last executing test programs: 11m54.212277189s ago: executing program 3 (id=4123): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000046090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000024090000060000005c09000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x69, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x12, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100feffffff000000000c0000000c000000070000000f0000000000000b01000000005f2e61302e00"], &(0x7f0000000700)=""/98, 0x2b, 0x62, 0x1, 0x6, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r8, &(0x7f0000000240)}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001180)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x4, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000000c0)='GPL\x00', 0x9000000, 0xd6, &(0x7f0000000140)=""/214, 0x41100, 0x50, '\x00', r6, 0x25, r7, 0x8, &(0x7f00000008c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[r0, r0, r0, r0, r0, r0, r8, r0, r9], 0x0, 0x10, 0x9}, 0x94) 11m53.619021629s ago: executing program 3 (id=4127): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfd, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd77, 0x6, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7, 0x9, 0x7ff, 0x2c92, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[0x0], 0x0, 0x1b, 0x0, 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r1, @ANYBLOB='&\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000020000000300"/28], 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="18340000040000000000070000000000"], &(0x7f0000000840)='syzkaller\x00', 0x1, 0x0, 0x0, 0x71be12af7866cf22, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1b081, r3, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000a40)='GPL\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], 0x0, 0xfffffffffffffdca, 0x0, 0x1, 0x4}, 0x28) 11m53.443600891s ago: executing program 3 (id=4128): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@fallback, 0x11, 0x1, 0x5f71, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)}, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8300, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)) 11m50.952361841s ago: executing program 3 (id=4130): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r2) 11m50.785786353s ago: executing program 3 (id=4132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x6, 0x0, 0x5, 0xa, 0x0, 0x2, 0xfffffffffffffff0}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 11m50.703249288s ago: executing program 3 (id=4133): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x800b, 0x5, 0x43a1bd76, 0x4, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x5d31, 0x88202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4010000000}, 0x0, 0x5, r0, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x9, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000002}, 0x1000, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xb, 0xffffffffffffffff, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000160c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x7, 0x10000, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0090}, 0x4000000) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0x2, 0x7baf376b, 0x3, 0x5, 0x0, 0x5}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}, 0x40) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x3ff}, 0x10000, 0x0, 0xfffffffe, 0x0, 0xfffffffeffffffff, 0xfffffffd, 0x0, 0x0, 0xa, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11m34.880225269s ago: executing program 32 (id=4133): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x800b, 0x5, 0x43a1bd76, 0x4, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x5d31, 0x88202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4010000000}, 0x0, 0x5, r0, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x9, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000002}, 0x1000, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xb, 0xffffffffffffffff, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000160c00000000140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x7, 0x10000, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0090}, 0x4000000) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x94, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0x2, 0x7baf376b, 0x3, 0x5, 0x0, 0x5}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}, 0x40) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x3ff}, 0x10000, 0x0, 0xfffffffe, 0x0, 0xfffffffeffffffff, 0xfffffffd, 0x0, 0x0, 0xa, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 8.756307123s ago: executing program 4 (id=6851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000001531b799bef1183c0e162320ed158dff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000540), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 8.371621099s