last executing test programs: 7.55965144s ago: executing program 2 (id=1963): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r3}, 0x8) setsockopt$sock_attach_bpf(r2, 0x107, 0xe, &(0x7f0000000000)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r3}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="59be89900000000000000000000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000040)="b9ff033168440372b89e14f00800545e414debf3fe1ee6fc6b621fa99c3e227e5a03", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r3, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0xffff, '\x00', r7, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000a00)={r4}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@cgroup=r9, r9, 0x2f, 0x14, 0x4, @void, @value=r8, @void, @void, r10}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0, 0x7a, &(0x7f0000000780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@ifindex=r11, r8, 0x37, 0x2000, 0xffffffffffffffff, @value=r9, @void, @void, @void, r10}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x9, 0x0, 0x6, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r5, 0x18000000000002a0, 0xc2, 0x0, &(0x7f0000000c40)="00000000000000093308633a77fbac141441e0022001bed16de99d221b3f22ff00000000fd000000006637c5aba31cde311d71ec073f64899e9133252a85de0b8f23972122248357546cddf606008b621f9cc5c7ea9e03c96a6e507dfee1c0232e35f3fa734a260f9d83bb67cfd964f67688e2aef90c39cb4adc1b338e252fdac5ce939dc840a96739f27704e27c2599ea19cb3acd2dff16a9a08d7b03890dbd984bcd2d2cfc8db80dc0452f790b297c74b0e13b20e43d54e19ee6c6a8833a452681", 0x0, 0x0, 0xa000000, 0x10c, 0x55, &(0x7f0000000640)="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", &(0x7f0000000d40)="f36f55f15fad8c97a1c51755f3a7229a67774308fd73957df4c32951780f9137a53ec70f64735821ca2964d514f861fca7fbf733cf3627bff2ba8f77e4e3463a15ce04780a0a088b5d63bac4223a61feb7c9d9b04e", 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001500)={0x5, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)={@fallback=r4, r5, 0x34, 0x24, 0xffffffffffffffff, @void, @void, @void, @value=r12, r10}, 0x20) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=0x1, r1, 0x11, 0x0, 0xffffffffffffffff, @void, @value=r13, @void, @void, r10}, 0x20) 4.496093532s ago: executing program 2 (id=1971): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000104000000200000000000000000000001040000002000000000000000"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000004000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="010000000200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="bf160000000000007962a80000000000150204000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r8, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@float={0x5, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000380)=""/198, 0x27, 0xc6, 0x0, 0xdf, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4, 0x0}, 0x8) r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000140)='syzkaller\x00', 0x3, 0x73, &(0x7f0000000200)=""/115, 0x40f00, 0x6, '\x00', r9, @fallback=0x2b, r10, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x9, 0x5, 0xdeab}, 0x10, r11, r13, 0x0, 0x0, &(0x7f0000000600), 0x10, 0x7}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r7, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYBLOB="8fefd8d0df7fa4bd45de209c5e416ca683def0eaf835b325bf407b1b9cddfbc6e09a3fa4001805313195a11625851fe4185ab1f5f4b7c8a17fddbdd7d1d2b1d658addddfb11b4c1af00a6cbf84f14019255ee58fbed93abf6abc0f83fe669627169ff78bbf0a67d6451d3b436d57b42a5b073356a50bed9aa03751e09b688d0822c1e7f70fd2491a5d28db0bbadc38b18b046cb144af8acad1a8c81c85ee85472290ae2064ce07f63da7472ccb878932481827e179ec72778a8cac51d438ed4b664d23162465bcbed4b6712b4300792387e70c31c1001814d176"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r14, 0x86dd, 0x12, 0xa888, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) 3.88574481s ago: executing program 2 (id=1972): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000cc0)="2701000001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4131accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0x44}, {&(0x7f0000000200)="68af78cb67d00ea949962672", 0xc}], 0x2}, 0x811) 3.884718371s ago: executing program 3 (id=1973): r0 = socket$kcm(0x29, 0x5, 0x0) (async) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) recvmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) 3.414412402s ago: executing program 0 (id=1976): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e0072", 0x54}], 0x1, 0x0, 0xb0}, 0xff00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) 3.161182764s ago: executing program 0 (id=1977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="070000000400001a18000000010000520a00e6771b93f1c8365059e9007cdce19c4a8b172e80840a6a1dcccd51d4c0d24f365c9cb470ad3038a0bf360220", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1000d7, 0x0, 0x8000, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x11000000000000, 0x180, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x12) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000008000008500000087e681582723071b54750000"], 0x0, 0x7}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8, @ANYRES8, @ANYRESOCT, @ANYRES16=r1, @ANYRES64=r0, @ANYRES8=r8], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x209, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x2}, 0x120, 0x400000, 0xb9, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, r9, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1000, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x2, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) socket$kcm(0x28, 0x1, 0x0) 2.860424018s ago: executing program 3 (id=1978): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00', r2}, 0x18) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x2, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40040) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb5, 0x1b, 0x5, 0x9, 0x0, 0x8, 0x80000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xffffffffffffff88, 0x8}, 0x5484, 0x4, 0x9, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x3366c873ccea5428) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x7) 2.654123797s ago: executing program 3 (id=1981): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x5, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0x1000a, 0x0, 0x80003}, {0xc, 0x80003, 0xfffffffc}]}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/233, 0x46, 0xe9, 0x7, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffff7f, 0x0, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r2) (async) socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000340)={0x0, &(0x7f0000000200)=""/105, 0x0, 0x0, 0x7, r2, 0x4}, 0x38) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0xd}, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a8001600200003400400", 0x3a}], 0x1}, 0x4000000) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3d98, 0x0, 0x8, 0x3fe, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) syz_clone(0x23000200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) 2.467272836s ago: executing program 2 (id=1982): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0, 0x0, 0x11000000}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000430033"], 0xfe33) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113100000000000bfa000000000000007000000ee00160e5e03feff00000000140500000000000069163a0000000000bf07000000000000360507000fff0720670600003f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2.089611214s ago: executing program 0 (id=1983): syz_clone(0x48010080, &(0x7f0000000000)="1421821bb8281da9c8c524c6a89e1cfac5681059949d41d80389b15973971680a3e15f0a2b30710147df47c7aa82d7f52604ff6fde58916f86f481c86b89ed827e031f6344136d7c3b070dbdece5f9179e378da00a93e15865ebc17aad0ef71692baa137811c96ab7e2848879ec594", 0x6f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="43779a49b472a4ddd61a90114a583cf3472f61415aff0617fc6b78e78b27178d9411844addca873d28f909a2e13ec8a264b75ff88a6f75add8c47b7b9726133edf0a2369bd6d3ce6dd2ad92361fd78402777c8f22c6c152b199a57abe68e282bc84780b1491f6465282862cfb522a216918eaab54ff550703cf73e42da62a90c556e8f096e4156d72be154b79e8abc1e88a5ed265d13309ba48bfd7bd4d16ac169f44f4995ac4230fef875958e17e04e3aea2b") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x8, [@var={0x7, 0x0, 0x0, 0xe, 0x2, 0x3}, @union={0xb, 0x1, 0x0, 0x5, 0x0, 0xe0, [{0x10, 0x5, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2c, 0x1}, @enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x8}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x5, 0x1}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x15}]}, {0x0, [0x30, 0x30, 0x61, 0x2e, 0x30, 0x2e]}}, &(0x7f0000000440)=""/185, 0xa4, 0xb9, 0x1, 0xa8b}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0], 0x0, 0x54, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x7fffffff, 0x8}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0xca7e, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%+9llu \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x12, 0xfffffffe, 0x3, 0x0, 0x40004, 0xffffffffffffffff, 0x8d01, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x8}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x2, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x401}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @jmp={0x5, 0x1, 0x8, 0x6, 0x0, 0x10}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, @fallback=0x32, r3, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=[r5, 0x1, r6, r7, r8, r9, r10], &(0x7f0000000b80)}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d80)={@cgroup=r9, 0x2e, 0x1, 0x401, &(0x7f0000000c80)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000dc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$kcm(r9, &(0x7f0000002f40)={&(0x7f0000000e00)=@nl=@unspec, 0x80, &(0x7f0000002f00)=[{&(0x7f0000000e80)="8e0819acba7110ad5ac17733aa68ee40b07891263d85ce6c5b6859231de37a600b68d7664d83ad22a2fe5cee84d825797e13a3aae68bf7eaef3cade5ee1ec503e9209fee7e4421e57b8ff595eae67faca1923a0142c8493f7a803efd26bcb14296e02914054c95fb8168831dd12caad656a570e5daa33bf92ab62163e7af7eb99d1cecaf6f6aa4108c464dc7d0792fdf5fc7940d91ff9eed2ec54d820d7b25de11fba5afa4af7e0497014b6a7bd1fdb4c36531a16be32457384528efd493d0ce3ad6435ad370358c40f1628a8e330dd9b596687a019b48aedf009442e9535f83f37cd1db1b6f4fd4260b445b25dd84f77b15dd07cfad0e03a792528a4e27c22863f8c5b14a9b89e6d762f3dfd6301759acbabb274a092251e240ace74992c6efb72d4bd18fdf53b7e20d6ecd6ae263cc336a5589d8b1f5fb879686774bd901fc78cca81df4f35d2c5766d3555733ed32391125b667dc481f1a62988034fc398a62865654b5ef934f3be9674cdc055d7cd8c8c279b69d5db64a6706c174b99e80d7e1617e60f7a69e1d25055ee31285c9dbb6c82a4df4d1953ded1231845ce13f2fab5507e56423176b89f794dfb95bdf353dcfc27cdaa32aa4f8e0c2e2358f746651b3ab552e8e4fc796ca9b53d5de3322f4b0488afeb415cfefabe565e33852b33fc8d53f20b83c8c171fe24a91c744a3883277870358382cd9e7a7309fa47f5518fd6c87691e549dbcad66bfdfd4e7451506ba697ee290a86daa43228422f1014353ac16fd5be731575dc28c7091ce15c265ef945dd2a0eafa47049a8d3c76a9c91540ab556ae441e048d954d956db2c5d29ab327a3478835c7a7b50c4167b3a52bddf28788aa3e1929643e8223de903f3ad94da835cefb8940c8430566668e4b02f10fc63c0ffb5a7568b9999321d947a8b470a58e195dbcb0af47ca9166fe97ba4466f6eda4c243383fc18040882d269ac98d02ea49d98a9871e5190fcf2bf5e52d40e12d524932715b1ee8d0ce619d6378d4e9128b905e9f9b14ad28f7b4f0ea41fb22e0e415c1db67b5f95c3981a484d59d5de0ee701d9992c5e7070d9404837d7270608ef3a784463792e5468e587ba684fabc1579ac5ac81fa90ae0fbd8870da2a9f0a22810bf83877305ed88869be54475fac3ae7c59a4615ebf4844ae69e815fe331f9ab2e556de11e84b78c87d0e5eeba581177946a97001702bad4f10e7346bb600bdb773b50ab681ec336f67a07e94ac96de38d79dfd5ae11f5164ec43c732d3b3ffd26627766942399d33a3908c1f15f47963b1ea2649b96abe93d97803b678439fcae20622869db50800f310c22b78ef4aebdb3b7f9518e6a0928be6188647edf86fff66323ae0cd4bb82d808726bc81f8c99e98a6b8d0ee3c77b559885f42f45de0b47ddc4cf9b6b311739f21483c34c2e6f4e3bd741d5f3436f5032bef8f67a70f96e78e6b94fa5170f0bb4b1ca31ace71a3a279909a2bab998321097defa88ed6460ff57d9c3d0046ed0fad9deb5da112df05d1caf821118503ffd75009b395107a7e4d8dd30970d7c5e2684b71c5ed392d6860c859ddad089f4574e0d0ef5cd24fa2a77d5ff47d0dbab77f2294b097985bb5ed5ce5a1f0789a291054431fbc4414f0550667d27b87c3e589a46cd2539442afc05a30acd62e87ae55d2cd6a028df15737bbb77c20812e8cafb70e00895762971263ee516a33def5984ac5a6f8645009cda373b925db6bc98e5e4533674938426b98917f185eb92d46c326b7dc6e22583239daaa25d53c260f067890b11e9ffc487db3f85e6d65da861eed0e87fb26c673fe0c4a75cef07216163968e24f718bf08e2ac0f0469e419c686eec4d4fccc29b5a5efbc90f02680a1bf97ff71e716aad2e65412dfa98d8328e71f11f7c8a94ff3e0489d5a65aa15db83e79d12ea33055448b670e04553852c8da756d618f650b460ed82628bf244021064a8bb7aa5f5ba25e4bcd040b6d617fd4ccd1471be338e33a6e389c5deeaf0b17e18c05e8765f144ebc70d56fe9e3ccc4078548fb10c1a8a5b965432ce699fb63d4d359376158a7e764bb316862f855b7bbc80d1c7d5d945021b0c1d45d8a44e193efd0024d54aeb2c52e021f330c62024515dd60aeabbdd22eb2bbef354c6cb7a02b9e5848a1eb94993dff5d3fec775a086b9314b272d632bbf9418e28060f0e27fa6326a66b9ce4acdd01b518f85df431d8d1a5a3b6e15b76891dc7256858fa67b5ebd8637b6c388b737e689ab74d105760bb9c5da7a6d51862a189ba206ec344e8146048191c8d38b0caa97690dd1fe589781621abfa4eece80ebf9044f5d398e71113f8f59571aa71b949b8922fd99520c1b79fcce7df6e92aa13b8fb5ccd75efa05cfdbe31145be33c8c253ea8cebcf1f6743604221dbf8446c7c8356592b130b2b15be92b8642c2048891d76adac0b7230bdeeea89c547275f8e7859d165f5413c2f9ca3346509a5aeaf4b1dd549de7f4c05743cc712e4ce1f7a8e7793465d9588d20f8ec5aa84d3a6a451809c6ca2e1ce580046957c51a5c8bfce6ea87e35fce3a27266137acefd8472662dbb6069c4a6ce449df460a7848db43774d916b7b0114114c586073c5324b1de89f00d6d5e8340aad56166e60afa477913fedc165f0a7d4db6b9f3375d87c1fd90d7d5b301edad43615570307a14cbf9cca45f224faf406bfc6cb4f2376404c08b3e220e8b3d3bf4344913ab9842143d49bafd0b3922c64be3238fd592b8246477d5decf26a355c2bb2bae9f24dedd9ed7d229fdba536d98a9f991bb3e97f1a910fdb0012b017bca1f803bc6b7128d8c2ddb56678617257714cf469588dd36a676a59e7a66006fbed04a17eecf83989ffd9ced093d07b1f6b9278f203bcdbdb75ab70c9aed4795ed9ae95cfeb7a10f4407beeaa13558e3e37ebce130682cf7452aea64ff07c3b97cb7692e86ec435c16b447f95d6ae97c1930c94640c977bd7a57992a748ebbfcfcf1e87132fb477877a904f2c653e30d5f641ef445dbdef80eefb3849648ab32abb0e179884f3f0821ed73567be66c536611ab23404bcca451d90fc1ed3da9ebae81b3d446ceaabb8a5032b980cb1274f2b8bc004b9221ed890f4e3108c4fffd40b934a9baee2e5b2b50ab235f152a24e68a8eb6bb49bc48eb70d62ac07f1d6d2c3c97c712a7389c40074a8b21136b90d5223a28565b539baf8ac62d6283ff14f3f40ab87136c36deb724e03997f35db52cf15094bb691d7832ce86b0d718167f4189420d38cb750141185ca18c5030528a5fe157c4741be86f1b4ca5cd1f246ce6c4404098ff7a5501690dfa63b36605db01c72d4359b8e7aebfd2679a96f5eb8e143ae15604405340d9df6c0fd61cb8bc29b6d44d99f98f91415a7d495abe353f5e06f9a0e9bad67b76de98179eb1d99be2ab0770cc1a535dc4ddc1a22b5b0f05b7153a7cdff03192af0c772ff7fbdb03488ef286a7f88457b5d9f18030cbc49531ea30b45d99b0088eb659113424cb4faad6c0642af2beb02265f254dc26e853cfbbf31cf14b51490cff87a70bf886a99f189ff76acf8277f2958175f4e60c51e36e6c0987090e46a87d16785494bf71684e04b2a5b28e4c0511d2a3cd5f7977d7eb42e299430af5655e62661de1910eda9505e6a7e616011c187f61941cd25a8e0c5cd8ed4cdec61471c5074f66a5b9eb2d98ce6c69d1bf6b50a46a7aaf530a7c80a4158ce3b8b16d90763805b6617e07064e9e21efc60ec1a38e407934f65741e9924e6e8e3a0b7feb6dc2c798e6210d710d8c705e0d8521b6cf0453368d402edb19cba69d75a7cd5aa47049ecee1baa1b21d1f8b7a5bb25565562efc7bae99a6bbeb6fe3f731496e24f2fb116c206748647ee93ee88ab40d81ad3c45edfc957435bc464ad0195e58a14591a02980315f3b0afd74658f2451bd36235c6e091d6d3757a93236495939a92429d34118821f8178e286f99f339c909666838a052cc03ece7985867990e4b1325560bb82263439feea717fa08581166543ce0b56a7b4bcf79607be68ab9de39a61aa16f05fd03721202a8458b28faa9f5089ea5e665624105054b11069fa4e8a7b83fdc446b113c1d32f52677482e678e5e84f7eac0044f0a132320de6b732fee70dbbf4648a9be165a56ed555825a88cf7347fba614e0a0cf6c56f76832c1a827a69018f175c1e73849e3c358a34e54b66257b02569b7136125c087f8a91562b7f9873e4a06eb948b08dc0b47f042b99ede646101d7e2721a97a69ff89d8efb9959dfab2746eb417dec80ad663b73c3fa429185f18506090a018d907fecc4bcb5e10ca3920d96a1d73277b1a7f951ad31e51d9437252ac7527d87828b992da3d8b23785b299c7807ea570899fef09fef5c4e6f87de56508129f860f707efb8724cc38a44731b433a48f2e3e9103b442e9c17035264591cf91b00fefdf84f630e99b8101e246a24e6b7838726286248a5f731a7a42fbdf3c5504dea8bd5aa84856fef83c28fd5faf6e029343ce6dad4c3fb43264d52a572ab53391d01d71d2cf7f39cee5ae80a1c7666d884cac737868521cd738e0fcb719b573d4fa9c5f06cfb01d7a3821895299315d85aca1318d1df6065ffc5de42ad17d6ea89409fecd6f332d41753911afa978fa70f8bb658dd42e012ee198d8e3a5aa5547fd8211827762c9234c26a4a22594845c3fe5e442f2b93190a6494df80585ce63c120cbec4cbe9d0685dc9ca314063a083b8f0d466ae9c6afcdf9e7550ecb4ebecfe240349b9e1f441857b9f0637d782faa612db41fe393d556127e885d65dad888773b28dd162adaf254a7be73558b50438b6f1b5cb373a1adc221151cd3f2f1c85613b97aeb1bf541af7bf9c9aed5a46429d4bfeb166255a0f1e5f5f5b62d6a3ee0b1080ff656a592340c4b77553a8b445fc81022586998353cd290f11b187df146fbfef3eb4fe01de9f4bd8b4907db487c83d8ecb7ff9c2639657af4cc636a6b63d32f742bb1fbc486f8c58f77eb44fe1664869de27b29e78919b27f16cff2d82a7d0db47abf1a20575abf1bee8e189fa0d16639daba7948b5ddb7044a550c55e9fb47faec406fdaac34e1830d61d9abb162858a2b23ff075cbf0fbeabacda01d81d09e0c4c872d613e429d3fa4bfc250a55042fdd30a4369d5dc2fa640a09ae9626ea6900f0366763a820608fdd8c7f81c8e859c333bf12177e6f10f1dd0ddbdcb913f40feaf9534689a193c1447c90b86011ae3ed213732615840c6935e414e2255be4b74f069cd1a6189985e46cfc4295f4f2d1668bcbd7c6dcdd2865296ac955f8fabed96a7b7bdf21fc6a538adf786b865d6606ca2318c930138f28b098a324cb2eebb03cc5239815e9f65fa639d9111f6f295e15d1eede227bc209bb626fe93305d7b161d7682be019ec9e1c9f4ca3e660d051f7fb1c0e74758fc388b5ffa7a1165754f29bd20877e862d001ae8676193d014c3dcdbed6065ef2b6f6e3a97fd2b8b86c9839190c6987b91ba5956766f137e1f2aa0baff68ad42841487f378dcd67f8017ccbda3f82577fc04aef93d918a39b919680b55cada52ef39eac4b6d15a6f7c9b89caebb93754bf9189ce92323fcbabeb8f23b9c986ce280135ed1ecfbb0ce82ea6b2c1678028499df464196443e788da5181b5a047d745d6de3376a720a1dac59e073953a326879a8b5dae4b2ab6d60872d9c91fbf4ee5b1ce1f332e671795c47799f1193dfe8338cda6c6310e29140502eaa198dcb16619e87ebe12116c5cef04add3a5578", 0x1000}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000002e80)="18ee6bf89688cfe2b9103a4f28258b5d4ad59c118cafcdaefe8110e17b2f33d911a257f0a8dc97eda058e396286e01d2e7b09766b0deed2daa534861302bb64b798ab4ac6908f0a0e110d06f720aa7", 0x4f}], 0x3}, 0x40) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002f80)={r9}, 0x8) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002fc0)={r1, 0x3}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003240)={r7, 0x58, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000033c0)={0x6, 0x14, &(0x7f0000003000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x4, 0x1, 0x0, 0xb, 0x3, 0xffffffffffffffa5, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000030c0)='GPL\x00', 0x4, 0xb3, &(0x7f0000003100)=""/179, 0x41100, 0x8, '\x00', r14, 0x25, r12, 0x8, &(0x7f0000003280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000032c0)={0x2, 0x3, 0x8, 0x100}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003300), &(0x7f0000003340)=[{0x1, 0x2, 0x10, 0x6}, {0x3, 0x5, 0x6, 0x2}, {0x2, 0x5, 0x9, 0xc}, {0x3, 0xfffff1b5, 0xf, 0x6}, {0x5, 0x2, 0xd, 0x6}], 0x10, 0x71}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003880)={r11, 0xe0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000035c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000003600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000003680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000036c0), &(0x7f0000003700), 0x8, 0x83, 0x8, 0x8, &(0x7f0000003740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003980)={0x1c, 0x11, &(0x7f0000003480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x1, 0x3, 0x2, 0x9, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x21}, @ldst={0x0, 0x0, 0x4, 0x2, 0x4, 0x1, 0x10}, @jmp={0x5, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffc0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}], &(0x7f0000003540)='syzkaller\x00', 0x8001, 0xe, &(0x7f0000003580)=""/14, 0x41100, 0x10, '\x00', r15, @fallback=0x2e, r12, 0x8, &(0x7f00000038c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000003900)={0x1, 0x0, 0x101, 0x1}, 0x10, r4, r11, 0x0, &(0x7f0000003940)=[r10, r9, r8], 0x0, 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, 0xfffffffffffffffd, 0x0) openat$cgroup_freezer_state(r12, &(0x7f0000003a40), 0x2, 0x0) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003b80)={&(0x7f0000003a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xa, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x1}, @enum64={0xc, 0x4, 0x0, 0x13, 0x0, 0xc, [{0xd, 0x7, 0x8}, {0xf, 0x7, 0x8}, {0x1, 0x5}, {0xa, 0x52a, 0x6}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x1}}, @typedef={0xa, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x61, 0x30, 0x0, 0x5f, 0x30, 0x61, 0x0, 0x5f]}}, &(0x7f0000003b40)=""/47, 0x9a, 0x2f, 0x0, 0x90000000}, 0x28) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000003bc0)=@base={0x17, 0x0, 0xffffff1d, 0xffffffff, 0x1200, r7, 0x7fff, '\x00', 0x0, r16, 0x1, 0x3, 0x1}, 0x50) gettid() sendmsg$tipc(r9, &(0x7f00000041c0)={&(0x7f0000003c40)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x2}}, 0x10, &(0x7f0000004100)=[{&(0x7f0000003c80)="16c4015f8780a7c6cb206088f8736691d78516eb618768c60d79d4febbd7148d84d42ca1ead6154ec88b74403bf5bdf697693754d385754277177dd3b303ba79167f166003d33aa0242d68c2bc48e6f77333542b9b6950bcce2e56d4546fa464bd58a7f4eca8e0aa15ffa8d278871f41b04cf4677971f383493b4a04ce92754702c7443bea13b07405fe4a6dfad41dc19527008705bed411f150f5614c44520fcbd8eb7cef8c26dbbde7efd694623c30c59f2145d4db402947fb9ceeef4dbd8d98da581142ac163edaeebeadd0e6368cf2e0932abcfce96cd48f2a1e76f64e569215f015f412ff7e90b9d6a6", 0xec}, {&(0x7f0000003d80)='\n', 