiscuous mode [ 1212.967594][T22701] veth1_vlan: entered promiscuous mode [ 1213.093476][T22701] veth0_macvtap: entered promiscuous mode [ 1213.126267][T22919] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5621'. [ 1213.140115][T22919] bridge_slave_1: default FDB implementation only supports local addresses [ 1213.158001][T22701] veth1_macvtap: entered promiscuous mode [ 1213.220750][T22701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.246133][T22701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.282103][T22701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.301615][T22701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.312012][T22701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.338367][T22701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.372981][T22701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.386555][T22701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.400404][T22701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.420410][T22701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.459536][T22701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.487405][T22701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.509584][T22701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.538906][T22701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.611057][T22701] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.621215][T22701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.632456][T22701] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.651935][T22701] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.903703][T19743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.944678][T19743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.051946][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.114432][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.459922][T22945] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5625'. [ 1214.531876][T22945] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1215.483364][T22987] netlink: 'syz.0.5636': attribute type 10 has an invalid length. [ 1216.254924][T22994] netlink: 'syz.3.5637': attribute type 10 has an invalid length. [ 1216.596295][T23006] Ù: renamed from bond_slave_1 (while UP) [ 1217.264485][T23021] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1217.462448][T23021] netlink: 'syz.4.5642': attribute type 33 has an invalid length. [ 1217.535789][T23021] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5642'. [ 1218.453332][T23057] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1220.604305][T23114] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5669'. [ 1220.640471][T23114] bridge_slave_1: default FDB implementation only supports local addresses [ 1221.440174][T23118] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5670'. [ 1221.603832][T23118] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1221.721072][T23118] CPU: 1 PID: 23118 Comm: syz.0.5670 Not tainted syzkaller #0 [ 1221.728659][T23118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1221.738953][T23118] Call Trace: [ 1221.742315][T23118] [ 1221.745358][T23118] dump_stack_lvl+0x18c/0x250 [ 1221.750452][T23118] ? show_regs_print_info+0x20/0x20 [ 1221.756081][T23118] ? load_image+0x420/0x420 [ 1221.760964][T23118] sysfs_warn_dup+0x8e/0xa0 [ 1221.765619][T23118] sysfs_do_create_link_sd+0xc0/0x110 [ 1221.771063][T23118] device_add_class_symlinks+0x1cf/0x240 [ 1221.776867][T23118] device_add+0x4f9/0xc40 [ 1221.782433][T23118] wiphy_register+0x1d99/0x2ac0 [ 1221.787417][T23118] ? cfg80211_event_work+0x40/0x40 [ 1221.793066][T23118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1221.800111][T23118] ? rtnl_unlock+0x9/0x10 [ 1221.804711][T23118] ieee80211_register_hw+0x2dd8/0x3b30 [ 1221.811794][T23118] ? ieee80211_register_hw+0xfc1/0x3b30 [ 1221.817617][T23118] ? ieee80211_tasklet_handler+0x20/0x20 [ 1221.823335][T23118] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1221.829502][T23118] ? __debug_object_init+0xec/0x450 [ 1221.834784][T23118] ? __asan_memset+0x22/0x40 [ 1221.839453][T23118] ? __hrtimer_init+0x189/0x270 [ 1221.844370][T23118] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1221.850212][T23118] ? mac80211_hwsim_free+0x220/0x220 [ 1221.857319][T23118] ? rcu_is_watching+0x15/0xb0 [ 1221.862184][T23118] ? kstrndup+0xbd/0x140 [ 1221.866714][T23118] hwsim_new_radio_nl+0xdad/0x1a70 [ 1221.872024][T23118] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1221.878100][T23118] ? mark_lock+0x94/0x320 [ 1221.882781][T23118] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1221.889806][T23118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1221.896362][T23118] ? lockdep_hardirqs_on+0x98/0x150 [ 1221.901682][T23118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1221.908196][T23118] genl_family_rcv_msg_doit+0x21a/0x310 [ 1221.913836][T23118] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1221.920264][T23118] ? bpf_lsm_capable+0x9/0x10 [ 1221.925039][T23118] ? security_capable+0x89/0xb0 [ 1221.929980][T23118] genl_rcv_msg+0x611/0x7a0 [ 1221.934566][T23118] ? genl_bind+0x360/0x360 [ 1221.939047][T23118] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1221.945520][T23118] netlink_rcv_skb+0x235/0x4c0 [ 1221.951000][T23118] ? genl_bind+0x360/0x360 [ 1221.956503][T23118] ? netlink_ack+0x1160/0x1160 [ 1221.961988][T23118] ? __lock_acquire+0x7d80/0x7d80 [ 1221.968019][T23118] ? down_read+0x1ac/0x2e0 [ 1221.973027][T23118] genl_rcv+0x28/0x40 [ 1221.977382][T23118] netlink_unicast+0x7b1/0x930 [ 1221.983197][T23118] netlink_sendmsg+0x8d0/0xbf0 [ 1221.988722][T23118] ? netlink_getsockopt+0x590/0x590 [ 1221.994513][T23118] ? aa_sock_msg_perm+0x94/0x150 [ 1222.000324][T23118] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1222.005880][T23118] ? security_socket_sendmsg+0x80/0xa0 [ 1222.011704][T23118] ? netlink_getsockopt+0x590/0x590 [ 1222.017077][T23118] ____sys_sendmsg+0x61b/0x980 [ 1222.021932][T23118] ? __asan_memset+0x22/0x40 [ 1222.026967][T23118] ? __sys_sendmsg_sock+0x30/0x30 [ 1222.032152][T23118] ? __import_iovec+0x5f2/0x850 [ 1222.037702][T23118] ? import_iovec+0x73/0xa0 [ 1222.042558][T23118] ___sys_sendmsg+0x2a6/0x360 [ 1222.047495][T23118] ? __sys_sendmsg+0x2b0/0x2b0 [ 1222.052361][T23118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1222.058814][T23118] __se_sys_sendmsg+0x1d0/0x2c0 [ 1222.063739][T23118] ? perf_trace_preemptirq_template+0x269/0x330 [ 1222.070147][T23118] ? __x64_sys_sendmsg+0x80/0x80 [ 1222.075174][T23118] ? lockdep_hardirqs_on+0x98/0x150 [ 1222.080629][T23118] do_syscall_64+0x55/0xb0 [ 1222.085275][T23118] ? clear_bhb_loop+0x40/0x90 [ 1222.090640][T23118] ? clear_bhb_loop+0x40/0x90 [ 1222.095478][T23118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1222.102253][T23118] RIP: 0033:0x7ff979b9ce59 [ 1222.106820][T23118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.128332][T23118] RSP: 002b:00007ff97aad1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.136957][T23118] RAX: ffffffffffffffda RBX: 00007ff979e15fa0 RCX: 00007ff979b9ce59 [ 1222.145621][T23118] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 1222.153665][T23118] RBP: 00007ff979c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1222.162361][T23118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.170585][T23118] R13: 00007ff979e16038 R14: 00007ff979e15fa0 R15: 00007ffeed7049e8 [ 1222.178737][T23118] [ 1222.475520][T23139] netlink: 'syz.4.5674': attribute type 33 has an invalid length. [ 1222.602663][T23139] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5674'. [ 1222.649172][T23139] `: renamed from ip6tnl0 (while UP) [ 1222.730072][T23139] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1222.860605][T23144] netlink: 'syz.4.5674': attribute type 39 has an invalid length. [ 1225.144562][T23206] netlink: 'syz.3.5692': attribute type 10 has an invalid length. [ 1225.184707][T23206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1225.790214][T23221] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5696'. [ 1226.839176][T23245] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5702'. [ 1227.558087][T23262] FAULT_INJECTION: forcing a failure. [ 1227.558087][T23262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.596604][T23262] CPU: 1 PID: 23262 Comm: syz.0.5708 Not tainted syzkaller #0 [ 1227.604659][T23262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1227.614980][T23262] Call Trace: [ 1227.618340][T23262] [ 1227.621339][T23262] dump_stack_lvl+0x18c/0x250 [ 1227.626124][T23262] ? show_regs_print_info+0x20/0x20 [ 1227.631447][T23262] ? load_image+0x420/0x420 [ 1227.636361][T23262] ? __might_fault+0xaa/0x120 [ 1227.641170][T23262] ? __lock_acquire+0x7d80/0x7d80 [ 1227.646326][T23262] should_fail_ex+0x394/0x4c0 [ 1227.651168][T23262] _copy_from_user+0x2f/0xe0 [ 1227.655874][T23262] __sys_bpf+0x23e/0x890 [ 1227.660317][T23262] ? bpf_link_show_fdinfo+0x390/0x390 [ 1227.665825][T23262] ? lock_chain_count+0x20/0x20 [ 1227.670821][T23262] __x64_sys_bpf+0x7c/0x90 [ 1227.675554][T23262] do_syscall_64+0x55/0xb0 [ 1227.680066][T23262] ? clear_bhb_loop+0x40/0x90 [ 1227.684876][T23262] ? clear_bhb_loop+0x40/0x90 [ 1227.689707][T23262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1227.695974][T23262] RIP: 0033:0x7ff979b9ce59 [ 1227.700695][T23262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.721538][T23262] RSP: 002b:00007ff97aad1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1227.730278][T23262] RAX: ffffffffffffffda RBX: 00007ff979e15fa0 RCX: 00007ff979b9ce59 [ 