ago: executing program 4 (id=6855): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0xbf34}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x4c) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4000000005}, 0xc003, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8983, &(0x7f0000000080)) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000f00), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 6.31524775s ago: executing program 4 (id=6856): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x42, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xffffffa1, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5578, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x8001, 0xc1, &(0x7f0000000340)=""/193, 0x41100, 0x11, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x5, 0xb, 0x6}]}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x18}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001380)="b9ff0347eeac63403cf94bf088a8", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x5, &(0x7f0000000080)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xe5, &(0x7f0000000100)=""/229, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x8, 0x2, 0x8}, 0x10, r0, r1, 0x3, &(0x7f0000000740)=[r3], &(0x7f0000000780)=[{0x4, 0x1, 0x3, 0xa}, {0x0, 0x2, 0x5, 0x3}, {0x3, 0x4, 0x8, 0x1}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x1c, 0x8, 0x0, 0x4, 0x50400, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001480)=@generic={&(0x7f00000013c0)='./file0\x00', r6}, 0x18) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x8004) 6.072270156s ago: executing program 0 (id=6857): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='^+,!z,-\x00') r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xff, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="20000000000000008400000002000000940404"], 0x20}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90ba4fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002e80)=""/199, 0xc7}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f00000059c0)=""/109, 0x6d}], 0xc}, 0x2122) 4.096991911s ago: executing program 0 (id=6859): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xfa}, {&(0x7f00000013c0)="aa581ff83dac4a636cb9b825c4b89d210c31e1446808358248cf2d795634b12c4ce8a4e1d32e2eba584ba7d17f3a6a997050394d307c768c81c980e56f316d71e106acf3d5", 0x45}], 0x2}, 0x4008000) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000480)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8181, 0xc8, 0xffffffff, 0x0, 0x0, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x60, 0x1, 0x3, 0xfffffffe}]}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x27622, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) socket$kcm(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.800226621s ago: executing program 4 (id=6861): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x5, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="eab5d943", 0x4}], 0x1}, 0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5411, 0x0) socket$kcm(0x2, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x7, 0xffffffffffffffff, 0x1) unlink(&(0x7f0000000140)='./cgroup\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'geneve1\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40500000000000061108600000000001f010000000000009500000000001b005509e6a3e356979bd5fd1315680919f44f57a5aebea668a7438eb39cd41f0cae6d55d15c566c444b1e3041ec40fefcaa79b30dc2bc1962"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={r2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 3.782676202s ago: executing program 2 (id=6862): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x6e, 0x6, 0x4, 0x7, 0x0, 0x0, 0x61705, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x1200, 0x1, 0xd, 0x5, 0x4, 0x4b6, 0x68c, 0x0, 0x7, 0x0, 0x7}, r1, 0x2, r0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)}, {&(0x7f0000000540)="b5af90f45a1ad29a06064df3052d4f67da9ece493545", 0x16}, {&(0x7f0000000580)="fd615b35cbd0c8", 0x7}], 0x3}, 0x40040) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r6, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES64=r5], 0x50) socket$kcm(0x10, 0x5, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe1, 0x2, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000480), 0x9}, 0x100, 0x0, 0x22, 0x0, 0x80, 0x80000003, 0x0, 0x0, 0x100000}, 0x0, 0x3, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x2, 0x0) recvmsg(r7, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x8008}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8932, &(0x7f0000000a00)='lo:\x96o8\x145\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5i\x0f\xc0u\xff\x86\x83S\xc9W\xc2\xd3z\xeb\xea\xb3\x91:\v\xc5\xa0L\xd3\xd0\x0f0\xb4}S8\xce\xa5\x13\xfeBW\xcb\xd2\xc6\xa9\x8b\x14\xdd\xe0\xe4$\xe9@\xa6\x9f\x0e\xbe\xae\xb6\x16L\xa3\\\xa2z>;\x1b\xcc\x95dj\r\x8b\x1f\t}\xb9\xb1w(f\x19`z\x17\xba\'Q\x1f\xc1\xa1\xdc?