0x1}, {&(0x7f0000003dc0)="65d16e0bf958e28f6bed90ecda0c33f7ddf5b054bf987d22ea3d765a5aadcd89baf155af48d20058034e25f931035f4bf89cc39766783be4dca1586b535363c8c7ecf18a149bfc978acacfde15cfac2a118c42ee6ea9aaaf347770fe31beb173adbde20b615fb4c20337d3f21bde9c297044d4e389419341db712bc4d6db6f2ddeeb0fc31adb2e11430d50eb36ad61d08846e93257885156c82981e1647fea80", 0xa0}, {&(0x7f0000003e80)="06f74dd2204f0f7f4d9465ef69c4a45961afe4307d819ecebd5bf961b26fa37ca4325bcddaab54df1e79fcadaaf7638c6ccae7413f6bf94278a9ad4f9e96c89b74c0fe545e7693d51707df8f601f976b673a0d51228a38b4687e90abf505bc6bb186d221ae5948b4fefccdd49a53164a7fb9602e2b80571c98f90f59eb434207ade3b32f83a5d9d83a22404af26284de0cf2ef0056dd895a4c60af7fe6de7de6f8e500f15b", 0xa5}, {&(0x7f0000003f40)="58432f11a1a6ad43c84022b20aa5d3e9f60c8cdc2d0fa8c4d8be6b8868fb9a685d15f6bf11fa2d65a8d782c03dba779d64caa0f4878af7ac9af1021592fcb285b949ab081018b4005e8ca64f6e4d39cb47829fe5b5a40ebb2baa6e05240acce3faf7e4964a833434452b24b594dc97f577c0c7ba1b042df5152fdd3b04d1f042327ab4a1569e178326b93104a053337320cfc5f1152369560fb60532450efe6e8a7a70f18b89aa780f7abe48c1584bb097ac2ee01766dd6c7c598a02b26fcf8ac433567c28e592e2476e6dc1f843bc84e4c39bee196f", 0xd6}, {&(0x7f0000004040)="c7b5fc1d1bcd15a931d4686b2df0584587d171dd538c0f652c02d475af5e6e4ae1811a1eccd4d8b0df75a094dbf07c64889ed7989b2734e0c06dcf777315b93d2022b21ef835c0c4034084ba22bffd83713c8e73a572f4c20ae27f7a0250ddad7ad7dac38be070ce6729eced244e8f13132ce7f2", 0x74}, {&(0x7f00000040c0)="d90cac74d0fc0a3e14f9893dda381c18e0162ec9f642e6fc2ad5541d3a", 0x1d}], 0x7, &(0x7f0000004180)="b9a8574308664095a5dfe7b9cbaf8a10565cf02a", 0x14}, 0x4) ioctl$TUNSETIFINDEX(r12, 0x400454da, &(0x7f0000004200)=r14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004480)=@bpf_ext={0x1c, 0xa, &(0x7f0000004240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x27c}, [@map_val={0x18, 0x9, 0x2, 0x0, r17, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, @alu={0x4, 0xe5549bc92fd238c0, 0x7, 0x7, 0xb, 0x50, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}]}, &(0x7f00000042c0)='syzkaller\x00', 0x99d4, 0x32, &(0x7f0000004300)=""/50, 0x40f00, 0x20, '\x00', r2, 0x0, r9, 0x8, &(0x7f0000004340)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004380)={0x0, 0x0, 0x5}, 0x10, 0xa68b, 0xffffffffffffffff, 0x6, &(0x7f00000043c0)=[r17, r0, r7, r13, r9, r5, r6, r0, r8, r13], &(0x7f0000004400)=[{0x1, 0x4, 0xb, 0x2}, {0x3, 0x2, 0x3, 0x1}, {0x1, 0x1, 0x8, 0x5}, {0x1, 0x2, 0x3, 0x7}, {0x3, 0x5, 0x6}, {0x5, 0x4, 0x5, 0x3}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000004800), 0x4) 1.870602514s ago: executing program 0 (id=1984): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x27, 0x6, 0x401, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) close(0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)="2f51963d025ae24d8be4228f811d4402b627cb97fca684499f71f2e0b21c8f042a3a721050a0d0a4c33d79017b2b0c40ff2ed0b994273e693effd656370ac7d8837f393068b1ed630f125c6a6dd0b080b8e9a44c9c1adf891215f0caa71e70fbddf57780dd417b7aa8c93ea4fdca77a7c3ba2f9e221ec0dc7a5e3a97fb6b78e7fea0c2a0f3e81eba", 0x88}, {&(0x7f0000000400)="2066d1141c6ed9b035fe57d30fad63a5adc38ee11271019d55e255b88d4f2e8742960f12b72c6c944789beb3d59e9bb88a010819d393f0ea913443e83c11c026da03c70363512fc11c3b25df79e6754991836943b00696d4fb59", 0x5a}, {&(0x7f0000000480)="34803a666a2c38f2fb1875fd0cf10c81451ccf6c2829cf35b3714a94c51c922571caace81824b22eb3713044f8f72fa89415d01c4eb42c5a465b027d176f8edb02b2ae18966bfef42c0721d8f28901a8fd579f248661bbe2415f9e8d103e176b45169b28b4be38bd42c14e2a2f03ac044e0b7701012a36b840b2741a8da648135575028dfdf8dd4bf53fcb048b5e8c3c7d2317df7707310b3a6e03dc6a1954435f2309f65e49dd0d3cd828491eb3ffbcbabda92b3d40286a41cd29d026e0fa11f28a5be62bcdf0dab1b39bdf925270726a5b3b221d947fb10b152de657fa9b226b36b85adfaf", 0xe6}, {&(0x7f0000000580)="396664ec659f4c28fdc1378182e495b17db964e7b19c03b43326d1f08b513530ef3b78d41ab03d2215558c3483547e40dbdc480ae7c7f8ef761920c5f89379739f38ca5189b9d24a90fc944e3458ea74e171ccad90bd870e3496aa123a08bfc716d13be1cea9a2d58018c7950d0d6e5f0e3d5d9881f57cb39a82f8bfa1004625fb5b9fce03f7d03fc4a910933246680fd8ff5085115138e9709bf91f462deddf0c4971c012f0e8844755b5aa8cfd078568", 0xb1}, {&(0x7f0000000640)="5c034f79f625930b844731390a289703a9829243367940012521618c750991fb0c160ece162717fcedc1e153e519c5eb06690c27e35502049cc9cecf293479200dcc183ba90038ec953c426c3bb44f0417d61580a6ceb3c65896aa1f74da594d0a2035bd831e2708969e536f62b2b8bbbac04a675ae0e960d19ec236ce451ece8ca7ff6ba958eb9c463a81ebd5236606bebc6693a8011a29decc276a5d306d0e39c6ca9371", 0xa5}, {&(0x7f0000000700)="5297a91936feacf28d09a4fc58c6191355eb0e569b122b5260b5de230fe683f3ce000886d50b4a4ea5023a998306aa228fd7b4b76f8f20bc6129689becacc1344661f9da401cf748b4bae54dba8ce9ad4ba07348e28a61e04fedf3", 0x5b}, {&(0x7f0000000780)="ec21a980290fa74141a5a70400a7181aabf5c6678990d89738d61b14c8a8de5e2efe3ae36322dba03995a71164194617294133a60293c800a76c3419bf822a7152fae2e7bf0d9a2ebfd7ad49493c5388773f1ea076b06f171f69595b36388a", 0x5f}, {&(0x7f0000000800)="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", 0xfc}, {&(0x7f0000000900)="fc874fda80d9071bc8eceb9e6cb1ca9e531e04f1498cd9b905235a95f21b7eab492a1255c53a5d1edf03c3f3972ac445a8811e7c79aa4bcee43c573abb5bdeb90bbc5e64814c68c09236b762ce6cffca39607e7cf23a291027f4e34372e77cb184209356abda8c569f1ed8f718b70d89894427c2ea43afe273ed0208804d64386141ca381507c925d4ee7d319bb3cccdaa6fdc", 0x93}], 0x9, &(0x7f0000000a80)=[{0xf0, 0x1, 0x9, "4d8d364a0cd9f9fe5791aa3821e1fe78f50fc561039c4670cbe46914d25a37eec4fa369eb54497537fc5d5bc3ba1d4336924aac4fc130d34c76636874039132338c23e7e33581974da05cb2eb4629eed820fe16968983f1911a750b7d167c501c56021f9146a9e5c7a20daa5dc5a0ddc5a6310dfb21811de36dcb4947ccbe0c9d9368127cdeac56e61168874dc0a45bfdeef2da51dc6e2ca52f8c3451d087cbf2890412c17a76a227c2d86938e43d31ed7ac330fd3996bd119ee6df0ec6b99fb6d9e3401c5b133365ceecfd6aa2142e4e18500b3eedeb3250c6cd2ad"}, {0x30, 0x1, 0x8000, "2072ff5eaf4cc3e45459876251d18229c7b5151b7d9e9496a108ed3d426aa1"}, {0x30, 0x114, 0x3, "35d65e1ea7bf578de74f815c4b98a4dd812bc3f217828c7369bb5d8d"}], 0x150}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x4f, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2663}, 0x8840) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x0, 0x1800000000}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f000000000000000800030018000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x2c, 0x0, 0x0, 0xfffff03c}, {0x6}]}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061192700000000f3b7a9fbda2f009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600000000000000010000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50) 1.813186576s ago: executing program 3 (id=1985): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xc, 0x9}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000080) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) syz_clone(0x8000000, 0x0, 0x0, &(0x7f00000016c0), &(0x7f0000001700), 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x889, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x5, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x7fd2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1.022698433s ago: executing program 2 (id=1988): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x111be0, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xf}, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="813e785611", 0x5}], 0x20, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.019290553s ago: executing program 0 (id=1996): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$kcm(0x10, 0x2, 0x0) (async) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x104000, 0xcdd, 0x2, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='^+,!z,-\x00') (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{}], 0x1}, 0x0) (async) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000080), &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff24}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060000000000000002000006040000000300000000000000050000000000000000000052"], 0x0, 0x3a, 0x0, 0x1}, 0x28) (async) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r7 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, 0xffffffffffffffff) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000040), 0x4) (async) recvmsg$kcm(r0, &(0x7f0000002580)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/107, 0x6b}, {&(0x7f0000002280)=""/14, 0xe}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f00000023c0)=""/92, 0x5c}, {&(0x7f0000002440)=""/82, 0x52}], 0x9}, 0x40000240) (async) sendmsg$kcm(r0, 0x0, 0x20040014) (async) socketpair(0x19, 0x0, 0x20000000, &(0x7f0000000000)) 853.774451ms ago: executing program 1 (id=1989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x484000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x7, [@random="f13d1f720b38", @empty, @random="418e782f426f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x800d30b8193ecf72}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x26, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @generic={0x5, 0x7, 0x2, 0x75, 0xbd03}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x9, 0x8, 0x3, 0x40, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x100, 0x53, &(0x7f0000000240)=""/83, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x4, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x4, 0x5, 0x9, 0x4}, {0x3, 0x2, 0xd, 0x2}, {0x69, 0x4, 0xa, 0xa}, {0x0, 0x5, 0x7, 0xa}, {0x4, 0x4, 0x5, 0x4}, {0x3, 0x1, 0x5, 0xc}, {0x1, 0x1, 0x9, 0xc}], 0x10, 0x1}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000480)=r2) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', r3, 0x4000, r4}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x98, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000b80)=""/122, 0x7a, 0x0, &(0x7f0000000c00)=""/19, 0x13}}, 0x10) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10, r3}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x3a}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1ff}], {{}, {}, {0x85, 0x0, 0x0, 0x9c159e2733d71e72}}}, &(0x7f0000000700)='syzkaller\x00', 0x1000, 0xdf, &(0x7f0000000740)=""/223, 0x40f00, 0x40, '\x00', r6, @fallback=0x38, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r2, 0x0, &(0x7f0000000d40)=[r9], 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000e40)) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000e80)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000ec0)={r11, r2, 0x4, r2}, 0x10) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000f00)=0x1) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000f40)=r10, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000f80)={r10, r9}, 0xc) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x70080, 0x0) ioctl$TUNGETVNETHDRSZ(r12, 0x800454d7, &(0x7f0000001000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)) sendmsg$tipc(r4, &(0x7f00000014c0)={&(0x7f0000001080)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x4}}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000010c0)="20df9a430cca23765b9bffe371a461311053b0b168da3d60da670cf43888148db096d43bb4b876554ba5e0aad49137db7982ca2536452b847605e0982cbcaac94377e6559202819d3be35684f27bfc362ae76dfe0802be5a2bd5e4088d3b490d73c7189c4bc650e75cd36eb1065b81cea81f238f29aa63625a139d5f805fc20b6e6097a0e5f5d3e812bd40d4e48f9279bb4dad80cb99d1", 0x97}, {&(0x7f0000001180)="857054e030a392abe89ebdfa4cbde8d2b9b65cd9b3dd52592495fb27abc45f481781154f97d01f3c597a93d72c7466", 0x2f}, {&(0x7f00000011c0)="fb220f126e655c8964556a0b2b6ea68e7f9100fb415d652366846d", 0x1b}, {&(0x7f0000001200)="308b833936c46e398fd5211b423965db23fe5f10eaeddfdad00e298c0ed318746010f2a3acadcdd6c7d06f2f5a522dc1f4a739be05880f62636fefba8e6e5d516cdd3c8c51337f6b8771caff4423cff8b9f1727e62900f5f508ad1100fff0a4d56740b0591adc75d13b48a059ac1479ed3e6509b82838080f59b2887120967fc1e83abd9d40ecc494b71d30e1381a147e950e922244aa30cd0f3f823cbae67ec995d566b45c3fc2348fad5a62a23a8e49a9593c0e7415d5b54ba6dbfa89cd8eded788d55ec2f3b9507133d39365f7a0954a09b5bde041e323dbdd001ebfa070febae9685b4695b4e87a5dd0769687347df", 0xf1}, {&(0x7f0000001300)="8a9ea25644d11d7153f90fd78ffe509c6a7a144fbae4cafbaf493d113b6af8ed35cc6d87cc4e89776259de6439ef713f477fb6503621c809de7ae3b1e6e1e2616b1bd0935a850d17813e03bd1c5f667a902acbbe51403f2d92f1bfca9b71c8a21af03749396a2873802cc7ea4cf790e186c6ae12b64565665ac91cbce3df296a9db18d", 0x83}], 0x5, &(0x7f0000001440)="ae7bf65c4682448ab2cc92d730325e7666e8ec7074f0570bc06785a5a185ff294a645f2782f2bde220fd9dcd6e31063923a742b34885c61a0134893be278dbfd56446506ff688c118ff71229cb595dbc2c1ad472bdf57bb3d6635ff7533252d98e209332e8ba5bfc1c29872341c267673464460ea46f6b0e589023caf3ef", 0x7e, 0x4}, 0x804) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000001540)={0x1, &(0x7f0000001500)=[{0x8, 0x8, 0xe2}]}) r13 = perf_event_open(&(0x7f0000001580)={0x3, 0x80, 0x2, 0x7, 0x5, 0x0, 0x0, 0x5, 0x82000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6484, 0x0, @perf_config_ext={0x8, 0x1}, 0x80000, 0x3595, 0xe01, 0x7, 0x7, 0x13e376eb, 0xc, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x6732b2b0b280ef71) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000001600)=@in6={0xa, 0x4e22, 0xb75f, @remote, 0x9}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="a355a842682fd6950d0580b6ae0ccdde5098f7a22807506f7f8a8d9a2e4bf4582300fd724ab9b1739d2f5db4223b9704f5000c6cd103bc2015fca4cd49b7b90161d988a059c61e58b02688a7a4b160aaec038d0b84f2beb22e996027d59a6f2a1e29cfb824bc74ff5b49edd9df424a9e75632bdf16d4d9720cde093a8916a7c8aca82dddcc5b2457cf45260e32fd216feb693f450dc23b2316d98c514ac7bf4df543e86a49d75a876f68c2baed17", 0xae}, {&(0x7f0000002740)="dd70074ab26c5389ed4227ad41b3caa798d6e69b610c39a57ba8bb2757f3ec246f17b04f759e0a0d9d68da3bec62cb332376f16de9aae28946b5f4c908be0092a1143aee2af513bf6a758345233b145439dc60b0d4b44d203e52e970bc55c36f1f81696a6df12aa81a42ced7b6cc2b5163774fda28c3638ffda2f6a633a16b6d62ae8f4d127c780ad6117ccc5c3b97c889153835e928034895b66b546b16ed5e948a0098577f3bc6261f7016160ba1dffaaf6c653179212c6116695a7e0400c111744315b8ee1f14388032e99e313a97eefd8a890cc2db25425a7a78c4aeeda78742839878f5c7b6586edd", 0xeb}, {&(0x7f0000002840)="dd044eb6459c9caccd47f77b56c88b016215dce5bb21a5f322cc54d826efb6c499698e85597e0ca45fbdc32a028f6ebbeed3812b7831c214aeadf3a9893f832c0f5ecfa43b2f5bbdc37b8a64a6cb9684e5ed8972490a8c3a835395f89d1b10633114850fe0b9fa902afbc94fa368a25aed6504acba1e53a51232615ac4214d0aa6f86b6713a8585b72c9939d0c001a33a5df61bb91ad9214974289e5ccd8", 0x9e}, {&(0x7f0000002900)="0bc4d1826411e9b8e168fbd46246c56c70c37ab5fe0535fe4eba139e6da81ab94306d6f22f6eed8c4047ddcd", 0x2c}, {&(0x7f0000002940)="5b3ad69dd873b6a1f9abbafb44b44fd62801be83befdc72c8b4e72eca36d80a3263aa35acf8d462dd8d8c910a33232c50fc72f289b49b7d0a5ee3e00128e14948ae091593b385b4edb66a81f51f137b6208ce5950a7895a44e6bb92db769395439fc946e9b2d587eb03ec6fdb31837376797015ff7d45519e4f4d301dc8760f317789d15b1fe6a7ed39c07dbaf6d8ae37929d6f4bb206413a9ec1650e5b57c464e0e858c5992264d1a173ef0fce51c6d02853cea471c2b8c4a8dda1c811b14392e16101cb6894762690f316ed9f962e566c95652297b58759edef77daed4974048ce20fec0ac5a25a82357ec40f89e5b19a54c23", 0xf4}, {&(0x7f0000002a40)="52563ca0a3835bc26b8ad8c470405f219996a68215b484490f46bfb1267700371a31f64db1a27855ba448aaf4dd0d17a4036625feeb9ffa9176bb04fdc8fb8b549756d8e34640f481f24a3512fc0f3c8f297cc0daf162899b673858ffdbe6cb27c7b3c7d1179cff63877310028abc266b5b987ebec16569a73ec28f91ff7a8ef34a3f398417678c625deefd984f770ca1dd03d62b1b6c6253df7652fe3b14eaa38c6cb175ea33b6fedf9560e9116611486dffe", 0xb3}, {&(0x7f0000002b00)="9c7915b0dd94de0b6537860bdd4240806ba00b4184b0b41b0931da3a3d37645c05482497febb4c4c11460adef374d8396f7d47d3f03b9f5cb5b5dbc933d795", 0x3f}], 0x8}, 0x4060080) ioctl$TUNGETVNETHDRSZ(r12, 0x800454d7, &(0x7f0000002c00)) 733.656337ms ago: executing program 1 (id=1990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x100}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/103) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pB \x00'}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x13, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x66, 0x2a, &(0x7f00000004c0)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0x6, 0xd}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000580)=[{0x0, 0x3, 0x6, 0x4}, {0x2, 0x4, 0x0, 0x4}, {0x4, 0x5, 0xb, 0x9}], 0x10, 0x800}, 0x94) r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r5 = getpid() r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x2f, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xb9}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @tail_call, @alu={0x4, 0x1, 0x0, 0x3, 0x8, 0xffffffffffffffff, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x9, 0xd, &(0x7f0000000880)=""/13, 0x41100, 0x30, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x8, 0x9, 0x4}, 0x10, 0x1b4cd, 0xffffffffffffffff, 0x7, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000980)=[{0x4, 0x1, 0x2, 0x3}, {0x5, 0x1, 0xc, 0x4}, {0x0, 0x5, 0xc, 0xa}, {0x5, 0x1, 0xc}, {0x3, 0x2, 0xa, 0x3}, {0x1, 0x4, 0x0, 0x5}, {0x4, 0x2, 0x7, 0x2}], 0x10, 0x83}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x8, 0x10}, 0xc) r9 = syz_clone(0x70043000, &(0x7f0000000b00), 0x0, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)="f2b17414741727e251996bb91c63509af56d6d907edfeccf76575227fdaed99d12f16d45d377979003511dd8425ad81b13f8f9a7f1ea6db3c6562cd9671bfebc8a6c0c8ba593335c5f8e1cc4ccd77dbb935788cb0c4e4e0a019d8a9faf4fb5be0aa32fb8d9091347695c95d6a4e610f99b07729896345e78b8aba0f6a82c303626cae7cb3f1abd95e2690908abb287e92fd5672f5b2d0afeb85453c54644e4eaaaf56cc640a58dab21e4") r10 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000cc0)={0x0, r0}, 0x8) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00'}, 0x18) r14 = gettid() sendmsg$unix(r1, &(0x7f0000000f00)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="1eab2ff74fb4230bf1b3457531a0898bac90c3250e29ec8c1686ce0070b3f7855a54df6c6115a6adc77d32918f6b0d8015aa564c85abc4f6207ac53a3686abbe2bd78f93d5da8776c5e46ae48293176cc806b94986839c84ee82800c1958b7fe2fad580891c150a0f9a7ba138680cc6e76cd59630705096863f658df01e1aacfe55f7cc76ce26d253dcf922ce401d6b0b47f", 0x92}], 0x2, &(0x7f0000000d80)=[@rights={{0x30, 0x1, 0x1, [r0, r2, r0, r0, r0, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r3, r4, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r6, r7, r0, r0, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r11, r0, r0, r12, r13, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}], 0x158, 0x4}, 0x4018092) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r13, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)='%pB \x00'}, 0x20) r16 = perf_event_open$cgroup(&(0x7f0000001040)={0x4, 0x80, 0xf2, 0x0, 0x8, 0x3, 0x0, 0xc, 0x51020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd, 0x4, @perf_bp={&(0x7f0000001000), 0x3}, 0x10010, 0xf6, 0x6, 0x5, 0x6, 0x0, 0x2, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_REFRESH(r16, 0x2402, 0x0) ioctl$TUNSETDEBUG(r15, 0x400454c9, &(0x7f00000010c0)=0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001100)={'veth1_to_bridge\x00', 0x2}) recvmsg$unix(r1, &(0x7f0000001280)={&(0x7f0000001140), 0x6e, &(0x7f0000001200)=[{&(0x7f00000011c0)=""/8, 0x8}], 0x1, &(0x7f0000001240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@fallback=r13, 0xc, 0x1, 0x4, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0xa, [@union={0x5, 0x6, 0x0, 0x5, 0x0, 0x6, [{0x9, 0x5, 0x8000}, {0xb, 0x1, 0x8c71}, {0x10, 0x0, 0x1}, {0x0, 0x4, 0x24b0}, {0x1, 0x3, 0x471678c3}, {0xc, 0x0, 0xfffffe7b}]}, @const={0xc, 0x0, 0x0, 0xa, 0x3}, @enum={0xe, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0xe}, {0xa, 0x4}, {0xd, 0x72}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x2, 0x8}]}, {0x0, [0x30, 0x61, 0x30, 0x0, 0x2e, 0x2e, 0x0, 0x5f]}}, &(0x7f0000001500)=""/59, 0xca, 0x3b, 0x0, 0x200}, 0x28) r18 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r18, 0x89e1, &(0x7f0000001580)={r17}) openat$cgroup_type(r17, &(0x7f00000015c0), 0x2, 0x0) 639.142341ms ago: executing program 3 (id=1991): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x26ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64], 0x50) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9f0802"], 0x0, 0x37, 0x0, 0x1, 0x3}, 0x28) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xff}, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) (async) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 568.736494ms ago: executing program 0 (id=1992): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x7, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c1"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000021000000000000000000009500000000000000360a02000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441805"], 0x30}, 0x7e8166965e22236a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd409d6e4edef3d93452a92954b43370e970161ed7875e585d924ed43df459cab16", 0xd8}], 0x1}, 0x0) r6 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) write$cgroup_pid(r7, &(0x7f0000000200), 0x12) write$cgroup_pid(r7, &(0x7f0000000100)=r6, 0x12) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000480, 0xf2102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, r6, 0xffeffffffffffffe, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 531.800626ms ago: executing program 1 (id=1993): r0 = socket$kcm(0xa, 0x1, 0x106) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 324.382735ms ago: executing program 3 (id=1994): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, 0x77, 0x0}, 0x20000811) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)={'c', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES8=r1], 0x32600) 318.438065ms ago: executing program 1 (id=1995): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x3) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r0) 199.235941ms ago: executing program 1 (id=1997): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 32) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0xc, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000180)=0x6, 0x12) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x6c, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e"], 0xfe33) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x400, 0x6, 0x5, 0x0, r2, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x7}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r2, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%ps \x00'}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r2, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005f82329808f1d0621588bf57bfc3d92d90000000300000045f304a7e8e2d01dd194fc547c9691d033f73bd576dd3c7fed15a68197114e7f156f134b5f86c773c9d457a06044855f695ca540a82fed2f369026e3bf8fa324a718b07071835d16f5a08da04cbe88de9208c1a87461b8f686cd80af81e42cb743c4d35e850ce7ba1115c900dcd7"], 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, r11}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfc00000, 0x0, 0x0, 0x0, 0x3ff}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}}]}, &(0x7f0000000100)='GPL\x00', 0x40, 0xd4, &(0x7f0000000200)=""/212, 0x60700, 0x4, '\x00', r6, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x6, 0x0, 0xc}, 0x10, 0xffffffffffffffff, r3, 0x7, &(0x7f0000000b40)=[r8, r9, r2, r2, r10, r2, r2], &(0x7f0000000b80)=[{0x2, 0x4, 0xd, 0x4}, {0x0, 0x4, 0x9, 0x1}, {0x2, 0x3, 0x5, 0xb}, {0x5, 0x5, 0x6, 0x8}, {0x3, 0x1, 0xd, 0x9}, {0x4, 0x4, 0x2, 0x7}, {0x0, 0x5, 0xa, 0x8}], 0x10, 0x3}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)}, 0x10040850) 30.923569ms ago: executing program 1 (id=1998): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='5-2'], 0x23) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000058"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000002000000f80000000600000000100000", @ANYRES32=r4, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a00000000000000020000000d0000000101001a5eb88698632b8e567676000000000000006ab664bf0071a0ba537831fab2a54adba5f9"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000bc0)}, 0x8004) setsockopt$sock_attach_bpf(r7, 0x84, 0x6e, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x2, 0x3, 0x6, 0x9, 0x0, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback, 0xffffffffffffffff, 0x22, 0x2b}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r9, @ANYBLOB='.