1227.741738][T23262] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 1227.751128][T23262] RBP: 00007ff97aad1090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.759784][T23262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.768380][T23262] R13: 00007ff979e16038 R14: 00007ff979e15fa0 R15: 00007ffeed7049e8 [ 1227.777515][T23262] [ 1228.974804][T23285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.326341][T23300] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5717'. [ 1229.352928][T23300] bridge_slave_1: default FDB implementation only supports local addresses [ 1229.616469][T23306] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5719'. [ 1229.732952][T23312] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1229.774462][T23312] syzkaller1: linktype set to 773 [ 1230.759520][T23325] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1231.708981][T23344] can: request_module (can-proto-0) failed. [ 1233.102747][T23364] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5732'. [ 1233.289720][T23364] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1233.305628][T23364] CPU: 0 PID: 23364 Comm: syz.0.5732 Not tainted syzkaller #0 [ 1233.314446][T23364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1233.324858][T23364] Call Trace: [ 1233.328192][T23364] [ 1233.331204][T23364] dump_stack_lvl+0x18c/0x250 [ 1233.335934][T23364] ? show_regs_print_info+0x20/0x20 [ 1233.341191][T23364] ? load_image+0x420/0x420 [ 1233.345760][T23364] sysfs_warn_dup+0x8e/0xa0 [ 1233.350784][T23364] sysfs_do_create_link_sd+0xc0/0x110 [ 1233.356560][T23364] device_add_class_symlinks+0x1cf/0x240 [ 1233.362460][T23364] device_add+0x4f9/0xc40 [ 1233.366864][T23364] wiphy_register+0x1d99/0x2ac0 [ 1233.371813][T23364] ? cfg80211_event_work+0x40/0x40 [ 1233.377006][T23364] ? minstrel_ht_alloc+0x88a/0x990 [ 1233.382167][T23364] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1233.388310][T23364] ieee80211_register_hw+0x2dd8/0x3b30 [ 1233.393829][T23364] ? ieee80211_register_hw+0xfc1/0x3b30 [ 1233.399511][T23364] ? ieee80211_tasklet_handler+0x20/0x20 [ 1233.405184][T23364] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1233.411134][T23364] ? __debug_object_init+0xec/0x450 [ 1233.416593][T23364] ? __asan_memset+0x22/0x40 [ 1233.421269][T23364] ? __hrtimer_init+0x189/0x270 [ 1233.426175][T23364] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1233.431958][T23364] ? mac80211_hwsim_free+0x220/0x220 [ 1233.437295][T23364] ? rcu_is_watching+0x15/0xb0 [ 1233.442129][T23364] ? kstrndup+0xbd/0x140 [ 1233.446460][T23364] hwsim_new_radio_nl+0xdad/0x1a70 [ 1233.452197][T23364] ? __nla_validate+0x50/0x50 [ 1233.457485][T23364] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1233.464573][T23364] ? memset_orig+0x7b/0xac [ 1233.469611][T23364] ? __nla_parse+0x40/0x50 [ 1233.474350][T23364] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1233.480909][T23364] genl_family_rcv_msg_doit+0x21a/0x310 [ 1233.486603][T23364] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1233.492703][T23364] ? bpf_lsm_capable+0x9/0x10 [ 1233.497468][T23364] ? security_capable+0x89/0xb0 [ 1233.504331][T23364] genl_rcv_msg+0x611/0x7a0 [ 1233.508949][T23364] ? genl_bind+0x360/0x360 [ 1233.513504][T23364] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1233.519923][T23364] netlink_rcv_skb+0x235/0x4c0 [ 1233.524800][T23364] ? genl_bind+0x360/0x360 [ 1233.529292][T23364] ? netlink_ack+0x1160/0x1160 [ 1233.534340][T23364] ? __lock_acquire+0x7d80/0x7d80 [ 1233.539429][T23364] ? down_read+0x1ac/0x2e0 [ 1233.546203][T23364] genl_rcv+0x28/0x40 [ 1233.551094][T23364] netlink_unicast+0x7b1/0x930 [ 1233.559602][T23364] netlink_sendmsg+0x8d0/0xbf0 [ 1233.566123][T23364] ? netlink_getsockopt+0x590/0x590 [ 1233.572908][T23364] ? aa_sock_msg_perm+0x94/0x150 [ 1233.580592][T23364] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1233.587283][T23364] ? security_socket_sendmsg+0x80/0xa0 [ 1233.593355][T23364] ? netlink_getsockopt+0x590/0x590 [ 1233.599051][T23364] ____sys_sendmsg+0x61b/0x980 [ 1233.603885][T23364] ? __asan_memset+0x22/0x40 [ 1233.608569][T23364] ? __sys_sendmsg_sock+0x30/0x30 [ 1233.614166][T23364] ? __import_iovec+0x5f2/0x850 [ 1233.619077][T23364] ? import_iovec+0x73/0xa0 [ 1233.623643][T23364] ___sys_sendmsg+0x2a6/0x360 [ 1233.628385][T23364] ? __sys_sendmsg+0x2b0/0x2b0 [ 1233.633412][T23364] ? ktime_get+0x7f/0x280 [ 1233.637832][T23364] __se_sys_sendmsg+0x1d0/0x2c0 [ 1233.643911][T23364] ? __x64_sys_sendmsg+0x80/0x80 [ 1233.648932][T23364] ? lockdep_hardirqs_on+0x98/0x150 [ 1233.654299][T23364] do_syscall_64+0x55/0xb0 [ 1233.659637][T23364] ? clear_bhb_loop+0x40/0x90 [ 1233.665524][T23364] ? clear_bhb_loop+0x40/0x90 [ 1233.670448][T23364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1233.678646][T23364] RIP: 0033:0x7ff979b9ce59 [ 1233.683665][T23364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.703940][T23364] RSP: 002b:00007ff97aad1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1233.712624][T23364] RAX: ffffffffffffffda RBX: 00007ff979e15fa0 RCX: 00007ff979b9ce59 [ 1233.720884][T23364] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1233.729034][T23364] RBP: 00007ff979c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1233.737183][T23364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.745846][T23364] R13: 00007ff979e16038 R14: 00007ff979e15fa0 R15: 00007ffeed7049e8 [ 1233.754457][T23364] [ 1233.849786][T23378] syzkaller0: entered promiscuous mode [ 1233.861039][T23378] syzkaller0: entered allmulticast mode [ 1234.117814][T23380] bridge0: port 3(batadv0) entered blocking state [ 1234.125033][T23380] bridge0: port 3(batadv0) entered disabled state [ 1234.131828][T23380] batadv0: entered allmulticast mode [ 1234.147260][T23380] batadv0: entered promiscuous mode [ 1234.153568][T23380] bridge0: port 3(batadv0) entered blocking state [ 1234.160582][T23380] bridge0: port 3(batadv0) entered forwarding state [ 1234.275163][T23382] netlink: 'syz.4.5737': attribute type 10 has an invalid length. [ 1234.290462][T19736] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1234.300175][T19736] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1234.598841][T23386] netlink: 'syz.0.5740': attribute type 25 has an invalid length. [ 1234.606855][T23386] netlink: 'syz.0.5740': attribute type 6 has an invalid length. [ 1235.721837][T23412] syzkaller0: entered promiscuous mode [ 1235.739625][T23412] syzkaller0: entered allmulticast mode [ 1236.199040][T23423] netlink: 184912 bytes leftover after parsing attributes in process `syz.4.5750'. [ 1237.258080][T23460] syzkaller0: entered promiscuous mode [ 1237.285329][T23460] syzkaller0: entered allmulticast mode [ 1237.562858][T23472] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5768'. [ 1237.585775][T23472] bridge_slave_1: default FDB implementation only supports local addresses [ 1238.364290][T23487] can: request_module (can-proto-0) failed. [ 1238.889258][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.895846][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.191729][T23521] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.5783'. [ 1239.681379][T23531] netlink: 'syz.0.5785': attribute type 10 has an invalid length. [ 1240.197334][T23535] bridge_slave_1: left allmulticast mode [ 1240.224985][T23535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.355510][T23535] bridge_slave_0: left promiscuous mode [ 1240.381321][T23535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.438071][T19738] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1241.521827][T23569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5798'. [ 1241.714832][T23569] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5798'. [ 1241.823983][T23574] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5798'. [ 1244.116863][T23615] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5807'. [ 1244.765592][T23627] FAULT_INJECTION: forcing a failure. [ 1244.765592][T23627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1244.803896][T23622] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1244.822577][T23627] CPU: 0 PID: 23627 Comm: syz.3.5812 Not tainted syzkaller #0 [ 1244.830171][T23627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1244.840327][T23627] Call Trace: [ 1244.843689][T23627] [ 1244.846715][T23627] dump_stack_lvl+0x18c/0x250 [ 1244.851505][T23627] ? show_regs_print_info+0x20/0x20 [ 1244.856842][T23627] ? load_image+0x420/0x420 [ 1244.861461][T23627] ? __might_fault+0xaa/0x120 [ 1244.866329][T23627] ? __lock_acquire+0x7d80/0x7d80 [ 1244.871470][T23627] should_fail_ex+0x394/0x4c0 [ 1244.876286][T23627] _copy_from_user+0x2f/0xe0 [ 1244.880979][T23627] bpf_obj_get_info_by_fd+0xda0/0x3120 [ 1244.886550][T23627] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1244.892443][T23627] ? verify_lock_unused+0x140/0x140 [ 1244.897704][T23627] ? perf_trace_lock_acquire+0x342/0x400 [ 1244.903405][T23627] ? bpf_map_get_fd_by_id+0x330/0x330 [ 1244.908877][T23627] ? trace_event_raw_event_lock+0x240/0x240 [ 1244.914890][T23627] ? __might_fault+0xaa/0x120 [ 1244.919628][T23627] ? __lock_acquire+0x7d80/0x7d80 [ 1244.924718][T23627] ? file_end_write+0x159/0x250 [ 1244.929637][T23627] ? __might_fault+0xaa/0x120 [ 1244.934368][T23627] ? __might_fault+0xc6/0x120 [ 1244.939089][T23627] ? __might_fault+0xaa/0x120 [ 1244.943827][T23627] ? bpf_lsm_bpf+0x9/0x10 [ 1244.948221][T23627] ? security_bpf+0x7e/0xa0 [ 1244.952791][T23627] __sys_bpf+0x7eb/0x890 [ 1244.957102][T23627] ? bpf_link_show_fdinfo+0x390/0x390 [ 1244.962572][T23627] ? lock_chain_count+0x20/0x20 [ 1244.967805][T23627] __x64_sys_bpf+0x7c/0x90 [ 1244.972301][T23627] do_syscall_64+0x55/0xb0 [ 1244.976811][T23627] ? clear_bhb_loop+0x40/0x90 [ 1244.981639][T23627] ? clear_bhb_loop+0x40/0x90 [ 1244.986378][T23627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1244.992332][T23627] RIP: 0033:0x7f5b3f99ce59 [ 1244.996812][T23627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.016478][T23627] RSP: 002b:00007f5b407a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1245.025000][T23627] RAX: ffffffffffffffda RBX: 00007f5b3fc15fa0 RCX: 00007f5b3f99ce59 [ 1245.033039][T23627] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 1245.041243][T23627] RBP: 00007f5b407a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.049264][T23627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.057309][T23627] R13: 00007f5b3fc16038 R14: 00007f5b3fc15fa0 R15: 00007ffd18b28db8 [ 1245.065485][T23627] [ 1245.702555][T23636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.975088][T23646] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.5817'. [ 1247.073557][T23652] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5818'. [ 1247.100024][T23652] bridge_slave_1: default FDB implementation only supports local addresses [ 1247.472000][T23678] netlink: 'syz.4.5830': attribute type 10 has an invalid length. [ 1247.501377][T23678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.543666][T23678] bridge_slave_1: left allmulticast mode [ 1247.549758][T23678] bridge_slave_1: left promiscuous mode [ 1247.587980][T23678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.742193][T23678] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1247.993065][T23679] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.5822'. [ 1248.030646][T23683] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5824'. [ 1248.631910][T23701] netlink: 'syz.4.5828': attribute type 1 has an invalid length. [ 1248.686895][T23701] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.5828'. [ 1249.000098][T23713] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5833'. [ 1250.127686][T23748] netlink: 'syz.4.5839': attribute type 10 has an invalid length. [ 1250.185223][T23748] team0: Device ipvlan1 failed to register rx_handler [ 1250.261222][T23747] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.5837'. [ 1250.488738][T23765] netlink: 'syz.3.5841': attribute type 10 has an invalid length. [ 1250.846686][T23776] netlink: 'syz.4.5845': attribute type 1 has an invalid length. [ 1250.947506][T23781] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5846'. [ 1251.237614][T23787] bridge0: port 2(batadv0) entered blocking state [ 1251.264425][T23787] bridge0: port 2(batadv0) entered disabled state [ 1251.271234][T23787] batadv0: entered allmulticast mode [ 1251.304562][T23787] batadv0: entered promiscuous mode [ 1251.337803][T23787] bridge0: port 2(batadv0) entered blocking state [ 1251.344700][T23787] bridge0: port 2(batadv0) entered forwarding state [ 1251.395633][T23795] netlink: 'syz.3.5851': attribute type 25 has an invalid length. [ 1251.440138][T23795] netlink: 'syz.3.5851': attribute type 6 has an invalid length. [ 1251.775747][ T2978] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1251.785318][ T2978] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1251.974376][T23818] sit0: left promiscuous mode [ 1252.743689][T23823] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5861'. [ 1252.824526][T23826] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5861'. [ 1252.969118][T23837] syzkaller0: entered promiscuous mode [ 1252.981148][T23837] syzkaller0: entered allmulticast mode [ 1252.998506][T23837] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1253.040163][T23837] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1253.221402][T23841] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5866'. [ 1255.196213][T23901] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5891'. [ 1255.216653][T23901] bridge_slave_1: default FDB implementation only supports local addresses [ 1257.379751][T23918] netlink: 'syz.0.5902': attribute type 10 has an invalid length. [ 1257.971829][T23938] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.5904'. [ 1258.038732][T23938] netlink: 164068 bytes leftover after parsing attributes in process `syz.3.5904'. [ 1259.615630][T23978] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.5918'. [ 1259.645798][T23977] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.5918'. [ 1259.739340][T23982] netlink: 'syz.3.5920': attribute type 5 has an invalid length. [ 1260.815656][T23997] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5924'. [ 1260.874175][T23997] bridge_slave_1: entered promiscuous mode [ 1261.495847][T24009] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5927'. [ 1261.682132][T24016] netlink: 'syz.3.5930': attribute type 21 has an invalid length. [ 1261.691330][T24016] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5930'. [ 1261.707863][T24016] netlink: 'syz.3.5930': attribute type 3 has an invalid length. [ 1261.717527][T24016] netlink: 'syz.3.5930': attribute type 16 has an invalid length. [ 1261.742278][T24016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5930'. [ 1262.211292][T24029] netlink: 'syz.4.5934': attribute type 10 has an invalid length. [ 1262.226337][T24029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5934'. [ 1262.242722][T24029] team0: entered promiscuous mode [ 1262.258947][T24029] team_slave_0: entered promiscuous mode [ 1262.284629][T24029] team_slave_1: entered promiscuous mode [ 1262.293672][T24029] team0: entered allmulticast mode [ 1262.307176][T24029] team_slave_0: entered allmulticast mode [ 1262.313340][T24029] team_slave_1: entered allmulticast mode [ 1262.335087][T24029] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1262.791129][T24045] FAULT_INJECTION: forcing a failure. [ 1262.791129][T24045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.841222][T24045] CPU: 1 PID: 24045 Comm: syz.3.5941 Not tainted syzkaller #0 [ 1262.848812][T24045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1262.858954][T24045] Call Trace: [ 1262.862306][T24045] [ 1262.865315][T24045] dump_stack_lvl+0x18c/0x250 [ 1262.870098][T24045] ? show_regs_print_info+0x20/0x20 [ 1262.875378][T24045] ? load_image+0x420/0x420 [ 1262.879982][T24045] ? __might_fault+0xaa/0x120 [ 1262.884753][T24045] ? __lock_acquire+0x7d80/0x7d80 [ 1262.889883][T24045] should_fail_ex+0x394/0x4c0 [ 1262.894664][T24045] _copy_to_user+0x2f/0xa0 [ 1262.899366][T24045] bpf_obj_get_info_by_fd+0x114a/0x3120 [ 1262.905023][T24045] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1262.910925][T24045] ? verify_lock_unused+0x140/0x140 [ 1262.916214][T24045] ? perf_trace_lock_acquire+0x342/0x400 [ 1262.921945][T24045] ? bpf_map_get_fd_by_id+0x330/0x330 [ 1262.927433][T24045] ? get_pid_task+0x20/0x1e0 [ 1262.932297][T24045] ? __might_fault+0xaa/0x120 [ 1262.937054][T24045] ? __lock_acquire+0x7d80/0x7d80 [ 1262.942188][T24045] ? file_end_write+0x159/0x250 [ 1262.947158][T24045] ? __might_fault+0xaa/0x120 [ 1262.951927][T24045] ? __might_fault+0xc6/0x120 [ 1262.956778][T24045] ? __might_fault+0xaa/0x120 [ 1262.961533][T24045] ? bpf_lsm_bpf+0x9/0x10 [ 1262.965954][T24045] ? security_bpf+0x7e/0xa0 [ 1262.970550][T24045] __sys_bpf+0x7eb/0x890 [ 1262.974980][T24045] ? bpf_link_show_fdinfo+0x390/0x390 [ 1262.980504][T24045] ? lock_chain_count+0x20/0x20 [ 1262.985483][T24045] __x64_sys_bpf+0x7c/0x90 [ 1262.989983][T24045] do_syscall_64+0x55/0xb0 [ 1262.994471][T24045] ? clear_bhb_loop+0x40/0x90 [ 1262.999229][T24045] ? clear_bhb_loop+0x40/0x90 [ 1263.003992][T24045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1263.010000][T24045] RIP: 0033:0x7f5b3f99ce59 [ 1263.014495][T24045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.034201][T24045] RSP: 002b:00007f5b407a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1263.042724][T24045] RAX: ffffffffffffffda RBX: 00007f5b3fc15fa0 RCX: 00007f5b3f99ce59 [ 1263.050789][T24045] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 1263.058869][T24045] RBP: 00007f5b407a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.066935][T24045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.075046][T24045] R13: 00007f5b3fc16038 R14: 00007f5b3fc15fa0 R15: 00007ffd18b28db8 [ 1263.083183][T24045] [ 1263.250481][T24049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.470278][T24060] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5948'. [ 1263.494034][T24060] bridge_slave_1: default FDB implementation only supports local addresses [ 1263.638290][T24064] FAULT_INJECTION: forcing a failure. [ 1263.638290][T24064] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.651229][T24064] CPU: 1 PID: 24064 Comm: syz.1.5949 Not tainted syzkaller #0 [ 1263.658742][T24064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1263.668859][T24064] Call Trace: [ 1263.672188][T24064] [ 1263.675161][T24064] dump_stack_lvl+0x18c/0x250 [ 1263.679908][T24064] ? show_regs_print_info+0x20/0x20 [ 1263.685156][T24064] ? load_image+0x420/0x420 [ 1263.689721][T24064] should_fail_ex+0x394/0x4c0 [ 1263.694634][T24064] should_failslab+0x9/0x20 [ 1263.699392][T24064] slab_pre_alloc_hook+0x59/0x300 [ 1263.704543][T24064] kmem_cache_alloc+0x5a/0x2c0 [ 1263.709378][T24064] ? skb_clone+0x1eb/0x370 [ 1263.713871][T24064] skb_clone+0x1eb/0x370 [ 1263.718181][T24064] bpf_clone_redirect+0x16d/0x4a0 [ 1263.723371][T24064] bpf_prog_6893982b85ceadf7+0x5e/0x63 [ 1263.728898][T24064] ? perf_prepare_sample+0x1990/0x1db0 [ 1263.734406][T24064] ? perf_trace_preemptirq_template+0x269/0x330 [ 1263.740691][T24064] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1263.746711][T24064] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1263.752029][T24064] ? lock_chain_count+0x20/0x20 [ 1263.756914][T24064] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1263.763193][T24064] ? __local_bh_disable_ip+0x108/0x1a0 [ 1263.769834][T24064] ? __cant_sleep+0x220/0x220 [ 1263.774564][T24064] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1263.779994][T24064] ? _local_bh_enable+0xa0/0xa0 [ 1263.784891][T24064] ? bpf_test_timer_continue+0x135/0x380 [ 1263.790585][T24064] ? bpf_test_run+0x174/0x870 [ 1263.795314][T24064] bpf_test_run+0x2df/0x870 [ 1263.799886][T24064] ? bpf_test_run+0x174/0x870 [ 1263.804605][T24064] ? dst_hold+0x70/0x70 [ 1263.808826][T24064] ? eth_get_headlen+0x210/0x210 [ 1263.813829][T24064] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1263.819278][T24064] ? cpu_online+0x60/0x60 [ 1263.823666][T24064] bpf_prog_test_run+0x31f/0x390 [ 1263.828783][T24064] __sys_bpf+0x49d/0x890 [ 1263.833069][T24064] ? bpf_link_show_fdinfo+0x390/0x390 [ 1263.838512][T24064] ? lock_chain_count+0x20/0x20 [ 1263.843426][T24064] __x64_sys_bpf+0x7c/0x90 [ 1263.847886][T24064] do_syscall_64+0x55/0xb0 [ 1263.852343][T24064] ? clear_bhb_loop+0x40/0x90 [ 1263.857047][T24064] ? clear_bhb_loop+0x40/0x90 [ 1263.861775][T24064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1263.867711][T24064] RIP: 0033:0x7f9c10b9ce59 [ 1263.872157][T24064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.891982][T24064] RSP: 002b:00007f9c119f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1263.900435][T24064] RAX: ffffffffffffffda RBX: 00007f9c10e15fa0 RCX: 00007f9c10b9ce59 [ 1263.908444][T24064] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1263.916811][T24064] RBP: 00007f9c119f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.924911][T24064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1263.932917][T24064] R13: 00007f9c10e16038 R14: 00007f9c10e15fa0 R15: 00007fffbe505568 [ 1263.940933][T24064] [ 1264.213489][T24077] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5954'. [ 1265.495563][T24109] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5965'. [ 1265.516163][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.544322][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.595213][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.626964][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.666669][T24109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.704550][T24109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.739343][T24109] batadv_slave_1: entered promiscuous mode [ 1265.868620][T24114] netlink: 'syz.4.5966': attribute type 4 has an invalid length. [ 1266.461091][T24139] netlink: 'syz.0.5973': attribute type 10 has an invalid length. [ 1266.889384][T24153] netlink: 'syz.4.5976': attribute type 10 has an invalid length. [ 1267.038502][T24154] netlink: 'syz.1.5974': attribute type 9 has an invalid length. [ 1267.089492][T24154] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5974'. [ 1271.104602][T24170] netlink: 'syz.4.5980': attribute type 10 has an invalid length. [ 1271.112538][T24170] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1271.136347][T24171] netlink: 'syz.4.5980': attribute type 39 has an invalid length. [ 1271.833047][T24187] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5986'. [ 1271.923096][T24187] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1271.978231][T24187] CPU: 0 PID: 24187 Comm: syz.0.5986 Not tainted syzkaller #0 [ 1271.985792][T24187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1271.995895][T24187] Call Trace: [ 1271.999211][T24187] [ 1272.002169][T24187] dump_stack_lvl+0x18c/0x250 [ 1272.006907][T24187] ? show_regs_print_info+0x20/0x20 [ 1272.012250][T24187] ? load_image+0x420/0x420 [ 1272.016901][T24187] sysfs_warn_dup+0x8e/0xa0 [ 1272.021449][T24187] sysfs_do_create_link_sd+0xc0/0x110 [ 1272.026883][T24187] device_add_class_symlinks+0x1cf/0x240 [ 1272.032604][T24187] device_add+0x4f9/0xc40 [ 1272.037077][T24187] wiphy_register+0x1d99/0x2ac0 [ 1272.041994][T24187] ? cfg80211_event_work+0x40/0x40 [ 1272.047146][T24187] ? minstrel_ht_alloc+0x88a/0x990 [ 1272.052301][T24187] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1272.058415][T24187] ieee80211_register_hw+0x2dd8/0x3b30 [ 1272.063941][T24187] ? ieee80211_register_hw+0xfc1/0x3b30 [ 1272.069537][T24187] ? ieee80211_tasklet_handler+0x20/0x20 [ 1272.075211][T24187] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1272.081156][T24187] ? __debug_object_init+0xec/0x450 [ 1272.086411][T24187] ? __asan_memset+0x22/0x40 [ 1272.091311][T24187] ? __hrtimer_init+0x189/0x270 [ 1272.096214][T24187] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1272.102102][T24187] ? mac80211_hwsim_free+0x220/0x220 [ 1272.107441][T24187] ? rcu_is_watching+0x15/0xb0 [ 1272.112263][T24187] ? kstrndup+0xbd/0x140 [ 1272.116564][T24187] hwsim_new_radio_nl+0xdad/0x1a70 [ 1272.121737][T24187] ? __nla_validate+0x50/0x50 [ 1272.126489][T24187] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1272.132872][T24187] ? __nla_parse+0x40/0x50 [ 1272.137362][T24187] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1272.143779][T24187] genl_family_rcv_msg_doit+0x21a/0x310 [ 1272.149382][T24187] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1272.155324][T24187] ? bpf_lsm_capable+0x9/0x10 [ 1272.160044][T24187] ? security_capable+0x89/0xb0 [ 1272.164943][T24187] genl_rcv_msg+0x611/0x7a0 [ 1272.169491][T24187] ? genl_bind+0x360/0x360 [ 1272.173954][T24187] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1272.180056][T24187] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1272.186421][T24187] ? ref_tracker_free+0x686/0x830 [ 1272.191487][T24187] netlink_rcv_skb+0x235/0x4c0 [ 1272.196685][T24187] ? genl_bind+0x360/0x360 [ 1272.201158][T24187] ? netlink_ack+0x1160/0x1160 [ 1272.205980][T24187] ? __lock_acquire+0x7d80/0x7d80 [ 1272.211067][T24187] ? down_read+0x1ac/0x2e0 [ 1272.215539][T24187] genl_rcv+0x28/0x40 [ 1272.219561][T24187] netlink_unicast+0x7b1/0x930 [ 1272.224367][T24187] netlink_sendmsg+0x8d0/0xbf0 [ 1272.229197][T24187] ? lockdep_hardirqs_on+0x98/0x150 [ 1272.234446][T24187] ? netlink_getsockopt+0x590/0x590 [ 1272.239691][T24187] ? aa_sock_msg_perm+0x94/0x150 [ 1272.244669][T24187] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1272.249988][T24187] ? security_socket_sendmsg+0x80/0xa0 [ 1272.255487][T24187] ? netlink_getsockopt+0x590/0x590 [ 1272.260719][T24187] ____sys_sendmsg+0x61b/0x980 [ 1272.265516][T24187] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1272.271716][T24187] ? __asan_memset+0x22/0x40 [ 1272.276351][T24187] ? __sys_sendmsg_sock+0x30/0x30 [ 1272.281606][T24187] ? __import_iovec+0x5f2/0x850 [ 1272.286510][T24187] ? import_iovec+0x73/0xa0 [ 1272.291057][T24187] ___sys_sendmsg+0x2a6/0x360 [ 1272.295782][T24187] ? __sys_sendmsg+0x2b0/0x2b0 [ 1272.300665][T24187] __se_sys_sendmsg+0x1d0/0x2c0 [ 1272.305561][T24187] ? perf_trace_preemptirq_template+0x269/0x330 [ 1272.311844][T24187] ? __x64_sys_sendmsg+0x80/0x80 [ 1272.316835][T24187] ? lockdep_hardirqs_on+0x98/0x150 [ 1272.322180][T24187] do_syscall_64+0x55/0xb0 [ 1272.326629][T24187] ? clear_bhb_loop+0x40/0x90 [ 1272.331343][T24187] ? clear_bhb_loop+0x40/0x90 [ 1272.336054][T24187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1272.341983][T24187] RIP: 0033:0x7ff979b9ce59 [ 1272.346454][T24187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.366088][T24187] RSP: 002b:00007ff97aad1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1272.374536][T24187] RAX: ffffffffffffffda RBX: 00007ff979e15fa0 RCX: 00007ff979b9ce59 [ 1272.382543][T24187] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1272.390540][T24187] RBP: 00007ff979c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1272.398537][T24187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.406539][T24187] R13: 00007ff979e16038 R14: 00007ff979e15fa0 R15: 00007ffeed7049e8 [ 1272.414568][T24187] [ 1273.215794][T24203] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.5989'. [ 1273.256701][T24200] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1273.435317][T19740] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1274.022444][T24214] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5994'. [ 1274.067919][T24214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.136084][T24214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.185920][T24214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.223332][T24214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.276801][T24214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.327036][T24214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.379786][T24214] batadv_slave_1: entered promiscuous mode [ 1275.937249][T24254] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6006'. [ 1275.950215][T24242] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.6002'. [ 1276.015604][T24254] bridge_slave_1: default FDB implementation only supports local addresses [ 1276.351547][T24256] syzkaller0: entered promiscuous mode [ 1276.357749][T24256] syzkaller0: entered allmulticast mode [ 1276.412755][T24262] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6009'. [ 1280.816855][T24292] syzkaller0: entered promiscuous mode [ 1280.835427][T24292] syzkaller0: entered allmulticast mode [ 1280.926489][T24291] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.6018'. [ 1283.452157][T24307] netlink: 'syz.1.6023': attribute type 10 has an invalid length. [ 1283.460415][T24307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6023'. [ 1283.629525][T24323] mac80211_hwsim hwsim47 ..