last executing test programs: 8.425959768s ago: executing program 0 (id=6114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1300000004000000040000000200000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="126a9f00000000000000000000000a1efba4cd150f9e000000000000000000"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x4}, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x894a, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000010140)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffff220d08596a", 0x14}], 0x1}, 0x4080) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) close(r5) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22ffe7) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x600}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x27, 0xe, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETVNETLE(r5, 0x4008744b, &(0x7f0000000180)) 7.516082706s ago: executing program 3 (id=6118): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x1d, 0x0, 0x2}, {0x2, 0x0, 0x1, 0xfffffffe}]}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000120081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 7.4330879s ago: executing program 0 (id=6120): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x3, 0x10000, 0x5}, {0x10000002, 0x0, 0x0, 0x9}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0xfffffffffffffd4e, 0x0}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x32, 0xffffffffffffffff, 0x40}, 0x2c7d06707e8423b4) 6.597855923s ago: executing program 3 (id=6124): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x80000002009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x42d}, {&(0x7f0000001b80)="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", 0x614}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @loopback}}}], 0x20}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000cd399136987cd3a413df0cf9e5141a1ecaf4e4ccbcc031e71f67aa9e3a51c6fa271ff6f974a2b333c5adda46d153db3775ff4a144b56336afd8fe5908fc3be7c636379f1ad5423c68d5b389de9413a8f48693fbafaa3733025775b4269c84333c7b617531486cb39f7ad538613bbde5bffb9e0eabd69ea02ac124d5ff93dd6caf3d2ff9ea14e4d68708e09e3e6e778afd679afeac0b48b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, 0x0, 0x0) 6.357319816s ago: executing program 0 (id=6126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1843, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f00000001c0)={'full', 0x20, 0x7, 0x20, 0xfffda}, 0x2f) close(r4) r5 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1}, 0x61) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) 3.253170539s ago: executing program 2 (id=6128): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0xa, 0x61}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f0000000180)='%-010d \x00'}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000440)=@framed, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa081, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa081, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r1, 0x24, 0x1, 0xffff8000, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0]}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r6, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x8f, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da275", 0x5dc}, 0x50) 2.619134972s ago: executing program 1 (id=6129): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="18a6bf9d43a06442191d274cf6bb352d695956df3b903d619c7965180cefc6c80335204fa3d3c3461b67108310f143068ec0ba03afa8ade5afcff09eb90a57d8e746654e6e3a568af5516c3243bf0071f2f3446570670b8b62d940de10f758265341c6afd2cd78db7989bc75"], 0xfe33) 2.536276117s ago: executing program 1 (id=6130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffe0001}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000380)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 2.517581037s ago: executing program 0 (id=6131): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400000000000000, 0x10000003fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f72ab25399cd956c0", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x10122) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="000c0000000000000034ada48f4464739800b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8005c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc69c, 0x0, @perf_config_ext={0x8000000000000, 0x9}, 0x1208, 0xb, 0x0, 0x9, 0x0, 0x8010001}, r3, 0xd, 0xffffffffffffffff, 0x0) close(r4) 2.427001572s ago: executing program 3 (id=6132): ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)) (async) r0 = gettid() r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7f, 0xc, 0xf7, 0x3, 0x0, 0x1, 0x80000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_config_ext={0xd, 0xfffffffffffffffa}, 0x0, 0x6, 0x1, 0x9, 0x3, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'geneve1\x00'}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x559a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x80, 0x3, 0x9, 0x200, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x4}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x8, 0xf, 0xff, 0x8, 0x0, 0x80, 0x200, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x34, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x208, 0x7, 0x3ff, 0x0, 0x10000, 0x1, 0x9, 0x0, 0x4fa, 0x0, 0xffffffffffffffff}, r0, 0x1, r4, 0x2) (async) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x2, 0xd, 0x55, 0x0, 0x7, 0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x8}, 0x0, 0xff, 0x5, 0x6, 0x6, 0xfffffff4, 0x100, 0x0, 0x400, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, r5, 0x0, 0x3, &(0x7f0000000400)='[}\x00', 0x0}, 0x30) (async) r7 = perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x7f, 0x0, 0xa, 0x4, 0x0, 0x6, 0x10, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000480), 0x9}, 0xc004, 0xa5, 0xffffffff, 0x2, 0x6, 0x3, 0x5, 0x0, 0x2, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={r6}, 0x4) (async) syz_open_procfs$namespace(r0, &(0x7f0000000580)='ns/pid\x00') (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000640)='cpu.pressure\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x13) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x3, 0x7, 0x1000, 0x2120, r3, 0x8001, '\x00', 0x0, r4, 0x5, 0x2, 0x2, 0x8}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000a00)={&(0x7f00000006c0)="e838e0349b2eb9b00c635f7041a602a2ad792955f5ed167adffc47973679888657b26e396407d7f8a85678066e8ea0245585339c921dfd7e3e49b14b4b0006c5fa86ad7599c8539916e9e2739c15d69da9cafa1f4c56e8e8f876706ad0331068e2323da55947eb389e9e0b45991df1dd1703109c10d03c43b0913e0a7b9ee16a721d856bcdfbdfeb8cafa4be34af5aed2560fbb63fea65bb73a04c5d55a7cfea64d93c9fd2a35ecbf2b76aca194b631d906794", &(0x7f0000000780)=""/81, &(0x7f0000000800)="97ccb6221ab6531410ea35528025b09b1ff2911f76cee1580af114a9cc93fb711f984be6746fe5fab462f030ba04defaa5a9b64b3d6def8af62191caf0c22e2d430c346239fa044395ac7552ac37fd8c06", &(0x7f0000000880)="7c94bf46126bca9b20d189a6697db9edc47863f92312746e32080cb79b9175cce5937d42572b44cecbc98921fa6d9efc11ccb32732e0dd94c6f0477f12ac65ac4736f68833fa43a15f47035dcd62fa4199df5508b5363c0cb43ad897cc5d503a09a88d832407a535c1c7349622602250bade9dcd3e61bdbc3a30fc6652ea1416b173aea1b17cdecd32c9f96ef834deb2068bb135d305e1ef05e8f387aad5376052e2f5cb8394e95c1890457ea65f2ba878b0cd3e85a50f7bc057eaf36767f2aff45b9095e10c50d05bfa7eb7ac", 0x80000000, r12, 0x4}, 0x38) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000a40)='[}\x00') (async) r13 = openat$cgroup_type(r4, &(0x7f0000000a80), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00'}, 0x18) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000b40), 0x4) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', r3}, 0x18) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x3, &(0x7f0000000c00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000c40)='GPL\x00', 0x3af, 0x7, &(0x7f0000000c80)=""/7, 0x41100, 0x29, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000cc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x9, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d40)=[r3, r4, r3], &(0x7f0000000d80)=[{0x2, 0x3, 0xa, 0x4}, {0x3, 0x1, 0x7, 0x3}, {0x4, 0x3, 0xc, 0x5}, {0x5, 0x3, 0x9, 0x4}], 0x10, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f80)={r12, &(0x7f0000000e80)="5eb0f87de75145ac3cb226362306320cdef010b46a5a66468894053f007f2af9190c15a8b67f613a1e117bd75fe8b73dffbd2aa21e571de0b822e22df757e597da78e14398665b8adc4ab0d033f4457a23b56f10b7ea26f7f5683373aecdb72f19367276047c79e699e9bb2c3416ed64c7e2a130c3b19bf1f2e1507e0601e6da51315599e2552c9832ca3a3fe12feca6ba3ed67af72d1d8b93b8e37c168814933854576cf80e47717a1b25cdbba9", &(0x7f0000000f40)=""/42}, 0x20) (async) sendmsg$unix(r12, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000fc0)}, {&(0x7f0000001000)="fe009720c7bea6ff570ffacb9443107393f6cb7a8fb7ff7dc82fdc374b2c796942680ac4032384428ae7eae8ecf2a661aedef6df9622358c8565115b11113e123f30489a5b6b696808f67b135c2c915a5a24e225e799a97ef981f89d5aa50b73734fa640a03ad8f48b07ec322fa7b5b1538fdb0975d7ab0b0c166cc24b29dea754007fd4c822c91128215254d375a079a18316fc5adbb9778ce95d088986c70121c91a917bc97df9a360e784d6be13cfde8f26a6a676794e786c096cf02a0d24d0b37e462b4f4b15964189fd9735bfaadf4cd7e2bee0025939fc72906276d2d0", 0xe0}], 0x2, &(0x7f0000001200)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r8, r14, r10, r12, r11]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r11, r11, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r7, 0xffffffffffffffff, r4, r13, r12]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xffffffffffffffff}}}], 0xc8, 0x8000}, 0x44) 2.239891852s ago: executing program 2 (id=6133): socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x4000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x28, 0x1, 0x0, 0xfffff030}, {0x6, 0x1, 0xc, 0x3}]}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'wlan0\x00', @broadcast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x3fef8000}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x2, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x1ff, 0x0, 0x0, 0x40000, 0xfffffffd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0xa, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB], 0xfe33) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r5, 0x4) close(0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000002c0)={0x0, 0x0}) socket$kcm(0x2b, 0x1, 0x0) 2.205521784s ago: executing program 3 (id=6134): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="1c0000006d0081044e81f782db1f4cb9041c1d0800fe007c05e8fe55", 0x1c}], 0x1}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x3, 0x1, 0xb, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x1, 0x7, 0x4, 0x7f, 0x8, 0xe, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x12023) (async) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8918, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c00)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @generic={0x7, 0x7, 0x3, 0xd151, 0x8912}, @jmp={0x5, 0x0, 0x8, 0x2, 0x9, 0xfffffffffffffff4, 0x10}, @tail_call, @jmp={0x5, 0x0, 0x6, 0x9, 0x2, 0x40}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0xbe, &(0x7f00000002c0)=""/190, 0x1f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0x8, 0x0, 0xfffffffb}, 0x10, 0x2649c, 0xffffffffffffffff, 0x2, &(0x7f0000002b80)=[0xffffffffffffffff], &(0x7f0000002bc0)=[{0x2, 0x3, 0x8, 0x2}, {0x1, 0x3, 0xb, 0x3}], 0x10, 0x409}, 0x94) (async) socket$kcm(0x10, 0x2, 0x4) (async) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="39000000150081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'bond_slave_1\x00', @random="0163d900"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000037000b63717a3c4a01d8b45b0808aa78", 0x14}], 0x1}, 0x0) 2.172050576s ago: executing program 1 (id=6135): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x3, 0x10000, 0x5}, {0x10000002, 0x0, 0x0, 0x9}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0xfffffffffffffd4e, 0x0}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x32, 0xffffffffffffffff, 0x40}, 0x2c7d06707e8423b4) 1.775825877s ago: executing program 3 (id=6136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @exit, @exit, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90324fc600d00020016000100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fffffff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x40}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffc8f}, 0x34044001) setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000740), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000002c0)={r2, 0x0, 0x82, 0x0, &(0x7f0000000180)="83ac0c8933ad5734e72911188fd3be6597b841471d8729102b101277630b31a2392784a51eb43944ef353a9de7a1312df2d7322f9faea73dd0fe8fb43fddd44ac10b72059ff61956cd9794c3faf5ad81d8670d76c0b29ee1c296f35b1e85a1033a7a381e7c33694968ce0fc7ead9106ca9cbcd1ba59ce2bdc01fb9e5c39af8055f15", 0x0, 0x6, 0x0, 0x28, 0x0, &(0x7f0000000240)="a98041146148ad5319af0b26fecf5b0f08bd5098d797d4a49bf89c8d84cd07100df0b46582478424", 0x0, 0x2, 0x0, 0x80000001}, 0x50) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x8, &(0x7f0000000000), 0x8) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x10006}]}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x439, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x4, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000180100002020702500000000002020207b0000ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x0, &(0x7f0000001480)="fff5fffb000000008fd864e888a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 1.727471519s ago: executing program 2 (id=6137): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x20130, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9e0, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0xd, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000016c0)={@cgroup=r6, r6, 0x2e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bf", @ANYRES32, @ANYBLOB="0000000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) openat$cgroup_ro(r7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@base={0x7, 0x4, 0x400, 0x84f7, 0x1010, r5, 0x80000000, '\x00', 0x0, r8, 0x1, 0x5, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x1, 0x8a, &(0x7f0000001840)=""/138, 0x41000, 0x48, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2ac82, r7, 0x0, &(0x7f00000019c0), 0x0, 0x10, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r10, r8, 0x0, r7}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r4}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x80000001, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x320) 1.71311054s ago: executing program 0 (id=6138): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x3, 0x23, 0x0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x4}, 0x14030, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, &(0x7f0000000100), 0x4) 1.585907597s ago: executing program 1 (id=6139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000d8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107f7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x4000, 0x36, 0x3, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe}, 0x100010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x23, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000"], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x19, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) r7 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r2}) setsockopt$sock_attach_bpf(r7, 0x29, 0x15, &(0x7f0000000100), 0x3d) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e0"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r8, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/251, 0x0, 0xfe, 0x60000000}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x28) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)=r0) 1.398441976s ago: executing program 3 (id=6140): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x1000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7030000240000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, 0x0) 1.355166318s ago: executing program 0 (id=6141): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x32, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x24000000) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x42, &(0x7f00000002c0), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9, r4}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r9}, 0xc) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.216764736s ago: executing program 2 (id=6142): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000640)='cpu&08\n&\f0\xed') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x7) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x7) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000340)="b9e403c6630d698cb8a00b04339c07f7c9768b", 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 895.938903ms ago: executing program 1 (id=6143): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x8, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x8c4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe8, 0x3, 0xd, 0xa, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_bp={0x0, 0x7}, 0x2, 0x1, 0x7, 0x4, 0x7f, 0x8, 