\x00\x8e\x17!\x00\x10\xbd6\xe2F.Hyg;\xd9[\xcc\xf8\x84\x1c\x18\x1aI\xf5\x14\x1an\xc1\xb6\xf1_\n\xa5bI\x06\x9a>#\x9b\xa6?\xdd\x9a\xf0\xfe\xdcw\xa3\xe0d\x04}\xc4VYf9Z\xb6\xff\xe1j\x886sqq\xa3\x7f\x00N\xf2\xb7\xcf\xb7\aL\xe3\xb4\xd0\x00\"\xbe\x05*\xcb,m\x0f\x80 p\x80w\x88\x91\xc43\xd3?\xfe\xc9\xf6\xc8\xee\x95\x82\x0f\xcb\xf2\xd0e\xd8\x16\xae\xc0\xa9-\x05N{\x91\x9e\xd1\xc7\x9d\xe1t\x95%\'5\xb4j\xee=]\x91\x90&R~\x16>\xe2\xce:2Q\xf0[\xc5f\xd3\x9el\ta\x81\x03\x00'/1176) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x1e, &(0x7f0000000500), 0x4) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f0000003c40)={&(0x7f00000002c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x1, 0xe, "78dc269052480a64ffbb179c54778bed92e8841e53dd3d4a0c4d3b6a827fb194c7a27b40ba004bc202dfedf111328e25a6c743cf9f83a536254b364568b822", 0x20}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="817f0000", 0xffffffc3}, {&(0x7f00000000c0)="0f36ed34", 0x4}], 0x2}, 0x4000000) 3.732559335s ago: executing program 1 (id=6863): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1}, {}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000340)=""/220, 0x45, 0xdc, 0x1}, 0x20) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 3.596049475s ago: executing program 0 (id=6864): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0xbf34}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x4c) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4000000005}, 0xc003, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8983, &(0x7f0000000080)) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000f00), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 2.564702555s ago: executing program 2 (id=6865): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x0, 0xa, 0x3, 0x900, r2, 0x7ff, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x13, 0x0, 0xa, 0x3, 0x900, r2, 0x7ff, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061171400000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d797b5bbeb61411f88ee1554a78306fe"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) 2.380162557s ago: executing program 2 (id=6866): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xd, &(0x7f0000000540)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x4, 0x2}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x44}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000001c0), &(0x7f0000000480)=r1}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b564", 0x2}], 0x1, &(0x7f0000000d80)=[{0x10, 0x29, 0x4}], 0x10}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/34, 0x22, 0x0, &(0x7f0000000580)=""/187, 0xbb}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000008ad060000000000000800000095000000000000000000"], &(0x7f0000000700)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x9, 0x2277, 0xac}, 0x10, 0x1c793, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0xc, &(0x7f0000000400)=@raw=[@generic={0x84, 0xc, 0x9, 0x3, 0x7}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], &(0x7f0000000480)='syzkaller\x00', 0x9a17, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0x10, 0x0, 0x74}, 0x10, r6, r7, 0x2, 0x0, &(0x7f0000000900)=[{0x1, 0x5, 0x7, 0x4}, {0x1, 0x4, 0x3}], 0x10, 0x35}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a0010400600", 0x3a}], 0x1}, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000c00)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000008d00"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 2.131935275s ago: executing program 0 (id=6867): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b400100000000000dd0a000000000000730543000000ed0095000000000000009aee197cc710a5e0afd3c1e949455c8eb178d4edcb5cd2b267f756030f324c7732aac714ef18ed590f3cd8ec245b6eb346ace12f7c9b1f333c883d451aec85fa8179fc1d94369af395360b7c70e36bf3deb9381908d24ab96e0e7fe92f354bd65df03663072b8f37a81d61c1e8e8f54210a4bb3be98a347150479305956af4fd8c102d513e7e2b46"], &(0x7f0000000240)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x2}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x163) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x2101, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7b, 0xeb07}, 0x828, 0x0, 0x0, 0x0, 0xe, 0x800000, 0x1, 0x0, 0xfffffffc, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) r7 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x17) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x244201, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) socket$kcm(0x11, 0xa, 0x300) 2.05484491s ago: executing program 4 (id=6868): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x3, 0x0, 0xb7, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 2.038169421s ago: executing program 2 (id=6869): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x456c4997c6f4bb71, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8640, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r0, 