ãc¤±: renamed from wlan1 (while UP) [ 1283.896193][T24333] netlink: 'syz.1.6034': attribute type 17 has an invalid length. [ 1284.139391][T24343] netlink: 'syz.3.6036': attribute type 10 has an invalid length. [ 1284.164053][T24343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6036'. [ 1284.181184][T24343] bridge0: port 4(team0) entered disabled state [ 1284.210463][T24343] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1285.313758][T24363] netlink: 'syz.4.6044': attribute type 10 has an invalid length. [ 1286.334875][T24348] syzkaller0: entered promiscuous mode [ 1286.347577][T24348] syzkaller0: entered allmulticast mode [ 1286.461083][T24380] netlink: 'syz.4.6049': attribute type 22 has an invalid length. [ 1286.484367][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6049'. [ 1289.066519][T24388] netlink: 'syz.4.6053': attribute type 10 has an invalid length. [ 1289.081060][T24392] netlink: 'syz.1.6054': attribute type 10 has an invalid length. [ 1289.103770][T24392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6054'. [ 1289.442674][T24399] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6058'. [ 1290.246992][T24432] netlink: 'syz.0.6070': attribute type 10 has an invalid length. [ 1290.258387][T24432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6070'. [ 1290.446259][T24425] syzkaller0: entered promiscuous mode [ 1290.452383][T24425] syzkaller0: entered allmulticast mode [ 1290.675960][T24441] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6075'. [ 1291.236110][T24452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6079'. [ 1293.575727][T24452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6079'. [ 1293.585036][T24454] netlink: 'syz.3.6080': attribute type 10 has an invalid length. [ 1294.866988][T24488] syzkaller0: entered promiscuous mode [ 1294.872694][T24488] syzkaller0: entered allmulticast mode [ 1295.004165][T24497] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6099'. [ 1298.137754][T24543] netlink: 'syz.1.6112': attribute type 10 has an invalid length. [ 1298.154327][T24543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6112'. [ 1298.747494][T24551] syzkaller0: entered promiscuous mode [ 1298.753473][T24551] syzkaller0: entered allmulticast mode [ 1299.013599][T24576] netlink: 'syz.1.6124': attribute type 1 has an invalid length. [ 1299.023057][T24576] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6124'. [ 1300.331673][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.338271][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.384329][T24584] netlink: 'syz.0.6125': attribute type 10 has an invalid length. [ 1301.392421][T24584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6125'. [ 1301.653766][T24596] netlink: 'syz.4.6132': attribute type 4 has an invalid length. [ 1301.686450][T24597] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6131'. [ 1301.739678][T24597] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6131'. [ 1302.264773][T24609] netlink: 'syz.3.6136': attribute type 10 has an invalid length. [ 1302.273209][T24609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6136'. [ 1302.291610][T24609] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1302.510694][T24611] syzkaller0: entered promiscuous mode [ 1302.522004][T24611] syzkaller0: entered allmulticast mode [ 1303.244634][T24631] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6144'. [ 1305.439845][T19743] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1307.104704][T24631] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1307.112693][T24631] CPU: 0 PID: 24631 Comm: syz.0.6144 Not tainted syzkaller #0 [ 1307.120207][T24631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1307.130358][T24631] Call Trace: [ 1307.133697][T24631] [ 1307.136678][T24631] dump_stack_lvl+0x18c/0x250 [ 1307.141453][T24631] ? show_regs_print_info+0x20/0x20 [ 1307.146750][T24631] ? load_image+0x420/0x420 [ 1307.151325][T24631] sysfs_warn_dup+0x8e/0xa0 [ 1307.155885][T24631] sysfs_do_create_link_sd+0xc0/0x110 [ 1307.161316][T24631] device_add_class_symlinks+0x1cf/0x240 [ 1307.167038][T24631] device_add+0x4f9/0xc40 [ 1307.171452][T24631] wiphy_register+0x1d99/0x2ac0 [ 1307.176526][T24631] ? cfg80211_event_work+0x40/0x40 [ 1307.181715][T24631] ? minstrel_ht_alloc+0x88a/0x990 [ 1307.186905][T24631] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1307.193063][T24631] ieee80211_register_hw+0x2dd8/0x3b30 [ 1307.198855][T24631] ? ieee80211_register_hw+0xfc1/0x3b30 [ 1307.204509][T24631] ? ieee80211_tasklet_handler+0x20/0x20 [ 1307.210744][T24631] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1307.216816][T24631] ? __debug_object_init+0xec/0x450 [ 1307.224536][T24631] ? __asan_memset+0x22/0x40 [ 1307.229213][T24631] ? __hrtimer_init+0x189/0x270 [ 1307.234162][T24631] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1307.240085][T24631] ? mac80211_hwsim_free+0x220/0x220 [ 1307.245477][T24631] hwsim_new_radio_nl+0xdad/0x1a70 [ 1307.250791][T24631] ? __nla_validate+0x50/0x50 [ 1307.255533][T24631] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1307.262024][T24631] ? __nla_parse+0x40/0x50 [ 1307.266680][T24631] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1307.273175][T24631] genl_family_rcv_msg_doit+0x21a/0x310 [ 1307.278888][T24631] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1307.284863][T24631] ? bpf_lsm_capable+0x9/0x10 [ 1307.289784][T24631] ? security_capable+0x89/0xb0 [ 1307.294725][T24631] genl_rcv_msg+0x611/0x7a0 [ 1307.299395][T24631] ? genl_bind+0x360/0x360 [ 1307.303894][T24631] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1307.310410][T24631] netlink_rcv_skb+0x235/0x4c0 [ 1307.315249][T24631] ? genl_bind+0x360/0x360 [ 1307.319735][T24631] ? netlink_ack+0x1160/0x1160 [ 1307.324576][T24631] ? __lock_acquire+0x7d80/0x7d80 [ 1307.329677][T24631] ? down_read+0x1ac/0x2e0 [ 1307.334166][T24631] genl_rcv+0x28/0x40 [ 1307.338215][T24631] netlink_unicast+0x7b1/0x930 [ 1307.343058][T24631] netlink_sendmsg+0x8d0/0xbf0 [ 1307.347908][T24631] ? netlink_getsockopt+0x590/0x590 [ 1307.353169][T24631] ? __sanitizer_cov_trace_pc+0x10/0x60 [ 1307.358793][T24631] ? aa_sock_msg_perm+0x94/0x150 [ 1307.363807][T24631] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1307.369249][T24631] ? security_socket_sendmsg+0x80/0xa0 [ 1307.374777][T24631] ? netlink_getsockopt+0x590/0x590 [ 1307.380047][T24631] ____sys_sendmsg+0x61b/0x980 [ 1307.384890][T24631] ? __asan_memset+0x22/0x40 [ 1307.389603][T24631] ? __sys_sendmsg_sock+0x30/0x30 [ 1307.394691][T24631] ? __import_iovec+0x5f2/0x850 [ 1307.399621][T24631] ? import_iovec+0x73/0xa0 [ 1307.404183][T24631] ___sys_sendmsg+0x2a6/0x360 [ 1307.408928][T24631] ? __sys_sendmsg+0x2b0/0x2b0 [ 1307.413817][T24631] __se_sys_sendmsg+0x1d0/0x2c0 [ 1307.418755][T24631] ? perf_trace_preemptirq_template+0x269/0x330 [ 1307.425102][T24631] ? __x64_sys_sendmsg+0x80/0x80 [ 1307.430422][T24631] ? lockdep_hardirqs_on+0x98/0x150 [ 1307.435913][T24631] do_syscall_64+0x55/0xb0 [ 1307.440416][T24631] ? clear_bhb_loop+0x40/0x90 [ 1307.445156][T24631] ? clear_bhb_loop+0x40/0x90 [ 1307.449974][T24631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1307.455942][T24631] RIP: 0033:0x7ff979b9ce59 [ 1307.460430][T24631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.480131][T24631] RSP: 002b:00007ff97aad1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1307.488613][T24631] RAX: ffffffffffffffda RBX: 00007ff979e15fa0 RCX: 00007ff979b9ce59 [ 1307.496817][T24631] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1307.504866][T24631] RBP: 00007ff979c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1307.512896][T24631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.520924][T24631] R13: 00007ff979e16038 R14: 00007ff979e15fa0 R15: 00007ffeed7049e8 [ 1307.528997][T24631] [ 1307.809373][T24654] netlink: 'syz.0.6153': attribute type 39 has an invalid length. [ 1309.847110][T24672] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1309.987998][T24681] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6161'. [ 1310.642502][T24703] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6172'. [ 1310.669019][T24703] bridge_slave_1: default FDB implementation only supports local addresses [ 1311.245941][T24715] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1312.348479][T24728] netlink: 'syz.0.6178': attribute type 6 has an invalid length. [ 1312.364196][T24728] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6178'. [ 1313.023327][T24760] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.6188'. [ 1313.145422][T24763] netlink: 'syz.4.6190': attribute type 10 has an invalid length. [ 1313.400215][T24773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6195'. [ 1314.391727][T24776] netlink: 'syz.4.6196': attribute type 6 has an invalid length. [ 1314.424792][T24776] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6196'. [ 1315.777581][T24814] netlink: 'syz.1.6208': attribute type 10 has an invalid length. [ 1315.898456][T24817] netlink: 'syz.4.6212': attribute type 4 has an invalid length. [ 1316.079791][T24821] netlink: 'syz.3.6213': attribute type 10 has an invalid length. [ 1316.220689][T24821] wg1: entered promiscuous mode [ 1316.228198][T24821] wg1: entered allmulticast mode [ 1316.233576][T24821] team0: Device wg1 is of different type [ 