0xe, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10182) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x2e]}}, 0x0, 0x1c, 0x0, 0xfffffffe}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) 548.119321ms ago: executing program 2 (id=6144): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf33}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r0}, 0x18) 48.418607ms ago: executing program 2 (id=6145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1871121100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x82, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000500), 0x0}, 0x20) (async) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e030f00fd", @ANYRES8], 0xd208) (async, rerun: 64) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0x3, [@empty, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}]}) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 0s ago: executing program 1 (id=6146): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xbd, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x40, 0xffffffffffffffff}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x9a) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r10}, 0x4) write$cgroup_subtree(r0, &(0x7f0000001480)=ANY=[], 0xc54c295c) kernel console output (not intermixed with test programs): ess `syz.3.4732'. [ 1036.053357][T23893] netlink: 'syz.0.4733': attribute type 21 has an invalid length. [ 1037.369289][T22829] Bluetooth: hci2: command tx timeout [ 1038.842718][ T9644] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.858452][T23894] netlink: 'syz.2.4731': attribute type 8 has an invalid length. [ 1038.897207][T23873] chnl_net:caif_netlink_parms(): no params data found [ 1039.214444][T23915] netlink: 'syz.0.4735': attribute type 15 has an invalid length. [ 1039.228574][T23915] netlink: 'syz.0.4735': attribute type 5 has an invalid length. [ 1039.237514][T23915] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4735'. [ 1039.269484][T23873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.276876][T23873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.285439][T23873] bridge_slave_0: entered allmulticast mode [ 1039.293750][T23873] bridge_slave_0: entered promiscuous mode [ 1039.333563][T23873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.349931][T23873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.367894][T23873] bridge_slave_1: entered allmulticast mode [ 1039.390950][T23873] bridge_slave_1: entered promiscuous mode [ 1039.449278][T22829] Bluetooth: hci2: command tx timeout [ 1039.472094][T23873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.485483][T23873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.750804][T23924] netlink: 'syz.3.4739': attribute type 9 has an invalid length. [ 1039.761758][T23924] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4739'. [ 1040.231959][ T9644] ip6gretap0 (unregistering): left allmulticast mode [ 1040.261349][ T9644] ip6gretap0 (unregistering): left promiscuous mode [ 1040.268224][ T9644] Ÿë: port 1(ip6gretap0) entered disabled state [ 1040.302007][T23873] team0: Port device team_slave_0 added [ 1040.321013][T23873] team0: Port device team_slave_1 added [ 1040.494284][T23873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.512057][T23873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.538673][T23873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.553089][T23873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.560772][T23873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.588892][T23873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.678290][T23934] netlink: 'syz.2.4741': attribute type 25 has an invalid length. [ 1040.706022][T23934] netlink: 'syz.2.4741': attribute type 9 has an invalid length. [ 1041.263883][T23873] hsr_slave_0: entered promiscuous mode [ 1041.288084][T23873] hsr_slave_1: entered promiscuous mode [ 1041.529364][T22829] Bluetooth: hci2: command tx timeout [ 1042.292003][T23965] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4748'. [ 1043.606286][T23981] netlink: 'syz.0.4750': attribute type 11 has an invalid length. [ 1043.609689][T22829] Bluetooth: hci2: command tx timeout [ 1043.635597][T23981] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.4750'. [ 1043.663207][T23982] netlink: 'syz.0.4750': attribute type 4 has an invalid length. [ 1043.676721][T23982] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.4750'. [ 1043.933178][T23986] netlink: 'syz.2.4752': attribute type 9 has an invalid length. [ 1043.999321][T23986] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4752'. [ 1044.221921][T23873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1044.317336][T23873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1044.328510][T23873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1044.378687][T23873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1044.668750][ T9644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1044.709369][ T9644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.778644][ T9644] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1044.819248][ T9644] batman_adv: batadv0: Removing interface: veth0_vlan [ 1044.871109][ T9644] bridge_slave_0: left promiscuous mode [ 1044.899576][ T9644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.935728][T24010] netlink: 'syz.0.4755': attribute type 29 has an invalid length. [ 1045.100394][ T9644] veth1_vlan: left promiscuous mode [ 1045.111296][ T9644] veth0_vlan: left promiscuous mode [ 1048.477024][T24010] netlink: 'syz.0.4755': attribute type 29 has an invalid length. [ 1048.554328][T24002] syzkaller0: entered promiscuous mode [ 1048.566706][T24002] syzkaller0: entered allmulticast mode [ 1051.110138][T23873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.177750][T23873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.261829][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.269009][ T9173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.451033][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.458321][ T9032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.492835][T24045] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1051.869862][T24064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1051.885610][T24064] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1052.103158][T23873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.179026][T23873] veth0_vlan: entered promiscuous mode [ 1052.206651][T23873] veth1_vlan: entered promiscuous mode [ 1052.280209][T23873] veth0_macvtap: entered promiscuous mode [ 1052.300289][T23873] veth1_macvtap: entered promiscuous mode [ 1052.323917][T23873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.337150][T23873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.353105][T23873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.364103][T23873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.374875][T23873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1052.386293][T23873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.409843][T23873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.463722][T23873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.485749][T23873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.499195][T23873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.523192][T23873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.549184][T23873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.563137][T23873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.597645][T23873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.642644][T23873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.651817][T23873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.677657][T23873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.686652][T23873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.906308][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.918119][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.273575][T20859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.293843][T20859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.351076][ T9032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.358981][ T9032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.567048][T24108] netlink: 'syz.1.4723': attribute type 10 has an invalid length. [ 1055.752036][T24108] team0: Device wg1 is of different type [ 1057.778385][T24141] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.4786'. [ 1057.995134][T24145] netlink: 'syz.0.4788': attribute type 4 has an invalid length. [ 1058.023726][T24145] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4788'. [ 1058.712582][T24159] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.4793'. [ 1058.733960][T24164] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4793'. [ 1058.764314][T24159] netlink: zone id is out of range [ 1059.100912][T24164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.107121][T24167] netlink: 'syz.1.4795': attribute type 29 has an invalid length. [ 1059.229787][T24164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.286551][T24164] bond0 (unregistering): Released all slaves [ 1059.301296][T24167] netlink: 'syz.1.4795': attribute type 29 has an invalid length. [ 1059.325594][T24170] netlink: 'syz.1.4795': attribute type 29 has an invalid length. [ 1059.431151][T24174] netlink: 'syz.1.4795': attribute type 29 has an invalid length. [ 1061.668075][T24178] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4798'. [ 1061.685798][T24178] bridge_slave_1: default FDB implementation only supports local addresses [ 1062.526608][T24226] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4807'. [ 1062.918012][T24225] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1062.953536][T24225] pim6reg0: ignored: set checksum disabled [ 1063.428421][T24242] sit0: entered allmulticast mode [ 1065.361766][ T5774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1065.379430][ T5774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1065.388474][ T5774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1065.398952][ T5774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1065.413422][ T5774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1065.421292][ T5774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1066.081284][T24278] lo: entered allmulticast mode [ 1066.110101][T24278] lo: entered promiscuous mode [ 1066.114955][T24278] lo: left allmulticast mode [ 1066.194959][T24260] chnl_net:caif_netlink_parms(): no params data found [ 1066.568165][T24260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.575972][T24260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.596108][T24260] bridge_slave_0: entered allmulticast mode [ 1066.604095][T24260] bridge_slave_0: entered promiscuous mode [ 1066.661298][T24260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.668793][T24260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.676805][T24260] bridge_slave_1: entered allmulticast mode [ 1066.693638][T24260] bridge_slave_1: entered promiscuous mode [ 1066.779653][T24260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.803663][T24260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.930288][T24260] team0: Port device team_slave_0 added [ 1066.960475][T24260] team0: Port device team_slave_1 added [ 1067.078657][T24260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.155728][T24260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.183507][T24260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.197295][T24260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.205388][T24260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.273058][T24260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.384985][T20853] ip6gretap0 (unregistering): left allmulticast mode [ 1067.395115][T20853] ip6gretap0 (unregistering): left promiscuous mode [ 1067.402544][T20853] : port 1(ip6gretap0) entered disabled state [ 1067.484554][ T5774] Bluetooth: hci4: command tx timeout [ 1068.198292][T24260] hsr_slave_0: entered promiscuous mode [ 1068.242016][T24260] hsr_slave_1: entered promiscuous mode [ 1068.251935][T24260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1068.263049][T24260] Cannot create hsr debugfs directory [ 1068.275836][T24306] netlink: 'syz.3.4827': attribute type 10 has an invalid length. [ 1068.385860][T24307] sit0: entered allmulticast mode [ 1068.946050][T24334] netlink: 'syz.2.4833': attribute type 10 has an invalid length. [ 1069.086662][T24334] team0: Port device geneve1 added [ 1069.540617][ T5774] Bluetooth: hci4: command tx timeout [ 1069.934058][T24347] netlink: 'syz.3.4835': attribute type 10 has an invalid length. [ 1069.962797][T24347] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.4835'. [ 1069.983141][T24349] netlink: 'syz.2.4836': attribute type 19 has an invalid length. [ 1070.651154][T24372] netlink: 'syz.1.4837': attribute type 9 has an invalid length. [ 1070.774095][T24372] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4837'. [ 1071.439562][T24366] netlink: 'syz.1.4837': attribute type 10 has an invalid length. [ 1071.535231][T24371] netlink: 'syz.2.4839': attribute type 10 has an invalid length. [ 1071.549510][T24371] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4839'. [ 1071.558460][T24371] hsr0: entered promiscuous mode [ 1071.564451][T24371] bridge0: port 3(hsr0) entered blocking state [ 1071.575628][T24371] bridge0: port 3(hsr0) entered disabled state [ 1071.583253][T24371] hsr0: entered allmulticast mode [ 1071.588335][T24371] hsr_slave_0: entered allmulticast mode [ 1071.594536][T24371] hsr_slave_1: entered allmulticast mode [ 1071.603247][T24371] bridge0: port 3(hsr0) entered blocking state [ 1071.609606][T24371] bridge0: port 3(hsr0) entered forwarding state [ 1071.625295][ T5774] Bluetooth: hci4: command tx timeout [ 1071.756595][T24377] netlink: 'syz.1.4837': attribute type 9 has an invalid length. [ 1071.767809][T24377] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4837'. [ 1071.916897][T24381] FAULT_INJECTION: forcing a failure. [ 1071.916897][T24381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.950325][T24381] CPU: 0 PID: 24381 Comm: syz.3.4841 Not tainted syzkaller #0 [ 1071.957889][T24381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1071.968085][T24381] Call Trace: [ 1071.971411][T24381] [ 1071.974393][T24381] dump_stack_lvl+0x18c/0x250 [ 1071.979149][T24381] ? show_regs_print_info+0x20/0x20 [ 1071.984507][T24381] ? load_image+0x420/0x420 [ 1071.989078][T24381] ? __might_fault+0xaa/0x120 [ 1071.993806][T24381] ? __lock_acquire+0x7d40/0x7d40 [ 1071.998910][T24381] should_fail_ex+0x39d/0x4d0 [ 1072.003641][T24381] _copy_from_user+0x2f/0xe0 [ 1072.008279][T24381] ___sys_recvmsg+0x176/0x590 [ 1072.013005][T24381] ? __sys_recvmsg+0x2a0/0x2a0 [ 1072.017831][T24381] ? ksys_write+0x1c4/0x260 [ 1072.022399][T24381] ? __fget_files+0x43d/0x4b0 [ 1072.027150][T24381] __x64_sys_recvmsg+0x20c/0x2e0 [ 1072.032226][T24381] ? ___sys_recvmsg+0x590/0x590 [ 1072.037144][T24381] ? lockdep_hardirqs_on+0x98/0x150 [ 1072.042394][T24381] do_syscall_64+0x55/0xa0 [ 1072.046861][T24381] ? clear_bhb_loop+0x40/0x90 [ 1072.051701][T24381] ? clear_bhb_loop+0x40/0x90 [ 1072.056434][T24381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1072.062432][T24381] RIP: 0033:0x7f44eeb9cdd9 [ 1072.066907][T24381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.086657][T24381] RSP: 002b:00007f44ef9a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1072.095119][T24381] RAX: ffffffffffffffda RBX: 00007f44eee15fa0 RCX: 00007f44eeb9cdd9 [ 1072.103126][T24381] RDX: 0000000000002102 RSI: 0000200000000300 RDI: 0000000000000003 [ 1072.111130][T24381] RBP: 00007f44ef9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.119132][T24381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.127137][T24381] R13: 00007f44eee16038 R14: 00007f44eee15fa0 R15: 00007ffe96e7fa48 [ 1072.135255][T24381] [ 1072.437918][T24260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1072.939630][T24260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1073.040291][T24260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1073.093634][T24396] netlink: 'syz.3.4844': attribute type 10 has an invalid length. [ 1073.193533][T24396] team0: Port device macvlan0 added [ 1073.290026][T24398] sit0: entered allmulticast mode [ 1073.480101][T24260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1073.699337][ T5774] Bluetooth: hci4: command tx timeout [ 1074.323114][T20853] hsr_slave_0: left promiscuous mode [ 1074.377522][T24432] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4849'. [ 1074.404635][T20853] hsr_slave_1: left promiscuous mode [ 1074.460827][T20853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.468438][T20853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.497240][T20853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.524258][T20853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.535960][T20853] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1074.554038][T20853] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1074.704778][T24438] FAULT_INJECTION: forcing