\x00'/12, @ANYRES32=r10, @ANYBLOB="671bb61a8396d5e3992f7568f885930cba0f83b0a2ac1729feca5afc7e8f5052736fd2cb7bee36c5ef6ba401bc45f548dfa382fd39d732747c44184332c300e94c13145973538077daafc16fe925ff7ca5b88509df95c5b41c9fbf807984fecea93e5d6a01e1adeb10e959e8cecfcb9a64b35209e2650800"/135, @ANYRES64=0x0], 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) 0s ago: executing program 2 (id=1999): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0x1f, 0x800, 0x5, &(0x7f0000001a00)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): as an invalid length. [ 139.603162][ T6716] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.250'. [ 139.626828][ T6713] netlink: 128 bytes leftover after parsing attributes in process `syz.0.248'. [ 139.689223][ T6713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.013237][ T6726] netlink: 'syz.3.254': attribute type 39 has an invalid length. [ 141.002770][ T5783] Bluetooth: hci3: command tx timeout [ 141.809538][ T6758] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 142.102042][ T6760] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 142.255397][ T6768] netlink: 132 bytes leftover after parsing attributes in process `syz.0.264'. [ 142.550296][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 142.633367][ T6777] netlink: 'syz.1.267': attribute type 10 has an invalid length. [ 142.970689][ T6777] macvlan0: entered promiscuous mode [ 143.106381][ T6777] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 144.078412][ T6796] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.271'. [ 144.192530][ T6801] netlink: 164 bytes leftover after parsing attributes in process `syz.1.272'. [ 144.315549][ T6798] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 145.511992][ T6818] netlink: 'syz.0.277': attribute type 9 has an invalid length. [ 145.540323][ T6818] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.277'. [ 147.784978][ T6813] netlink: 'syz.1.276': attribute type 16 has an invalid length. [ 147.794073][ T6813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.276'. [ 147.804947][ T6813] veth1_macvtap: entered allmulticast mode [ 148.007963][ T6824] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.281'. [ 148.017662][ T6824] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 148.953902][ T6834] -1: renamed from syzkaller0 [ 149.803789][ T6854] netlink: 'syz.1.291': attribute type 10 has an invalid length. [ 150.066664][ T6862] syz.1.292[6862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.067059][ T6862] syz.1.292[6862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.105473][ T6860] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.289'. [ 150.492017][ T6870] vcan0: entered allmulticast mode [ 150.810776][ T6871] syzkaller0: entered promiscuous mode [ 150.852842][ T6871] syzkaller0: entered allmulticast mode [ 151.695046][ T6885] netlink: 'syz.2.298': attribute type 11 has an invalid length. [ 151.756313][ T6885] netlink: 212832 bytes leftover after parsing attributes in process `syz.2.298'. [ 154.268993][ T6932] netlink: 144 bytes leftover after parsing attributes in process `syz.3.308'. [ 154.330614][ T6932] team0: Port device team_slave_0 removed [ 154.356883][ T6932] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 154.567441][ T6941] netlink: 'syz.1.311': attribute type 12 has an invalid length. [ 154.643745][ T6941] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.311'. [ 155.195512][ T6963] netlink: 6 bytes leftover after parsing attributes in process `syz.1.317'. [ 155.214884][ T6963] openvswitch: netlink: Flow key attr not present in new flow. [ 155.613685][ T6966] -1: renamed from syzkaller0 [ 155.636327][ T6979] netlink: 'syz.3.321': attribute type 21 has an invalid length. [ 155.898114][ T6989] €Â0: renamed from batadv_slave_1 (while UP) [ 156.193301][ T6995] netlink: 'syz.0.326': attribute type 29 has an invalid length. [ 156.231642][ T6995] netlink: 'syz.0.326': attribute type 29 has an invalid length. [ 156.279819][ T6999] netlink: 'syz.0.326': attribute type 29 has an invalid length. [ 157.348740][ T7022] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.333'. [ 157.359788][ T7019] netlink: 'syz.3.332': attribute type 6 has an invalid length. [ 157.367493][ T7019] netlink: 164 bytes leftover after parsing attributes in process `syz.3.332'. [ 157.699307][ T7028] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.335'. [ 157.757301][ T7028] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 158.641241][ T7029] -1: renamed from syzkaller0 [ 159.059487][ T7051] syzkaller0: entered promiscuous mode [ 159.096610][ T7051] syzkaller0: entered allmulticast mode [ 159.331097][ T7066] netlink: 132 bytes leftover after parsing attributes in process `syz.0.345'. [ 159.372364][ T7066] netlink: 'syz.0.345': attribute type 9 has an invalid length. [ 159.404265][ T7066] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.345'. [ 161.303748][ T7076] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 161.312133][ T7077] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.348'. [ 161.321352][ T7077] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 161.541049][ T7105] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 161.559151][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.353'. [ 161.577946][ T7105] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 161.586198][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.353'. [ 161.618538][ T7104] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 161.626501][ T7104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.355'. [ 161.639016][ T7104] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 161.669842][ T7100] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 161.677669][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.353'. [ 162.070477][ T7112] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.354'. [ 162.618769][ T7129] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.362'. [ 162.652817][ T7129] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 163.263270][ T7151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.366'. [ 163.313711][ T7154] netlink: 'syz.3.367': attribute type 12 has an invalid length. [ 164.844285][ T7201] netlink: 'syz.1.377': attribute type 29 has an invalid length. [ 164.866333][ T7201] netlink: 'syz.1.377': attribute type 29 has an invalid length. [ 164.912805][ T7201] netlink: 'syz.1.377': attribute type 29 has an invalid length. [ 165.482613][ T7216] tap0: tun_chr_ioctl cmd 1074025694 [ 165.798305][ T7224] __nla_validate_parse: 2 callbacks suppressed [ 165.798324][ T7224] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.382'. [ 165.832278][ T7224] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 166.982115][ T7253] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.390'. [ 166.997928][ T7253] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 167.914920][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.923263][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.953443][ T7284] bridge0: entered allmulticast mode [ 168.456193][ T7291] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.401'. [ 168.469122][ T7291] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 168.897602][ T7303] netlink: 'syz.3.406': attribute type 21 has an invalid length. [ 168.906044][ T7303] netlink: 128 bytes leftover after parsing attributes in process `syz.3.406'. [ 168.929700][ T7303] netlink: 'syz.3.406': attribute type 4 has an invalid length. [ 168.937436][ T7303] netlink: 'syz.3.406': attribute type 3 has an invalid length. [ 168.956067][ T7303] netlink: 3 bytes leftover after parsing attributes in process `syz.3.406'. [ 168.975024][ T7304] netlink: 'syz.3.406': attribute type 21 has an invalid length. [ 168.993489][ T7304] netlink: 128 bytes leftover after parsing attributes in process `syz.3.406'. [ 169.022762][ T7304] netlink: 'syz.3.406': attribute type 4 has an invalid length. [ 169.049691][ T7304] netlink: 'syz.3.406': attribute type 3 has an invalid length. [ 169.062993][ T7304] netlink: 3 bytes leftover after parsing attributes in process `syz.3.406'. [ 169.270030][ T7317] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.410'. [ 169.279382][ T7317] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 170.013886][ T7334] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.415'. [ 170.256852][ T7347] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.419'. [ 170.311694][ T7347] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 172.312344][ T7390] netlink: 'syz.0.432': attribute type 21 has an invalid length. [ 172.378016][ T7390] netlink: 'syz.0.432': attribute type 19 has an invalid length. [ 172.417985][ T7390] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.432'. [ 172.484167][ T7391] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.431'. [ 172.698297][ T7391] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 173.156814][ T7402] netlink: 'syz.3.435': attribute type 2 has an invalid length. [ 173.198041][ T7402] netlink: 'syz.3.435': attribute type 4 has an invalid length. [ 173.205790][ T7402] netlink: 132 bytes leftover after parsing attributes in process `syz.3.435'. [ 173.629640][ T7407] netlink: 100 bytes leftover after parsing attributes in process `syz.2.437'. [ 174.057708][ T7420] validate_nla: 2 callbacks suppressed [ 174.057726][ T7420] netlink: 'syz.0.441': attribute type 7 has an invalid length. [ 174.108244][ T7420] netlink: 140 bytes leftover after parsing attributes in process `syz.0.441'. [ 174.359547][ T7426] netlink: 180 bytes leftover after parsing attributes in process `syz.1.443'. [ 174.900713][ T7442] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.446'. [ 174.943046][ T7442] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 176.217882][ T7469] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.455'. [ 176.305420][ T7474] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.455'. [ 177.840628][ T7522] netlink: 'syz.0.472': attribute type 12 has an invalid length. [ 177.882641][ T7522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.472'. [ 177.917922][ T7524] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.470'. [ 177.947435][ T7524] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 178.036617][ T7522] netlink: 'syz.0.472': attribute type 1 has an invalid length. [ 178.059557][ T7522] netlink: 13854 bytes leftover after parsing attributes in process `syz.0.472'. [ 178.592068][ T7543] netlink: 'syz.3.479': attribute type 21 has an invalid length. [ 178.634373][ T7543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.479'. [ 178.655507][ T7543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 179.663611][ T7561] raw_sendmsg: syz.0.485 forgot to set AF_INET. Fix it! [ 180.312986][ T7570] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 180.330307][ T7570] netlink: 55 bytes leftover after parsing attributes in process `syz.1.489'. [ 180.603266][ T7571] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.488'. [ 180.622449][ T7571] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 180.770854][ T7576] netlink: 14 bytes leftover after parsing attributes in process `syz.1.492'. [ 180.816754][ T7578] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.490'. [ 180.858917][ T7576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.952667][ T7576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.016860][ T7576] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 181.048388][ T7576] bond0 (unregistering): Released all slaves [ 181.184804][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 181.195606][ T7584] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 181.228754][ T7584] team0: Port device dummy0 added [ 181.570074][ T7603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.357002][ T7615] netlink: zone id is out of range [ 182.368295][ T7615] netlink: zone id is out of range [ 182.373664][ T7615] netlink: zone id is out of range [ 182.387055][ T7615] netlink: zone id is out of range [ 182.396047][ T7615] netlink: zone id is out of range [ 182.406224][ T7615] netlink: zone id is out of range [ 182.411925][ T7615] netlink: zone id is out of range [ 182.417791][ T7615] netlink: zone id is out of range [ 182.425128][ T7615] netlink: zone id is out of range [ 182.692541][ T7622] netlink: 'syz.3.506': attribute type 1 has an invalid length. [ 184.751407][ T7641] __nla_validate_parse: 7 callbacks suppressed [ 184.751437][ T7641] netlink: 12518 bytes leftover after parsing attributes in process `syz.3.511'. [ 186.314294][ T7678] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.520'. [ 187.039463][ T7691] syzkaller0: entered promiscuous mode [ 187.049639][ T7691] syzkaller0: entered allmulticast mode [ 189.213129][ T7698] netlink: 'syz.1.526': attribute type 10 has an invalid length. [ 189.666632][ T7725] netlink: 'syz.0.532': attribute type 39 has an invalid length. [ 189.758450][ T7725] bond0: (slave syz_tun): Releasing backup interface [ 190.175203][ T7744] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.537'. [ 190.365087][ T7746] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.540'. [ 190.429754][ T7746] netlink: 'syz.0.540': attribute type 21 has an invalid length. [ 190.464752][ T7746] netlink: 128 bytes leftover after parsing attributes in process `syz.0.540'. [ 190.485402][ T7746] netlink: 'syz.0.540': attribute type 4 has an invalid length. [ 190.498677][ T7746] netlink: 'syz.0.540': attribute type 5 has an invalid length. [ 190.510695][ T7746] netlink: 3 bytes leftover after parsing attributes in process `syz.0.540'. [ 190.808927][ T7752] IPv6: NLM_F_CREATE should be specified when creating new route [ 190.840585][ T7752] netlink: 1 bytes leftover after parsing attributes in process `syz.0.542'. [ 190.924036][ T7759] delete_channel: no stack [ 191.579642][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 192.302729][ T7807] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.550'. [ 192.332308][ T7807] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 192.369412][ T7807] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.550'. [ 192.561018][ T7811] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.551'. [ 192.576786][ T7811] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.551'. [ 193.019736][ T7830] netlink: 'syz.3.557': attribute type 22 has an invalid length. [ 193.366545][ T7845] netlink: 'syz.2.562': attribute type 9 has an invalid length. [ 193.500845][ T7847] net_ratelimit: 81 callbacks suppressed [ 193.500865][ T7847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.926204][ T7856] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 194.102234][ T7858] syzkaller0: entered promiscuous mode [ 194.516603][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.524391][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.771506][ T7892] delete_channel: no stack [ 195.776204][ T7892] delete_channel: no stack [ 196.334885][ T7872] macvtap0: entered promiscuous mode [ 196.341854][ T7872] macvtap0: entered allmulticast mode [ 196.347378][ T7872] veth0_macvtap: entered allmulticast mode [ 196.392615][ T7897] __nla_validate_parse: 7 callbacks suppressed [ 196.392665][ T7897] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.578'. [ 196.423563][ T7897] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 196.818641][ T7920] netlink: 'syz.1.585': attribute type 8 has an invalid length. [ 196.844972][ T7920] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.585'. [ 197.050654][ T7931] netlink: 'syz.0.587': attribute type 21 has an invalid length. [ 197.068507][ T7931] netlink: 100 bytes leftover after parsing attributes in process `syz.0.587'. [ 198.420208][ T7957] netlink: 14 bytes leftover after parsing attributes in process `syz.3.592'. [ 198.566415][ T7954] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.591'. [ 198.618348][ T7954] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 198.652145][ T7960] netlink: 'syz.3.592': attribute type 21 has an invalid length. [ 198.668797][ T7960] netlink: 'syz.3.592': attribute type 7 has an invalid length. [ 198.915257][ T7972] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.596'. [ 198.926612][ T7967] netlink: 'syz.1.595': attribute type 46 has an invalid length. [ 198.948223][ T7967] netlink: 2 bytes leftover after parsing attributes in process `syz.1.595'. [ 198.958670][ T7972] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 198.966426][ T7972] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.596'. [ 199.276207][ T7981] netlink: 'syz.3.598': attribute type 27 has an invalid length. [ 199.303790][ T7981] netlink: 'syz.3.598': attribute type 3 has an invalid length. [ 199.455698][ T5783] Bluetooth: Frame is too long (len 149, expected len 4) [ 199.680449][ T7991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.602'. [ 199.760581][ T7997] netlink: 'syz.3.604': attribute type 39 has an invalid length. [ 199.926069][ T8000] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.606'. [ 199.948688][ T8000] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 200.273742][ T8009] netlink: 'syz.2.609': attribute type 6 has an invalid length. [ 200.854144][ T8021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.862286][ T8021] IPv6: NLM_F_CREATE should be set when creating new route [ 200.870203][ T8021] IPv6: NLM_F_CREATE should be set when creating new route [ 200.877914][ T8021] IPv6: NLM_F_CREATE should be set when creating new route [ 201.284495][ T8026] bridge_slave_0 (unregistering): left allmulticast mode [ 201.315696][ T8026] bridge_slave_0 (unregistering): left promiscuous mode [ 201.342409][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.027427][ T8047] __nla_validate_parse: 7 callbacks suppressed [ 202.027466][ T8047] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.618'. [ 202.064317][ T8047] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 202.915172][ T8061] mac80211_hwsim hwsim6 .3ãc¤±: renamed from wlan1 (while UP) [ 203.111883][ T8072] netlink: 3554 bytes leftover after parsing attributes in process `syz.1.624'. [ 203.126018][ T8061] validate_nla: 6 callbacks suppressed [ 203.126055][ T8061] netlink: 'syz.2.621': attribute type 22 has an invalid length. [ 203.145148][ T8072] netlink: 3554 bytes leftover after parsing attributes in process `syz.1.624'. [ 203.158719][ T8061] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.621'. [ 203.192156][ T8072] netlink: 3554 bytes leftover after parsing attributes in process `syz.1.624'. [ 203.854179][ T8094] syzkaller0: entered promiscuous mode [ 207.760739][ T8147] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.630'. [ 207.770917][ T8147] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 207.949381][ T5783] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 208.604715][ T8158] netlink: 14 bytes leftover after parsing attributes in process `syz.3.634'. [ 208.690922][ T8158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.730429][ T8158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.752172][ T8158] bond0 (unregistering): Released all slaves [ 208.773861][ T8160] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.633'. [ 208.783468][ T8160] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.633'. [ 208.794259][ T8160] tc_dump_action: action bad kind [ 208.974928][ T8175] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.640'. [ 209.023772][ T8172] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.639'. [ 