1317.102156][T24842] netlink: 'syz.3.6220': attribute type 22 has an invalid length. [ 1317.111475][T24842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6220'. [ 1317.283911][T24829] netlink: 'syz.1.6215': attribute type 6 has an invalid length. [ 1317.304972][T24829] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6215'. [ 1317.853178][T24850] netlink: 21 bytes leftover after parsing attributes in process `syz.3.6221'. [ 1317.867441][T24850] ksmbd: Unknown IPC event: 0, ignore. [ 1318.070704][T24857] FAULT_INJECTION: forcing a failure. [ 1318.070704][T24857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.085274][T24857] CPU: 0 PID: 24857 Comm: syz.1.6226 Not tainted syzkaller #0 [ 1318.092881][T24857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1318.102985][T24857] Call Trace: [ 1318.106313][T24857] [ 1318.109378][T24857] dump_stack_lvl+0x18c/0x250 [ 1318.114117][T24857] ? show_regs_print_info+0x20/0x20 [ 1318.119369][T24857] ? load_image+0x420/0x420 [ 1318.123930][T24857] ? __might_fault+0xaa/0x120 [ 1318.128657][T24857] ? __lock_acquire+0x7d80/0x7d80 [ 1318.134233][T24857] should_fail_ex+0x394/0x4c0 [ 1318.139060][T24857] _copy_from_user+0x2f/0xe0 [ 1318.143728][T24857] __sys_bpf+0x23e/0x890 [ 1318.148084][T24857] ? bpf_link_show_fdinfo+0x390/0x390 [ 1318.153533][T24857] ? lock_chain_count+0x20/0x20 [ 1318.158434][T24857] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1318.164497][T24857] __x64_sys_bpf+0x7c/0x90 [ 1318.168988][T24857] do_syscall_64+0x55/0xb0 [ 1318.173455][T24857] ? clear_bhb_loop+0x40/0x90 [ 1318.178182][T24857] ? clear_bhb_loop+0x40/0x90 [ 1318.182916][T24857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1318.188896][T24857] RIP: 0033:0x7f9c10b9ce59 [ 1318.193372][T24857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.213048][T24857] RSP: 002b:00007f9c119f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1318.221520][T24857] RAX: ffffffffffffffda RBX: 00007f9c10e15fa0 RCX: 00007f9c10b9ce59 [ 1318.229550][T24857] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 1318.237849][T24857] RBP: 00007f9c119f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.245967][T24857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.253988][T24857] R13: 00007f9c10e16038 R14: 00007f9c10e15fa0 R15: 00007fffbe505568 [ 1318.262029][T24857] [ 1318.527137][T24867] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6228'. [ 1319.514931][T24890] netlink: 'syz.0.6243': attribute type 10 has an invalid length. [ 1319.704894][T24894] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1319.742180][T24894] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1319.773641][T24894] bond0: (slave bond_slave_0): Releasing backup interface [ 1319.871444][T24894] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1319.996711][T24900] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6239'. [ 1320.170390][T24904] netlink: 'syz.3.6235': attribute type 6 has an invalid length. [ 1320.204171][T24904] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6235'. [ 1321.122391][T24926] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1321.918427][T24946] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6257'. [ 1322.879160][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 1322.935355][T24974] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1322.993572][T24974] bridge_slave_1: default FDB implementation only supports local addresses [ 1324.506510][T25029] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6286'. [ 1324.774842][T25036] netlink: 'syz.0.6289': attribute type 25 has an invalid length. [ 1325.231235][T25047] @0Ù: renamed from bond_slave_1 [ 1325.515000][T25047] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1326.753540][T25079] netlink: 'syz.0.6303': attribute type 10 has an invalid length. [ 1327.133525][T25102] netlink: 'syz.0.6313': attribute type 21 has an invalid length. [ 1327.141990][T25102] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6313'. [ 1327.475436][T25111] FAULT_INJECTION: forcing a failure. [ 1327.475436][T25111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1327.489343][T25111] CPU: 1 PID: 25111 Comm: syz.3.6316 Not tainted syzkaller #0 [ 1327.496891][T25111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1327.507004][T25111] Call Trace: [ 1327.510333][T25111] [ 1327.513306][T25111] dump_stack_lvl+0x18c/0x250 [ 1327.518048][T25111] ? verify_lock_unused+0x140/0x140 [ 1327.523308][T25111] ? show_regs_print_info+0x20/0x20 [ 1327.528571][T25111] ? load_image+0x420/0x420 [ 1327.533131][T25111] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1327.539260][T25111] ? mark_lock+0x94/0x320 [ 1327.543691][T25111] should_fail_ex+0x394/0x4c0 [ 1327.548428][T25111] prepare_alloc_pages+0x1e1/0x5b0 [ 1327.553581][T25111] __alloc_pages+0x134/0x460 [ 1327.558213][T25111] ? zone_statistics+0x170/0x170 [ 1327.563196][T25111] ? rcu_is_watching+0x15/0xb0 [ 1327.568001][T25111] ? __mutex_lock+0x30d/0xc80 [ 1327.572719][T25111] alloc_pages_node+0x10e/0x170 [ 1327.577611][T25111] ? skb_splice_from_iter+0xba0/0xba0 [ 1327.583027][T25111] ? __local_bh_disable_ip+0x108/0x1a0 [ 1327.588520][T25111] __napi_alloc_skb+0x36d/0x540 [ 1327.593398][T25111] ? napi_get_frags+0x20/0x150 [ 1327.598204][T25111] napi_get_frags+0x6c/0x150 [ 1327.602852][T25111] ? tun_get_user+0x80d/0x3d40 [ 1327.607679][T25111] tun_get_user+0x826/0x3d40 [ 1327.612334][T25111] ? aa_file_perm+0x11b/0xee0 [ 1327.617072][T25111] ? rcu_read_unlock+0xa0/0xa0 [ 1327.621888][T25111] ? tun_get+0x1c/0x2e0 [ 1327.626083][T25111] ? __lock_acquire+0x7d80/0x7d80 [ 1327.631148][T25111] ? tun_get+0x1c/0x2e0 [ 1327.635342][T25111] tun_chr_write_iter+0x119/0x200 [ 1327.640409][T25111] vfs_write+0x474/0x9a0 [ 1327.644691][T25111] ? file_end_write+0x250/0x250 [ 1327.649619][T25111] ? __fget_files+0x3fc/0x460 [ 1327.654353][T25111] ? __fdget_pos+0x1d8/0x330 [ 1327.659065][T25111] ? ksys_write+0x74/0x260 [ 1327.663534][T25111] ksys_write+0x151/0x260 [ 1327.667910][T25111] ? __ia32_sys_read+0x90/0x90 [ 1327.672718][T25111] ? lockdep_hardirqs_on+0x98/0x150 [ 1327.677959][T25111] do_syscall_64+0x55/0xb0 [ 1327.682413][T25111] ? clear_bhb_loop+0x40/0x90 [ 1327.687140][T25111] ? clear_bhb_loop+0x40/0x90 [ 1327.691851][T25111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1327.697778][T25111] RIP: 0033:0x7f5b3f99ce59 [ 1327.702223][T25111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.721889][T25111] RSP: 002b:00007f5b40783028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1327.730374][T25111] RAX: ffffffffffffffda RBX: 00007f5b3fc16090 RCX: 00007f5b3f99ce59 [ 1327.738379][T25111] RDX: 0000000000000036 RSI: 0000200000000440 RDI: 000000000000002c [ 1327.746464][T25111] RBP: 00007f5b40783090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.754466][T25111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.762464][T25111] R13: 00007f5b3fc16128 R14: 00007f5b3fc16090 R15: 00007ffd18b28db8 [ 1327.770478][T25111] [ 1327.902261][T25108] syzkaller0: entered promiscuous mode [ 1327.908557][T25108] syzkaller0: entered allmulticast mode [ 1331.426105][T25133] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6322'. [ 1331.598621][T25119] syzkaller0: entered promiscuous mode [ 1331.611383][T25119] syzkaller0: entered allmulticast mode [ 1331.662511][T25131] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6321'. [ 1331.818657][T25133] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1334.471652][T25157] @ÿ: renamed from bond_slave_0 [ 1334.502488][T25157] netlink: 149044 bytes leftover after parsing attributes in process `syz.4.6331'. [ 1334.669714][T25163] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6333'. [ 1337.454009][T19740] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1337.554341][T25208] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6351'. [ 1338.708485][T25249] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6366'. [ 1338.733182][T25249] bridge_slave_1: default FDB implementation only supports local addresses [ 1339.262195][T25270] netlink: 'syz.0.6374': attribute type 29 has an invalid length. [ 1339.272060][T25270] netlink: 'syz.0.6374': attribute type 29 has an invalid length. [ 1339.311566][T25270] netlink: 'syz.0.6374': attribute type 29 has an invalid length. [ 1339.342343][T25270] netlink: 'syz.0.6374': attribute type 29 has an invalid length. [ 1339.464095][T25276] netlink: 'syz.0.6374': attribute type 28 has an invalid length. [ 1339.499878][T25276] netlink: 'syz.0.6374': attribute type 29 has an invalid length. [ 1339.514218][T25276] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6374'. [ 1341.120494][T25317] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6389'. [ 1342.686834][T25334] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6396'. [ 1342.852912][T25343] netlink: 'syz.0.6398': attribute type 10 has an invalid length. [ 1342.883969][T25343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1343.056228][T25350] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6402'. [ 1343.428792][T25358] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6405'. [ 1343.637633][T25372] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6410'. [ 1343.647849][T25372] openvswitch: netlink: Flow key attribute not present in set flow. [ 1344.602079][T25391] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6418'. [ 1344.664694][T25400] netlink: 'syz.1.6421': attribute type 3 has an invalid length. [ 1344.672516][T25400] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6421'. [ 1344.857844][T25404] netlink: 