a failure. [ 1074.704778][T24438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.725997][T24438] CPU: 1 PID: 24438 Comm: syz.1.4851 Not tainted syzkaller #0 [ 1074.733541][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1074.743627][T24438] Call Trace: [ 1074.746937][T24438] [ 1074.750024][T24438] dump_stack_lvl+0x18c/0x250 [ 1074.754876][T24438] ? show_regs_print_info+0x20/0x20 [ 1074.760196][T24438] ? load_image+0x420/0x420 [ 1074.764726][T24438] ? __might_fault+0xaa/0x120 [ 1074.769514][T24438] ? __lock_acquire+0x7d40/0x7d40 [ 1074.774741][T24438] should_fail_ex+0x39d/0x4d0 [ 1074.779449][T24438] _copy_to_iter+0x1ce/0x1120 [ 1074.784195][T24438] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1074.790196][T24438] ? iov_iter_init+0x1e0/0x1e0 [ 1074.795090][T24438] ? __virt_addr_valid+0x18c/0x540 [ 1074.800240][T24438] ? __virt_addr_valid+0x469/0x540 [ 1074.805393][T24438] ? __phys_addr_symbol+0x2f/0x70 [ 1074.810459][T24438] __skb_datagram_iter+0xdb/0x780 [ 1074.815631][T24438] ? skb_copy_datagram_iter+0x200/0x200 [ 1074.821225][T24438] skb_copy_datagram_iter+0xb1/0x200 [ 1074.826548][T24438] ipv6_recv_error+0x22a/0x1480 [ 1074.831448][T24438] ? ipv6_local_rxpmtu+0x5f0/0x5f0 [ 1074.836580][T24438] ? aa_sk_perm+0x970/0x970 [ 1074.841207][T24438] l2tp_ip6_recvmsg+0x25d/0xb30 [ 1074.846105][T24438] ? l2tp_ip6_sendmsg+0x1690/0x1690 [ 1074.851323][T24438] ? aa_sk_perm+0x83c/0x970 [ 1074.855853][T24438] ? verify_lock_unused+0x140/0x140 [ 1074.861115][T24438] sock_common_recvmsg+0xfa/0x190 [ 1074.866194][T24438] ? sock_common_getsockopt+0xb0/0xb0 [ 1074.871618][T24438] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1074.877021][T24438] ? security_socket_recvmsg+0x89/0xb0 [ 1074.882497][T24438] ? sock_common_getsockopt+0xb0/0xb0 [ 1074.887889][T24438] ____sys_recvmsg+0x2ce/0x5e0 [ 1074.892680][T24438] ? __sys_recvmsg_sock+0x50/0x50 [ 1074.897739][T24438] ? import_iovec+0x73/0xa0 [ 1074.902277][T24438] ___sys_recvmsg+0x216/0x590 [ 1074.907006][T24438] ? __sys_recvmsg+0x2a0/0x2a0 [ 1074.911793][T24438] ? ksys_write+0x1c4/0x260 [ 1074.916419][T24438] ? __fget_files+0x43d/0x4b0 [ 1074.921140][T24438] __x64_sys_recvmsg+0x20c/0x2e0 [ 1074.926189][T24438] ? ___sys_recvmsg+0x590/0x590 [ 1074.931084][T24438] ? lockdep_hardirqs_on+0x98/0x150 [ 1074.936399][T24438] do_syscall_64+0x55/0xa0 [ 1074.940828][T24438] ? clear_bhb_loop+0x40/0x90 [ 1074.945609][T24438] ? clear_bhb_loop+0x40/0x90 [ 1074.950313][T24438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1074.956311][T24438] RIP: 0033:0x7f27f8f9cdd9 [ 1074.960741][T24438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.980541][T24438] RSP: 002b:00007f27f9e6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1074.989099][T24438] RAX: ffffffffffffffda RBX: 00007f27f9215fa0 RCX: 00007f27f8f9cdd9 [ 1074.997107][T24438] RDX: 0000000000002102 RSI: 0000200000000300 RDI: 0000000000000003 [ 1075.005190][T24438] RBP: 00007f27f9e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.013177][T24438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.021178][T24438] R13: 00007f27f9216038 R14: 00007f27f9215fa0 R15: 00007ffc50d14d58 [ 1075.029266][T24438] [ 1075.147061][T20853] team0 (unregistering): Port device geneve1 removed [ 1075.180879][T20853] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1075.583827][T20853] team0 (unregistering): Port device team_slave_1 removed [ 1075.642019][T20853] team0 (unregistering): Port device C removed [ 1075.696997][T20853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.706145][T20853] bond_slave_1 (unregistering): left promiscuous mode [ 1075.762046][T20853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.772584][T20853] bond_slave_0 (unregistering): left promiscuous mode [ 1076.157073][T20853] bond0 (unregistering): Released all slaves [ 1076.210950][T24431] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4849'. [ 1076.223328][T24436] IPv6: NLM_F_CREATE should be specified when creating new route [ 1076.250817][T24448] netlink: 'syz.1.4855': attribute type 10 has an invalid length. [ 1076.278167][T24448] hsr_slave_0: left promiscuous mode [ 1076.290779][T24448] hsr_slave_1: left promiscuous mode [ 1076.471218][T24260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.565013][T24260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.606494][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.613737][ T9628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.694063][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.701610][ T9032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.479925][T24483] FAULT_INJECTION: forcing a failure. [ 1078.479925][T24483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.539596][T24483] CPU: 0 PID: 24483 Comm: syz.3.4860 Not tainted syzkaller #0 [ 1078.547149][T24483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.557417][T24483] Call Trace: [ 1078.560724][T24483] [ 1078.563687][T24483] dump_stack_lvl+0x18c/0x250 [ 1078.568586][T24483] ? show_regs_print_info+0x20/0x20 [ 1078.573852][T24483] ? load_image+0x420/0x420 [ 1078.578420][T24483] ? __lock_acquire+0x7d40/0x7d40 [ 1078.583670][T24483] ? snprintf+0xe9/0x140 [ 1078.587963][T24483] should_fail_ex+0x39d/0x4d0 [ 1078.592695][T24483] _copy_to_user+0x2f/0xa0 [ 1078.597355][T24483] simple_read_from_buffer+0xe7/0x150 [ 1078.602804][T24483] proc_fail_nth_read+0x1e8/0x260 [ 1078.607972][T24483] ? proc_fault_inject_write+0x360/0x360 [ 1078.613657][T24483] ? fsnotify_perm+0x271/0x5e0 [ 1078.618560][T24483] ? proc_fault_inject_write+0x360/0x360 [ 1078.624236][T24483] vfs_read+0x28b/0x970 [ 1078.628439][T24483] ? kernel_read+0x1e0/0x1e0 [ 1078.633159][T24483] ? __fget_files+0x28/0x4b0 [ 1078.637783][T24483] ? __fget_files+0x28/0x4b0 [ 1078.642411][T24483] ? __fget_files+0x43d/0x4b0 [ 1078.647144][T24483] ? __fdget_pos+0x2a3/0x330 [ 1078.651775][T24483] ? ksys_read+0x75/0x260 [ 1078.656145][T24483] ksys_read+0x150/0x260 [ 1078.660445][T24483] ? vfs_write+0x990/0x990 [ 1078.664972][T24483] ? lockdep_hardirqs_on+0x98/0x150 [ 1078.670366][T24483] do_syscall_64+0x55/0xa0 [ 1078.674897][T24483] ? clear_bhb_loop+0x40/0x90 [ 1078.679785][T24483] ? clear_bhb_loop+0x40/0x90 [ 1078.684502][T24483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.690787][T24483] RIP: 0033:0x7f44eeb5d60e [ 1078.695336][T24483] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1078.715506][T24483] RSP: 002b:00007f44ef9a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1078.723971][T24483] RAX: ffffffffffffffda RBX: 00007f44ef9a46c0 RCX: 00007f44eeb5d60e [ 1078.732057][T24483] RDX: 000000000000000f RSI: 00007f44ef9a40a0 RDI: 0000000000000005 [ 1078.740065][T24483] RBP: 00007f44ef9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.748071][T24483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.756075][T24483] R13: 00007f44eee16038 R14: 00007f44eee15fa0 R15: 00007ffe96e7fa48 [ 1078.764105][T24483] [ 1079.033983][T24260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.288648][T24488] netlink: 'syz.3.4861': attribute type 3 has an invalid length. [ 1079.297949][T24260] veth0_vlan: entered promiscuous mode [ 1079.346646][T24488] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4861'. [ 1079.386641][T24260] veth1_vlan: entered promiscuous mode [ 1079.421747][T24489] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4861'. [ 1079.505332][T24493] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.4861'. [ 1080.366931][T24503] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4863'. [ 1080.390330][T24260] veth0_macvtap: entered promiscuous mode [ 1080.447763][T24260] veth1_macvtap: entered promiscuous mode [ 1080.549050][T24260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.639151][T24260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.653705][T24260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.722825][T24260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.765660][T24260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.811866][T24260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.863898][T24260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.928568][T24260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.869193][T24260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.964137][T24260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.059252][T24260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.099358][T24260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.150827][T24260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.206373][T24260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.298643][T24260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.339144][T24260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.347923][T24260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.389246][T24260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.581486][ T9628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.610846][ T9628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.700488][ T9032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.708397][ T9032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.146013][T24562] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4875'. [ 1089.159465][T24562] ksmbd: Unknown IPC event: 0, ignore. [ 1089.521882][T24575] delete_channel: no stack [ 1089.533597][T24575] delete_channel: no stack [ 1093.575878][T24620] C: renamed from team_slave_0 (while UP) [ 1093.592588][T24620] netlink: 'syz.1.4892': attribute type 3 has an invalid length. [ 1093.600837][T24620] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4892'. [ 1093.610445][T24620] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1093.846207][T24644] C: renamed from team_slave_0 (while UP) [ 1093.867990][T24644] netlink: 'syz.3.4897': attribute type 1 has an invalid length. [ 1093.885804][T24644] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4897'. [ 1094.015665][T24655] netlink: 'syz.1.4899': attribute type 7 has an invalid length. [ 1094.030908][T24654] netlink: 'syz.2.4901': attribute type 3 has an invalid length. [ 1094.038989][T24655] netlink: 'syz.1.4899': attribute type 6 has an invalid length. [ 1094.046717][T24654] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.4901'. [ 1096.148576][T24651] delete_channel: no stack [ 1100.723346][T24751] IPv6: Can't replace route, no match found [ 1100.782621][T24753] IPv6: NLM_F_CREATE should be specified when creating new route [ 1100.911174][T24757] netlink: 'syz.1.4930': attribute type 2 has an invalid length. [ 1102.267916][T24792] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4938'. [ 1102.762737][T24804] netlink: 'syz.2.4941': attribute type 10 has an invalid length. [ 1104.667472][T24810] netlink: 'syz.3.4942': attribute type 10 has an invalid length. [ 1104.776243][T24821] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1104.833972][T24821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1105.869251][T24843] netlink: 'syz.2.4951': attribute type 10 has an invalid length. [ 1106.186267][T24854] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4954'. [ 1108.004530][T24886] netlink: 'syz.1.4961': attribute type 10 has an invalid length. [ 1108.039181][T24886] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4961'. [ 1108.170845][T22829] Bluetooth: hci1: command 0x0406 tx timeout [ 1108.454182][T20853] tipc: Subscription rejected, illegal request [ 1108.466684][T24890] netlink: 'syz.3.4963': attribute type 1 has an invalid length. [ 1108.475663][T24890] netlink: 'syz.3.4963': attribute type 4 has an invalid length. [ 1108.491198][T24890] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4963'. [ 1109.226743][T24922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4972'. [ 1109.247473][T24922] netlink: 'syz.2.4972': attribute type 10 has an invalid length. [ 1109.256920][T24922] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4972'. [ 1110.525784][T24933] netlink: 'syz.1.4974': attribute type 28 has an invalid length. [ 1110.928581][T24936] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4975'. [ 1112.203684][T24956] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4979'. [ 1112.219541][T24956] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1112.947838][T24963] netlink: 'syz.1.4982': attribute type 2 has an invalid length. [ 1112.966317][T24963] netlink: 'syz.1.4982': attribute type 8 has an invalid length. [ 1112.976528][T24963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4982'. [ 1113.008582][T24964] netlink: 'syz.1.4982': attribute type 2 has an invalid length. [ 1113.039467][T24964] netlink: 'syz.1.4982': attribute type 8 has an invalid length. [ 1113.048960][T24964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4982'. [ 1114.517727][T24983] netlink: 'syz.2.4987': attribute type 3 has an invalid length. [ 1114.574709][T24983] netlink: 'syz.2.4987': attribute type 6 has an invalid length. [ 1114.585101][T24983] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.4987'. [ 1114.797197][T24990] netlink: 'syz.3.4990': attribute type 10 has an invalid length. [ 1115.151455][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.151589][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.219968][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.255588][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.343651][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.376420][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.415864][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.449619][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.532459][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.598263][T24996] syz.3.4992[24996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1115.930613][T25019] netlink: 'syz.0.4999': attribute type 3 has an invalid length. [ 1115.989321][T25019] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4999'. [ 1116.045896][T25021] netlink: 'syz.2.4998': attribute type 10 has an invalid length. [ 1116.124678][T25021] veth1_macvtap: left promiscuous mode [ 1116.345051][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.351615][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.024270][T25039] netlink: 'syz.3.5006': attribute type 4 has an invalid length. [ 1117.082597][T25039] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5006'. [ 1117.345206][T25035] delete_channel: no stack [ 1117.722371][T25061] netlink: 'syz.1.5010': attribute type 9 has an invalid length. [ 1118.196753][T25061] netlink: 77620 bytes leftover after parsing attributes in process `syz.1.5010'. [ 1118.485087][T25063] netlink: 'syz.3.5012': attribute type 10 has an invalid length. [ 1118.897547][T25074] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5014'. [ 1119.693120][T25102] netlink: 'syz.3.5021': attribute type 21 has an invalid length. [ 1119.791215][T25102] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5021'. [ 1120.144861][T25092] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5020'. [ 1120.176773][T25092] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5020'. [ 1122.995445][T25168] netlink: 'syz.0.5040': attribute type 10 has an invalid length. [ 1123.358459][T25183] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.5039'. [ 1123.501038][T25168] veth1_macvtap: left promiscuous mode [ 1124.851270][T25182] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.5040'. [ 1125.075511][T25193] batadv0: left allmulticast mode [ 1125.085144][T25193] batadv0: left promiscuous mode [ 1125.099492][T25193] bridge0: port 3(batadv0) entered disabled state [ 1125.156093][T25193] bridge_slave_1: left allmulticast mode [ 1125.231677][T25193] bridge_slave_1: left promiscuous mode [ 1125.240761][T25193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.735408][T25193] bridge_slave_0: left allmulticast mode [ 1125.745003][T25193] bridge_slave_0: left promiscuous mode [ 1125.752413][T25193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.862074][T25201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5045'. [ 1126.034936][T25220] netlink: 'syz.2.5051': attribute type 21 has an invalid length. [ 1126.055258][T25220] netlink: 'syz.2.5051': attribute type 10 has an invalid length. [ 1126.066695][T25220] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1126.106224][T25219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1126.135555][T25221] netlink: 'syz.2.5051': attribute type 21 has an invalid length. [ 1126.219180][T25220] netlink: 'syz.2.5051': attribute type 10 has an invalid length. [ 1126.227431][T25220] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1126.609603][T25242] À: port 1(vlan0) entered blocking state [ 1126.638498][T25242] À: port 1(vlan0) entered disabled state [ 1126.656399][T25242] vlan0: entered allmulticast mode [ 1126.723358][T25242] veth0_vlan: entered allmulticast mode [ 1126.739329][T25242] vlan0: entered promiscuous mode [ 1128.754278][T25259] netlink: 'syz.1.5063': attribute type 29 has an invalid length. [ 1128.883155][T25259] netlink: 'syz.1.5063': attribute type 29 has an invalid length. [ 1129.205346][T25274] netlink: 'syz.2.5066': attribute type 39 has an invalid length. [ 