0x8010743f, &(0x7f0000001200)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b0000000000000000000000000000000001"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.920200879s ago: executing program 1 (id=6870): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000730173000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x3, 0x5, 0x9, 0x2, 0x0, 0xf95, 0x2400, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x5}, 0x10100, 0x1, 0x4, 0x4, 0x5, 0xb21, 0x7, 0x0, 0x3ff, 0x0, 0x6}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000040)=r2, 0x17) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000fc0c3b71b644935000000000000000f37dd73b563bc7d2d144a6a77fe6aa1c38d61ad6f6bf8f4b866a75a8e9ae8694a84bef72a52bbef30d1b614e1a57fcf34c102c169b1b2b3918a00628c044b66250491b3090aa5c49a1bb6327576719c83d6b812dd425361fa1c9ee87e763bba105d6239075902372e0df9a8a01755808a569b1f024cd2e8255a661858c6e5c57368c50f8ef5a2709db9a79833cc0ed534c0438bb05783dd1d8ebc"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000440)=0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x801c581f, &(0x7f0000000040)=0xff57000000000600) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex, r3, 0x1b, 0x2010, 0x0, @value=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) 1.648686088s ago: executing program 0 (id=6871): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000004100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRES16], 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="d4020000200000001800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x8e, &(0x7f0000000200)=""/142}, 0x94) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x1, 0x1, 0x10, 0x0, 0xfeff, 0x720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x205, 0x0, 0x0, 0x0, 0x4, 0x7, 0x3}, 0x0, 0x0, r0, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x1, 0xa, 0x0, 0x30, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x4f, &(0x7f00000001c0)=""/79, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xd, r1, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x5, &(0x7f0000000280)=[r1], &(0x7f00000002c0)=[{0x3, 0x1, 0x7, 0xa}, {0x2, 0x7, 0x1, 0x2}, {0x2, 0x2}, {0x81, 0x4, 0x0, 0x8}, {0x3, 0x4, 0x9, 0x8}], 0x10, 0x80000000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.601482071s ago: executing program 2 (id=6872): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r1, 0x26, 0x2020, 0x0, @void, @void, @value=r3}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4) socketpair(0x1d, 0x1, 0xc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89e0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) ioctl$TUNGETFEATURES(r9, 0x5452, &(0x7f00000013c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$inet(r13, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 1.357598737s ago: executing program 1 (id=6873): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x408, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1.088753606s ago: executing program 1 (id=6874): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xd8, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0x20, &(0x7f00000016c0)={&(0x7f0000000640)=""/113, 0x71, 0x0, &(0x7f00000006c0)=""/4096, 0x1000}}, 0x10) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001780)=@generic={&(0x7f0000001740)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{0x1, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001900)={{0x1, 0xffffffffffffffff}, &(0x7f0000001880), &(0x7f00000018c0)='%-010d \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xcbdb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x6}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x72, '\x00', r3, @fallback=0xc, r5, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x0, 0x8, 0x5}, 0x10, r6, r7, 0x9, &(0x7f0000001940)=[r8, r9], &(0x7f0000001980)=[{0x5, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x2, 0x5}, {0x3, 0x5, 0x6, 0xb}, {0x5, 0x4, 0x6, 0x4}, {0x5, 0x2, 0x9, 0x5}, {0x0, 0x5, 0x0, 0x7}, {0x4, 0x3, 0xf, 0x3}, {0x5de, 0x4, 0xd, 0xa}, {0x1, 0x2, 0x10, 0xa}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b80)={{r9, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={r11}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c80)={{r8, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001cc0)={r9, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e40)={0x0, 0x3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x13, 0x13, &(0x7f0000001d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x67}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x3, r5, 0x8, &(0x7f0000001e00)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r10, 0x1, &(0x7f0000001e80)=[r8, r0, r14, r8, 0x1], &(0x7f0000001ec0)=[{0x0, 0x1, 0xa, 0xc}], 0x10, 0x9}, 