'syz.0.6423': attribute type 4 has an invalid length. [ 1344.940940][T25407] IPv6: Can't replace route, no match found [ 1345.327162][T25420] netlink: 'syz.0.6427': attribute type 10 has an invalid length. [ 1345.370249][T25427] netlink: 'syz.4.6432': attribute type 22 has an invalid length. [ 1345.388336][T25427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6432'. [ 1345.640440][T25429] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6433'. [ 1345.979981][T25442] FAULT_INJECTION: forcing a failure. [ 1345.979981][T25442] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.016282][T25442] CPU: 0 PID: 25442 Comm: syz.1.6438 Not tainted syzkaller #0 [ 1346.024104][T25442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1346.034217][T25442] Call Trace: [ 1346.037547][T25442] [ 1346.040567][T25442] dump_stack_lvl+0x18c/0x250 [ 1346.045302][T25442] ? show_regs_print_info+0x20/0x20 [ 1346.050546][T25442] ? load_image+0x420/0x420 [ 1346.055171][T25442] ? __might_sleep+0xe0/0xe0 [ 1346.059793][T25442] ? __lock_acquire+0x7d80/0x7d80 [ 1346.064859][T25442] should_fail_ex+0x394/0x4c0 [ 1346.069605][T25442] should_failslab+0x9/0x20 [ 1346.074175][T25442] slab_pre_alloc_hook+0x59/0x300 [ 1346.079356][T25442] ? __get_vm_area_node+0x125/0x370 [ 1346.084629][T25442] __kmem_cache_alloc_node+0x53/0x250 [ 1346.090049][T25442] ? __get_vm_area_node+0x125/0x370 [ 1346.095283][T25442] kmalloc_node_trace+0x26/0xe0 [ 1346.100178][T25442] __get_vm_area_node+0x125/0x370 [ 1346.105245][T25442] __vmalloc_node_range+0x36f/0x1320 [ 1346.110572][T25442] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1346.116147][T25442] ? mark_lock+0x94/0x320 [ 1346.120510][T25442] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1346.126284][T25442] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1346.132315][T25442] ? free_vm_area+0x50/0x50 [ 1346.136891][T25442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.143279][T25442] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1346.148901][T25442] __vmalloc+0x7a/0x90 [ 1346.153086][T25442] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1346.158771][T25442] bpf_prog_alloc_no_stats+0x46/0x430 [ 1346.164205][T25442] bpf_prog_alloc+0x3d/0x1a0 [ 1346.168845][T25442] bpf_prog_load+0x6b2/0x1610 [ 1346.173643][T25442] ? perf_trace_preemptirq_template+0x269/0x330 [ 1346.180026][T25442] ? map_freeze+0x420/0x420 [ 1346.184657][T25442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.190887][T25442] ? lockdep_hardirqs_on+0x98/0x150 [ 1346.196133][T25442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.202336][T25442] ? __sys_bpf+0x254/0x890 [ 1346.206792][T25442] ? bpf_lsm_bpf+0x9/0x10 [ 1346.211205][T25442] ? security_bpf+0x7e/0xa0 [ 1346.215774][T25442] __sys_bpf+0x5ba/0x890 [ 1346.220056][T25442] ? bpf_link_show_fdinfo+0x390/0x390 [ 1346.225754][T25442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.232237][T25442] __x64_sys_bpf+0x7c/0x90 [ 1346.237226][T25442] do_syscall_64+0x55/0xb0 [ 1346.241689][T25442] ? clear_bhb_loop+0x40/0x90 [ 1346.246393][T25442] ? clear_bhb_loop+0x40/0x90 [ 1346.251103][T25442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1346.257038][T25442] RIP: 0033:0x7f9c10b9ce59 [ 1346.261489][T25442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.281221][T25442] RSP: 002b:00007f9c119f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1346.289674][T25442] RAX: ffffffffffffffda RBX: 00007f9c10e15fa0 RCX: 00007f9c10b9ce59 [ 1346.297674][T25442] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 1346.305678][T25442] RBP: 00007f9c119f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.313773][T25442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.322390][T25442] R13: 00007f9c10e16038 R14: 00007f9c10e15fa0 R15: 00007fffbe505568 [ 1346.330603][T25442] [ 1346.413978][T25442] syz.1.6438: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1346.452497][T25442] CPU: 0 PID: 25442 Comm: syz.1.6438 Not tainted syzkaller #0 [ 1346.460250][T25442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1346.470924][T25442] Call Trace: [ 1346.474355][T25442] [ 1346.477351][T25442] dump_stack_lvl+0x18c/0x250 [ 1346.482311][T25442] ? show_regs_print_info+0x20/0x20 [ 1346.487596][T25442] ? load_image+0x420/0x420 [ 1346.492174][T25442] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1346.498676][T25442] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1346.505341][T25442] warn_alloc+0x246/0x340 [ 1346.509745][T25442] ? __get_vm_area_node+0x125/0x370 [ 1346.515107][T25442] ? zone_watermark_ok_safe+0x230/0x230 [ 1346.520728][T25442] ? rcu_is_watching+0x15/0xb0 [ 1346.525566][T25442] ? __get_vm_area_node+0x356/0x370 [ 1346.530839][T25442] __vmalloc_node_range+0x394/0x1320 [ 1346.536273][T25442] ? mark_lock+0x94/0x320 [ 1346.540663][T25442] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1346.546473][T25442] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1346.552774][T25442] ? free_vm_area+0x50/0x50 [ 1346.557345][T25442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.563579][T25442] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1346.569195][T25442] __vmalloc+0x7a/0x90 [ 1346.573337][T25442] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 1346.578953][T25442] bpf_prog_alloc_no_stats+0x46/0x430 [ 1346.584395][T25442] bpf_prog_alloc+0x3d/0x1a0 [ 1346.589066][T25442] bpf_prog_load+0x6b2/0x1610 [ 1346.593810][T25442] ? perf_trace_preemptirq_template+0x269/0x330 [ 1346.600136][T25442] ? map_freeze+0x420/0x420 [ 1346.604712][T25442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.610952][T25442] ? lockdep_hardirqs_on+0x98/0x150 [ 1346.616221][T25442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.622457][T25442] ? __sys_bpf+0x254/0x890 [ 1346.627023][T25442] ? bpf_lsm_bpf+0x9/0x10 [ 1346.631427][T25442] ? security_bpf+0x7e/0xa0 [ 1346.636081][T25442] __sys_bpf+0x5ba/0x890 [ 1346.640391][T25442] ? bpf_link_show_fdinfo+0x390/0x390 [ 1346.645928][T25442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1346.652174][T25442] __x64_sys_bpf+0x7c/0x90 [ 1346.656662][T25442] do_syscall_64+0x55/0xb0 [ 1346.661229][T25442] ? clear_bhb_loop+0x40/0x90 [ 1346.665975][T25442] ? clear_bhb_loop+0x40/0x90 [ 1346.670708][T25442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1346.677024][T25442] RIP: 0033:0x7f9c10b9ce59 [ 1346.681501][T25442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.701432][T25442] RSP: 002b:00007f9c119f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1346.709919][T25442] RAX: ffffffffffffffda RBX: 00007f9c10e15fa0 RCX: 00007f9c10b9ce59 [ 1346.717981][T25442] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 1346.726007][T25442] RBP: 00007f9c119f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.734132][T25442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.742175][T25442] R13: 00007f9c10e16038 R14: 00007f9c10e15fa0 R15: 00007fffbe505568 [ 1346.750226][T25442] [ 1346.771124][T25442] Mem-Info: [ 1346.774751][T25442] active_anon:30247 inactive_anon:0 isolated_anon:0 [ 1346.774751][T25442] active_file:19156 inactive_file:40436 isolated_file:0 [ 1346.774751][T25442] unevictable:768 dirty:28 writeback:0 [ 1346.774751][T25442] slab_reclaimable:10662 slab_unreclaimable:94089 [ 1346.774751][T25442] mapped:34661 shmem:15272 pagetables:663 [ 1346.774751][T25442] sec_pagetables:0 bounce:0 [ 1346.774751][T25442] kernel_misc_reclaimable:0 [ 1346.774751][T25442] free:1316540 free_pcp:12288 free_cma:0 [ 1346.884173][T25442] Node 0 active_anon:123888kB inactive_anon:0kB active_file:76624kB inactive_file:161540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138644kB dirty:112kB writeback:0kB shmem:62552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11008kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no [ 1346.948347][T25442] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1347.024381][T25442] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.075046][T25442] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1347.084615][T25442] Node 0 DMA32 free:1352352kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:128284kB inactive_anon:0kB active_file:76624kB inactive_file:160720kB unevictable:1536kB writepending:336kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:26856kB local_pcp:6984kB free_cma:0kB [ 1347.171898][T25442] lowmem_reserve[]: 0 0 0 0 0 [ 1347.183615][T25442] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1347.217087][T25442] lowmem_reserve[]: 0 0 0 0 0 [ 1347.221996][T25442] Node 1 Normal free:3891204kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22512kB local_pcp:12608kB free_cma:0kB [ 1347.260455][T25442] lowmem_reserve[]: 0 0 0 0 0 [ 1347.266905][T25442] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1347.298128][T25442] Node 0 DMA32: 1070*4kB (UE) 1196*8kB (UME) 829*16kB (UE) 354*32kB (UME) 318*64kB (UME) 1226*128kB (UME) 432*256kB (UM) 207*512kB (UME) 164*1024kB (UME) 13*2048kB (ME) 177*4096kB (UM) = 1351848kB [ 1347.344347][T25442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1347.374905][T25442] Node 1 Normal: 95*4kB (UE) 49*8kB (UME) 46*16kB (UME) 39*32kB (UME) 19*64kB (UE) 3*128kB (UM) 1*256kB (U) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3891204kB [ 1347.398166][T25442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1347.409853][T25442] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1347.429918][T25442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1347.459341][T25442] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1347.478212][T25442] 74980 total pagecache pages [ 1347.483100][T25442] 0 pages in swap cache [ 1347.493908][T25442] Free swap = 124996kB [ 1347.498144][T25442] Total swap = 124996kB [ 1347.502345][T25442] 2097051 pages RAM [ 1347.513005][T25442] 0 pages HighMem/MovableOnly [ 1347.519805][T25442] 416931 pages reserved [ 1347.529391][T25442] 0 pages cma reserved [ 1347.832436][T25464] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6445'. [ 1348.461912][T25489] netlink: 'syz.0.6452': attribute type 10 has an invalid length. [ 1348.630659][T25491] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1348.666488][T25491] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1348.900144][T25494] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1349.706770][T25510] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6461'. [ 1349.776916][T25510] netlink: 'syz.3.6461': attribute type 28 has an invalid length. [ 1349.824947][T25510] netlink: 'syz.3.6461': attribute type 29 has an invalid length. [ 1349.884966][T25510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6461'. [ 1350.593960][T25533] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6470'. [ 1350.814850][T25547] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 1351.441721][T25565] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6481'. [ 1351.466769][T25565] bridge_slave_1: default FDB implementation only supports local addresses [ 1351.960966][T25574] netlink: 13822 bytes leftover after parsing attributes in process `syz.1.6484'. [ 1352.619393][T25588] netlink: 'syz.1.6490': attribute type 4 has an invalid length. [ 1352.655692][T25588] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6490'. [ 1369.434491][T19743] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1427.396246][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.402785][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1457.303842][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1457.310590][ C1] rcu: 1-....: (10499 ticks this GP) idle=b5cc/1/0x4000000000000000 softirq=123243/123243 fqs=5249 [ 1457.322644][ C1] rcu: hardirqs softirqs csw/system [ 1457.329082][ C1] rcu: number: 1358653 0 0 [ 1457.335518][ C1] rcu: cputime: 16798 35681 65 ==> 52500(ms) [ 1457.343421][ C1] rcu: (t=10502 jiffies g=190789 q=881 ncpus=2) [ 1457.349813][ C1] CPU: 1 PID: 25580 Comm: syz.0.6486 Not tainted syzkaller #0 [ 1457.357384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1457.367465][ C1] RIP: 0010:unwind_next_frame+0xe68/0x2990 [ 1457.373400][ C1] Code: fe b7 4b 00 49 83 fe 04 0f 84 cb 01 00 00 41 83 fe 03 0f 84 e3 00 00 00 41 83 fe 02 0f 85 8e 02 00 00 48 89 9c 24 80 00 00 00 <4c> 89 64 24 38 49 8d 7d 08 48 89 f8 48 c1 e8 03 48 89 44 24 70 42 [ 1457.393182][ C1] RSP: 0018:ffffc900001f02f8 EFLAGS: 00000246 [ 1457.399325][ C1] RAX: 0000000000000003 RBX: ffffffff8f195721 RCX: 0000000000000003 [ 1457.407318][ C1] RDX: ffffffff813b3212 RSI: ffffffff8cfa0610 RDI: 0000000000000002 [ 1457.415309][ C1] RBP: ffffc900001f0818 R08: ffff88805cc20000 R09: 0000000000000003 [ 1457.423308][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8f195720 [ 1457.431297][ C1] R13: ffffc900001f03c8 R14: 0000000000000002 R15: dffffc0000000000 [ 1457.439287][ C1] FS: 00007ff97aad16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1457.448232][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1457.454834][ C1] CR2: 0000001b32d23ffc CR3: 0000000025538000 CR4: 00000000003506e0 [ 1457.462827][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 1457.470804][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1457.478783][ C1] Call Trace: [ 1457.482137][ C1] [ 1457.485036][ C1] ? kmem_cache_free+0xf8/0x290 [ 1457.489976][ C1] ? kmem_cache_free+0xf8/0x290 [ 1457.494868][ C1] ? stack_trace_save+0x100/0x100 [ 1457.499926][ C1] arch_stack_walk+0x144/0x190 [ 1457.504704][ C1] ? kmem_cache_free+0xf8/0x290 [ 1457.509591][ C1] stack_trace_save+0xaa/0x100 [ 1457.514365][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1457.519516][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1457.525535][ C1] kasan_set_track+0x4e/0x70 [ 1457.530151][ C1] ? kasan_set_track+0x4e/0x70 [ 1457.534928][ C1] ? kasan_save_free_info+0x28/0x40 [ 1457.540245][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 1457.545539][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1457.551177][ C1] ? kmem_cache_free+0xf8/0x290 [ 1457.556078][ C1] ? percpu_ref_put+0x12/0x100 [ 1457.560851][ C1] ? kmem_cache_free+0xf8/0x290 [ 1457.565804][ C1] kasan_save_free_info+0x28/0x40 [ 1457.570843][ C1] ____kasan_slab_free+0x126/0x1f0 [ 1457.575997][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1457.581495][ C1] ? inet_put_port+0x688/0x780 [ 1457.586335][ C1] kmem_cache_free+0xf8/0x290 [ 1457.591044][ C1] inet_put_port+0x688/0x780 [ 1457.595652][ C1] ? inet_put_port+0x2b/0x780 [ 1457.600347][ C1] tcp_set_state+0x500/0x6c0 [ 1457.604971][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1457.611287][ C1] ? tcp_sendmsg_fastopen+0x5f0/0x5f0 [ 1457.616669][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1457.622871][ C1] ? __asan_memset+0x22/0x40 [ 1457.627476][ C1] tcp_done+0x107/0x330 [ 1457.631645][ C1] tcp_done_with_error+0x4b/0xc0 [ 1457.636595][ C1] tcp_retransmit_timer+0x1c94/0x3030 [ 1457.641986][ C1] ? tcp_delack_timer_handler+0x4c0/0x4c0 [ 1457.647738][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1457.654188][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1457.659442][ C1] ? read_tsc+0x9/0x20 [ 1457.663540][ C1] ? ktime_get+0x24b/0x280 [ 1457.667994][ C1] ? tcp_write_timer_handler+0x2f4/0x910 [ 1457.673650][ C1] ? tcp_write_timer+0x122/0x280 [ 1457.678604][ C1] tcp_write_timer+0x12a/0x280 [ 1457.683385][ C1] call_timer_fn+0x189/0x540 [ 1457.688012][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 1457.693224][ C1] ? call_timer_fn+0xd2/0x540 [ 1457.697912][ C1] ? __run_timers+0x810/0x810 [ 1457.702605][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 1457.707816][ C1] __run_timers+0x570/0x810 [ 1457.712343][ C1] ? detach_timer+0x2b0/0x2b0 [ 1457.717042][ C1] run_timer_softirq+0x67/0xf0 [ 1457.721819][ C1] handle_softirqs+0x27d/0x820 [ 1457.726619][ C1] ? read_tsc+0x9/0x20 [ 1457.730704][ C1] ? ktime_get+0x24b/0x280 [ 1457.735134][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1457.740346][ C1] ? do_softirq+0x1a0/0x1a0 [ 1457.744862][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1457.750096][ C1] __irq_exit_rcu+0xd3/0x190 [ 1457.754695][ C1] ? irq_exit_rcu+0x20/0x20 [ 1457.759228][ C1] irq_exit_rcu+0x9/0x20 [ 1457.763480][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1457.769140][ C1] [ 1457.772113][ C1] [ 1457.775111][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1457.781120][ C1] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 1457.787048][ C1] Code: 75 11 e8 2c 00 0b 00 48 85 db 75 16 e8 22 00 0b 00 eb 15 e8 1b 00 0b 00 e8 06 f3 07 09 48 85 db 74 ea e8 0c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 1457.806685][ C1] RSP: 0018:ffffc9000c66fa00 EFLAGS: 00000246 [ 1457.812775][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 1457.820843][ C1] RDX: ffffc9000cfbf000 RSI: 0000000000005579 RDI: 000000000000557a [ 1457.828920][ C1] RBP: ffffc9000c66fad0 R08: ffffffff911bc5ff R09: 1ffffffff22378bf [ 1457.836903][ C1] R10: dffffc0000000000 R11: fffffbfff22378c0 R12: 1ffff920018cdf44 [ 1457.844884][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920018cdf65 [ 1457.852884][ C1] ? event_function+0x300/0x300 [ 1457.857797][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 1457.863528][ C1] ? percpu_counter_add_batch+0x252/0x2a0 [ 1457.869303][ C1] ? percpu_counter_add_batch+0x25c/0x2a0 [ 1457.875032][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 1457.880684][ C1] smp_call_function_single+0x36d/0x5a0 [ 1457.886239][ C1] ? event_function+0x300/0x300 [ 1457.891102][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 1457.897268][ C1] ? event_function+0x300/0x300 [ 1457.902148][ C1] perf_install_in_context+0x5bb/0x920 [ 1457.907622][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 1457.912762][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 1457.918752][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 1457.923962][ C1] ? ihold+0x44/0x50 [ 1457.927891][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 1457.933111][ C1] ? perf_event__header_size+0x165/0x220 [ 1457.938757][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 1457.944492][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1457.950140][ C1] ? lock_chain_count+0x20/0x20 [ 1457.954994][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1457.960984][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1457.966192][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1457.971832][ C1] do_syscall_64+0x55/0xb0 [ 1457.976257][ C1] ? clear_bhb_loop+0x40/0x90 [ 1457.980962][ C1] ? clear_bhb_loop+0x40/0x90 [ 1457.986099][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1457.992109][ C1] RIP: 0033:0x7ff979b9ce59 [ 1457.996544][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.016171][ C1] RSP: 002b:00007ff97aad1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1458.024733][ C1] RAX: ffffffffffffffda RBX: 00007ff979e15fa0 RCX: 00007ff979b9ce59 [ 1458.032747][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 1458.040733][ C1] RBP: 00007ff979c32e6f R08: 0000000000000002 R09: 0000000000000000 [ 1458.048713][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1458.056711][ C1] R13: 00007ff979e16038 R14: 00007ff979e15fa0 R15: 00007ffeed7049e8 [ 1458.064709][ C1]