1129.291716][T25261] netlink: 'syz.1.5063': attribute type 29 has an invalid length. [ 1131.211142][T25323] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1131.353424][T25325] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5080'. [ 1131.472999][T25328] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5081'. [ 1131.474744][T25327] C: renamed from team_slave_0 (while UP) [ 1131.635814][T25327] netlink: 'syz.0.5079': attribute type 3 has an invalid length. [ 1131.669474][T25327] netlink: 'syz.0.5079': attribute type 1 has an invalid length. [ 1131.678901][T25327] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5079'. [ 1131.688613][T25327] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1131.754707][T25328] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5081'. [ 1131.781315][T25326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5081'. [ 1131.966088][T25336] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5083'. [ 1132.237440][T25338] netlink: 'syz.3.5085': attribute type 10 has an invalid length. [ 1132.275860][T25338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5085'. [ 1132.766912][T25338] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1132.812895][T25338] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1132.856011][T25338] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1133.329895][T25356] netlink: 'syz.0.5090': attribute type 1 has an invalid length. [ 1133.349294][T25356] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5090'. [ 1133.642600][T25354] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5089'. [ 1135.522057][T25387] netlink: 'syz.3.5098': attribute type 10 has an invalid length. [ 1135.565068][T25387] netlink: 'syz.3.5098': attribute type 10 has an invalid length. [ 1136.203941][T25399] netlink: 'syz.2.5101': attribute type 10 has an invalid length. [ 1137.098598][T25399] team0: Device wg1 is of different type [ 1137.173287][T25408] __nla_validate_parse: 2 callbacks suppressed [ 1137.173310][T25408] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5105'. [ 1137.490812][T25421] netlink: 'syz.3.5109': attribute type 39 has an invalid length. [ 1138.720574][T25439] netlink: 'syz.2.5113': attribute type 10 has an invalid length. [ 1138.731913][T25439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5113'. [ 1138.747145][T25439] team0: entered promiscuous mode [ 1138.757696][T25439] team_slave_0: entered promiscuous mode [ 1138.772711][T25439] team_slave_1: entered promiscuous mode [ 1138.829400][T25439] geneve1: entered promiscuous mode [ 1138.859737][T25439] team0: entered allmulticast mode [ 1138.865007][T25439] team_slave_0: entered allmulticast mode [ 1138.874975][T25439] team_slave_1: entered allmulticast mode [ 1138.881431][T25439] geneve1: entered allmulticast mode [ 1138.887848][T25439] bridge0: port 4(team0) entered blocking state [ 1138.897092][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 1138.916461][T25439] bridge0: port 4(team0) entered disabled state [ 1138.928108][T25439] bridge0: port 4(team0) entered blocking state [ 1138.934621][T25439] bridge0: port 4(team0) entered forwarding state [ 1138.993925][T25450] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.5115'. [ 1139.048857][T25450] netlink: del zone limit has 8 unknown bytes [ 1139.373424][T25460] netlink: 'syz.1.5119': attribute type 21 has an invalid length. [ 1139.507086][T25463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1139.664852][T25463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1139.730157][T25457] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1140.532817][T25482] netlink: 'syz.3.5127': attribute type 11 has an invalid length. [ 1140.594743][T25484] netlink: 'syz.0.5125': attribute type 3 has an invalid length. [ 1140.618649][T25482] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.5127'. [ 1140.636284][T25484] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5125'. [ 1141.036798][T25490] netlink: 'syz.2.5126': attribute type 10 has an invalid length. [ 1141.145282][T25490] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.171234][T25490] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.182064][T25490] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.191350][T25490] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.286758][T25494] netlink: 'syz.3.5130': attribute type 21 has an invalid length. [ 1141.425336][T25494] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5130'. [ 1141.552351][T25504] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.5133'. [ 1141.580273][T25504] netlink: del zone limit has 8 unknown bytes [ 1141.847967][T25516] netlink: 'syz.3.5139': attribute type 21 has an invalid length. [ 1143.396480][T25546] netlink: 'syz.2.5146': attribute type 21 has an invalid length. [ 1143.428659][T25546] __nla_validate_parse: 1 callbacks suppressed [ 1143.428678][T25546] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5146'. [ 1143.940753][T25561] tap0: tun_chr_ioctl cmd 1074025677 [ 1143.946386][T25561] tap0: linktype set to 6 [ 1144.176142][T25572] netlink: 'syz.0.5154': attribute type 21 has an invalid length. [ 1144.184303][T25572] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5154'. [ 1144.194504][T25572] netlink: 'syz.0.5154': attribute type 5 has an invalid length. [ 1144.202985][T25572] netlink: 'syz.0.5154': attribute type 6 has an invalid length. [ 1144.211213][T25572] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5154'. [ 1144.632213][T25573] netlink: 'syz.0.5154': attribute type 10 has an invalid length. [ 1144.742390][T25573] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1145.074705][T25593] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5158'. [ 1145.704029][T25605] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.5161'. [ 1145.719476][T25605] netlink: 'syz.2.5161': attribute type 2 has an invalid length. [ 1145.743061][T25608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.248103][T25626] netlink: 'syz.1.5167': attribute type 21 has an invalid length. [ 1146.272590][T25628] netlink: 'syz.0.5166': attribute type 29 has an invalid length. [ 1146.283082][T25626] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1146.325657][T25626] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5167'. [ 1146.448182][T25628] netlink: 'syz.0.5166': attribute type 29 has an invalid length. [ 1146.470233][T25628] netlink: 'syz.0.5166': attribute type 29 has an invalid length. [ 1146.749017][T25644] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5170'. [ 1146.828386][T25651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5172'. [ 1147.379773][T25670] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5178'. [ 1148.461516][T25710] __nla_validate_parse: 1 callbacks suppressed [ 1148.461537][T25710] netlink: 142528 bytes leftover after parsing attributes in process `syz.1.5188'. [ 1148.493315][T25710] netlink: 'syz.1.5188': attribute type 1 has an invalid length. [ 1152.034224][T25753] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1152.146653][T25738] IPv6: pim6reg1: Disabled Multicast RS [ 1152.478492][T25764] netlink: 'syz.0.5202': attribute type 2 has an invalid length. [ 1152.496949][T25764] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1152.731300][T25771] mac80211_hwsim hwsim65 wlan1: entered allmulticast mode [ 1152.826520][T25770] netlink: 'syz.3.5203': attribute type 1 has an invalid length. [ 1152.962244][T25776] netlink: 'syz.1.5204': attribute type 10 has an invalid length. [ 1152.994908][T25776] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5204'. [ 1153.161860][T25782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5206'. [ 1153.173215][T25772] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1153.219010][T25782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5206'. [ 1153.257612][T25782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5206'. [ 1153.290836][T25785] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5207'. [ 1153.307502][T25785] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.5207'. [ 1153.339263][T25785] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5207'. [ 1153.452410][T25785] tc_dump_action: action bad kind [ 1153.481339][T25784] __nla_validate_parse: 1 callbacks suppressed [ 1153.481357][T25784] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5207'. [ 1153.555604][T25784] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.5207'. [ 1153.580580][T25784] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5207'. [ 1153.605460][T25784] tc_dump_action: action bad kind [ 1153.903794][T25796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5211'. [ 1154.706007][T25816] netlink: 'syz.1.5217': attribute type 1 has an invalid length. [ 1154.748614][T25816] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.5217'. [ 1155.068955][T25819] netlink: 'syz.0.5216': attribute type 10 has an invalid length. [ 1155.136735][T25819] netlink: 41459 bytes leftover after parsing attributes in process `syz.0.5216'. [ 1155.533048][T25839] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5223'. [ 1155.744037][T25846] netlink: 'syz.2.5224': attribute type 10 has an invalid length. [ 1156.316807][T25866] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.5231'. [ 1156.349255][T25866] openvswitch: netlink: Duplicate key (type 0). [ 1156.441643][T25876] netlink: 'syz.0.5234': attribute type 39 has an invalid length. [ 1157.701805][T25908] syzkaller0: entered promiscuous mode [ 1157.762007][T25908] syzkaller0: entered allmulticast mode [ 1157.935724][T25908] veth0_vlan: mtu less than device minimum [ 1158.521538][T25920] netlink: 'syz.1.5247': attribute type 2 has an invalid length. [ 1158.545803][T25920] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5247'. [ 1158.866523][T25924] delete_channel: no stack [ 1159.191959][T25928] netlink: 'syz.1.5249': attribute type 2 has an invalid length. [ 1159.318160][T25928] netlink: 'syz.1.5249': attribute type 11 has an invalid length. [ 1159.375670][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 1159.477895][T25928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1159.806719][T25927] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1159.822720][T25927] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1159.846226][T25932] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1160.057213][T25945] netlink: 1039 bytes leftover after parsing attributes in process `syz.1.5253'. [ 1160.570125][T25952] netlink: 'syz.0.5256': attribute type 1 has an invalid length. [ 1160.590569][T25952] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.5256'. [ 1160.618791][T25952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5256'. [ 1160.905186][T25952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5256'. [ 1161.017916][T25961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5256'. [ 1162.065353][T25975] netlink: 'syz.3.5261': attribute type 10 has an invalid length. [ 1162.097562][T25975] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1162.131048][T25975] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.210020][T25975] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1165.422224][T26014] delete_channel: no stack [ 1165.459409][T26014] delete_channel: no stack [ 1166.641468][T26021] __nla_validate_parse: 7 callbacks suppressed [ 1166.641490][T26021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'. [ 1169.332344][T26057] bˆ¡cÊRݘOC‰ÿæ: renamed from lo (while UP) [ 1169.937076][T26085] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.5293'. [ 1169.946933][T26086] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.5293'. [ 1170.403843][T26105] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5295'. [ 1170.946584][T26108] syzkaller0: entered promiscuous mode [ 1170.955640][T26108] syzkaller0: entered allmulticast mode [ 1171.062101][T26105] syzkaller0: entered promiscuous mode [ 1171.067660][T26105] syzkaller0: entered allmulticast mode [ 1176.713901][T26144] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.5309'. [ 1177.096080][T26153] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5312'. [ 1177.635421][T26153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.683183][T26153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.756018][T26153] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1177.777926][T26153] bond0 (unregistering): Released all slaves [ 1177.779564][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.790532][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.800576][T26156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5312'. [ 1177.855767][T26160] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5315'. [ 1178.818865][T26191] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.5323'. [ 1178.855088][T26196] netlink: 'syz.2.5324': attribute type 21 has an invalid length. [ 1178.882596][T26196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5324'. [ 1180.183465][T26217] netlink: 'syz.0.5329': attribute type 153 has an invalid length. [ 1180.278359][T26217] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5329'. [ 1180.388920][T26206] delete_channel: no stack [ 1180.591155][T26224] netlink: 44871 bytes leftover after parsing attributes in process `syz.3.5328'. [ 1181.645095][T26251] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5337'. [ 1181.701413][T26251] netlink: 'syz.0.5337': attribute type 10 has an invalid length. [ 1181.769794][T26253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5339'. [ 1182.654287][T26271] netlink: 'syz.1.5344': attribute type 21 has an invalid length. [ 1182.690381][T26271] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5344'. [ 1187.201274][T25673] tipc: Subscription rejected, illegal request [ 1188.140786][T26366] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1190.089296][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 1190.216372][T26416] netlink: 'syz.0.5380': attribute type 25 has an invalid length. [ 1190.247710][T26416] netlink: 'syz.0.5380': attribute type 9 has an invalid length. [ 1190.616272][T26428] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.5382'. [ 1190.638077][T26429] netlink: 'syz.1.5383': attribute type 2 has an invalid length. [ 1190.649393][T26429] netlink: 'syz.1.5383': attribute type 1 has an invalid length. [ 1190.657302][T26429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5383'. [ 1190.931040][T26436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5386'. [ 1191.029485][T26439] netlink: 'syz.3.5387': attribute type 21 has an invalid length. [ 1191.080226][T26438] netlink: 'syz.1.5385': attribute type 2 has an invalid length. [ 1191.114503][T26438] netlink: 119 bytes leftover after parsing attributes in process `syz.1.5385'. [ 1191.339876][T26436] netlink: 'syz.2.5386': attribute type 10 has an invalid length. [ 1192.326927][T26463] syzkaller0: entered promiscuous mode [ 1192.335086][T26463] syzkaller0: entered allmulticast mode [ 1192.898889][T26474] netlink: 'syz.2.5396': attribute type 33 has an invalid length. [ 1192.984087][T26474] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5396'. [ 1194.261783][T26487] netlink: 'syz.0.5398': attribute type 2 has an invalid length. [ 1194.299224][T26487] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5398'. [ 1194.427592][T26492] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1194.543971][T26494] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5401'. [ 1195.800498][T26524] netlink: 'syz.2.5411': attribute type 25 has an invalid length. [ 1196.319456][T26538] netlink: 'syz.3.5416': attribute type 21 has an invalid length. [ 1196.338023][T26538] netlink: 'syz.3.5416': attribute type 6 has an invalid length. [ 1196.347006][T26538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5416'. [ 1196.492134][T26538] netlink: 154956 bytes leftover after parsing attributes in process `syz.3.5416'. [ 1197.131999][T26558] netlink: 142528 bytes leftover after parsing attributes in process `syz.1.5420'. [ 1197.187151][T26558] netlink: 'syz.1.5420': attribute type 1 has an invalid length. [ 1200.407779][T26606] netlink: 'syz.1.5433': attribute type 11 has an invalid length. [ 1200.489191][T26606] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.5433'. [ 1201.219144][T26573] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5426'. [ 1201.278547][T26573] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1201.340976][T26573] CPU: 1 PID: 26573 Comm: syz.3.5426 Not tainted syzkaller #0 [ 1201.348549][T26573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1201.358947][T26573] Call Trace: [ 1201.362282][T26573] [ 1201.365286][T26573] dump_stack_lvl+0x18c/0x250 [ 1201.370192][T26573] ? show_regs_print_info+0x20/0x20 [ 1201.375460][T26573] ? load_image+0x420/0x420 [ 1201.380036][T26573] sysfs_warn_dup+0x8e/0xa0 [ 1201.384588][T26573] sysfs_do_create_link_sd+0xc0/0x110 [ 1201.390017][T26573] device_add_class_symlinks+0x1cf/0x240 [ 1201.395713][T26573] device_add+0x507/0xc20 [ 1201.400104][T26573] wiphy_register+0x1dad/0x2ae0 [ 1201.405026][T26573] ? cfg80211_event_work+0x40/0x40 [ 1201.410275][T26573] ? minstrel_ht_alloc+0x88a/0x990 [ 