209.041675][ T8172] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 209.295035][ T5783] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 209.445399][ T8181] syzkaller0: entered promiscuous mode [ 209.467348][ T8188] netlink: 128 bytes leftover after parsing attributes in process `syz.1.645'. [ 209.511377][ T8188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.645359][ T8197] netlink: 'syz.3.648': attribute type 29 has an invalid length. [ 211.258887][ T8197] netlink: 'syz.3.648': attribute type 29 has an invalid length. [ 211.505745][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.518111][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.579943][ T8210] bridge0: entered allmulticast mode [ 211.702446][ T8216] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.653'. [ 211.725222][ T8216] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 211.951133][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 211.957229][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 211.964461][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 211.967096][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 212.120360][ T8224] netlink: 826 bytes leftover after parsing attributes in process `syz.3.656'. [ 212.149422][ T8225] netlink: 826 bytes leftover after parsing attributes in process `syz.3.656'. [ 212.504090][ T8232] netlink: 'syz.1.657': attribute type 17 has an invalid length. [ 212.535043][ T8232] netlink: 'syz.1.657': attribute type 16 has an invalid length. [ 213.105306][ T8217] __nla_validate_parse: 2 callbacks suppressed [ 213.105328][ T8217] netlink: 128 bytes leftover after parsing attributes in process `syz.0.652'. [ 213.213628][ T8217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.083815][ T8258] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.663'. [ 214.114830][ T8258] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 214.171953][ T8261] netlink: 830 bytes leftover after parsing attributes in process `syz.0.664'. [ 214.615574][ T8271] netlink: 152 bytes leftover after parsing attributes in process `syz.3.669'. [ 214.634482][ T8271] tc_dump_action: action bad kind [ 214.691231][ T8277] netlink: 152 bytes leftover after parsing attributes in process `syz.3.669'. [ 214.719322][ T8277] tc_dump_action: action bad kind [ 214.952092][ T8281] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.670'. [ 215.019768][ T8286] netlink: 'syz.0.670': attribute type 3 has an invalid length. [ 215.047011][ T8286] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.670'. [ 215.078177][ T8288] netlink: 207188 bytes leftover after parsing attributes in process `syz.3.673'. [ 215.465505][ T8297] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.675'. [ 215.512875][ T8297] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 216.645041][ T8308] netlink: 'syz.1.680': attribute type 39 has an invalid length. [ 217.085961][ T8308] hsr_slave_1 (unregistering): left promiscuous mode [ 217.279126][ T8313] netlink: 'syz.0.681': attribute type 10 has an invalid length. [ 217.286960][ T8313] netlink: 2 bytes leftover after parsing attributes in process `syz.0.681'. [ 217.683302][ T8323] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 217.718158][ T8325] -1: renamed from syzkaller0 [ 218.455755][ T8336] netlink: 'syz.3.689': attribute type 10 has an invalid length. [ 218.643193][ T8336] bridge_slave_1: left allmulticast mode [ 218.690187][ T8336] bridge_slave_1: left promiscuous mode [ 218.721180][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.664324][ T8353] __nla_validate_parse: 1 callbacks suppressed [ 219.664361][ T8353] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.696'. [ 219.731091][ T8353] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 219.780582][ T8357] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 219.793648][ T8357] netlink: 2 bytes leftover after parsing attributes in process `syz.2.694'. [ 219.808577][ T8357] hsr0: entered promiscuous mode [ 219.814326][ T8357] bridge0: port 3(hsr0) entered blocking state [ 219.822226][ T8357] bridge0: port 3(hsr0) entered disabled state [ 219.829839][ T8357] hsr0: entered allmulticast mode [ 219.835155][ T8357] hsr_slave_0: entered allmulticast mode [ 219.842050][ T8357] hsr_slave_1: entered allmulticast mode [ 219.864242][ T8357] bridge0: port 3(hsr0) entered blocking state [ 219.870685][ T8357] bridge0: port 3(hsr0) entered forwarding state [ 220.218456][ T8364] netlink: 'syz.3.700': attribute type 10 has an invalid length. [ 220.226498][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.3.700'. [ 220.255050][ T8364] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 220.308783][ T8364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.368395][ T8364] -: renamed from syzkaller0 [ 222.098707][ T8386] syzkaller0: entered promiscuous mode [ 222.104288][ T8386] syzkaller0: entered allmulticast mode [ 222.422082][ T8400] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.708'. [ 222.438183][ T8400] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 225.431714][ T8411] netlink: 'syz.1.712': attribute type 2 has an invalid length. [ 225.440948][ T8411] netlink: 'syz.1.712': attribute type 8 has an invalid length. [ 225.448734][ T8411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.712'. [ 225.460846][ T8419] netlink: 'syz.0.714': attribute type 21 has an invalid length. [ 225.487988][ T8419] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.513669][ T8419] IPv6: Can't replace route, no match found [ 225.533121][ T8420] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 225.640180][ T8420] team0: Device wg1 is of different type [ 225.699585][ T8427] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.717'. [ 225.711540][ T8427] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 225.824543][ T8431] netlink: 'syz.1.716': attribute type 10 has an invalid length. [ 225.894430][ T8431] bridge_slave_1: left allmulticast mode [ 225.916420][ T8431] bridge_slave_1: left promiscuous mode [ 225.932680][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.205720][ T8433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.592002][ T8453] nr0: port 1(hsr0) entered blocking state [ 226.600749][ T8453] nr0: port 1(hsr0) entered disabled state [ 226.611295][ T8453] hsr0: entered allmulticast mode [ 226.616720][ T8453] hsr_slave_0: entered allmulticast mode [ 226.623540][ T8453] hsr_slave_1: entered allmulticast mode [ 226.644062][ T8453] hsr0: entered promiscuous mode [ 226.662424][ T8453] nr0: port 1(hsr0) entered blocking state [ 226.672548][ T8453] nr0: port 1(hsr0) entered forwarding state [ 226.861407][ T8464] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.727'. [ 226.875265][ T8464] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 227.549831][ T8473] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.732'. [ 227.577149][ T8473] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.732'. [ 228.010154][ T8473] netlink: 'syz.3.732': attribute type 2 has an invalid length. [ 228.056488][ T8473] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 228.148730][ T8479] netlink: 'syz.0.731': attribute type 10 has an invalid length. [ 228.641325][ T8485] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.734'. [ 228.849772][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.868652][ T8479] bridge_slave_1: left allmulticast mode [ 228.874495][ T8479] bridge_slave_1: left promiscuous mode [ 228.880714][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.894929][ T8479] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 228.908309][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.734'. [ 229.189859][ T8493] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.737'. [ 229.391460][ T8497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.739'. [ 229.479410][ T8497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.739'. [ 229.636823][ T8503] netlink: 'syz.3.740': attribute type 25 has an invalid length. [ 229.672880][ T8503] netlink: 'syz.3.740': attribute type 25 has an invalid length. [ 230.456200][ T8524] validate_nla: 1 callbacks suppressed [ 230.456215][ T8524] netlink: 'syz.0.753': attribute type 1 has an invalid length. [ 230.495477][ T8524] __nla_validate_parse: 1 callbacks suppressed [ 230.495494][ T8524] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.753'. [ 230.521397][ T8526] netlink: 'syz.0.753': attribute type 1 has an invalid length. [ 230.533044][ T8524] netlink: 1 bytes leftover after parsing attributes in process `syz.0.753'. [ 230.578182][ T8526] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.753'. [ 230.641514][ T8526] netlink: 1 bytes leftover after parsing attributes in process `syz.0.753'. [ 230.692222][ T8528] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 230.754506][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.770191][ T8528] bridge_slave_1: left allmulticast mode [ 230.775930][ T8528] bridge_slave_1: left promiscuous mode [ 230.794157][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.870677][ T8528] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 232.040368][ T8553] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.756'. [ 232.162995][ T8560] netlink: 'syz.0.758': attribute type 10 has an invalid length. [ 232.214875][ T8560] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.758'. [ 232.266678][ T8560] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 232.303834][ T8564] netlink: 'syz.0.758': attribute type 39 has an invalid length. [ 232.606792][ T8568] netlink: 148 bytes leftover after parsing attributes in process `syz.3.761'. [ 232.678238][ T8569] netlink: 152 bytes leftover after parsing attributes in process `syz.0.762'. [ 232.858877][ T8567] delete_channel: no stack [ 233.172099][ T8572] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.763'. [ 233.571878][ T8581] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.766'. [ 233.872157][ T8586] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 234.662023][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.380002][ T8617] netlink: 'syz.2.776': attribute type 6 has an invalid length. [ 235.600445][ T8618] syzkaller0: entered promiscuous mode [ 235.635523][ T8618] syzkaller0: entered allmulticast mode [ 236.039782][ T8638] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 236.057026][ T8638] __nla_validate_parse: 5 callbacks suppressed [ 236.057042][ T8638] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.782'. [ 236.649616][ T8646] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 236.658019][ T8646] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.784'. [ 236.690864][ T8648] netlink: 'syz.1.784': attribute type 27 has an invalid length. [ 236.698887][ T8649] netlink: 'syz.1.784': attribute type 27 has an invalid length. [ 236.710144][ T8647] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 236.719123][ T8648] netlink: 164 bytes leftover after parsing attributes in process `syz.1.784'. [ 236.730351][ T8649] netlink: 164 bytes leftover after parsing attributes in process `syz.1.784'. [ 236.753075][ T8647] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.784'. [ 238.368665][ T8631] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.782'. [ 238.536767][ T8659] netlink: 60 bytes leftover after parsing attributes in process `syz.2.787'. [ 240.937163][ T8689] netlink: 'syz.2.796': attribute type 7 has an invalid length. [ 240.957888][ T8689] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.796'. [ 240.968099][ T8687] netlink: 'syz.2.796': attribute type 7 has an invalid length. [ 241.007992][ T8687] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.796'. [ 241.018223][ T8690] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.795'. [ 241.110056][ T8690] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 241.119907][ T8690] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.795'. [ 241.781719][ T8717] netlink: 'syz.1.803': attribute type 17 has an invalid length. [ 241.798217][ T8717] netlink: 'syz.1.803': attribute type 16 has an invalid length. [ 241.806331][ T8717] netlink: 152 bytes leftover after parsing attributes in process `syz.1.803'. [ 241.845444][ T8714] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 241.854762][ T8714] netlink: 40 bytes leftover after parsing attributes in process `syz.2.802'. [ 241.873568][ T8714] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 241.969784][ T8717] netlink: 'syz.1.803': attribute type 9 has an invalid length. [ 241.993182][ T8717] netlink: 399 bytes leftover after parsing attributes in process `syz.1.803'. [ 242.240449][ T8726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.451831][ T8738] netlink: 168 bytes leftover after parsing attributes in process `syz.1.809'. [ 242.462976][ T8737] netlink: 168 bytes leftover after parsing attributes in process `syz.1.809'. [ 244.102544][ T8750] netlink: 'syz.1.812': attribute type 4 has an invalid length. [ 244.122705][ T8750] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.812'. [ 246.463045][ T8769] netlink: 'syz.0.815': attribute type 17 has an invalid length. [ 246.480855][ T8769] netlink: 'syz.0.815': attribute type 16 has an invalid length. [ 246.507894][ T8769] netlink: 152 bytes leftover after parsing attributes in process `syz.0.815'. [ 246.537221][ T8768] netlink: 'syz.0.815': attribute type 9 has an invalid length. [ 246.560080][ T8772] netlink: 'syz.2.816': attribute type 21 has an invalid length. [ 246.571667][ T8768] netlink: 399 bytes leftover after parsing attributes in process `syz.0.815'. [ 246.671169][ T8776] netlink: 'syz.1.817': attribute type 22 has an invalid length. [ 246.742360][ T8776] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.817'. [ 247.233206][ T8785] netlink: 10 bytes leftover after parsing attributes in process `syz.3.820'. [ 248.015086][ T8811] cgroup: fork rejected by pids controller in /syz3 [ 251.167190][ T8926] netlink: 'syz.0.827': attribute type 1 has an invalid length. [ 251.202449][ T8926] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.827'. [ 251.277124][ T8925] netlink: 'syz.2.828': attribute type 17 has an invalid length. [ 251.301989][ T8925] netlink: 'syz.2.828': attribute type 16 has an invalid length. [ 251.335238][ T8925] netlink: 152 bytes leftover after parsing attributes in process `syz.2.828'. [ 251.349783][ T8927] netlink: 'syz.2.828': attribute type 9 has an invalid length. [ 251.387208][ T8927] netlink: 399 bytes leftover after parsing attributes in process `syz.2.828'. [ 251.984649][ T8083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.125188][ T8083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.258578][ T8083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.423603][ T8083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.832305][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.842755][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.850874][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.871625][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.882629][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 252.890160][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.397496][ T8947] chnl_net:caif_netlink_parms(): no params data found [ 253.555499][ T8967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.840'. [ 253.719355][ T8973] netlink: 'syz.2.840': attribute type 9 has an invalid length. [ 253.738190][ T8973] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.840'. [ 253.758573][ T8967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.766232][ T8967] IPv6: NLM_F_CREATE should be set when creating new route [ 253.774603][ T8967] IPv6: NLM_F_CREATE should be set when creating new route [ 253.782355][ T8967] IPv6: NLM_F_CREATE should be set when creating new route [ 254.389661][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.415004][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.432358][ T8947] bridge_slave_0: entered allmulticast mode [ 254.459379][ T8947] bridge_slave_0: entered promiscuous mode [ 254.653951][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.671429][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.684919][ T8947] bridge_slave_1: entered allmulticast mode [ 254.703888][ T8947] bridge_slave_1: entered promiscuous mode [ 254.908336][ T5787] Bluetooth: hci1: command tx timeout [ 255.057303][ T8947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.074163][ T8947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.304887][ T8947] team0: Port device team_slave_0 added [ 255.347312][ T8947] team0: Port device team_slave_1 added [ 255.752228][ T8947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.771961][ T8947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.830741][ T8947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.985279][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.991805][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.012939][ T9020] netlink: 'syz.1.848': attribute type 21 has an invalid length. [ 256.071809][ T9020] netlink: 132 bytes leftover after parsing attributes in process `syz.1.848'. [ 256.084870][ T8947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.093616][ T8947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.139766][ T8947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.190705][ T9021] netlink: 'syz.2.847': attribute type 21 has an invalid length. [ 256.219480][ T9021] netlink: 29 bytes leftover after parsing attributes in process `syz.2.847'. [ 256.324106][ T9039] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.849'. [ 256.622143][ T9026] netlink: 'syz.2.847': attribute type 21 has an invalid length. [ 256.649486][ T9026] netlink: 29 bytes leftover after parsing attributes in process `syz.2.847'. [ 256.988029][ T5787] Bluetooth: hci1: command tx timeout [ 257.371703][ T9057] netlink: 'syz.0.851': attribute type 2 has an invalid length. [ 257.548979][ T8947] hsr_slave_0: entered promiscuous mode [ 257.555664][ T8947] hsr_slave_1: entered promiscuous mode [ 257.566318][ T8947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.577868][ T8947] Cannot create hsr debugfs directory [ 257.599082][ T8083] hsr0: left allmulticast mode [ 257.604765][ T8083] hsr_slave_0: left allmulticast mode [ 257.610659][ T8083] hsr_slave_1: left allmulticast mode [ 257.616202][ T8083] hsr0: left promiscuous mode [ 257.626349][ T8083] nr0: port 1(hsr0) entered disabled state [ 257.693924][ T8083] hsr_slave_0: left promiscuous mode [ 257.709346][ T8083] hsr_slave_1: left promiscuous mode [ 257.716071][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.723916][ T8083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.733193][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.740858][ T8083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.770372][ T8083] veth1_macvtap: left promiscuous mode [ 257.776459][ T8083] veth0_macvtap: left promiscuous mode [ 257.782568][ T8083] veth1_vlan: left promiscuous mode [ 258.531933][ T9059] delete_channel: no stack [ 258.757627][ T8083] team0 (unregistering): Port device team_slave_1 removed [ 259.081244][ T5787] Bluetooth: hci1: command tx timeout [ 259.137097][ T8083] team0 (unregistering): Port device dummy0 removed [ 260.610052][ T9083] netlink: 'syz.2.857': attribute type 21 has an invalid length. [ 260.633663][ T9083] netlink: 128 bytes leftover after parsing attributes in process `syz.2.857'. [ 260.647024][ T9083] netlink: 'syz.2.857': attribute type 4 has an invalid length. [ 260.676189][ T9083] netlink: 'syz.2.857': attribute type 3 has an invalid length. [ 260.699876][ T9083] netlink: 3 bytes leftover after parsing attributes in process `syz.2.857'. [ 261.147897][ T5787] Bluetooth: hci1: command tx timeout [ 262.743602][ T9096] netlink: 108 bytes leftover after parsing attributes in process `syz.2.859'. [ 263.573183][ T9114] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 263.653869][ T9114] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 263.758520][ T9114] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 263.766548][ T9114] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 263.854501][ T9114] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 263.898302][ T9114] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 263.939584][ T9114] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 264.117710][ T8947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.170004][ T8947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.203284][ T8947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.254564][ T8947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.064756][ T9123] syzkaller0: entered promiscuous mode [ 265.095126][ T9123] syzkaller0: entered allmulticast mode [ 265.267690][ T9131] tap0: tun_chr_ioctl cmd 2147767520 [ 265.885029][ T9147] delete_channel: no stack [ 267.363586][ T8947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.427669][ T8947] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.456834][ T8122] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.464126][ T8122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.531944][ T8122] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.540311][ T8122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.812985][ T8947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.907587][ T8947] veth0_vlan: entered promiscuous mode [ 268.963191][ T8947] veth1_vlan: entered promiscuous mode [ 269.096670][ T8947] veth0_macvtap: entered promiscuous mode [ 269.209677][ T8947] veth1_macvtap: entered promiscuous mode [ 269.315117][ T8947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.362737][ T8947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.427219][ T8947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.455744][ T8947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.507876][ T8947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.516789][ T8947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.859675][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.867581][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.000233][ T8099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.010642][ T8099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.593906][ T9228] validate_nla: 26 callbacks suppressed [ 270.593927][ T9228] netlink: 'syz.3.831': attribute type 9 has an invalid length. [ 270.641320][ T9228] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.831'. [ 270.711551][ T9227] netlink: 'syz.3.831': attribute type 9 has an invalid length. [ 270.738596][ T9227] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.831'. [ 273.493387][ T9285] FAULT_INJECTION: forcing a failure. [ 273.493387][ T9285] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 273.523002][ T9285] CPU: 1 PID: 9285 Comm: syz.1.893 Not tainted syzkaller #0 [ 273.530383][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.540512][ T9285] Call Trace: [ 273.543838][ T9285] [ 273.546803][ T9285] dump_stack_lvl+0x18c/0x250 [ 273.551559][ T9285] ? show_regs_print_info+0x20/0x20 [ 273.556850][ T9285] ? load_image+0x420/0x420 [ 273.561427][ T9285] ? __lock_acquire+0x7d80/0x7d80 [ 273.566509][ T9285] ? snprintf+0xe9/0x140 [ 273.570893][ T9285] should_fail_ex+0x394/0x4c0 [ 273.575639][ T9285] _copy_to_user+0x2f/0xa0 [ 273.580117][ T9285] simple_read_from_buffer+0xe7/0x150 [ 273.585545][ T9285] proc_fail_nth_read+0x1e8/0x260 [ 273.590634][ T9285] ? proc_fault_inject_write+0x360/0x360 [ 273.596327][ T9285] ? fsnotify_perm+0x271/0x5e0 [ 273.601148][ T9285] ? proc_fault_inject_write+0x360/0x360 [ 273.606859][ T9285] vfs_read+0x298/0x990 [ 273.611084][ T9285] ? kernel_read+0x1e0/0x1e0 [ 273.615737][ T9285] ? __fget_files+0x28/0x460 [ 273.620487][ T9285] ? __fget_files+0x3fc/0x460 [ 273.625232][ T9285] ? __fdget_pos+0x2a3/0x330 [ 273.629878][ T9285] ? ksys_read+0x74/0x260 [ 273.634273][ T9285] ksys_read+0x151/0x260 [ 273.638608][ T9285] ? vfs_write+0x9a0/0x9a0 [ 273.643085][ T9285] ? lockdep_hardirqs_on+0x98/0x150 [ 273.648342][ T9285] do_syscall_64+0x55/0xb0 [ 273.652816][ T9285] ? clear_bhb_loop+0x40/0x90 [ 273.657542][ T9285] ? clear_bhb_loop+0x40/0x90 [ 273.662277][ T9285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.668240][ T9285] RIP: 0033:0x7fe08415e98e [ 273.672703][ T9285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.692363][ T9285] RSP: 002b:00007fe085094fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.700839][ T9285] RAX: ffffffffffffffda RBX: 00007fe0850956c0 RCX: 00007fe08415e98e [ 273.708865][ T9285] RDX: 000000000000000f RSI: 00007fe0850950a0 RDI: 0000000000000005 [ 273.716883][ T9285] RBP: 00007fe085095090 R08: 0000000000000000 R09: 0000000000000000 [ 273.724909][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.732942][ T9285] R13: 00007fe084426128 R14: 00007fe084426090 R15: 00007ffc8e401a98 [ 273.741012][ T9285] [ 274.062917][ T9293] netlink: 'syz.2.894': attribute type 3 has an invalid length. [ 274.115625][ T9293] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.894'. [ 275.791699][ T9325] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 276.821678][ T9353] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.909'. [ 276.847933][ T9353] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 277.327273][ T9358] syzkaller0: entered promiscuous mode [ 277.334389][ T9358] syzkaller0: entered allmulticast mode [ 280.142173][ T9384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.917'. [ 282.706124][ T9459] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 282.834551][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.941'. [ 282.844016][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.941'. [ 282.856098][ T9457] netlink: 60 bytes leftover after parsing attributes in process `syz.3.941'. [ 282.874364][ T9456] netlink: 60 bytes leftover after parsing attributes in process `syz.3.941'. [ 283.911794][ T9504] netlink: 144 bytes leftover after parsing attributes in process `syz.0.953'. [ 283.955027][ T9504] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 286.473598][ T9563] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.962'. [ 287.430273][ T9583] netlink: 'syz.2.967': attribute type 7 has an invalid length. [ 287.550653][ T9594] netlink: 'syz.3.970': attribute type 3 has an invalid length. [ 287.568244][ T9594] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 287.578438][ T9594] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.970'. [ 288.880373][ T9630] netlink: 'syz.3.979': attribute type 10 has an invalid length. [ 289.525808][ T9652] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.987'. [ 289.712663][ T9654] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.988'. [ 289.990386][ T9658] netlink: 'syz.1.989': attribute type 10 has an invalid length. [ 290.583270][ T9681] @0Ù: renamed from bond_slave_1 (while UP) [ 291.264565][ T9701] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.1002'. [ 291.406841][ T9706] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1006'. [ 291.560888][ T9710] FAULT_INJECTION: forcing a failure. [ 291.560888][ T9710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.589211][ T9710] CPU: 0 PID: 9710 Comm: syz.0.1008 Not tainted syzkaller #0 [ 291.596683][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.606795][ T9710] Call Trace: [ 291.610118][ T9710] [ 291.613097][ T9710] dump_stack_lvl+0x18c/0x250 [ 291.617840][ T9710] ? show_regs_print_info+0x20/0x20 [ 291.623101][ T9710] ? load_image+0x420/0x420 [ 291.627663][ T9710] ? __lock_acquire+0x7d80/0x7d80 [ 291.632759][ T9710] ? snprintf+0xe9/0x140 [ 291.637064][ T9710] should_fail_ex+0x394/0x4c0 [ 291.641809][ T9710] _copy_to_user+0x2f/0xa0 [ 291.646276][ T9710] simple_read_from_buffer+0xe7/0x150 [ 291.651863][ T9710] proc_fail_nth_read+0x1e8/0x260 [ 291.656947][ T9710] ? proc_fault_inject_write+0x360/0x360 [ 291.662641][ T9710] ? fsnotify_perm+0x271/0x5e0 [ 291.667457][ T9710] ? proc_fault_inject_write+0x360/0x360 [ 291.673144][ T9710] vfs_read+0x298/0x990 [ 291.677349][ T9710] ? kernel_read+0x1e0/0x1e0 [ 291.681988][ T9710] ? __fget_files+0x28/0x460 [ 291.686631][ T9710] ? __fget_files+0x3fc/0x460 [ 291.691373][ T9710] ? __fdget_pos+0x2a3/0x330 [ 291.696016][ T9710] ? ksys_read+0x74/0x260 [ 291.700398][ T9710] ksys_read+0x151/0x260 [ 291.704697][ T9710] ? vfs_write+0x9a0/0x9a0 [ 291.709170][ T9710] ? lockdep_hardirqs_on+0x98/0x150 [ 291.714415][ T9710] do_syscall_64+0x55/0xb0 [ 291.718874][ T9710] ? clear_bhb_loop+0x40/0x90 [ 291.723592][ T9710] ? clear_bhb_loop+0x40/0x90 [ 291.728326][ T9710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.734271][ T9710] RIP: 0033:0x7fe690f5e98e [ 291.738764][ T9710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.758504][ T9710] RSP: 002b:00007fe691d7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.766965][ T9710] RAX: ffffffffffffffda RBX: 00007fe691d7e6c0 RCX: 00007fe690f5e98e [ 291.774981][ T9710] RDX: 000000000000000f RSI: 00007fe691d7e0a0 RDI: 0000000000000008 [ 291.782991][ T9710] RBP: 00007fe691d7e090 R08: 0000000000000000 R09: 0000000000000000 [ 291.790999][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.799010][ T9710] R13: 00007fe691226038 R14: 00007fe691225fa0 R15: 00007ffd2e029c38 [ 291.807040][ T9710] [ 292.716678][ T9734] sit0: entered allmulticast mode [ 293.053326][ T9735] sit0: entered promiscuous mode [ 293.489000][ T9762] Ù: renamed from bond_slave_1 [ 293.834049][ T9776] netlink: 'syz.0.1031': attribute type 11 has an invalid length. [ 294.215083][ T9791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1036'. [ 294.916478][ T9815] netlink: 'syz.0.1044': attribute type 29 has an invalid length. [ 294.969741][ T9815] netlink: 'syz.0.1044': attribute type 29 has an invalid length. [ 294.992683][ T9816] netlink: 'syz.0.1044': attribute type 29 has an invalid length. [ 295.064068][ T9816] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1044'. [ 295.103973][ T9816] netlink: 'syz.0.1044': attribute type 29 has an invalid length. [ 295.150595][ T9821] netlink: 'syz.0.1044': attribute type 29 has an invalid length. [ 295.184152][ T9793] delete_channel: no stack [ 295.192379][ T9821] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1044'. [ 295.436302][ T9829] netlink: 'syz.3.1046': attribute type 9 has an invalid length. [ 295.450776][ T9829] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1046'. [ 295.533777][ T9833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1047'. [ 295.729701][ T9839] netlink: 'syz.1.1049': attribute type 7 has an invalid length. [ 296.442866][ T9857] tap0: tun_chr_ioctl cmd 1074025677 [ 296.469111][ T9857] tap0: linktype set to 773 [ 296.702680][ T9859] syzkaller0: entered promiscuous mode [ 296.715622][ T9859] syzkaller0: entered allmulticast mode [ 296.744546][ T9864] netlink: 'syz.0.1057': attribute type 4 has an invalid length. [ 299.583147][ T9908] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1072'. [ 299.600248][ T9910] netlink: 'syz.2.1072': attribute type 3 has an invalid length. [ 299.612937][ T9910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1072'. [ 300.888059][ T9908] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1072'. [ 301.045485][ T9918] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1074'. [ 302.750163][ T9943] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1083'. [ 303.204575][ T9951] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 303.237903][ T9951] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1086'. [ 304.192356][ T9973] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1094'. [ 304.369467][ T9977] netlink: 'syz.2.1095': attribute type 10 has an invalid length. [ 304.397918][ T9977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1095'. [ 304.411806][ T9977] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 304.526057][ T9984] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 305.005335][ T9996] netlink: 183700 bytes leftover after parsing attributes in process `syz.1.1100'. [ 305.125159][ T9998] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 307.091508][T10024] syz.1.1111[10024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.091657][T10024] syz.1.1111[10024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 307.269844][T10033] netlink: 'syz.0.1113': attribute type 9 has an invalid length. [ 307.306391][T10033] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1113'. [ 308.041739][T10051] sit0: entered allmulticast mode [ 308.414805][T10061] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1125'. [ 308.596954][T10065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1126'. [ 308.664338][T10065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1126'. [ 308.708432][T10063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1126'. [ 309.427374][T10084] syzkaller0: entered promiscuous mode [ 309.437825][T10084] syzkaller0: entered allmulticast mode [ 310.261047][T10117] netlink: 185164 bytes leftover after parsing attributes in process `syz.2.1138'. [ 311.694093][T10103] netlink: 'syz.1.1136': attribute type 33 has an invalid length. [ 311.702101][T10103] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1136'. [ 311.718423][T10119] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1139'. [ 311.727657][T10119] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 311.815727][T10114] netlink: 185164 bytes leftover after parsing attributes in process `syz.2.1138'. [ 311.855367][T10114] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 311.878131][T10114] CPU: 1 PID: 10114 Comm: syz.2.1138 Not tainted syzkaller #0 [ 311.885694][T10114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.895817][T10114] Call Trace: [ 311.899153][T10114] [ 311.902132][T10114] dump_stack_lvl+0x18c/0x250 [ 311.907318][T10114] ? show_regs_print_info+0x20/0x20 [ 311.912576][T10114] ? load_image+0x420/0x420 [ 311.917129][T10114] sysfs_warn_dup+0x8e/0xa0 [ 311.921664][T10114] sysfs_do_create_link_sd+0xc0/0x110 [ 311.927161][T10114] device_add_class_symlinks+0x1cf/0x240 [ 311.932831][T10114] device_add+0x4f9/0xc40 [ 311.937198][T10114] wiphy_register+0x1d99/0x2ac0 [ 311.942114][T10114] ? cfg80211_event_work+0x40/0x40 [ 311.947268][T10114] ? minstrel_ht_alloc+0x88a/0x990 [ 311.952507][T10114] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 311.958611][T10114] ieee80211_register_hw+0x2dd8/0x3b30 [ 311.964143][T10114] ? ieee80211_register_hw+0xfb1/0x3b30 [ 311.969731][T10114] ? ieee80211_tasklet_handler+0x20/0x20 [ 311.975401][T10114] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 311.981326][T10114] ? __debug_object_init+0xec/0x450 [ 311.986647][T10114] ? __asan_memset+0x22/0x40 [ 311.991281][T10114] ? __hrtimer_init+0x189/0x270 [ 311.996176][T10114] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 312.001971][T10114] ? mac80211_hwsim_free+0x220/0x220 [ 312.007294][T10114] ? rcu_is_watching+0x15/0xb0 [ 312.012117][T10114] ? kstrndup+0xbd/0x140 [ 312.016448][T10114] hwsim_new_radio_nl+0xdad/0x1a70 [ 312.021642][T10114] ? __nla_validate+0x50/0x50 [ 312.026383][T10114] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 312.032768][T10114] ? __nla_parse+0x40/0x50 [ 312.037243][T10114] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 312.043656][T10114] genl_family_rcv_msg_doit+0x21a/0x310 [ 312.049254][T10114] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 312.055218][T10114] ? bpf_lsm_capable+0x9/0x10 [ 312.059955][T10114] ? security_capable+0x89/0xb0 [ 312.064858][T10114] genl_rcv_msg+0x611/0x7a0 [ 312.069477][T10114] ? genl_bind+0x360/0x360 [ 312.073937][T10114] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 312.080317][T10114] netlink_rcv_skb+0x235/0x4c0 [ 312.085125][T10114] ? genl_bind+0x360/0x360 [ 312.089583][T10114] ? netlink_ack+0x1160/0x1160 [ 312.094388][T10114] ? __lock_acquire+0x7d80/0x7d80 [ 312.099446][T10114] ? net_generic+0x1e/0x240 [ 312.103983][T10114] ? down_read+0x1ac/0x2e0 [ 312.108431][T10114] genl_rcv+0x28/0x40 [ 312.112445][T10114] netlink_unicast+0x7b1/0x930 [ 312.117248][T10114] netlink_sendmsg+0x8d0/0xbf0 [ 312.122052][T10114] ? netlink_getsockopt+0x590/0x590 [ 312.127301][T10114] ? apparmor_socket_sendmsg+0x8e/0x330 [ 312.132904][T10114] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 312.138222][T10114] ? security_socket_sendmsg+0x80/0xa0 [ 312.143706][T10114] ? netlink_getsockopt+0x590/0x590 [ 312.148953][T10114] ____sys_sendmsg+0x61b/0x980 [ 312.153754][T10114] ? __asan_memset+0x22/0x40 [ 312.158378][T10114] ? __sys_sendmsg_sock+0x30/0x30 [ 312.163430][T10114] ? __import_iovec+0x5f2/0x850 [ 312.168338][T10114] ? import_iovec+0x73/0xa0 [ 312.172885][T10114] ___sys_sendmsg+0x2a6/0x360 [ 312.177599][T10114] ? __sys_sendmsg+0x2b0/0x2b0 [ 312.182443][T10114] __se_sys_sendmsg+0x1d0/0x2c0 [ 312.187329][T10114] ? __x64_sys_sendmsg+0x80/0x80 [ 312.192310][T10114] ? lockdep_hardirqs_on+0x98/0x150 [ 312.197541][T10114] do_syscall_64+0x55/0xb0 [ 312.202002][T10114] ? clear_bhb_loop+0x40/0x90 [ 312.206718][T10114] ? clear_bhb_loop+0x40/0x90 [ 312.211450][T10114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.217381][T10114] RIP: 0033:0x7f4223d9e159 [ 312.221823][T10114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.241470][T10114] RSP: 002b:00007f4224c7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.249949][T10114] RAX: ffffffffffffffda RBX: 00007f4224026090 RCX: 00007f4223d9e159 [ 312.257971][T10114] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 312.266073][T10114] RBP: 00007f4223e3506b R08: 0000000000000000 R09: 0000000000000000 [ 312.274076][T10114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.282113][T10114] R13: 00007f4224026128 R14: 00007f4224026090 R15: 00007ffe2e3bd728 [ 312.290133][T10114] [ 312.442515][T10129] netlink: 'syz.3.1143': attribute type 10 has an invalid length. [ 312.471585][T10129] team0: Port device netdevsim0 added [ 313.009730][T10141] netlink: 'syz.3.1147': attribute type 21 has an invalid length. [ 313.028490][T10141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1147'. [ 313.055918][T10141] virt_wifi0: entered promiscuous mode [ 313.064430][T10141] virt_wifi0: entered allmulticast mode [ 313.089799][T10148] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1149'. [ 313.123351][T10148] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 313.376629][T10160] netlink: 'syz.1.1155': attribute type 13 has an invalid length. [ 313.384910][T10160] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1155'. [ 313.402922][T10160] syz_tun: refused to change device tx_queue_len [ 313.424002][T10160] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 314.567531][T10181] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1160'. [ 314.629829][T10181] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 314.709460][T10183] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 314.723102][T10183] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1161'. [ 315.262596][T10203] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1167'. [ 315.506143][T10207] netlink: 'syz.0.1167': attribute type 21 has an invalid length. [ 315.517245][T10214] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1171'. [ 315.528583][T10214] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 315.749703][T10216] netlink: 'syz.3.1172': attribute type 9 has an invalid length. [ 315.758610][T10216] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1172'. [ 316.122249][T10215] delete_channel: no stack [ 316.334494][T10237] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1178'. [ 316.510554][T10236] syzkaller0: entered promiscuous mode [ 316.516369][T10236] syzkaller0: entered allmulticast mode [ 316.746326][T10247] netlink: 'syz.0.1182': attribute type 3 has an invalid length. [ 316.764370][T10247] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1182'. [ 317.403853][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.410354][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.552191][T10266] netlink: 'syz.1.1187': attribute type 29 has an invalid length. [ 318.600459][T10245] __nla_validate_parse: 1 callbacks suppressed [ 318.600476][T10245] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1181'. [ 318.616290][T10245] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 318.625324][T10266] netlink: 'syz.1.1187': attribute type 29 has an invalid length. [ 318.809675][T10280] syz.3.1190[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.809830][T10280] syz.3.1190[10280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.843838][T10280] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1190'. [ 319.050775][T10292] netlink: 'syz.2.1192': attribute type 49 has an invalid length. [ 319.088421][T10293] netlink: 'syz.2.1192': attribute type 49 has an invalid length. [ 319.173856][T10292] netlink: 'syz.2.1192': attribute type 3 has an invalid length. [ 319.240448][T10292] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1192'. [ 319.287896][T10290] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1190'. [ 320.515202][T10305] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1196'. [ 320.547270][T10305] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 320.612795][T10310] netlink: 'syz.0.1198': attribute type 3 has an invalid length. [ 320.635796][T10310] netlink: 'syz.0.1198': attribute type 8 has an invalid length. [ 320.667803][T10310] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.1198'. [ 321.362916][T10322] sctp: [Deprecated]: syz.2.1202 (pid 10322) Use of int in maxseg socket option. [ 321.362916][T10322] Use struct sctp_assoc_value instead [ 321.441887][T10324] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1203'. [ 321.627491][T10333] netlink: 'syz.2.1206': attribute type 3 has an invalid length. [ 321.638447][T10334] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1206'. [ 321.648357][T10333] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1206'. [ 321.775914][T10339] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1208'. [ 321.785540][T10339] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 323.074770][T10371] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 323.513184][ T5787] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 323.806049][T10388] netlink: 'syz.2.1225': attribute type 13 has an invalid length. [ 323.848186][T10388] __nla_validate_parse: 5 callbacks suppressed [ 323.848204][T10388] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1225'. [ 323.922110][T10388] erspan0: refused to change device tx_queue_len [ 323.964894][T10391] netlink: 'syz.2.1225': attribute type 39 has an invalid length. [ 324.192843][T10398] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1229'. [ 324.216658][T10398] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 324.834751][T10420] netlink: 16207 bytes leftover after parsing attributes in process `syz.3.1234'. [ 324.992963][T10426] netlink: 'syz.0.1237': attribute type 9 has an invalid length. [ 325.000927][T10426] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1237'. [ 325.167628][T10427] netlink: 'syz.0.1237': attribute type 9 has an invalid length. [ 325.182960][T10427] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1237'. [ 325.286807][T10434] netlink: 'syz.1.1239': attribute type 9 has an invalid length. [ 325.305285][T10434] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1239'. [ 325.534771][T10439] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 325.566180][T10439] veth0_vlan: left promiscuous mode [ 325.583559][T10439] veth0_vlan: entered promiscuous mode [ 325.609464][T10439] team0: Device