0x94) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001fc0)={r2}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002000)={r15, r11}, 0xc) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r5, 0x5, 0x3}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000020c0)={r14}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002140)=@generic={&(0x7f0000002100)='./file0\x00', r12}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x17, 0x7, 0x3, 0x4, 0x10800, r16, 0x6, '\x00', 0x0, r5, 0x2, 0x3, 0x2}, 0x50) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x1f, 0xe, &(0x7f0000002200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0xc, 0x1, 0xa, 0x6, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd350}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000002280)='GPL\x00', 0x5, 0x51, &(0x7f00000022c0)=""/81, 0x41100, 0x18, '\x00', r3, @fallback=0x1c, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002340)={0x5, 0x9, 0x10000, 0xb23c}, 0x10, r6, 0xffffffffffffffff, 0x7, &(0x7f0000002380)=[r16, r14, r16, r8, r13], &(0x7f00000023c0)=[{0x5, 0x4, 0xb, 0x7}, {0x1, 0x3, 0x10, 0xc}, {0x3, 0x2, 0x7, 0xa}, {0x0, 0x5, 0xb, 0xa}, {0x2, 0x1, 0xe, 0x6}, {0x0, 0x4, 0x9, 0x8}, {0x2, 0x5, 0xd, 0x1}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002740)={r17, 0x0, 0xc4, 0x0, &(0x7f0000002500)="687836e683b353aea2c9ace2f2911d6caa4fd1b4c9492f2eb9dbd2bc9525f22d241cbdaa9515acd42c516eb33a62479d2ff775e6d17b559a73f0ed1b19629b5e8d87fd91158210c097bae2ce36f9ff7f7e1d7aee1a817b8066e6288dc36575516bdbf9540f4a5aec14efd53bd827374f85eb15619c1463bfea6497f67715119a8b308802da7f467d381a3f452be7112943b0040292a609cbedcd27c4eb18a09f2e1d4d0bc955df812ebacd92bf635fdb2f5f5bb5fb70938541c1e85e7f212d7bc5105cd6", &(0x7f0000002600), 0x0, 0x0, 0xaa, 0x3f, &(0x7f0000002640)="8ec613db1472e2cde420c3c34c12592b69859361abe6e7845cf8c5b92f5565acaaeced0394c7740fb5692dce9489aa079045f8e0b2916fd28be99a79b0b7ff7776c39e204d1a61cac5c30d73925855ecdaa3e90d432e592189af8f0d2b56ea73f16e960af5eab8ae89fa4ce2a1dfa72e8295c40064413aa278b5aa07a7a8c29cd8ab84a5c38555c2d5c53e3fbcd0a641c7a8d6881729a1c64fe2c8c23c4930ca6b7f9466b055ef48cc9f", &(0x7f0000002700)="ff87ab678cd8aae957ff35487d5b94bc63ad581c606f242ebf9a00bf8375c5c114dec7827cf473477d886329f59da2f7a16956254377ed432d0cea775544ab", 0x0, 0x0, 0x2}, 0x50) r18 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002900)=r4, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a40)={{r1, 0xffffffffffffffff}, &(0x7f00000029c0), &(0x7f0000002a00)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x11, 0x5, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0xa, 0x1, 0x0, r13}]}, &(0x7f0000002800)='syzkaller\x00', 0xfffff000, 0x97, &(0x7f0000002840)=""/151, 0x40f00, 0x2, '\x00', r3, 0x0, r18, 0x8, &(0x7f0000002940)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000002980)={0x3, 0x3, 0xfffff000, 0xc4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002a80)=[r19, r13, r8], &(0x7f0000002ac0)=[{0x2, 0x4, 0xa, 0x5}], 0x10, 0xe}, 0x94) r20 = openat$tun(0xffffffffffffff9c, &(0x7f0000002bc0), 0x7241f39a749e281c, 0x0) ioctl$TUNSETIFINDEX(r20, 0x400454da, &(0x7f0000002c00)=r3) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x0, &(0x7f0000002c40), &(0x7f0000002c80)='GPL\x00', 0x7f, 0x42, &(0x7f0000002cc0)=""/66, 0x41000, 0x4, '\x00', 0x0, 0x0, r18, 0x8, &(0x7f0000002d40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000002d80)={0x1, 0x4, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 963.239515ms ago: executing program 2 (id=6875): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x6, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x0, 0xbf34}, 0x0, 0x32, 0x3ff, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd7a, 0x7, 0x3, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x4c) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4000000005}, 0xc003, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000ffffff7f00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x4, 0x8, 0x2c, 0x5, 0x0, 0x1, 0x600, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x7}, 0xc0, 0x9, 0x9, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x7ff, 0x0, 0x9}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@nfc_llcp={0xa, 0x0, 0xe0fffffe, 0x0, 0x0, 0x2, "be4606a105888c642c13334c199f91732d13b884b4ad52d055d6d5ae3b981ffc48ca221108c4d3aa623010eab68d9504eb0034ea00000001f000", 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x2004080) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8983, &(0x7f0000000080)) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000f00), 0x4) 908.150608ms ago: executing program 0 (id=6876): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8004) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00080000000000000900ee7995658b162baea0939c7500"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0xd) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r5], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, r9}, 