1201.415467][T26573] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1201.421599][T26573] ieee80211_register_hw+0x3464/0x4250 [ 1201.427109][T26573] ? ieee80211_tasklet_handler+0x20/0x20 [ 1201.432764][T26573] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1201.438679][T26573] ? __debug_object_init+0xec/0x450 [ 1201.444038][T26573] ? __asan_memset+0x22/0x40 [ 1201.448652][T26573] ? __hrtimer_init+0x186/0x270 [ 1201.453528][T26573] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1201.459292][T26573] ? mac80211_hwsim_free+0x220/0x220 [ 1201.464590][T26573] ? rcu_is_watching+0x15/0xb0 [ 1201.469375][T26573] ? kstrndup+0xbd/0x140 [ 1201.473733][T26573] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1201.478872][T26573] ? __nla_validate+0x50/0x50 [ 1201.483579][T26573] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1201.489938][T26573] ? __nla_parse+0x40/0x50 [ 1201.494373][T26573] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1201.500724][T26573] genl_family_rcv_msg_doit+0x211/0x310 [ 1201.506291][T26573] ? end_current_label_crit_section+0x170/0x170 [ 1201.512738][T26573] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1201.518678][T26573] ? bpf_lsm_capable+0x9/0x10 [ 1201.523400][T26573] ? security_capable+0x89/0xb0 [ 1201.528294][T26573] genl_rcv_msg+0x619/0x7a0 [ 1201.532831][T26573] ? genl_bind+0x360/0x360 [ 1201.537275][T26573] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1201.543641][T26573] ? perf_trace_lock+0xfc/0x3b0 [ 1201.548629][T26573] netlink_rcv_skb+0x241/0x4d0 [ 1201.553535][T26573] ? genl_bind+0x360/0x360 [ 1201.558070][T26573] ? netlink_ack+0x1180/0x1180 [ 1201.563047][T26573] ? __lock_acquire+0x7d40/0x7d40 [ 1201.568104][T26573] ? down_read+0x1ac/0x2e0 [ 1201.572544][T26573] genl_rcv+0x28/0x40 [ 1201.576651][T26573] netlink_unicast+0x751/0x8d0 [ 1201.581481][T26573] netlink_sendmsg+0x8d0/0xbf0 [ 1201.586288][T26573] ? lockdep_hardirqs_on+0x98/0x150 [ 1201.591523][T26573] ? netlink_getsockopt+0x590/0x590 [ 1201.596775][T26573] ? __sanitizer_cov_trace_pc+0x54/0x60 [ 1201.602376][T26573] ? security_socket_sendmsg+0x80/0xa0 [ 1201.607952][T26573] ? netlink_getsockopt+0x590/0x590 [ 1201.613188][T26573] ____sys_sendmsg+0x5ba/0x960 [ 1201.617989][T26573] ? __asan_memset+0x22/0x40 [ 1201.622604][T26573] ? __sys_sendmsg_sock+0x30/0x30 [ 1201.627818][T26573] ? __import_iovec+0x5f2/0x850 [ 1201.632698][T26573] ? import_iovec+0x73/0xa0 [ 1201.637229][T26573] ___sys_sendmsg+0x2a6/0x360 [ 1201.642023][T26573] ? __sys_sendmsg+0x2a0/0x2a0 [ 1201.647026][T26573] __se_sys_sendmsg+0x1c2/0x2b0 [ 1201.651895][T26573] ? __x64_sys_sendmsg+0x80/0x80 [ 1201.656888][T26573] ? lockdep_hardirqs_on+0x98/0x150 [ 1201.662151][T26573] do_syscall_64+0x55/0xa0 [ 1201.666603][T26573] ? clear_bhb_loop+0x40/0x90 [ 1201.671431][T26573] ? clear_bhb_loop+0x40/0x90 [ 1201.676138][T26573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1201.682056][T26573] RIP: 0033:0x7f44eeb9cdd9 [ 1201.686491][T26573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.706320][T26573] RSP: 002b:00007f44ef983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1201.714783][T26573] RAX: ffffffffffffffda RBX: 00007f44eee16090 RCX: 00007f44eeb9cdd9 [ 1201.722787][T26573] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1201.730778][T26573] RBP: 00007f44eec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1201.738780][T26573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.747050][T26573] R13: 00007f44eee16128 R14: 00007f44eee16090 R15: 00007ffe96e7fa48 [ 1201.755084][T26573] [ 1201.795422][T26621] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5437'. [ 1202.021255][T26626] netlink: 'syz.3.5439': attribute type 5 has an invalid length. [ 1202.389877][T26629] netlink: 'syz.0.5440': attribute type 2 has an invalid length. [ 1202.397773][T26629] netlink: 'syz.0.5440': attribute type 1 has an invalid length. [ 1202.454246][T26629] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1203.018813][T26634] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.5442'. [ 1203.158276][T26640] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5443'. [ 1203.230470][T26640] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check. [ 1203.503565][T26652] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.5446'. [ 1203.665576][T26655] netlink: 'syz.2.5445': attribute type 10 has an invalid length. [ 1203.706952][T26655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5445'. [ 1205.344116][T26673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5452'. [ 1205.840324][T26678] netlink: 'syz.3.5452': attribute type 10 has an invalid length. [ 1206.002676][T26678] team0: Device veth0_vlan failed to register rx_handler [ 1206.135832][T26686] netlink: 'syz.2.5453': attribute type 10 has an invalid length. [ 1206.149462][T26686] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5453'. [ 1206.349675][T26698] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.5457'. [ 1206.427002][T26698] netlink: 'syz.2.5457': attribute type 21 has an invalid length. [ 1206.508012][T26698] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5457'. [ 1206.812252][T26705] bridge0: port 3(team0) entered blocking state [ 1206.823399][T26705] bridge0: port 3(team0) entered disabled state [ 1206.841332][T26705] team0: entered allmulticast mode [ 1206.851369][T26705] C: entered allmulticast mode [ 1206.856775][T26705] team_slave_1: entered allmulticast mode [ 1206.865879][T26705] team0: entered promiscuous mode [ 1206.871682][T26705] C: entered promiscuous mode [ 1206.876908][T26705] team_slave_1: entered promiscuous mode [ 1206.885665][T26705] bridge0: port 3(team0) entered blocking state [ 1206.892259][T26705] bridge0: port 3(team0) entered forwarding state [ 1209.587654][T26729] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5464'. [ 1210.196450][T26739] netlink: 'syz.0.5466': attribute type 10 has an invalid length. [ 1210.230366][T26739] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5466'. [ 1210.305796][T26739] hsr0: entered promiscuous mode [ 1210.509873][T26739] bridge0: port 4(hsr0) entered blocking state [ 1210.549429][T26739] bridge0: port 4(hsr0) entered disabled state [ 1210.579631][T26739] hsr0: entered allmulticast mode [ 1210.616892][T26739] hsr_slave_0: entered allmulticast mode [ 1210.640304][T26739] hsr_slave_1: entered allmulticast mode [ 1210.664534][T26739] bridge0: port 4(hsr0) entered blocking state [ 1210.670955][T26739] bridge0: port 4(hsr0) entered forwarding state [ 1210.714891][T26742] netlink: 'syz.2.5468': attribute type 28 has an invalid length. [ 1211.152237][T26748] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1211.208117][T26756] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5470'. [ 1211.609413][T26764] netlink: 'syz.2.5470': attribute type 29 has an invalid length. [ 1211.773096][T26764] netlink: 'syz.2.5470': attribute type 29 has an invalid length. [ 1211.786541][T26768] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5474'. [ 1211.979462][T26774] syzkaller0: entered promiscuous mode [ 1211.986695][T26774] syzkaller0: entered allmulticast mode [ 1212.461877][T26790] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5480'. [ 1212.569142][T26796] netlink: 'syz.0.5490': attribute type 21 has an invalid length. [ 1212.969760][T26803] netlink: 'syz.1.5481': attribute type 10 has an invalid length. [ 1212.978177][T26803] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5481'. [ 1213.522495][T26818] netlink: 'syz.1.5486': attribute type 21 has an invalid length. [ 1216.942354][T26865] bridge_slave_1: left allmulticast mode [ 1216.949906][T26865] bridge_slave_1: left promiscuous mode [ 1216.955754][T26865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.187891][T26865] bridge_slave_0: left allmulticast mode [ 1217.193697][T26865] bridge_slave_0: left promiscuous mode [ 1217.199573][T26865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.318282][T26867] delete_channel: no stack [ 1217.335287][T26867] delete_channel: no stack [ 1217.516366][T26876] netlink: 'syz.0.5504': attribute type 3 has an invalid length. [ 1217.558068][T26877] netlink: 'syz.0.5504': attribute type 3 has an invalid length. [ 1217.695931][T26877] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5504'. [ 1217.766818][T26876] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5504'. [ 1220.019519][T26905] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.5512'. [ 1220.054432][T26903] IPv6: Can't replace route, no match found [ 1220.638548][T26922] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1220.798980][T20860] tipc: Subscription rejected, illegal request [ 1222.115844][T26949] netlink: 'syz.1.5525': attribute type 10 has an invalid length. [ 1222.146094][T26949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5525'. [ 1222.204968][T26949] caif0: entered promiscuous mode [ 1222.236483][T26949] caif0: entered allmulticast mode [ 1222.260957][T26949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1222.329903][T26950] netlink: 'syz.1.5525': attribute type 10 has an invalid length. [ 1222.338218][T26951] netlink: 21 bytes leftover after parsing attributes in process `syz.0.5524'. [ 1222.368120][T26950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5525'. [ 1222.396870][T26950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1222.434933][T26951] ksmbd: Unknown IPC event: 0, ignore. [ 1223.069789][T26973] netlink: 'syz.1.5531': attribute type 1 has an invalid length. [ 1223.150884][T26971] netlink: 'syz.0.5529': attribute type 3 has an invalid length. [ 1223.158693][T26971] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5529'. [ 1223.173260][T26973] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.5531'. [ 1223.210848][T26974] mac80211_hwsim hwsim69 ..ãc¤±€: renamed from wlan1 (while UP) [ 1225.055414][T27016] netlink: 'syz.3.5542': attribute type 11 has an invalid length. [ 1225.288594][T27023] netlink: 'syz.2.5545': attribute type 12 has an invalid length. [ 1225.307065][T27023] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.5545'. [ 1225.333545][T27025] netlink: 'syz.2.5545': attribute type 12 has an invalid length. [ 1225.342600][T27025] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.5545'. [ 1225.809677][T27040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5549'. [ 1225.849377][T27037] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5548'. [ 1225.869657][T27037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.901165][T27037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.911172][T27037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.959153][T27037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.987782][T27037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.029095][T27037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.052801][T27037] batadv_slave_1: entered promiscuous mode [ 1226.062887][T27049] netlink: 'syz.0.5551': attribute type 21 has an invalid length. [ 1226.131793][T27049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5551'. [ 1226.336894][T27053] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5553'. [ 1226.385951][T27053] netlink: 'syz.1.5553': attribute type 10 has an invalid length. [ 1226.529700][T27053] team0: Device ipvlan1 failed to register rx_handler [ 1226.602924][T27065] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5556'. [ 1226.639468][T27064] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5556'. [ 1227.160576][T27077] syzkaller0: entered promiscuous mode [ 1227.176441][T27077] syzkaller0: entered allmulticast mode [ 1228.176149][T27120] sctp: [Deprecated]: syz.0.5574 (pid 27120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1228.176149][T27120] Use struct sctp_sack_info instead [ 1228.415255][T27127] __nla_validate_parse: 4 callbacks suppressed [ 1228.415274][T27127] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1228.447468][T27127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1228.564812][T27134] netlink: 'syz.0.5577': attribute type 10 has an invalid length. [ 1228.575528][T27134] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5577'. [ 1229.312137][T27146] netlink: 'syz.0.5582': attribute type 23 has an invalid length. [ 1229.438388][T27148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5582'. [ 1229.470691][T27150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5582'. [ 1229.501283][T27148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5582'. [ 1230.389542][T27162] syzkaller0: entered promiscuous mode [ 1230.399140][T27162] syzkaller0: entered allmulticast mode [ 1230.540177][T27180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5589'. [ 1230.614103][T27183] netlink: 'syz.2.5589': attribute type 29 has an invalid length. [ 1230.619464][T27182] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.5590'. [ 1233.630363][T27180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5589'. [ 1233.641112][T27183] netlink: 'syz.2.5589': attribute type 29 has an invalid length. [ 1233.651781][T27194] netlink: 'syz.3.5591': attribute type 21 has an invalid length. [ 1233.660151][T27194] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5591'. [ 1233.683476][T27209] syzkaller0: entered promiscuous mode [ 1233.691496][T27209] syzkaller0: entered allmulticast mode [ 1233.878164][T27220] netlink: 'syz.1.5598': attribute type 10 has an invalid length. [ 1233.899476][T27220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5598'. [ 1234.037027][T27220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1234.467898][T27236] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5603'. [ 1234.499582][T27236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1235.084825][T27265] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.5609'. [ 1235.111803][T27265] netlink: 'syz.0.5609': attribute type 8 has an invalid length. [ 1235.152560][T22829] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1235.371525][T27279] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5613'. [ 1235.453145][T27283] netlink: 'syz.3.5616': attribute type 8 has an invalid length. [ 1235.461428][T27283] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5616'. [ 1235.831172][T27321] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5618'. [ 1235.849339][T27291] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.5617'. [ 1235.861216][T27291] netlink: zone id is out of range [ 1235.866493][T27291] netlink: zone id is out of range [ 1235.877332][T27291] netlink: zone id is out of range [ 1235.886068][T27291] netlink: zone id is out of range [ 1235.896565][T27291] netlink: zone id is out of range [ 1235.905847][T27291] netlink: zone id is out of range [ 1235.915997][T27291] netlink: zone id is out of range [ 1235.925667][T27291] netlink: zone id is out of range [ 1236.472209][T27330] netlink: 'syz.2.5622': attribute type 13 has an invalid length. [ 1236.489245][T27330] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5622'. [ 1236.514547][T27330] erspan0: refused to change device tx_queue_len [ 1236.521402][T27325] netlink: 'syz.1.5619': attribute type 10 has an invalid length. [ 1236.542846][T27325] team0: Device ipvlan1 failed to register rx_handler [ 1236.950761][T27350] netlink: 'syz.1.5627': attribute type 1 has an invalid length. [ 1237.035182][T27357] hsr0: VLAN not yet supported [ 1239.215981][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.230050][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.489278][T27410] netlink: 'syz.0.5645': attribute type 3 has an invalid length. [ 1241.497093][T27410] __nla_validate_parse: 2 callbacks suppressed [ 1241.497108][T27410] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5645'. [ 1241.604031][T27415] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode [ 1241.650253][T27415] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode [ 1241.867574][T27423] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1242.015165][T27427] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5649'. [ 1242.094134][T27427] net_ratelimit: 2 callbacks suppressed [ 1242.094155][T27427] openvswitch: netlink: Flow key attribute not present in set flow. [ 1242.126516][T27426] netlink: 26103 bytes leftover after parsing attributes in process `syz.1.5648'. [ 1243.778531][T27464] netlink: 'syz.3.5659': attribute type 3 has an invalid length. [ 1243.797176][T27464] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5659'. [ 1243.818947][T27452] netlink: 'syz.2.5654': attribute type 21 has an invalid length. [ 1243.836063][T27452] netlink: 14542 bytes leftover after parsing attributes in process `syz.2.5654'. [ 1243.994107][T27469] netlink: 'syz.0.5661': attribute type 2 has an invalid length. [ 1244.028088][T27469] netlink: 'syz.0.5661': attribute type 4 has an invalid length. [ 1244.049120][T27469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5661'. [ 1244.066185][T27470] netlink: 'syz.3.5660': attribute type 10 has an invalid length. [ 1244.362687][T27470] team0 (unregistering): Port device C removed [ 1244.425373][T27470] team0 (unregistering): Port device team_slave_1 removed [ 1244.474292][T27470] team0 (unregistering): Port device macvlan0 