veth0_vlan failed to register rx_handler [ 325.783840][T10443] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1244'. [ 325.824856][T10446] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.1244'. [ 325.849885][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 325.868409][T10443] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1244'. [ 327.013532][T10480] syzkaller0: entered promiscuous mode [ 327.028993][T10480] syzkaller0: entered allmulticast mode [ 329.630386][T10495] __nla_validate_parse: 1 callbacks suppressed [ 329.630409][T10495] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1258'. [ 329.768101][T10508] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1262'. [ 330.252637][T10528] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1268'. [ 330.292131][T10528] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 330.651893][T10540] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1273'. [ 330.665347][T10540] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 330.742419][T10536] netlink: 'syz.0.1272': attribute type 21 has an invalid length. [ 332.433527][T10565] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1279'. [ 332.443073][T10565] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 335.355101][T10582] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1285'. [ 335.579949][T10595] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 335.597825][T10595] netlink: 'syz.1.1288': attribute type 4 has an invalid length. [ 335.605761][T10595] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1288'. [ 335.619781][T10595] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 335.638285][T10595] netlink: 'syz.1.1288': attribute type 4 has an invalid length. [ 335.646202][T10595] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1288'. [ 335.914829][T10607] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1292'. [ 335.929069][T10607] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 335.993523][T10605] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1290'. [ 336.007320][T10605] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 336.087303][T10610] netlink: 'syz.2.1293': attribute type 3 has an invalid length. [ 336.129282][T10610] netlink: 'syz.2.1293': attribute type 6 has an invalid length. [ 336.158654][T10610] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1293'. [ 336.308233][T10610] netlink: 'syz.2.1293': attribute type 10 has an invalid length. [ 336.379835][T10615] Ÿë: port 1(hsr_slave_0) entered blocking state [ 336.386686][T10615] Ÿë: port 1(hsr_slave_0) entered disabled state [ 336.400361][T10615] hsr_slave_0: entered allmulticast mode [ 336.409024][T10615] hsr_slave_0: left allmulticast mode [ 336.629684][T10626] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1306'. [ 336.647061][T10626] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 337.523082][T10650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.480595][T10676] netlink: 'syz.1.1316': attribute type 3 has an invalid length. [ 339.488657][T10676] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1316'. [ 340.614943][T10662] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1311'. [ 340.624308][T10662] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 340.882051][T10687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.912538][T10686] netlink: 'syz.2.1319': attribute type 9 has an invalid length. [ 340.922420][T10686] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1319'. [ 340.997313][T10688] netlink: 'syz.2.1319': attribute type 9 has an invalid length. [ 341.018030][T10688] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1319'. [ 341.275212][T10705] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 341.303991][T10705] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1323'. [ 341.364523][T10710] netlink: 'syz.3.1325': attribute type 2 has an invalid length. [ 341.399862][T10710] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1325'. [ 341.427618][T10714] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1326'. [ 341.442299][T10714] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 341.650352][T10721] netlink: 'syz.1.1330': attribute type 153 has an invalid length. [ 341.674638][T10719] netlink: 'syz.2.1329': attribute type 10 has an invalid length. [ 341.684482][T10721] netlink: 'syz.1.1330': attribute type 1 has an invalid length. [ 341.694556][T10719] veth1_macvtap: left promiscuous mode [ 341.702595][T10721] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1330'. [ 343.210362][T10746] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.217996][T10746] IPv6: NLM_F_CREATE should be set when creating new route [ 343.226011][T10746] IPv6: NLM_F_CREATE should be set when creating new route [ 343.233738][T10746] IPv6: NLM_F_CREATE should be set when creating new route [ 343.281375][T10750] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1338'. [ 343.291429][T10754] netlink: 'syz.3.1336': attribute type 9 has an invalid length. [ 343.301126][T10750] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 343.311328][T10754] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1336'. [ 343.335835][T10751] netlink: 'syz.1.1337': attribute type 46 has an invalid length. [ 343.474021][T10753] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1339'. [ 344.066775][T10765] netlink: 'syz.2.1341': attribute type 10 has an invalid length. [ 344.372466][T10769] netlink: 'syz.3.1342': attribute type 23 has an invalid length. [ 344.669212][T10765] veth0_macvtap (unregistering): left allmulticast mode [ 346.607584][T10787] __nla_validate_parse: 6 callbacks suppressed [ 346.607602][T10787] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1349'. [ 346.626868][T10787] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 346.811629][T10790] cgroup: fork rejected by pids controller in /syz1 [ 347.064362][T10801] netlink: 'syz.0.1352': attribute type 2 has an invalid length. [ 347.094390][T10801] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1352'. [ 347.104121][T10801] bridge_slave_1: entered promiscuous mode [ 347.227141][T10808] netlink: 'syz.3.1355': attribute type 21 has an invalid length. [ 347.242448][T10808] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 347.257925][T10808] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.1355'. [ 347.389586][T10810] lo: entered promiscuous mode [ 347.395301][T10810] lo: entered allmulticast mode [ 348.214047][T10819] syzkaller0: entered promiscuous mode [ 348.227865][T10819] syzkaller0: entered allmulticast mode [ 348.338142][ T8083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.927541][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.951309][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.982039][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.998642][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.020134][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.031940][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.262477][ T8083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.279953][T10831] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1363'. [ 350.419003][ T8083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.467022][T10835] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1366'. [ 350.489325][T10835] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 350.552556][T10835] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1366'. [ 350.619192][T10835] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1366'. [ 350.672583][T10828] chnl_net:caif_netlink_parms(): no params data found [ 350.977354][ T8083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.048343][T10853] can: request_module (can-proto-4) failed. [ 351.129295][T10853] can: request_module (can-proto-4) failed. [ 351.148561][ T5793] Bluetooth: hci2: command tx timeout [ 351.213766][T10853] can: request_module (can-proto-4) failed. [ 351.298248][T10853] can: request_module (can-proto-4) failed. [ 351.426401][T10853] can: request_module (can-proto-4) failed. [ 351.620705][T10853] can: request_module (can-proto-4) failed. [ 351.692378][T10828] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.727320][T10828] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.746380][T10828] bridge_slave_0: entered allmulticast mode [ 351.767161][T10828] bridge_slave_0: entered promiscuous mode [ 351.791809][T10828] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.808473][T10828] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.817015][T10853] can: request_module (can-proto-4) failed. [ 351.824878][T10828] bridge_slave_1: entered allmulticast mode [ 351.837368][T10853] can: request_module (can-proto-4) failed. [ 351.849922][T10828] bridge_slave_1: entered promiscuous mode [ 351.970100][T10828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.001346][T10828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.123980][T10865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1368'. [ 352.174018][T10865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1368'. [ 352.227061][T10869] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1368'. [ 352.271189][T10828] team0: Port device team_slave_0 added [ 352.298261][T10873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1368'. [ 352.331377][T10828] team0: Port device team_slave_1 added [ 352.425359][T10874] netlink: 8183 bytes leftover after parsing attributes in process `syz.0.1370'. [ 352.499983][T10828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.511554][T10828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.562151][T10828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.051358][T10828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.076595][T10828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.157093][T10828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.202160][T10888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1373'. [ 353.235749][ T5793] Bluetooth: hci2: command tx timeout [ 353.532083][T10900] netlink: 'syz.0.1374': attribute type 39 has an invalid length. [ 353.548803][T10901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1374'. [ 353.852036][T10828] hsr_slave_0: entered promiscuous mode [ 353.869979][T10828] hsr_slave_1: entered promiscuous mode [ 353.876704][T10828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.891284][T10828] Cannot create hsr debugfs directory [ 353.965630][T10911] netlink: 'syz.3.1377': attribute type 21 has an invalid length. [ 353.990840][T10911] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1377'. [ 354.608998][T10938] delete_channel: no stack [ 354.635795][T10938] delete_channel: no stack [ 354.732163][T10937] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1383'. [ 354.755984][T10937] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 355.307864][ T5793] Bluetooth: hci2: command tx timeout [ 355.635384][T10964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1389'. [ 356.183759][ T8083] hsr_slave_0: left promiscuous mode [ 356.318487][ T8083] veth1_macvtap: left promiscuous mode [ 356.324119][ T8083] veth0_macvtap: left promiscuous mode [ 356.337902][ T8083] veth1_vlan: left promiscuous mode [ 357.391323][ T5793] Bluetooth: hci2: command tx timeout [ 357.672732][T11009] netlink: 'syz.2.1400': attribute type 9 has an invalid length. [ 357.683637][T11009] __nla_validate_parse: 2 callbacks suppressed [ 357.683681][T11009] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1400'. [ 357.706121][ T8083] team0 (unregistering): Port device team_slave_1 removed [ 357.773762][ T8083] team0 (unregistering): Port device team_slave_0 removed [ 358.210142][T10995] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1395'. [ 358.222407][T10995] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 358.433521][T10828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.472188][T10828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.510638][T10828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.477686][T10828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.519683][T11023] netlink: 'syz.0.1402': attribute type 10 has an invalid length. [ 361.553859][T11023] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 361.562684][T11022] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1403'. [ 361.754008][T10828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.829555][T10828] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.885688][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.892963][ T8108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.943066][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.950463][ T8108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.631142][T10828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.821705][T10828] veth0_vlan: entered promiscuous mode [ 362.862032][T10828] veth1_vlan: entered promiscuous mode [ 362.953545][T10828] veth0_macvtap: entered promiscuous mode [ 362.970236][T10828] veth1_macvtap: entered promiscuous mode [ 363.059266][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.090525][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.104165][T10828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.130563][T10828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.168860][T10828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.204913][T10828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.255034][T10828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.287786][T10828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.317878][T10828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.326714][T10828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.387222][T11073] netlink: 'syz.0.1417': attribute type 10 has an invalid length. [ 363.402335][T11073] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.1417'. [ 363.596881][T11080] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1410'. [ 363.614444][T11080] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 363.680834][ T8113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.718969][ T8113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.799882][ T8125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.824757][ T8125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.914566][T11086] netlink: 'syz.0.1411': attribute type 1 has an invalid length. [ 363.926903][T11086] netlink: 179964 bytes leftover after parsing attributes in process `syz.0.1411'. [ 364.314039][T11102] netlink: 'syz.0.1422': attribute type 2 has an invalid length. [ 364.327639][T11102] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.1422'. [ 364.474477][T11099] netlink: 'syz.2.1413': attribute type 10 has an invalid length. [ 365.585226][T11099] bond0: (slave .3ãc¤±): Enslaving as an active interface with an up link [ 365.861547][T11130] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1421'. [ 365.895140][T11130] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 368.022588][T11185] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1433'. [ 368.323754][T11190] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1434'. [ 368.350645][T11190] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 368.579543][T11198] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 368.587410][T11198] netlink: 'syz.0.1437': attribute type 3 has an invalid length. [ 368.624037][T11198] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1437'. [ 368.975329][T11207] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1439'. [ 368.992145][T11207] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1439'. [ 369.001991][T11206] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1439'. [ 369.646348][T11222] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 369.672079][T11222] syzkaller1: linktype set to 769 [ 369.705210][T11221] netlink: 'syz.2.1442': attribute type 3 has an invalid length. [ 369.732640][T11221] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1442'. [ 370.032362][T11232] netlink: 'syz.3.1445': attribute type 3 has an invalid length. [ 370.094866][T11232] netlink: 'syz.3.1445': attribute type 4 has an invalid length. [ 370.135864][T11232] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1445'. [ 371.140850][T11240] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1448'. [ 371.155503][T11240] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 371.871837][T11256] netlink: 'syz.1.1453': attribute type 12 has an invalid length. [ 371.888066][T11256] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1453'. [ 371.942281][T11253] netlink: 'syz.1.1453': attribute type 4 has an invalid length. [ 372.028115][T11271] bridge0: port 3(hsr0) entered disabled state [ 372.036285][T11271] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.052206][T11271] bridge0: entered allmulticast mode [ 372.175542][T11273] bridge0: port 3(hsr0) entered blocking state [ 372.182216][T11273] bridge0: port 3(hsr0) entered forwarding state [ 372.189049][T11273] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.196313][T11273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.205721][T11273] bridge0: entered promiscuous mode [ 372.240145][T11277] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1459'. [ 372.282977][T11277] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 372.444579][T11283] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1461'. [ 372.517602][T11286] netlink: 'syz.1.1462': attribute type 12 has an invalid length. [ 373.004073][T11301] netlink: 'syz.0.1463': attribute type 21 has an invalid length. [ 373.165569][T11310] netlink: 'syz.0.1463': attribute type 21 has an invalid length. [ 373.747332][T11323] __nla_validate_parse: 3 callbacks suppressed [ 373.747356][T11323] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1469'. [ 373.769435][T11323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.795616][T11327] netlink: 'syz.1.1469': attribute type 10 has an invalid length. [ 373.808580][T11327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1469'. [ 373.833285][T11327] ipvlan1: entered promiscuous mode [ 373.844895][T11327] ipvlan1: entered allmulticast mode [ 373.867987][T11327] veth0_vlan: entered allmulticast mode [ 373.882225][T11327] bridge0: port 3(ipvlan1) entered blocking state [ 373.916247][T11327] bridge0: port 3(ipvlan1) entered disabled state [ 373.953015][T11327] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 374.010520][T11318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.753973][T11334] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1471'. [ 374.795151][T11334] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 375.179945][T11347] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1474'. [ 375.379428][T11349] netlink: 'syz.3.1475': attribute type 10 has an invalid length. [ 375.519086][T11349] team0: Port device geneve1 added [ 375.788069][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 375.856711][T11355] netlink: 'syz.1.1477': attribute type 29 has an invalid length. [ 375.902024][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 375.985919][T11355] netlink: 'syz.1.1477': attribute type 29 has an invalid length. [ 376.001272][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 376.209978][T11358] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1478'. [ 376.919639][T11355] syzkaller0: entered promiscuous mode [ 376.925993][T11355] syzkaller0: entered allmulticast mode [ 378.851573][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.858140][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.424796][T11389] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1483'. [ 380.435236][T11389] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 380.834665][T11393] C: renamed from team_slave_0 (while UP) [ 383.613520][T11393] netlink: 'syz.3.1485': attribute type 3 has an invalid length. [ 383.621680][T11393] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1485'. [ 383.910656][T11415] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 383.934404][T11415] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1489'. [ 383.946839][T11415] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1489'. [ 384.133170][T11430] netlink: 'syz.0.1491': attribute type 10 has an invalid length. [ 384.141689][T11430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1491'. [ 384.156226][T11430] bridge0: port 2(team0) entered blocking state [ 384.162876][T11430] bridge0: port 2(team0) entered disabled state [ 384.178013][T11430] team0: entered allmulticast mode [ 384.183307][T11430] team_slave_1: entered allmulticast mode [ 384.200242][T11430] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 384.209649][T11430] bond0: entered allmulticast mode [ 384.214925][T11430] bond_slave_0: entered allmulticast mode [ 384.221688][T11430] bond_slave_1: entered allmulticast mode [ 384.228117][T11430] bridge_slave_1: entered allmulticast mode [ 384.250958][T11430] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 384.268113][T11430] dummy0: entered allmulticast mode [ 384.277214][T11430] team0: entered promiscuous mode [ 384.282660][T11430] team_slave_1: entered promiscuous mode [ 384.288881][T11430] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 384.296519][T11430] bond0: entered promiscuous mode [ 384.301815][T11430] bond_slave_0: entered promiscuous mode [ 384.309437][T11430] bond_slave_1: entered promiscuous mode [ 384.316292][T11430] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 384.324544][T11430] dummy0: entered promiscuous mode [ 384.340027][T11430] bridge0: port 2(team0) entered blocking state [ 384.346540][T11430] bridge0: port 2(team0) entered forwarding state [ 384.375840][T11433] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1493'. [ 384.395419][T11433] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 