removed [ 1244.528404][T27475] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5663'. [ 1244.861726][T27489] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5667'. [ 1246.513062][T27520] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5674'. [ 1246.609803][T27520] netlink: get zone limit has 4 unknown bytes [ 1246.631464][T27520] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5674'. [ 1247.078131][T27525] netlink: 'syz.3.5676': attribute type 10 has an invalid length. [ 1247.907744][T27543] syzkaller0: entered promiscuous mode [ 1247.913892][T27543] syzkaller0: entered allmulticast mode [ 1248.562459][T22829] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1249.525174][T27577] syzkaller0: entered promiscuous mode [ 1249.553718][T27577] syzkaller0: entered allmulticast mode [ 1253.749341][T27598] Ÿë: port 1(veth0_to_team) entered blocking state [ 1253.756133][T27598] Ÿë: port 1(veth0_to_team) entered disabled state [ 1253.784527][T27598] veth0_to_team: entered allmulticast mode [ 1253.806361][T27598] veth0_to_team: entered promiscuous mode [ 1254.047604][T27609] vlan1: entered promiscuous mode [ 1254.067497][T27609] vlan1: entered allmulticast mode [ 1254.082908][T27609] veth0_vlan: entered allmulticast mode [ 1254.200486][T27612] netlink: 703 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1254.253992][T27617] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5698'. [ 1254.278212][T27615] netlink: 'syz.3.5697': attribute type 9 has an invalid length. [ 1254.302277][T27615] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1254.455653][T27619] netlink: 'syz.3.5697': attribute type 9 has an invalid length. [ 1254.489724][T27619] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1255.134873][T27628] netlink: 'syz.0.5699': attribute type 29 has an invalid length. [ 1255.380700][T27628] netlink: 'syz.0.5699': attribute type 29 has an invalid length. [ 1255.422381][T27629] netlink: 'syz.0.5699': attribute type 29 has an invalid length. [ 1255.530387][T27630] netlink: 'syz.0.5699': attribute type 29 has an invalid length. [ 1255.600525][T27632] netlink: 'syz.0.5699': attribute type 29 has an invalid length. [ 1257.492619][T27653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5706'. [ 1258.379667][T27680] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5715'. [ 1258.493716][T27687] netlink: 'syz.2.5717': attribute type 10 has an invalid length. [ 1258.509341][T27687] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5717'. [ 1258.518578][T27687] bond0: entered promiscuous mode [ 1258.549392][T27687] bond_slave_0: entered promiscuous mode [ 1258.556830][T27687] bond_slave_1: entered promiscuous mode [ 1258.633130][T27687] bridge0: port 5(bond0) entered blocking state [ 1258.704172][T27687] bridge0: port 5(bond0) entered disabled state [ 1258.738840][T27687] bond0: entered allmulticast mode [ 1258.748233][T27687] bond_slave_0: entered allmulticast mode [ 1258.784327][T27687] bond_slave_1: entered allmulticast mode [ 1258.926995][T27687] bridge0: port 5(bond0) entered blocking state [ 1258.934185][T27687] bridge0: port 5(bond0) entered forwarding state [ 1260.131673][T27718] netlink: 'syz.0.5723': attribute type 25 has an invalid length. [ 1260.767491][T27740] netlink: 'syz.3.5730': attribute type 3 has an invalid length. [ 1260.788540][T27740] netlink: 'syz.3.5730': attribute type 4 has an invalid length. [ 1260.796764][T27740] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.5730'. [ 1264.863436][T27772] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5740'. [ 1264.916496][T27770] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5739'. [ 1270.582445][T27817] netlink: 'syz.3.5752': attribute type 9 has an invalid length. [ 1271.073721][T27818] netlink: 'syz.1.5751': attribute type 3 has an invalid length. [ 1271.102058][T27818] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.5751'. [ 1271.263668][T27819] delete_channel: no stack [ 1271.697983][T27840] delete_channel: no stack [ 1272.404690][T27858] IPv6: NLM_F_CREATE should be specified when creating new route [ 1274.063458][T27891] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1275.130809][T27908] delete_channel: no stack [ 1275.140899][T27908] delete_channel: no stack [ 1275.148439][T27911] netlink: 'syz.2.5777': attribute type 12 has an invalid length. [ 1275.199513][T27911] netlink: 'syz.2.5777': attribute type 11 has an invalid length. [ 1275.217845][T27911] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.5777'. [ 1275.314247][T27919] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1275.568447][T27922] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.5780'. [ 1276.833898][T27946] sctp: [Deprecated]: syz.1.5787 (pid 27946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1276.833898][T27946] Use struct sctp_sack_info instead [ 1276.937970][T27948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5786'. [ 1276.979283][T27948] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5786'. [ 1277.010669][T27944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5786'. [ 1277.037654][T27953] bpf_get_probe_write_proto: 120 callbacks suppressed [ 1277.037676][T27953] syz.2.5788[27953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1277.075131][T27947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5786'. [ 1280.093620][T27970] netlink: 'syz.3.5792': attribute type 10 has an invalid length. [ 1280.200965][T27974] bridge0: port 6(batadv0) entered blocking state [ 1280.207804][T27974] bridge0: port 6(batadv0) entered disabled state [ 1280.219759][T27974] batadv0: entered allmulticast mode [ 1280.231962][T27974] batadv0: entered promiscuous mode [ 1280.238059][T27974] bridge0: port 6(batadv0) entered blocking state [ 1280.244691][T27974] bridge0: port 6(batadv0) entered forwarding state [ 1280.597454][T27991] netlink: 'syz.0.5798': attribute type 1 has an invalid length. [ 1280.609182][T27991] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5798'. [ 1280.648571][T27989] netlink: 'syz.2.5796': attribute type 41 has an invalid length. [ 1280.733064][T27312] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1280.742577][T27312] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1281.269598][T28002] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1281.441174][T28002] syzkaller0: entered promiscuous mode [ 1281.501487][T28002] syzkaller0: entered allmulticast mode [ 1281.653409][T28006] mac80211_hwsim hwsim74 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1281.737783][T28007] netlink: 'syz.0.5801': attribute type 3 has an invalid length. [ 1281.763942][T28007] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.5801'. [ 1285.635726][T28046] netlink: 'syz.3.5813': attribute type 3 has an invalid length. [ 1285.656004][T28046] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.5813'. [ 1285.687079][T28050] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5814'. [ 1285.786239][T28050] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5814'. [ 1285.809241][T28050] openvswitch: netlink: Flow key attr not present in new flow. [ 1286.113001][T28065] netlink: 'syz.0.5818': attribute type 10 has an invalid length. [ 1286.160197][T28065] bridge0: port 3(team0) entered disabled state [ 1286.252872][T28065] team0 (unregistering): left allmulticast mode [ 1286.264776][T28065] C: left allmulticast mode [ 1286.270183][T28065] team_slave_1: left allmulticast mode [ 1286.275785][T28065] team0 (unregistering): left promiscuous mode [ 1286.287269][T28065] C: left promiscuous mode [ 1286.296819][T28065] team_slave_1: left promiscuous mode [ 1286.308382][T28065] bridge0: port 3(team0) entered disabled state [ 1286.365366][T28065] team0 (unregistering): Port device C removed [ 1286.388055][T28065] team0 (unregistering): Port device team_slave_1 removed [ 1286.793080][T28078] netlink: 'syz.0.5820': attribute type 1 has an invalid length. [ 1286.850950][T28078] netlink: 'syz.0.5820': attribute type 3 has an invalid length. [ 1286.858838][T28078] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5820'. [ 1287.317980][T28086] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1288.146059][T28100] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5826'. [ 1288.165318][T28100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1288.484257][T28114] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1288.797091][T28124] netlink: 'syz.3.5834': attribute type 9 has an invalid length. [ 1288.829299][T28124] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5834'. [ 1290.314637][T28178] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1294.044017][T28221] pim6reg1: entered promiscuous mode [ 1294.059365][T28221] pim6reg1: entered allmulticast mode [ 1294.092721][T28222] netlink: 'syz.0.5855': attribute type 10 has an invalid length. [ 1294.124542][T28222] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5855'. [ 1294.895006][T28250] syz.2.5864[28250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1294.895376][T28250] syz.2.5864[28250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1296.865852][T28288] netlink: 'syz.3.5872': attribute type 21 has an invalid length. [ 1296.998134][T28288] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5872'. [ 1297.981446][T28309] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5878'. [ 1298.663578][T28322] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5881'. [ 1299.018259][T28326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5883'. [ 1299.114345][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5884'. [ 1300.502110][T28353] netlink: 'syz.1.5891': attribute type 10 has an invalid length. [ 1300.537128][T28353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.561700][T28353] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1300.686953][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.693440][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.532110][T28388] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5902'. [ 1302.620738][T28388] veth0_macvtap: left promiscuous mode [ 1303.606153][T28409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1303.628883][T28409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1303.660902][T28409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1303.712955][T28409] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1304.383818][T28429] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5914'. [ 1304.409225][T28429] ksmbd: Unknown IPC event: 0, ignore. [ 1304.840934][T28430] netlink: 'syz.3.5914': attribute type 5 has an invalid length. [ 1305.550580][T28448] netlink: 'syz.3.5921': attribute type 10 has an invalid length. [ 1306.980229][T28468] netlink: 'syz.3.5927': attribute type 1 has an invalid length. [ 1306.990463][T28468] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5927'. [ 1307.189552][T28468] netlink: 'syz.3.5927': attribute type 4 has an invalid length. [ 1307.259802][T28468] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5927'. [ 1309.159640][T28511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1309.179276][T28511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1309.231511][T28511] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5940'. [ 1309.265087][T28506] netlink: 'syz.2.5938': attribute type 39 has an invalid length. [ 1309.290688][T28513] netlink: 'syz.1.5941': attribute type 2 has an invalid length. [ 1309.317498][T28513] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5941'. [ 1309.362445][T28514] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.5941'. [ 1310.058195][T28526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5946'. [ 1313.096542][T28556] syz.1.5952: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1313.187634][T28556] CPU: 1 PID: 28556 Comm: syz.1.5952 Not tainted syzkaller #0 [ 1313.195187][T28556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1313.205285][T28556] Call Trace: [ 1313.208589][T28556] [ 1313.211541][T28556] dump_stack_lvl+0x18c/0x250 [ 1313.216269][T28556] ? show_regs_print_info+0x20/0x20 [ 1313.221513][T28556] ? load_image+0x420/0x420 [ 1313.226053][T28556] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1313.232525][T28556] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1313.239054][T28556] warn_alloc+0x246/0x340 [ 1313.243412][T28556] ? stack_trace_save+0xaa/0x100 [ 1313.248377][T28556] ? zone_watermark_ok_safe+0x230/0x230 [ 1313.253958][T28556] ? kasan_set_track+0x5f/0x70 [ 1313.258920][T28556] ? kasan_set_track+0x4e/0x70 [ 1313.263701][T28556] ? __kasan_kmalloc+0x8f/0xa0 [ 1313.268484][T28556] ? xsk_init_queue+0xad/0x100 [ 1313.273268][T28556] ? xsk_setsockopt+0x4e5/0x760 [ 1313.278140][T28556] ? do_sock_setsockopt+0x175/0x1a0 [ 1313.283352][T28556] ? __x64_sys_setsockopt+0x182/0x200 [ 1313.288741][T28556] __vmalloc_node_range+0x126/0x1330 [ 1313.294163][T28556] ? free_vm_area+0x50/0x50 [ 1313.298697][T28556] vmalloc_user+0x74/0x80 [ 1313.303225][T28556] ? xskq_create+0xbf/0x170 [ 1313.307754][T28556] xskq_create+0xbf/0x170 [ 1313.312111][T28556] xsk_init_queue+0xad/0x100 [ 1313.316726][T28556] xsk_setsockopt+0x4e5/0x760 [ 1313.321429][T28556] ? xsk_poll+0x680/0x680 [ 1313.325782][T28556] ? __fget_files+0x28/0x4b0 [ 1313.330395][T28556] ? __fget_files+0x28/0x4b0 [ 1313.335014][T28556] ? aa_sock_opt_perm+0x74/0x100 [ 1313.340151][T28556] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1313.345831][T28556] ? security_socket_setsockopt+0x7e/0xa0 [ 1313.351654][T28556] ? xsk_poll+0x680/0x680 [ 1313.356014][T28556] do_sock_setsockopt+0x175/0x1a0 [ 1313.361145][T28556] ? __fdget+0x180/0x210 [ 1313.365420][T28556] __x64_sys_setsockopt+0x182/0x200 [ 1313.370725][T28556] do_syscall_64+0x55/0xa0 [ 1313.375156][T28556] ? clear_bhb_loop+0x40/0x90 [ 1313.379864][T28556] ? clear_bhb_loop+0x40/0x90 [ 1313.384575][T28556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1313.390574][T28556] RIP: 0033:0x7f27f8f9cdd9 [ 1313.395011][T28556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.414809][T28556] RSP: 002b:00007f27f9e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1313.423241][T28556] RAX: ffffffffffffffda RBX: 00007f27f9216090 RCX: 00007f27f8f9cdd9 [ 1313.431500][T28556] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 1313.439491][T28556] RBP: 00007f27f9032d69 R08: 0000000000000004 R09: 0000000000000000 [ 1313.447480][T28556] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1313.455468][T28556] R13: 00007f27f9216128 R14: 00007f27f9216090 R15: 00007ffc50d14d58 [ 1313.463476][T28556] [ 1313.471293][T28556] Mem-Info: [ 1313.474519][T28556] active_anon:9591 inactive_anon:0 isolated_anon:0 [ 1313.474519][T28556] active_file:18232 inactive_file:40414 isolated_file:0 [ 1313.474519][T28556] unevictable:768 dirty:65 writeback:0 [ 1313.474519][T28556] slab_reclaimable:10962 slab_unreclaimable:98471 [ 1313.474519][T28556] mapped:24177 shmem:1361 pagetables:547 [ 1313.474519][T28556] sec_pagetables:0 bounce:0 [ 1313.474519][T28556] kernel_misc_reclaimable:0 [ 1313.474519][T28556] free:1333726 free_pcp:8428 free_cma:0 [ 1313.586865][T28556] Node 0 active_anon:38364kB inactive_anon:0kB active_file:72928kB inactive_file:161448kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99408kB dirty:260kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11908kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no [ 1313.767061][T28556] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1313.864334][T28556] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.929270][T28556] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1314.021176][T28556] Node 0 DMA32 free:1420552kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:38308kB inactive_anon:0kB active_file:72928kB inactive_file:160632kB unevictable:1536kB writepending:168kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:22828kB local_pcp:18716kB free_cma:0kB [ 1314.086092][T28556] lowmem_reserve[]: 0 0 0 0 0 [ 1314.113498][T28556] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.149190][T28556] lowmem_reserve[]: 0 0 0 0 0 [ 1314.154513][T28556] Node 1 Normal free:3897416kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12672kB local_pcp:4896kB free_cma:0kB [ 1314.196376][T28556] lowmem_reserve[]: 0 0 0 0 0 [ 1314.238113][T28556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1314.263323][T28556] Node 0 DMA32: 2334*4kB (UME) 1618*8kB (UME) 1324*16kB (UME) 973*32kB (UME) 759*64kB (UME) 815*128kB (UME) 267*256kB (UME) 102*512kB (UM) 54*1024kB (UME) 12*2048kB (UME) 242*4096kB (UM) = 1419176kB [ 1314.288744][T28556] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1314.305733][T28556] Node 1 Normal: 230*4kB (UME) 54*8kB (UME) 42*16kB (UME) 219*32kB (UME) 82*64kB (UME) 11*128kB (UME) 1*256kB (M) 1*512kB (E) 0*1024kB 1*2048kB (E) 947*4096kB (UM) = 3897416kB [ 1314.309687][T28569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5955'. [ 1314.354516][T28556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1314.393613][T28556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1314.420862][T28556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1314.452227][T28556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1314.484969][T28556] 60009 total pagecache pages [ 1314.511818][T28556] 0 pages in swap cache [ 1314.516056][T28556] Free swap = 124996kB [ 1314.516428][T28573] syzkaller0: entered promiscuous mode [ 1314.530148][T28556] Total swap = 124996kB [ 1314.530212][T28556] 2097051 pages RAM [ 1314.530222][T28556] 0 pages HighMem/MovableOnly [ 1314.530229][T28556] 416927 pages reserved [ 1314.530236][T28556] 0 pages cma reserved [ 1314.619379][T28573] syzkaller0: entered allmulticast mode [ 1315.123361][T28583] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1315.142853][T28581] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1315.534725][T28608] netlink: 'syz.3.5962': attribute type 9 has an invalid length. [ 1315.551321][T28608] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5962'. [ 1316.026046][T28604] netlink: 'syz.3.5962': attribute type 10 has an invalid length. [ 1317.115414][T28612] netlink: 'syz.3.5962': attribute type 9 has an invalid length. [ 1317.159095][T28612] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5962'. [ 1317.355237][T23873] cgroup: fork rejected by pids controller in /syz1 [ 1318.100286][T28648] syzkaller0: entered promiscuous mode [ 1318.114001][T28648] syzkaller0: entered allmulticast mode [ 1319.173976][T28669] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1319.191112][T28669] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1319.200617][T28669] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1319.210201][T28669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1319.227103][T28669] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1319.234821][T28669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1319.648467][T28667] chnl_net:caif_netlink_parms(): no params data found [ 1319.888052][T28667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.961643][T28667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.968946][T28667] bridge_slave_0: entered allmulticast mode [ 1320.031267][T28667] bridge_slave_0: entered promiscuous mode [ 1320.111787][T28667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.159800][T28667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.189239][T28667] bridge_slave_1: entered allmulticast mode [ 1320.198900][T28667] bridge_slave_1: entered promiscuous mode [ 1320.199797][T28682] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.5981'. [ 1320.358353][T28667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.421819][T28667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.454278][T28686] netlink: 'syz.3.5982': attribute type 8 has an invalid length. [ 1320.479896][T28686] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1320.612244][T28667] team0: Port device team_slave_0 added [ 1320.630448][T28667] team0: Port device team_slave_1 added [ 1320.703036][T28667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.728045][T28667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.799148][T28667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.841696][T28667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.848733][T28667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.881460][T28667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.026129][T28667] hsr_slave_0: entered promiscuous mode [ 1321.034651][T28667] hsr_slave_1: entered promiscuous mode [ 1321.289675][T22829] Bluetooth: hci0: command tx timeout [ 1321.308880][T28721] syzkaller0: entered promiscuous mode [ 1321.345640][T28721] syzkaller0: entered allmulticast mode [ 1322.022770][T28720] netlink: 'syz.2.5990': attribute type 9 has an invalid length. [ 1322.030703][T28720] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5990'. [ 1322.384724][T28724] netlink: 'syz.3.5989': attribute type 10 has an invalid length. [ 1322.407935][T28724] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.431059][T28724] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.445803][T28724] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.455565][T28724] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.487213][T28733] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5992'. [ 1322.612978][T28736] netlink: 'syz.2.5992': attribute type 3 has an invalid length. [ 1322.629340][T28736] netlink: 'syz.2.5992': attribute type 1 has an invalid length. [ 1322.659249][T28736] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.5992'. [ 1322.722252][T28733] netlink: 'syz.2.5992': attribute type 10 has an invalid length. [ 1322.924841][T28667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.093226][T28667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.287131][T28667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.369414][T22829] Bluetooth: hci0: command tx timeout [ 1323.401242][T28667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.619480][T28770] hsr0: left allmulticast mode [ 1323.626858][T28770] hsr_slave_0: left allmulticast mode [ 1323.636673][T28770] hsr_slave_1: left allmulticast mode [ 1323.645330][T28770] bridge0: port 4(hsr0) entered disabled state [ 1324.292235][T28777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6003'. [ 1324.307188][T28770] bridge_slave_1: left allmulticast mode [ 1324.316572][T28770] bridge_slave_1: left promiscuous mode [ 1324.324154][T28770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.335326][T28770] bridge_slave_0: left allmulticast mode [ 1324.342866][T28770] bridge_slave_0: left promiscuous mode [ 1324.349763][T28770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.505924][T28779] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6003'. [ 1324.594738][T28777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6003'. [ 1324.618665][T28776] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6003'. [ 1324.628797][T28779] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô' [ 1324.639563][T28779] CPU: 0 PID: 28779 Comm: syz.2.6003 Not tainted syzkaller #0 [ 1324.647073][T28779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1324.657411][T28779] Call Trace: [ 1324.660802][T28779] [ 1324.663774][T28779] dump_stack_lvl+0x18c/0x250 [ 1324.668494][T28779] ? show_regs_print_info+0x20/0x20 [ 1324.673796][T28779] ? load_image+0x420/0x420 [ 1324.678492][T28779] sysfs_warn_dup+0x8e/0xa0 [ 1324.683018][T28779] sysfs_do_create_link_sd+0xc0/0x110 [ 1324.688425][T28779] device_add_class_symlinks+0x1cf/0x240 [ 1324.694244][T28779] device_add+0x507/0xc20 [ 1324.698584][T28779] wiphy_register+0x1dad/0x2ae0 [ 1324.703481][T28779] ? cfg80211_event_work+0x40/0x40 [ 1324.708790][T28779] ? minstrel_ht_alloc+0x88a/0x990 [ 1324.713928][T28779] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1324.720037][T28779] ieee80211_register_hw+0x3464/0x4250 [ 1324.725642][T28779] ? ieee80211_tasklet_handler+0x20/0x20 [ 1324.731300][T28779] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1324.737233][T28779] ? __debug_object_init+0xec/0x450 [ 1324.742478][T28779] ? __asan_memset+0x22/0x40 [ 1324.747142][T28779] ? __hrtimer_init+0x186/0x270 [ 1324.752185][T28779] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1324.758107][T28779] ? mac80211_hwsim_free+0x220/0x220 [ 1324.763519][T28779] ? rcu_is_watching+0x15/0xb0 [ 1324.768317][T28779] ? kstrndup+0xbd/0x140 [ 1324.772585][T28779] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1324.777707][T28779] ? __nla_validate+0x50/0x50 [ 1324.782523][T28779] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1324.788915][T28779] ? __nla_parse+0x40/0x50 [ 1324.793359][T28779] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1324.799715][T28779] genl_family_rcv_msg_doit+0x211/0x310 [ 1324.805313][T28779] ? end_current_label_crit_section+0x170/0x170 [ 1324.811585][T28779] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1324.817516][T28779] ? bpf_lsm_capable+0x9/0x10 [ 1324.822227][T28779] ? security_capable+0x89/0xb0 [ 1324.827131][T28779] genl_rcv_msg+0x619/0x7a0 [ 1324.831648][T28779] ? genl_bind+0x360/0x360 [ 1324.836168][T28779] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1324.842572][T28779] netlink_rcv_skb+0x241/0x4d0 [ 1324.847394][T28779] ? genl_bind+0x360/0x360 [ 1324.851835][T28779] ? netlink_ack+0x1180/0x1180 [ 1324.856710][T28779] ? __lock_acquire+0x7d40/0x7d40 [ 1324.861777][T28779] ? net_generic+0x1e/0x240 [ 1324.866341][T28779] ? down_read+0x1ac/0x2e0 [ 1324.870866][T28779] genl_rcv+0x28/0x40 [ 1324.874964][T28779] netlink_unicast+0x751/0x8d0 [ 1324.879904][T28779] netlink_sendmsg+0x8d0/0xbf0 [ 1324.884735][T28779] ? netlink_getsockopt+0x590/0x590 [ 1324.889973][T28779] ? aa_sock_msg_perm+0x94/0x150 [ 1324.894951][T28779] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1324.900432][T28779] ? security_socket_sendmsg+0x80/0xa0 [ 1324.905923][T28779] ? netlink_getsockopt+0x590/0x590 [ 1324.911167][T28779] ____sys_sendmsg+0x5ba/0x960 [ 1324.915942][T28779] ? __asan_memset+0x22/0x40 [ 1324.920556][T28779] ? __sys_sendmsg_sock+0x30/0x30 [ 1324.925690][T28779] ? __import_iovec+0x5f2/0x850 [ 1324.930579][T28779] ? import_iovec+0x73/0xa0 [ 1324.935111][T28779] ___sys_sendmsg+0x2a6/0x360 [ 1324.939814][T28779] ? __sys_sendmsg+0x2a0/0x2a0 [ 1324.944774][T28779] __se_sys_sendmsg+0x1c2/0x2b0 [ 1324.949650][T28779] ? __x64_sys_sendmsg+0x80/0x80 [ 1324.954625][T28779] ? lockdep_hardirqs_on+0x98/0x150 [ 1324.959862][T28779] do_syscall_64+0x55/0xa0 [ 1324.964394][T28779] ? clear_bhb_loop+0x40/0x90 [ 1324.969095][T28779] ? clear_bhb_loop+0x40/0x90 [ 1324.973808][T28779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1324.979729][T28779] RIP: 0033:0x7f0ad279cdd9 [ 1324.984192][T28779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.003815][T28779] RSP: 002b:00007f0ad018f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.012272][T28779] RAX: ffffffffffffffda RBX: 00007f0ad2a16360 RCX: 00007f0ad279cdd9 [ 1325.020263][T28779] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1325.028356][T28779] RBP: 00007f0ad2832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1325.036419][T28779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1325.044584][T28779] R13: 00007f0ad2a163f8 R14: 00007f0ad2a16360 R15: 00007ffd8eb4c198 [ 1325.052598][T28779] [ 1325.281099][T28667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1325.292579][T28667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1325.308904][T28667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1325.327979][T28667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1325.414435][T28667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.438593][T28667] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.449938][T22829] Bluetooth: hci0: command tx timeout [ 1325.458650][T27314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.465834][T27314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.486540][T27314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.493752][T27314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.554882][T28667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1325.734849][T28667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.778805][T28667] veth0_vlan: entered promiscuous mode [ 1325.792097][T28667] veth1_vlan: entered promiscuous mode [ 1325.826636][T28667] veth0_macvtap: entered promiscuous mode [ 1325.836677][T28667] veth1_macvtap: entered promiscuous mode [ 1325.856898][T28667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.867837][T28667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.877810][T28667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.888362][T28667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.898646][T28667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.909558][T28667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.919595][T28667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1325.930278][T28667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.941616][T28667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1325.961727][T28667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1325.972541][T28667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.982666][T28667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1325.993264][T28667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.003262][T28667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.013990][T28667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.024523][T28667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1326.035317][T28667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.046755][T28667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.059658][T28667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.068497][T28667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.077931][T28667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.087102][T28667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1326.172473][T27302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.180672][T27302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.215147][T27314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1326.223780][T27314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1326.303873][T28789] IPv6: Can't replace route, no match found [ 1326.440224][T28796] netlink: 'syz.3.6008': attribute type 17 has an invalid length. [ 1326.464927][T28796] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6008'. [ 1326.582299][T28800] syzkaller0: entered promiscuous mode [ 1326.588419][T28800] syzkaller0: entered allmulticast mode [ 1327.539301][T22829] Bluetooth: hci0: command tx timeout [ 1327.692584][T28822] netlink: 'syz.3.6013': attribute type 10 has an invalid length. [ 1328.696388][T28839] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6020'. [ 1328.729255][T28839] openvswitch: netlink: Flow key attribute not present in set flow. [ 1329.500368][T28855] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.6024'. [ 1329.550372][T28858] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.6022'. [ 1329.584387][T28858] netlink: zone id is out of range [ 1329.595638][T28858] netlink: zone id is out of range [ 1329.659151][T28858] netlink: zone id is out of range [ 1329.664463][T28858] netlink: zone id is out of range [ 1329.725503][T28858] netlink: zone id is out of range [ 1329.734988][T28858] netlink: zone id is out of range [ 1329.840653][T28858] netlink: zone id is out of range [ 1329.883896][T28858] netlink: zone id is out of range [ 1329.923862][T28858] netlink: zone id is out of range [ 1330.021790][T28867] netlink: 'syz.3.6026': attribute type 2 has an invalid length. [ 1330.060905][T28869] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6026'. [ 1330.162552][T28871] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6027'. [ 1330.185460][T28873] netlink: 'syz.1.6028': attribute type 10 has an invalid length. [ 1330.195809][T28873] bond0: (slave bond_slave_0): Releasing backup interface [ 1333.245712][T28921] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.6041'. [ 1333.820191][T28935] team0: Port device team_slave_0 removed [ 1334.551139][T28951] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6051'. [ 1334.623906][T28951] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1334.668146][T28958] netlink: 'syz.1.6053': attribute type 3 has an invalid length. [ 1334.676315][T28958] netlink: 'syz.1.6053': attribute type 1 has an invalid length. [ 1334.685731][T28958] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1335.002796][T28967] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6055'. [ 1335.095042][T28950] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6050'. [ 1335.135921][T28950] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1335.160565][T28950] CPU: 1 PID: 28950 Comm: syz.3.6050 Not tainted syzkaller #0 [ 1335.168203][T28950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1335.178305][T28950] Call Trace: [ 1335.181631][T28950] [ 1335.184695][T28950] dump_stack_lvl+0x18c/0x250 [ 1335.189448][T28950] ? show_regs_print_info+0x20/0x20 [ 1335.194710][T28950] ? load_image+0x420/0x420 [ 1335.199289][T28950] sysfs_warn_dup+0x8e/0xa0 [ 1335.203842][T28950] sysfs_do_create_link_sd+0xc0/0x110 [ 1335.209269][T28950] device_add_class_symlinks+0x1cf/0x240 [ 1335.214965][T28950] device_add+0x507/0xc20 [ 1335.219357][T28950] wiphy_register+0x1dad/0x2ae0 [ 1335.224373][T28950] ? cfg80211_event_work+0x40/0x40 [ 1335.229525][T28950] ? minstrel_ht_alloc+0x88a/0x990 [ 1335.234675][T28950] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1335.240765][T28950] ieee80211_register_hw+0x3464/0x4250 [ 1335.246262][T28950] ? ieee80211_tasklet_handler+0x20/0x20 [ 1335.251911][T28950] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1335.257834][T28950] ? __debug_object_init+0xec/0x450 [ 1335.263058][T28950] ? __asan_memset+0x22/0x40 [ 1335.267668][T28950] ? __hrtimer_init+0x186/0x270 [ 1335.272549][T28950] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1335.278509][T28950] ? mac80211_hwsim_free+0x220/0x220 [ 1335.283906][T28950] ? rcu_is_watching+0x15/0xb0 [ 1335.288701][T28950] ? kstrndup+0xbd/0x140 [ 1335.292975][T28950] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1335.298108][T28950] ? __nla_validate+0x50/0x50 [ 