385.282767][T11463] netlink: 'syz.0.1505': attribute type 15 has an invalid length. [ 385.337368][T11463] netlink: 'syz.0.1505': attribute type 7 has an invalid length. [ 386.685646][T11512] syzkaller0: entered promiscuous mode [ 386.718524][T11512] syzkaller0: entered allmulticast mode [ 387.875703][T11532] ipvlan1: entered promiscuous mode [ 387.911029][T11532] ipvlan1: entered allmulticast mode [ 388.096256][T11535] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1522'. [ 390.471475][T11537] syzkaller0: entered promiscuous mode [ 390.479475][T11537] syzkaller0: entered allmulticast mode [ 392.703513][T11580] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1531'. [ 392.771077][T11580] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1531'. [ 392.913578][T11590] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1534'. [ 393.254120][T11604] netlink: 'syz.2.1538': attribute type 5 has an invalid length. [ 394.521796][T11631] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1544'. [ 394.558946][T11631] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 394.850898][T11644] netlink: 'syz.2.1547': attribute type 10 has an invalid length. [ 394.870647][T11644] team0: Device wg1 is up. Set it down before adding it as a team port [ 395.207323][T11647] netlink: 'syz.2.1547': attribute type 10 has an invalid length. [ 395.238924][T11647] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1547'. [ 396.040178][T11666] netlink: 'syz.1.1552': attribute type 29 has an invalid length. [ 396.094924][T11666] netlink: 'syz.1.1552': attribute type 29 has an invalid length. [ 396.126573][T11675] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1555'. [ 396.156642][T11675] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 396.180503][T11665] netlink: 'syz.1.1552': attribute type 29 has an invalid length. [ 396.393368][T11685] netlink: 'syz.0.1558': attribute type 7 has an invalid length. [ 396.401686][T11685] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1558'. [ 396.913058][T11697] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1562'. [ 397.029156][T11704] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1564'. [ 397.107492][T11704] bond0 (unregistering): left promiscuous mode [ 397.114461][T11704] bond_slave_0: left promiscuous mode [ 397.123491][T11704] bond_slave_1: left promiscuous mode [ 397.130133][T11704] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 397.142800][T11704] bond0 (unregistering): left allmulticast mode [ 397.150169][T11704] bond_slave_0: left allmulticast mode [ 397.157133][T11704] bond_slave_1: left allmulticast mode [ 397.167122][T11704] bridge_slave_1: left allmulticast mode [ 397.184943][T11704] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 397.206699][T11704] team0: Port device bond0 removed [ 397.216307][T11704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.240416][T11704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.269466][T11704] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 397.290488][T11704] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 397.310527][T11704] bond0 (unregistering): Released all slaves [ 397.492464][T11710] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1566'. [ 397.502560][T11710] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 397.797536][T11720] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1569'. [ 397.810973][T11720] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 397.848325][T11720] CPU: 0 PID: 11720 Comm: syz.2.1569 Not tainted syzkaller #0 [ 397.855890][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.866008][T11720] Call Trace: [ 397.869339][T11720] [ 397.872321][T11720] dump_stack_lvl+0x18c/0x250 [ 397.877146][T11720] ? show_regs_print_info+0x20/0x20 [ 397.882398][T11720] ? load_image+0x420/0x420 [ 397.886987][T11720] sysfs_warn_dup+0x8e/0xa0 [ 397.891583][T11720] sysfs_do_create_link_sd+0xc0/0x110 [ 397.897002][T11720] device_add_class_symlinks+0x1cf/0x240 [ 397.902732][T11720] device_add+0x4f9/0xc40 [ 397.907113][T11720] wiphy_register+0x1d99/0x2ac0 [ 397.912152][T11720] ? cfg80211_event_work+0x40/0x40 [ 397.917307][T11720] ? minstrel_ht_alloc+0x88a/0x990 [ 397.922563][T11720] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 397.928910][T11720] ieee80211_register_hw+0x2dd8/0x3b30 [ 397.934593][T11720] ? ieee80211_register_hw+0xfb1/0x3b30 [ 397.940213][T11720] ? ieee80211_tasklet_handler+0x20/0x20 [ 397.946012][T11720] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 397.952049][T11720] ? __debug_object_init+0xec/0x450 [ 397.957351][T11720] ? __asan_memset+0x22/0x40 [ 397.962022][T11720] ? __hrtimer_init+0x189/0x270 [ 397.966938][T11720] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 397.972764][T11720] ? mac80211_hwsim_free+0x220/0x220 [ 397.978097][T11720] ? rcu_is_watching+0x15/0xb0 [ 397.982921][T11720] ? kstrndup+0xbd/0x140 [ 397.987258][T11720] hwsim_new_radio_nl+0xdad/0x1a70 [ 397.992436][T11720] ? __nla_validate+0x50/0x50 [ 397.997211][T11720] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 398.003723][T11720] ? __nla_parse+0x40/0x50 [ 398.008205][T11720] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 398.014696][T11720] genl_family_rcv_msg_doit+0x21a/0x310 [ 398.020300][T11720] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 398.026239][T11720] ? bpf_lsm_capable+0x9/0x10 [ 398.030962][T11720] ? security_capable+0x89/0xb0 [ 398.035901][T11720] genl_rcv_msg+0x611/0x7a0 [ 398.040461][T11720] ? genl_bind+0x360/0x360 [ 398.044939][T11720] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 398.051474][T11720] netlink_rcv_skb+0x235/0x4c0 [ 398.056310][T11720] ? genl_bind+0x360/0x360 [ 398.060793][T11720] ? netlink_ack+0x1160/0x1160 [ 398.065635][T11720] ? __lock_acquire+0x7d80/0x7d80 [ 398.070715][T11720] ? net_generic+0x1e/0x240 [ 398.075282][T11720] ? down_read+0x1ac/0x2e0 [ 398.079797][T11720] genl_rcv+0x28/0x40 [ 398.083844][T11720] netlink_unicast+0x7b1/0x930 [ 398.088661][T11720] netlink_sendmsg+0x8d0/0xbf0 [ 398.093489][T11720] ? netlink_getsockopt+0x590/0x590 [ 398.098777][T11720] ? apparmor_socket_sendmsg+0x8e/0x330 [ 398.104412][T11720] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 398.109838][T11720] ? security_socket_sendmsg+0x80/0xa0 [ 398.115345][T11720] ? netlink_getsockopt+0x590/0x590 [ 398.120601][T11720] ____sys_sendmsg+0x61b/0x980 [ 398.125529][T11720] ? __asan_memset+0x22/0x40 [ 398.130172][T11720] ? __sys_sendmsg_sock+0x30/0x30 [ 398.135241][T11720] ? __import_iovec+0x5f2/0x850 [ 398.140178][T11720] ? import_iovec+0x73/0xa0 [ 398.144739][T11720] ___sys_sendmsg+0x2a6/0x360 [ 398.149471][T11720] ? __sys_sendmsg+0x2b0/0x2b0 [ 398.154353][T11720] __se_sys_sendmsg+0x1d0/0x2c0 [ 398.159352][T11720] ? __x64_sys_sendmsg+0x80/0x80 [ 398.164374][T11720] ? lockdep_hardirqs_on+0x98/0x150 [ 398.169713][T11720] do_syscall_64+0x55/0xb0 [ 398.174169][T11720] ? clear_bhb_loop+0x40/0x90 [ 398.178986][T11720] ? clear_bhb_loop+0x40/0x90 [ 398.183722][T11720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.189677][T11720] RIP: 0033:0x7f4223d9e159 [ 398.194127][T11720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.213788][T11720] RSP: 002b:00007f4224c5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.222249][T11720] RAX: ffffffffffffffda RBX: 00007f4224026180 RCX: 00007f4223d9e159 [ 398.230259][T11720] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 398.238269][T11720] RBP: 00007f4223e3506b R08: 0000000000000000 R09: 0000000000000000 [ 398.246304][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.254314][T11720] R13: 00007f4224026218 R14: 00007f4224026180 R15: 00007ffe2e3bd728 [ 398.262392][T11720] [ 398.501815][T11723] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1570'. [ 398.850567][T11742] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1577'. [ 398.872573][T11742] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 399.675318][T11745] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1578'. [ 399.719755][T11746] delete_channel: no stack [ 400.030821][T11771] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1587'. [ 400.040329][T11771] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 400.240967][T11778] netlink: 'syz.2.1589': attribute type 29 has an invalid length. [ 400.250512][T11778] netlink: 'syz.2.1589': attribute type 29 has an invalid length. [ 400.897115][T11799] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1595'. [ 400.909551][T11799] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1595'. [ 400.925547][T11799] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1595'. [ 400.941250][T11801] netlink: 'syz.3.1594': attribute type 2 has an invalid length. [ 400.946287][T11800] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1596'. [ 400.952488][T11801] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.1594'. [ 400.958527][T11800] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 401.424971][T11820] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1601'. [ 401.771642][T11832] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1605'. [ 401.782513][T11832] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 401.972853][T11831] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1606'. [ 401.998110][T11831] hsr_slave_0: left promiscuous mode [ 402.033528][T11831] hsr_slave_1: left promiscuous mode [ 402.139217][T11831] bridge0: port 3(hsr0) entered disabled state [ 402.340452][T11831] hsr0 (unregistering): left allmulticast mode [ 402.347449][T11831] bridge0: port 3(hsr0) entered disabled state [ 402.953156][T11837] netlink: 'syz.0.1608': attribute type 17 has an invalid length. [ 402.964510][T11834] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 402.992513][T11834] team0: Port device dummy0 added [ 403.390329][T11861] netlink: 'syz.3.1611': attribute type 2 has an invalid length. [ 404.398512][T11873] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 404.704015][T11882] __nla_validate_parse: 5 callbacks suppressed [ 404.704036][T11882] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1620'. [ 404.821597][T11889] netlink: 'syz.1.1623': attribute type 21 has an invalid length. [ 404.839048][T11889] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1623'. [ 404.844320][T11891] netlink: 'syz.2.1624': attribute type 29 has an invalid length. [ 404.863996][T11889] netlink: 'syz.1.1623': attribute type 4 has an invalid length. [ 404.873455][T11889] netlink: 'syz.1.1623': attribute type 5 has an invalid length. [ 404.886477][T11889] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1623'. [ 405.114098][T11900] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1628'. [ 405.127024][T11900] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 405.173303][T11896] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 405.322514][T11902] tap0: tun_chr_ioctl cmd 2147767511 [ 405.882502][T11922] validate_nla: 1 callbacks suppressed [ 405.882540][T11922] netlink: 'syz.2.1634': attribute type 21 has an invalid length. [ 405.930275][T11922] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1634'. [ 405.951905][T11922] netlink: 'syz.2.1634': attribute type 4 has an invalid length. [ 405.960824][T11922] netlink: 'syz.2.1634': attribute type 5 has an invalid length. [ 405.975697][T11922] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1634'. [ 406.137288][T11933] netlink: 'syz.0.1637': attribute type 29 has an invalid length. [ 406.159636][T11933] netlink: 'syz.0.1637': attribute type 29 has an invalid length. [ 407.206417][T11958] netlink: 'syz.3.1647': attribute type 21 has an invalid length. [ 407.238901][T11958] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1647'. [ 407.277515][T11958] netlink: 'syz.3.1647': attribute type 4 has an invalid length. [ 407.312942][T11958] netlink: 'syz.3.1647': attribute type 5 has an invalid length. [ 407.346725][T11958] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1647'. [ 409.158349][ T8083] wlan1: Trigger new scan to find an IBSS to join [ 409.374934][T11983] netlink: 'syz.1.1654': attribute type 29 has an invalid length. [ 409.450135][T11983] netlink: 'syz.1.1654': attribute type 29 has an invalid length. [ 410.304615][T12008] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1660'. [ 410.872766][T12010] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1661'. [ 410.999481][T12010] sit0: entered allmulticast mode [ 411.080995][T12021] sit0: entered promiscuous mode [ 411.082783][T12017] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1663'. [ 411.347461][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 412.844276][T12027] validate_nla: 1 callbacks suppressed [ 412.844299][T12027] netlink: 'syz.1.1672': attribute type 21 has an invalid length. [ 413.050021][T12027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1672'. [ 413.094673][ T8083] wlan1: Trigger new scan to find an IBSS to join [ 413.294481][T12034] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 413.341037][T12028] virt_wifi0: entered promiscuous mode [ 413.352353][T12028] virt_wifi0: entered allmulticast mode [ 414.262260][ T8099] wlan1: Creating new IBSS network, BSSID 02:af:54:53:90:00 [ 415.471546][T12066] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1675'. [ 415.493559][T12066] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 415.863329][T12079] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1685'. [ 415.908776][T12082] netlink: 'syz.3.1678': attribute type 29 has an invalid length. [ 417.054154][T12082] netlink: 'syz.3.1678': attribute type 29 has an invalid length. [ 417.062745][T12086] netlink: 'syz.3.1678': attribute type 29 has an invalid length. [ 417.196311][T12099] netlink: 'syz.1.1682': attribute type 10 has an invalid length. [ 417.291988][T12105] netlink: 'syz.1.1682': attribute type 28 has an invalid length. [ 417.317280][T12105] netlink: 'syz.1.1682': attribute type 4 has an invalid length. [ 417.341970][T12105] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1682'. [ 417.680009][T12109] netlink: 'syz.2.1686': attribute type 10 has an invalid length. [ 417.759241][T12109] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 418.168733][T12119] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1689'. [ 422.252491][T12170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1704'. [ 422.590019][T12181] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1707'. [ 422.955815][T12187] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1709'. [ 424.205802][T12229] netlink: 'syz.0.1719': attribute type 10 has an invalid length. [ 424.216107][T12229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1719'. [ 424.239199][T12229] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 424.470525][T12237] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1721'. [ 424.925104][T12248] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 424.973827][T12248] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 425.032234][T12248] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 425.844752][T12279] netlink: 135056 bytes leftover after parsing attributes in process `syz.2.1732'. [ 425.856053][T12279] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 426.484856][T12300] netlink: 'syz.2.1739': attribute type 3 has an invalid length. [ 426.512611][T12300] netlink: 'syz.2.1739': attribute type 1 has an invalid length. [ 426.539514][T12300] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1739'. [ 427.030512][T12304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.156852][T12306] Ÿë: port 1(ip6gretap0) entered blocking state [ 427.181591][T12306] Ÿë: port 1(ip6gretap0) entered disabled state [ 427.198679][T12306] ip6gretap0: entered allmulticast mode [ 427.216196][T12306] ip6gretap0: entered promiscuous mode [ 427.715809][T12322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1747'. [ 428.063779][T12331] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.1750'. [ 429.703190][T12358] syzkaller0: entered promiscuous mode [ 429.726837][T12358] syzkaller0: entered allmulticast mode [ 433.056425][T12340] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 433.064365][T12340] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1751'. [ 433.074447][T12386] : renamed from bond0 (while UP) [ 433.273411][T12407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.306146][T12405] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.1762'. [ 433.324235][T12407] netlink: 'syz.2.1764': attribute type 9 has an invalid length. [ 433.335708][T12407] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1764'. [ 433.386678][T12409] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1765'. [ 433.401327][T12409] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 434.383823][T12411] netlink: 'syz.2.1764': attribute type 9 has an invalid length. [ 434.394032][T12411] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1764'. [ 434.535545][T12437] netlink: 'syz.0.1769': attribute type 39 has an invalid length. [ 435.213294][T12462] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1775'. [ 435.512513][T12472] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1778'. [ 435.684342][T12478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 435.691765][T12474] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1777'. [ 435.691956][T12474] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 435.745809][T12476] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1788'. [ 435.759487][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 435.806373][T12478] netlink: 'syz.3.1779': attribute type 9 has an invalid length. [ 436.099764][T12480] netlink: 'syz.3.1779': attribute type 9 has an invalid length. [ 436.366312][T12497] syzkaller0: entered promiscuous mode [ 436.383085][T12497] syzkaller0: entered allmulticast mode [ 436.429770][T12498] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 438.114127][T12510] __nla_validate_parse: 3 callbacks suppressed [ 438.114143][T12510] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1789'. [ 439.172825][T12546] netlink: 'syz.1.1801': attribute type 1 has an invalid length. [ 439.181712][T12546] netlink: 'syz.1.1801': attribute type 2 has an invalid length. [ 439.192992][T12546] netlink: 'syz.1.1801': attribute type 2 has an invalid length. [ 439.201274][T12546] netlink: 'syz.1.1801': attribute type 3 has an invalid length. [ 439.210913][T12546] netlink: 'syz.1.1801': attribute type 4 has an invalid length. [ 439.227851][T12546] netlink: 'syz.1.1801': attribute type 5 has an invalid length. [ 439.241804][T12546] netlink: 'syz.1.1801': attribute type 6 has an invalid length. [ 439.267782][T12546] netlink: 'syz.1.1801': attribute type 7 has an invalid length. [ 439.275609][T12546] netlink: 'syz.1.1801': attribute type 9 has an invalid length. [ 439.290765][T12546] netlink: 'syz.1.1801': attribute type 10 has an invalid length. [ 439.320673][T12546] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1801'. [ 439.420726][T12551] delete_channel: no stack [ 439.429000][T12551] delete_channel: no stack [ 440.273683][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.287821][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.974125][T12575] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1810'. [ 440.988776][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1810'. [ 441.423814][T12590] nr0: port 1(hsr0) entered blocking state [ 441.446188][T12590] nr0: port 1(hsr0) entered disabled state [ 441.478010][T12590] hsr0: entered allmulticast mode [ 441.514288][T12590] hsr_slave_0: entered allmulticast mode [ 441.524490][T12590] hsr_slave_1: entered allmulticast mode [ 441.572226][T12590] hsr0: entered promiscuous mode [ 441.583548][T12590] nr0: port 1(hsr0) entered blocking state [ 441.589613][T12590] nr0: port 1(hsr0) entered forwarding state [ 441.674512][T12602] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1816'. [ 441.686366][T12602] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 441.893177][T12608] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1817'. [ 441.964498][T12608] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.1817'. [ 442.136367][T12615] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1817'. [ 442.875663][T12615] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.1817'. [ 442.954323][T12629] virt_wifi0: left promiscuous mode [ 442.960444][T12629] virt_wifi0: left allmulticast mode [ 443.068313][T12629] team0: Port device virt_wifi0 added [ 443.389731][T12640] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1825'. [ 443.596730][T12643] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1827'. [ 443.658044][T12643] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 444.340387][ T8087] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 444.620571][T12663] tap0: tun_chr_ioctl cmd 1074025692 [ 444.832465][ T5793] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 445.184398][T12679] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1838'. [ 445.193894][T12679] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 445.225617][T12677] validate_nla: 10 callbacks suppressed [ 445.225722][T12677] netlink: 'syz.3.1839': attribute type 10 has an invalid length. [ 445.909882][T12702] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1842'. [ 445.974956][T12703] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1844'. [ 446.032475][T12705] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1842'. [ 446.348196][ T5793] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 446.367220][T12717] netlink: 'syz.2.1847': attribute type 29 has an invalid length. [ 446.381756][T12717] netlink: 'syz.2.1847': attribute type 29 has an invalid length. [ 446.396969][T12718] netlink: 'syz.2.1847': attribute type 29 has an invalid length. [ 