1335.302810][T28950] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1335.309164][T28950] ? __nla_parse+0x40/0x50 [ 1335.313598][T28950] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1335.320041][T28950] genl_family_rcv_msg_doit+0x211/0x310 [ 1335.325777][T28950] ? end_current_label_crit_section+0x170/0x170 [ 1335.332152][T28950] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1335.338068][T28950] ? bpf_lsm_capable+0x9/0x10 [ 1335.342795][T28950] ? security_capable+0x89/0xb0 [ 1335.347671][T28950] genl_rcv_msg+0x619/0x7a0 [ 1335.352228][T28950] ? genl_bind+0x360/0x360 [ 1335.356663][T28950] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1335.363013][T28950] ? ref_tracker_free+0x690/0x840 [ 1335.368069][T28950] netlink_rcv_skb+0x241/0x4d0 [ 1335.373124][T28950] ? genl_bind+0x360/0x360 [ 1335.377557][T28950] ? netlink_ack+0x1180/0x1180 [ 1335.382453][T28950] ? __lock_acquire+0x7d40/0x7d40 [ 1335.387593][T28950] ? down_read+0x1ac/0x2e0 [ 1335.392129][T28950] genl_rcv+0x28/0x40 [ 1335.396131][T28950] netlink_unicast+0x751/0x8d0 [ 1335.400952][T28950] netlink_sendmsg+0x8d0/0xbf0 [ 1335.405750][T28950] ? netlink_getsockopt+0x590/0x590 [ 1335.411070][T28950] ? aa_sock_msg_perm+0x94/0x150 [ 1335.416027][T28950] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1335.421333][T28950] ? security_socket_sendmsg+0x80/0xa0 [ 1335.426899][T28950] ? netlink_getsockopt+0x590/0x590 [ 1335.432127][T28950] ____sys_sendmsg+0x5ba/0x960 [ 1335.436912][T28950] ? __asan_memset+0x22/0x40 [ 1335.441528][T28950] ? __sys_sendmsg_sock+0x30/0x30 [ 1335.446562][T28950] ? __import_iovec+0x5f2/0x850 [ 1335.451435][T28950] ? import_iovec+0x73/0xa0 [ 1335.456051][T28950] ___sys_sendmsg+0x2a6/0x360 [ 1335.460842][T28950] ? __sys_sendmsg+0x2a0/0x2a0 [ 1335.465674][T28950] __se_sys_sendmsg+0x1c2/0x2b0 [ 1335.470554][T28950] ? __x64_sys_sendmsg+0x80/0x80 [ 1335.475524][T28950] ? lockdep_hardirqs_on+0x98/0x150 [ 1335.480744][T28950] do_syscall_64+0x55/0xa0 [ 1335.485173][T28950] ? clear_bhb_loop+0x40/0x90 [ 1335.489868][T28950] ? clear_bhb_loop+0x40/0x90 [ 1335.494653][T28950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1335.500561][T28950] RIP: 0033:0x7f44eeb9cdd9 [ 1335.505016][T28950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1335.524647][T28950] RSP: 002b:00007f44ef983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1335.533088][T28950] RAX: ffffffffffffffda RBX: 00007f44eee16090 RCX: 00007f44eeb9cdd9 [ 1335.541077][T28950] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1335.549065][T28950] RBP: 00007f44eec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1335.557051][T28950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.565037][T28950] R13: 00007f44eee16128 R14: 00007f44eee16090 R15: 00007ffe96e7fa48 [ 1335.573130][T28950] [ 1336.390759][T28996] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6062'. [ 1336.749418][T29002] netlink: 'syz.1.6064': attribute type 10 has an invalid length. [ 1336.983339][T29001] netlink: 'syz.1.6064': attribute type 9 has an invalid length. [ 1337.129560][T29001] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6064'. [ 1338.174291][T29017] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6067'. [ 1338.213266][T29017] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 1338.407781][T29023] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1338.493971][T29023] netlink: 'syz.2.6069': attribute type 10 has an invalid length. [ 1338.556125][T29025] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1338.791607][T29028] netlink: 'syz.0.6070': attribute type 9 has an invalid length. [ 1338.854684][T29028] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6070'. [ 1339.020568][T29029] netlink: 'syz.0.6070': attribute type 9 has an invalid length. [ 1339.028475][T29029] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6070'. [ 1339.558734][T29030] syzkaller0: entered promiscuous mode [ 1339.629217][T29030] syzkaller0: entered allmulticast mode [ 1344.202570][T29040] netlink: 'syz.2.6073': attribute type 17 has an invalid length. [ 1344.212304][T29047] netlink: 'syz.1.6075': attribute type 5 has an invalid length. [ 1344.220695][T29047] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6075'. [ 1344.954533][T29091] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.6088'. [ 1345.405820][T29081] syzkaller0: entered promiscuous mode [ 1345.449745][T29081] syzkaller0: entered allmulticast mode [ 1349.094329][T29111] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.6094'. [ 1350.331866][T29135] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.340840][T29135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.351043][T29135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.367080][T29135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.526448][T29147] netlink: 'syz.0.6104': attribute type 25 has an invalid length. [ 1351.578039][T29147] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.6104'. [ 1351.961263][T29162] netlink: 'syz.1.6106': attribute type 11 has an invalid length. [ 1353.447417][T29201] netlink: 'syz.3.6117': attribute type 3 has an invalid length. [ 1353.455376][T29201] netlink: 'syz.3.6117': attribute type 5 has an invalid length. [ 1353.656810][T29191] syz.2.6115 (29191) used greatest stack depth: 17256 bytes left [ 1354.095122][T29219] sit0: entered allmulticast mode [ 1354.238388][T29220] sit0: entered promiscuous mode [ 1355.092277][T29232] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6124'. [ 1357.951052][T29232] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1358.007861][T29232] CPU: 1 PID: 29232 Comm: syz.3.6124 Not tainted syzkaller #0 [ 1358.015409][T29232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1358.025592][T29232] Call Trace: [ 1358.028926][T29232] [ 1358.031898][T29232] dump_stack_lvl+0x18c/0x250 [ 1358.036644][T29232] ? show_regs_print_info+0x20/0x20 [ 1358.041892][T29232] ? load_image+0x420/0x420 [ 1358.046466][T29232] sysfs_warn_dup+0x8e/0xa0 [ 1358.051009][T29232] sysfs_do_create_link_sd+0xc0/0x110 [ 1358.056432][T29232] device_add_class_symlinks+0x1cf/0x240 [ 1358.062125][T29232] device_add+0x507/0xc20 [ 1358.066515][T29232] wiphy_register+0x1dad/0x2ae0 [ 1358.071550][T29232] ? cfg80211_event_work+0x40/0x40 [ 1358.076724][T29232] ? minstrel_ht_alloc+0x88a/0x990 [ 1358.081999][T29232] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1358.088127][T29232] ieee80211_register_hw+0x3464/0x4250 [ 1358.093661][T29232] ? ieee80211_tasklet_handler+0x20/0x20 [ 1358.099335][T29232] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1358.105276][T29232] ? __debug_object_init+0xec/0x450 [ 1358.110551][T29232] ? __asan_memset+0x22/0x40 [ 1358.115186][T29232] ? __hrtimer_init+0x186/0x270 [ 1358.120085][T29232] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1358.125878][T29232] ? mac80211_hwsim_free+0x220/0x220 [ 1358.131201][T29232] ? rcu_is_watching+0x15/0xb0 [ 1358.136009][T29232] ? kstrndup+0xbd/0x140 [ 1358.140311][T29232] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1358.145469][T29232] ? __nla_validate+0x50/0x50 [ 1358.150218][T29232] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1358.156608][T29232] ? __nla_parse+0x40/0x50 [ 1358.161083][T29232] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1358.167467][T29232] genl_family_rcv_msg_doit+0x211/0x310 [ 1358.173155][T29232] ? end_current_label_crit_section+0x170/0x170 [ 1358.179444][T29232] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1358.185389][T29232] ? bpf_lsm_capable+0x9/0x10 [ 1358.190110][T29232] ? security_capable+0x89/0xb0 [ 1358.195018][T29232] genl_rcv_msg+0x619/0x7a0 [ 1358.199577][T29232] ? genl_bind+0x360/0x360 [ 1358.204032][T29232] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1358.210407][T29232] ? perf_trace_lock+0xfc/0x3b0 [ 1358.215315][T29232] netlink_rcv_skb+0x241/0x4d0 [ 1358.220142][T29232] ? genl_bind+0x360/0x360 [ 1358.224597][T29232] ? netlink_ack+0x1180/0x1180 [ 1358.229859][T29232] ? __lock_acquire+0x7d40/0x7d40 [ 1358.234957][T29232] ? down_read+0x1ac/0x2e0 [ 1358.239471][T29232] genl_rcv+0x28/0x40 [ 1358.243510][T29232] netlink_unicast+0x751/0x8d0 [ 1358.248349][T29232] netlink_sendmsg+0x8d0/0xbf0 [ 1358.253358][T29232] ? netlink_getsockopt+0x590/0x590 [ 1358.258609][T29232] ? aa_sock_msg_perm+0x94/0x150 [ 1358.263608][T29232] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1358.268938][T29232] ? security_socket_sendmsg+0x80/0xa0 [ 1358.274519][T29232] ? netlink_getsockopt+0x590/0x590 [ 1358.279864][T29232] ____sys_sendmsg+0x5ba/0x960 [ 1358.284685][T29232] ? __asan_memset+0x22/0x40 [ 1358.289320][T29232] ? __sys_sendmsg_sock+0x30/0x30 [ 1358.294379][T29232] ? __import_iovec+0x5f2/0x850 [ 1358.299279][T29232] ? import_iovec+0x73/0xa0 [ 1358.303820][T29232] ___sys_sendmsg+0x2a6/0x360 [ 1358.308548][T29232] ? __sys_sendmsg+0x2a0/0x2a0 [ 1358.313461][T29232] __se_sys_sendmsg+0x1c2/0x2b0 [ 1358.318450][T29232] ? __x64_sys_sendmsg+0x80/0x80 [ 1358.323482][T29232] ? lockdep_hardirqs_on+0x98/0x150 [ 1358.328770][T29232] do_syscall_64+0x55/0xa0 [ 1358.333220][T29232] ? clear_bhb_loop+0x40/0x90 [ 1358.337943][T29232] ? clear_bhb_loop+0x40/0x90 [ 1358.342668][T29232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1358.348600][T29232] RIP: 0033:0x7f44eeb9cdd9 [ 1358.353063][T29232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.372814][T29232] RSP: 002b:00007f44ef983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.381239][T29232] RAX: ffffffffffffffda RBX: 00007f44eee16090 RCX: 00007f44eeb9cdd9 [ 1358.389306][T29232] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1358.397307][T29232] RBP: 00007f44eec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1358.405341][T29232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.413455][T29232] R13: 00007f44eee16128 R14: 00007f44eee16090 R15: 00007ffe96e7fa48 [ 1358.421592][T29232] [ 1358.625991][T29253] netlink: 'syz.1.6130': attribute type 8 has an invalid length. [ 1358.660884][T29253] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6130'. [ 1358.689359][T29255] netlink: 'syz.1.6130': attribute type 8 has an invalid length. [ 1358.740142][T29255] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6130'. [ 1359.306481][T29277] netlink: 'syz.3.6136': attribute type 1 has an invalid length. [ 1359.362430][T29277] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.6136'. [ 1359.389570][T29280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6136'. [ 1359.397984][T29277] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6136'. [ 1359.470254][T29277] netlink: 'syz.3.6136': attribute type 21 has an invalid length. [ 1359.478479][T29277] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6136'. [ 1359.503023][T29282] netlink: 3787 bytes leftover after parsing attributes in process `syz.2.6137'. [ 1359.955248][T29295] netlink: 'syz.3.6140': attribute type 28 has an invalid length. [ 1360.039069][T29295] netlink: 'syz.3.6140': attribute type 29 has an invalid length. [ 1360.054233][T29295] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6140'. [ 1360.751788][T29305] netlink: 'syz.2.6144': attribute type 9 has an invalid length. [ 1360.766439][T29305] netlink: 399 bytes leftover after parsing attributes in process `syz.2.6144'. [ 1361.139727][ C1] [ 1361.139737][ C1] ================================ [ 1361.139742][ C1] WARNING: inconsistent lock state [ 1361.139749][ C1] syzkaller #0 Not tainted [ 1361.139757][ C1] -------------------------------- [ 1361.139762][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1361.139770][ C1] syz.1.6146/29310 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1361.139787][ C1] ffff88807e781a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 1361.139848][ C1] {INITIAL USE} state was registered at: [ 1361.139855][ C1] lock_acquire+0x19e/0x420 [ 1361.139872][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 1361.139890][ C1] trie_update_elem+0xcd/0xea0 [ 1361.139909][ C1] bpf_map_update_value+0x660/0x720 [ 1361.139922][ C1] map_update_elem+0x57b/0x700 [ 1361.139938][ C1] __sys_bpf+0x6b5/0x890 [ 1361.139950][ C1] __x64_sys_bpf+0x7c/0x90 [ 1361.139964][ C1] do_syscall_64+0x55/0xa0 [ 1361.139977][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.139996][ C1] irq event stamp: 1502 [ 1361.140001][ C1] hardirqs last enabled at (1501): [] syscall_enter_from_user_mode+0x25/0x80 [ 1361.140025][ C1] hardirqs last disabled at (1502): [] exc_debug+0x73/0x140 [ 1361.140044][ C1] softirqs last enabled at (1478): [] bpf_prog_load+0x1266/0x1670 [ 1361.140064][ C1] softirqs last disabled at (1476): [] bpf_ksym_add+0x2d/0x340 [ 1361.140084][ C1] [ 1361.140084][ C1] other info that might help us debug this: [ 1361.140088][ C1] Possible unsafe locking scenario: [ 1361.140088][ C1] [ 1361.140092][ C1] CPU0 [ 1361.140095][ C1] ---- [ 1361.140098][ C1] lock(&trie->lock); [ 1361.140109][ C1] [ 1361.140112][ C1] lock(&trie->lock); [ 1361.140121][ C1] [ 1361.140121][ C1] *** DEADLOCK *** [ 1361.140121][ C1] [ 1361.140124][ C1] no locks held by syz.1.6146/29310. [ 1361.140131][ C1] [ 1361.140131][ C1] stack backtrace: [ 1361.140136][ C1] CPU: 1 PID: 29310 Comm: syz.1.6146 Not tainted syzkaller #0 [ 1361.140151][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1361.140158][ C1] Call Trace: [ 1361.140165][ C1] <#DB> [ 1361.140173][ C1] dump_stack_lvl+0x18c/0x250 [ 1361.140205][ C1] ? show_regs_print_info+0x20/0x20 [ 1361.140245][ C1] ? print_usage_bug+0x475/0x690 [ 1361.140265][ C1] ? verify_lock_unused+0x18/0x140 [ 1361.140293][ C1] lock_acquire+0x2c2/0x420 [ 1361.140322][ C1] ? trie_delete_elem+0x96/0x6a0 [ 1361.140349][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1361.140369][ C1] ? get_user_pages_fast_only+0xa0/0xa0 [ 1361.140394][ C1] ? __perf_cgroup_move+0x60/0x60 [ 1361.140425][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 1361.140443][ C1] ? trie_delete_elem+0x96/0x6a0 [ 1361.140465][ C1] ? _raw_spin_lock+0x40/0x40 [ 1361.140488][ C1] ? perf_prepare_sample+0x156d/0x1df0 [ 1361.140517][ C1] trie_delete_elem+0x96/0x6a0 [ 1361.140537][ C1] ? __cant_sleep+0x220/0x220 [ 1361.140578][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1361.140603][ C1] bpf_overflow_handler+0x43f/0x510 [ 1361.140633][ C1] ? bpf_overflow_handler+0xde/0x510 [ 1361.140657][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 1361.140694][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1361.140719][ C1] __perf_event_overflow+0x447/0x630 [ 1361.140755][ C1] perf_swevent_event+0x319/0x570 [ 1361.140780][ C1] ? perf_tp_event+0x1520/0x1520 [ 1361.140811][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 1361.140850][ C1] perf_bp_event+0x319/0x430 [ 1361.140882][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 1361.140960][ C1] ? lock_acquire+0x2c2/0x420 [ 1361.140997][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1361.141030][ C1] notifier_call_chain+0x197/0x380 [ 1361.141058][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 1361.141084][ C1] atomic_notifier_call_chain+0xda/0x180 [ 1361.141111][ C1] notify_die+0x145/0x1a0 [ 1361.141138][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1361.141176][ C1] ? rcu_is_watching+0x15/0xb0 [ 1361.141204][ C1] notify_debug+0x2e/0x50 [ 1361.141223][ C1] exc_debug+0xde/0x140 [ 1361.141247][ C1] asm_exc_debug+0x1e/0x40 [ 1361.141271][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1361.141291][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1361.141305][ C1] RSP: 0018:ffffc90005377d50 EFLAGS: 00050202 [ 1361.141319][ C1] RAX: ffffffff842a2001 RBX: 0000000000000050 RCX: 000000000000000f [ 1361.141331][ C1] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc90005377e01 [ 1361.141343][ C1] RBP: ffffc90005377ee8 R08: ffffc90005377e0f R09: 1ffff92000a6efc1 [ 1361.141356][ C1] R10: dffffc0000000000 R11: fffff52000a6efc2 R12: 0000200000000310 [ 1361.141368][ C1] R13: 0000000000000050 R14: ffffc90005377dc0 R15: 00002000000002c0 [ 1361.141394][ C1] ? rcuref_put_slowpath+0xe1/0x150 [ 1361.141429][ C1] [ 1361.141434][ C1] [ 1361.141439][ C1] _copy_from_user+0x8b/0xe0 [ 1361.141464][ C1] __sys_bpf+0x23e/0x890 [ 1361.141490][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 1361.141538][ C1] ? lock_chain_count+0x20/0x20 [ 1361.141576][ C1] __x64_sys_bpf+0x7c/0x90 [ 1361.141597][ C1] do_syscall_64+0x55/0xa0 [ 1361.141610][ C1] ? clear_bhb_loop+0x40/0x90 [ 1361.141629][ C1] ? clear_bhb_loop+0x40/0x90 [ 1361.141654][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.141673][ C1] RIP: 0033:0x7f26ffd9cdd9 [ 1361.141688][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.141701][ C1] RSP: 002b:00007f2700bd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1361.141717][ C1] RAX: ffffffffffffffda RBX: 00007f2700015fa0 RCX: 00007f26ffd9cdd9 [ 1361.141728][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1361.141738][ C1] RBP: 00007f26ffe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1361.141748][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.141759][ C1] R13: 00007f2700016038 R14: 00007f2700015fa0 R15: 00007fff91805698 [ 1361.141808][ C1] [ 1362.094580][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.100979][ T1290] ieee802154 phy1 wpan1: encryption failed: -22