446.416528][T12719] netlink: 'syz.2.1847': attribute type 29 has an invalid length. [ 446.441186][T12720] netlink: 'syz.2.1847': attribute type 29 has an invalid length. [ 446.733503][T12726] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1849'. [ 446.767928][T12726] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 446.858150][T12728] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1851'. [ 446.933268][T12731] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 446.967372][T12731] syzkaller0: linktype set to 0 [ 447.494842][T12740] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1854'. [ 447.605128][T12740] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 447.767315][T12751] netlink: 'syz.3.1857': attribute type 10 has an invalid length. [ 447.810799][T12751] netlink: 'syz.3.1857': attribute type 16 has an invalid length. [ 448.125204][T12751] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1857'. [ 448.396286][T12759] netlink: 'syz.0.1858': attribute type 2 has an invalid length. [ 448.418570][T12759] netlink: 'syz.0.1858': attribute type 8 has an invalid length. [ 448.448952][T12759] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1858'. [ 448.600831][T12766] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1860'. [ 448.629422][T12766] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 448.635528][T12768] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1861'. [ 448.673244][T12768] netlink: 63579 bytes leftover after parsing attributes in process `syz.2.1861'. [ 448.875550][T12772] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1863'. [ 449.049073][T12786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1867'. [ 449.074038][T12789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.097423][T12787] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1867'. [ 449.122039][T12786] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1867'. [ 449.185226][T12793] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1869'. [ 449.330433][T12799] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1871'. [ 449.358450][T12799] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 450.758192][T12841] validate_nla: 3 callbacks suppressed [ 450.758212][T12841] netlink: 'syz.2.1880': attribute type 21 has an invalid length. [ 451.815130][T12861] syzkaller0: entered promiscuous mode [ 451.820896][T12861] syzkaller0: entered allmulticast mode [ 452.237637][T12876] netlink: 'syz.3.1889': attribute type 1 has an invalid length. [ 452.979061][T12881] netlink: 'syz.3.1890': attribute type 10 has an invalid length. [ 454.749280][T12881] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.772652][T12881] bridge_slave_1: left allmulticast mode [ 454.781275][T12881] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.795898][T12881] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 454.981355][T12900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.988971][T12900] IPv6: NLM_F_CREATE should be set when creating new route [ 454.996746][T12900] IPv6: NLM_F_CREATE should be set when creating new route [ 455.004573][T12900] IPv6: NLM_F_CREATE should be set when creating new route [ 455.087173][T12905] __nla_validate_parse: 2 callbacks suppressed [ 455.087191][T12905] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.1896'. [ 455.130176][T12905] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1896'. [ 455.133934][T12900] netlink: 'syz.1.1894': attribute type 9 has an invalid length. [ 455.152032][T12900] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1894'. [ 455.857456][T12899] delete_channel: no stack [ 456.043156][T12909] netlink: 'syz.1.1894': attribute type 9 has an invalid length. [ 456.117832][T12909] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1894'. [ 456.509943][T12928] netlink: 'syz.1.1901': attribute type 28 has an invalid length. [ 456.543103][T12928] netlink: 'syz.1.1901': attribute type 29 has an invalid length. [ 456.573387][T12928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1901'. [ 458.436953][T12957] sit0: left promiscuous mode [ 458.680023][T12959] sit0: entered promiscuous mode [ 459.032974][T12975] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1910'. [ 459.051754][T12975] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 459.666206][T12982] netlink: 3554 bytes leftover after parsing attributes in process `syz.1.1912'. [ 459.784902][T12986] netlink: 'syz.3.1913': attribute type 10 has an invalid length. [ 459.858853][T12986] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1913'. [ 460.146584][T12992] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1915'. [ 461.319597][T13008] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1920'. [ 461.355560][T13008] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 461.753237][T13026] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1925'. [ 462.342768][T13048] netlink: 'syz.3.1933': attribute type 41 has an invalid length. [ 462.383550][T13048] netlink: 'syz.3.1933': attribute type 41 has an invalid length. [ 462.415854][T13046] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1932'. [ 462.487826][T13046] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 462.975163][T13063] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1936'. [ 463.057623][T13065] netlink: 'syz.2.1938': attribute type 21 has an invalid length. [ 463.758076][T13089] sit0: left promiscuous mode [ 464.269639][T13095] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1948'. [ 464.279418][T13095] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 464.791980][T13115] netlink: 'syz.1.1952': attribute type 153 has an invalid length. [ 464.803001][T13115] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1952'. [ 464.832193][T13113] netlink: 'syz.0.1953': attribute type 1 has an invalid length. [ 464.849401][T13113] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.1953'. [ 464.863260][T13114] netlink: 'syz.0.1953': attribute type 27 has an invalid length. [ 464.872001][T13114] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1953'. [ 465.772005][T13130] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 465.814554][T13130] syzkaller0: entered promiscuous mode [ 465.834553][T13130] syzkaller0: entered allmulticast mode [ 465.847963][T13133] netlink: 'syz.3.1958': attribute type 27 has an invalid length. [ 465.937024][T13133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 465.968289][T13133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 465.991099][T13130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 466.027593][T13135] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1960'. [ 466.076762][T13130] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1958'. [ 469.577053][T13149] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1962'. [ 470.532498][T13179] netlink: 'syz.3.1973': attribute type 28 has an invalid length. [ 470.555626][T13180] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1980'. [ 470.585039][T13180] netlink: 'syz.1.1980': attribute type 27 has an invalid length. [ 470.594677][T13180] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1980'. [ 470.609160][T13180] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 471.905717][T13206] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 471.925988][T13205] netlink: 'syz.3.1981': attribute type 10 has an invalid length. [ 472.110254][T13205] team0: Device hsr_slave_0 failed to register rx_handler [ 472.241201][T13209] netlink: 'syz.3.1981': attribute type 3 has an invalid length. [ 472.261276][T13209] netlink: 7818 bytes leftover after parsing attributes in process `syz.3.1981'. [ 472.339392][T13205] syz.3.1981 (13205) used greatest stack depth: 16360 bytes left [ 472.649172][T13220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1984'. [ 472.668094][T13220] : renamed from caif0 [ 472.792607][T13220] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 473.070404][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 473.470046][T13222] netlink: 'syz.3.1985': attribute type 153 has an invalid length. [ 473.489859][T13222] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1985'. [ 474.001867][T13258] netlink: 'syz.0.1992': attribute type 21 has an invalid length. [ 474.374159][T13276] ================================================================== [ 474.382401][T13276] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 474.390288][T13276] Write of size 48 at addr ffff888075230c10 by task syz.2.1999/13276 [ 474.398410][T13276] [ 474.400788][T13276] CPU: 1 PID: 13276 Comm: syz.2.1999 Not tainted syzkaller #0 [ 474.408297][T13276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.418407][T13276] Call Trace: [ 474.421732][T13276] [ 474.424710][T13276] dump_stack_lvl+0x18c/0x250 [ 474.429467][T13276] ? read_lock_is_recursive+0x20/0x20 [ 474.434921][T13276] ? show_regs_print_info+0x20/0x20 [ 474.440187][T13276] ? load_image+0x420/0x420 [ 474.444742][T13276] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 474.450390][T13276] ? __virt_addr_valid+0x10c/0x380 [ 474.455617][T13276] ? __virt_addr_valid+0x10c/0x380 [ 474.460798][T13276] ? __virt_addr_valid+0x10c/0x380 [ 474.465974][T13276] print_report+0xa8/0x210 [ 474.470555][T13276] ? __bpf_get_stackid+0x6c7/0x900 [ 474.475705][T13276] kasan_report+0x117/0x150 [ 474.480263][T13276] ? __bpf_get_stackid+0x6c7/0x900 [ 474.485425][T13276] kasan_check_range+0x241/0x290 [ 474.490397][T13276] ? __bpf_get_stackid+0x6c7/0x900 [ 474.495625][T13276] __asan_memcpy+0x40/0x70 [ 474.500080][T13276] __bpf_get_stackid+0x6c7/0x900 [ 474.505061][T13276] bpf_get_stackid_pe+0x343/0x410 [ 474.510132][T13276] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 474.515631][T13276] bpf_overflow_handler+0x1fc/0x510 [ 474.520868][T13276] ? bpf_overflow_handler+0xde/0x510 [ 474.526285][T13276] ? tp_perf_event_destroy+0x20/0x20 [ 474.531612][T13276] ? verify_lock_unused+0x140/0x140 [ 474.536855][T13276] ? __perf_event_account_interrupt+0x187/0x280 [ 474.543144][T13276] __perf_event_overflow+0x461/0x660 [ 474.548506][T13276] perf_swevent_overflow+0x274/0x340 [ 474.553831][T13276] ? perf_event_switch_output+0x790/0x790 [ 474.559594][T13276] ? rcu_is_watching+0x15/0xb0 [ 474.564393][T13276] perf_swevent_event+0x45c/0x570 [ 474.569457][T13276] ? perf_tp_event+0x1550/0x1550 [ 474.574435][T13276] ___perf_sw_event+0x4ab/0x730 [ 474.579325][T13276] ? ___perf_sw_event+0x19e/0x730 [ 474.584377][T13276] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 474.590854][T13276] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 474.596867][T13276] ? lock_chain_count+0x20/0x20 [ 474.601758][T13276] __perf_sw_event+0x139/0x270 [ 474.606563][T13276] do_user_addr_fault+0x1242/0x12d0 [ 474.611802][T13276] ? rcu_is_watching+0x15/0xb0 [ 474.616600][T13276] exc_page_fault+0x64/0x100 [ 474.621228][T13276] asm_exc_page_fault+0x26/0x30 [ 474.626114][T13276] RIP: 0010:__put_user_4+0x11/0x20 [ 474.631259][T13276] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 474.650908][T13276] RSP: 0018:ffffc9000dddfe80 EFLAGS: 00050206 [ 474.657013][T13276] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000200000001a00 [ 474.665016][T13276] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 474.673021][T13276] RBP: 0000000000000008 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 474.681020][T13276] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: 0000000000000800 [ 474.689021][T13276] R13: 0000200000001a00 R14: 000000000000001f R15: 0000000000000800 [ 474.697044][T13276] __sys_socketpair+0xb8/0x550 [ 474.701899][T13276] __x64_sys_socketpair+0x9b/0xb0 [ 474.706965][T13276] do_syscall_64+0x55/0xb0 [ 474.711414][T13276] ? clear_bhb_loop+0x40/0x90 [ 474.716128][T13276] ? clear_bhb_loop+0x40/0x90 [ 474.720844][T13276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.726775][T13276] RIP: 0033:0x7f4223d9e159 [ 474.731219][T13276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.750863][T13276] RSP: 002b:00007f4224c9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 474.759313][T13276] RAX: ffffffffffffffda RBX: 00007f4224025fa0 RCX: 00007f4223d9e159 [ 474.767317][T13276] RDX: 0000000000000005 RSI: 0000000000000800 RDI: 000000000000001f [ 474.775319][T13276] RBP: 00007f4223e3506b R08: 0000000000000000 R09: 0000000000000000 [ 474.783317][T13276] R10: 0000200000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 474.791323][T13276] R13: 00007f4224026038 R14: 00007f4224025fa0 R15: 00007ffe2e3bd728 [ 474.799338][T13276] [ 474.802389][T13276] [ 474.804739][T13276] Allocated by task 13276: [ 474.809171][T13276] kasan_set_track+0x4e/0x70 [ 474.813796][T13276] __kasan_kmalloc+0x8f/0xa0 [ 474.818417][T13276] __kmalloc_node+0xb6/0x240 [ 474.823044][T13276] bpf_map_area_alloc+0x5e/0x110 [ 474.828104][T13276] prealloc_elems_and_freelist+0x86/0x1c0 [ 474.833864][T13276] stack_map_alloc+0x32b/0x4b0 [ 474.838655][T13276] map_create+0x877/0x12f0 [ 474.843102][T13276] __sys_bpf+0x651/0x890 [ 474.847369][T13276] __x64_sys_bpf+0x7c/0x90 [ 474.851809][T13276] do_syscall_64+0x55/0xb0 [ 474.856255][T13276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.862188][T13276] [ 474.864530][T13276] Last potentially related work creation: [ 474.870274][T13276] kasan_save_stack+0x3e/0x60 [ 474.874987][T13276] __kasan_record_aux_stack+0xaf/0xc0 [ 474.880437][T13276] call_rcu+0x153/0x900 [ 474.884630][T13276] __nf_register_net_hook+0x787/0x910 [ 474.890136][T13276] nf_register_net_hook+0xb2/0x190 [ 474.895282][T13276] nf_register_net_hooks+0x44/0x1b0 [ 474.900517][T13276] ipvlan_l3s_register+0x134/0x1d0 [ 474.905733][T13276] ipvlan_set_port_mode+0x1a1/0x3f0 [ 474.910967][T13276] ipvlan_link_new+0x736/0xae0 [ 474.915790][T13276] rtnl_newlink+0x15a0/0x2170 [ 474.920516][T13276] rtnetlink_rcv_msg+0x843/0xf90 [ 474.925542][T13276] netlink_rcv_skb+0x235/0x4c0 [ 474.930333][T13276] netlink_unicast+0x7b1/0x930 [ 474.935131][T13276] netlink_sendmsg+0x8d0/0xbf0 [ 474.939930][T13276] __sys_sendto+0x4a9/0x6b0 [ 474.944465][T13276] __x64_sys_sendto+0xde/0xf0 [ 474.949172][T13276] do_syscall_64+0x55/0xb0 [ 474.953651][T13276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 474.959587][T13276] [ 474.961931][T13276] The buggy address belongs to the object at ffff888075230c00 [ 474.961931][T13276] which belongs to the cache kmalloc-cg-64 of size 64 [ 474.976187][T13276] The buggy address is located 16 bytes inside of [ 474.976187][T13276] allocated 40-byte region [ffff888075230c00, ffff888075230c28) [ 474.990188][T13276] [ 474.992538][T13276] The buggy address belongs to the physical page: [ 474.999007][T13276] page:ffffea0001d48c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75230 [ 475.009179][T13276] memcg:ffff8880758a3e01 [ 475.013438][T13276] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 475.021020][T13276] page_type: 0xffffffff() [ 475.025378][T13276] raw: 00fff00000000800 ffff888017c4da00 ffffea00017a0800 dead000000000004 [ 475.034012][T13276] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880758a3e01 [ 475.042617][T13276] page dumped because: kasan: bad access detected [ 475.049059][T13276] page_owner tracks the page as allocated [ 475.054878][T13276] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5774, tgid 5774 (syz-executor), ts 98085922252, free_ts 98057344076 [ 475.073233][T13276] post_alloc_hook+0x1c1/0x200 [ 475.078050][T13276] get_page_from_freelist+0x2181/0x22a0 [ 475.083623][T13276] __alloc_pages+0x1f0/0x460 [ 475.088236][T13276] alloc_slab_page+0x5d/0x180 [ 475.092968][T13276] new_slab+0x87/0x2d0 [ 475.097065][T13276] ___slab_alloc+0xc5c/0x12f0 [ 475.101770][T13276] __kmem_cache_alloc_node+0x11f/0x250 [ 475.107438][T13276] kmalloc_trace+0x2a/0xe0 [ 475.111892][T13276] alloc_fdtable+0xca/0x2c0 [ 475.116474][T13276] dup_fd+0x747/0xa20 [ 475.120508][T13276] copy_files+0xaf/0x110 [ 475.124825][T13276] copy_process+0x157d/0x3da0 [ 475.129537][T13276] kernel_clone+0x24b/0x8a0 [ 475.134162][T13276] __x64_sys_clone+0x1b7/0x230 [ 475.138955][T13276] do_syscall_64+0x55/0xb0 [ 475.143410][T13276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.149365][T13276] page last free stack trace: [ 475.154053][T13276] free_unref_page_prepare+0x7d7/0x8f0 [ 475.159537][T13276] free_unref_page+0x32/0x2e0 [ 475.164251][T13276] __unfreeze_partials+0x1cf/0x210 [ 475.169395][T13276] put_cpu_partial+0x17c/0x250 [ 475.174198][T13276] __slab_free+0x319/0x400 [ 475.178664][T13276] qlist_free_all+0x75/0xd0 [ 475.183215][T13276] kasan_quarantine_reduce+0x143/0x160 [ 475.188721][T13276] __kasan_slab_alloc+0x22/0x80 [ 475.193735][T13276] slab_post_alloc_hook+0x6a/0x4d0 [ 475.198888][T13276] __kmem_cache_alloc_node+0x194/0x250 [ 475.204384][T13276] kmalloc_trace+0x2a/0xe0 [ 475.208839][T13276] find_get_pmu_context+0x81/0x9e0 [ 475.213985][T13276] __se_sys_perf_event_open+0xbd4/0x1d40 [ 475.219651][T13276] do_syscall_64+0x55/0xb0 [ 475.224104][T13276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.230124][T13276] [ 475.232467][T13276] Memory state around the buggy address: [ 475.238122][T13276] ffff888075230b00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 475.246208][T13276] ffff888075230b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 475.254736][T13276] >ffff888075230c00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 475.262817][T13276] ^ [ 475.268222][T13276] ffff888075230c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 475.276315][T13276] ffff888075230d00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 475.284403][T13276] ================================================================== [ 475.292506][T13276] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 475.299718][T13276] CPU: 1 PID: 13276 Comm: syz.2.1999 Not tainted syzkaller #0 [ 475.307213][T13276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.317405][T13276] Call Trace: [ 475.320721][T13276] [ 475.323690][T13276] dump_stack_lvl+0x18c/0x250 [ 475.328413][T13276] ? show_regs_print_info+0x20/0x20 [ 475.333652][T13276] ? load_image+0x420/0x420 [ 475.338243][T13276] panic+0x2ca/0x720 [ 475.342171][T13276] ? __lock_acquire+0x7d80/0x7d80 [ 475.347227][T13276] ? bpf_jit_dump+0xd0/0xd0 [ 475.351860][T13276] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 475.357796][T13276] ? _raw_spin_unlock+0x40/0x40 [ 475.362681][T13276] ? __bpf_get_stackid+0x6c7/0x900 [ 475.367843][T13276] check_panic_on_warn+0x84/0xa0 [ 475.372881][T13276] ? __bpf_get_stackid+0x6c7/0x900 [ 475.378049][T13276] end_report+0x6f/0x130 [ 475.382334][T13276] kasan_report+0x128/0x150 [ 475.386873][T13276] ? __bpf_get_stackid+0x6c7/0x900 [ 475.392050][T13276] kasan_check_range+0x241/0x290 [ 475.397024][T13276] ? __bpf_get_stackid+0x6c7/0x900 [ 475.402173][T13276] __asan_memcpy+0x40/0x70 [ 475.406777][T13276] __bpf_get_stackid+0x6c7/0x900 [ 475.411766][T13276] bpf_get_stackid_pe+0x343/0x410 [ 475.416832][T13276] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 475.422318][T13276] bpf_overflow_handler+0x1fc/0x510 [ 475.427585][T13276] ? bpf_overflow_handler+0xde/0x510 [ 475.432931][T13276] ? tp_perf_event_destroy+0x20/0x20 [ 475.438257][T13276] ? verify_lock_unused+0x140/0x140 [ 475.443573][T13276] ? __perf_event_account_interrupt+0x187/0x280 [ 475.449845][T13276] __perf_event_overflow+0x461/0x660 [ 475.455169][T13276] perf_swevent_overflow+0x274/0x340 [ 475.460518][T13276] ? perf_event_switch_output+0x790/0x790 [ 475.466278][T13276] ? rcu_is_watching+0x15/0xb0 [ 475.471084][T13276] perf_swevent_event+0x45c/0x570 [ 475.476144][T13276] ? perf_tp_event+0x1550/0x1550 [ 475.481123][T13276] ___perf_sw_event+0x4ab/0x730 [ 475.486012][T13276] ? ___perf_sw_event+0x19e/0x730 [ 475.491067][T13276] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 475.497538][T13276] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 475.503575][T13276] ? lock_chain_count+0x20/0x20 [ 475.508460][T13276] __perf_sw_event+0x139/0x270 [ 475.513259][T13276] do_user_addr_fault+0x1242/0x12d0 [ 475.518498][T13276] ? rcu_is_watching+0x15/0xb0 [ 475.523297][T13276] exc_page_fault+0x64/0x100 [ 475.527914][T13276] asm_exc_page_fault+0x26/0x30 [ 475.532884][T13276] RIP: 0010:__put_user_4+0x11/0x20 [ 475.538028][T13276] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 475.557668][T13276] RSP: 0018:ffffc9000dddfe80 EFLAGS: 00050206 [ 475.563771][T13276] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000200000001a00 [ 475.571773][T13276] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 475.579786][T13276] RBP: 0000000000000008 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 475.587890][T13276] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: 0000000000000800 [ 475.595904][T13276] R13: 0000200000001a00 R14: 000000000000001f R15: 0000000000000800 [ 475.603919][T13276] __sys_socketpair+0xb8/0x550 [ 475.608730][T13276] __x64_sys_socketpair+0x9b/0xb0 [ 475.613805][T13276] do_syscall_64+0x55/0xb0 [ 475.618256][T13276] ? clear_bhb_loop+0x40/0x90 [ 475.622971][T13276] ? clear_bhb_loop+0x40/0x90 [ 475.627690][T13276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.633659][T13276] RIP: 0033:0x7f4223d9e159 [ 475.638108][T13276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.657744][T13276] RSP: 002b:00007f4224c9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 475.666192][T13276] RAX: ffffffffffffffda RBX: 00007f4224025fa0 RCX: 00007f4223d9e159 [ 475.674213][T13276] RDX: 0000000000000005 RSI: 0000000000000800 RDI: 000000000000001f [ 475.682308][T13276] RBP: 00007f4223e3506b R08: 0000000000000000 R09: 0000000000000000 [ 475.690305][T13276] R10: 0000200000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 475.698327][T13276] R13: 00007f4224026038 R14: 00007f4224025fa0 R15: 00007ffe2e3bd728 [ 475.706337][T13276] [ 475.709546][T13276] Kernel Offset: disabled [ 475.713987][T13276] Rebooting in 86400 seconds..