0x94) socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x186a8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x401c5820, &(0x7f0000000580)=0xa4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 855.104352ms ago: executing program 4 (id=6877): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e6"], 0xfdef) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8, @ANYBLOB="a1f09e852e3b99e6be71d64dbb6b2d57e955b0d4de0e44665d969ae8f3c09e6581e93feda3bb2230688431fe128723be417894c2f05557f5acdd7f01f9f3f31a49d8873434decb639c0f4f981cc2f285a0ceed7a9ed1ce21559b9d2183b3e102114e60c8ff353d6dff744b73fc9526e6a65e837e876bfda465adacbc48198383af770d771af119a53d84fb84d95a429587ff9f14ebc3b443f1edccdbe2081fe10082bc9f0cb166d3ea15bbe2c5845b398473844f9812b09b50ba1c376485f243039256f2f381", @ANYRESOCT=r0, @ANYBLOB="1a9530ad33e99b6fbe9c932a7a0e653f243a8b0ebdd66bac21c2c3d3be792d7b1e5d882b0800000000000000", @ANYRES64=r1, @ANYRESOCT=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x1066, 0x2, 0x8, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400, 0x0, 0x400000}, 0x50) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="240000006400ed"], 0xfe33) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYBLOB="1800000000008000000000000000000018110000", @ANYRES16=r1], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r5, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x4f, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a00), &(0x7f0000000b00), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0600000000000000000000000000000000000000d582b648fca11c8f0cd8f839a49a02b201836560e3622b4a415d06962e50e03638f07260e70dfff81bc4acde57ff0614ab3ca9d60b526083f8c0775962b1e9b73ae2a65afa7648ba016ba4b6b6ab4cacfc83ce466bb959b3248576f0b025f789bc36506f58020d4930df3142fc0900000000000000dd9ec95208925d4d28d1d4ef5d73b1194a3e11dcc1dfa19606e62a3c09ed61cce98ca787f0b4c89b869b9b22d5e0615e6a933a1972b330c312344ef3d165687c18844750c6d70ad5f117b0", @ANYRES32=r6, @ANYBLOB], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r7, 0x10, 0x0, 0x37dfafc4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xe11c7b1374645299, 0x5, 0x6, 0x7, 0xc0, r5, 0x34000000, '\x00', r6, r2, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r9, r5, 0x26, 0x1c, 0x0, @void, @value=r2, @void, @void, r8}, 0x20) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000140)=r6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfbfffff6}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x20000003, 0x1, 0xffffffffffffffff, 0x20}, 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r17, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) 502.138136ms ago: executing program 1 (id=6878): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e2978296329cdae664315115bd5dc53136264f16bc9e986a0e5dceec59de7e11990f8a302c2e6213818896e645050f5ce1b2ca9d22974a534e44de0f4f8bf31a58aa3459b182446beffb012fe653e8f25231ec1dbcae747a0382ef6fe4cfebe503e66db579db5d1efc0320590830f84ace48ffd45830fa5bdd8b2bc388e531228a82c04592f02bfe7a0fd0a1dd14ecb46820661cb5bc7c9b260f2f542438cec3eafe5f22ec92201d0c60d8f8cba729", 0xaf}], 0x1}, 0x81) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r0}, 0x18) 0s ago: executing program 1 (id=6879): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x104046, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000300), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000f662fdaa1cd2ab323bf19ca70edf83df01051d1a01b5202ba062e622ea3f8e8e52915a0c224ea5c6ed6860216432c09bbe15eb700894de819fa537f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbe) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000010000006d0500000400000042000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r11}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800a298fbd66addfa9213f0763cea0dfc4cee8d4f0fce4ed3074b46a500"/39], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r12 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r12, 0x11, 0x21, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_int(r13, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r15 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r15, 0xb701, 0x0) write$cgroup_int(r14, &(0x7f0000000040), 0x1) r16 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000580), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r16, 0x2403, 0xb) kernel console output (not intermixed with test programs): ay have been left with an inconsistent configuration, please check. [ 1423.226577][T28866] netlink: 'syz.1.5972': attribute type 3 has an invalid length. [ 1423.304396][T28866] netlink: 'syz.1.5972': attribute type 1 has an invalid length. [ 1423.314709][T28866] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1423.419407][T28861] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5969'. [ 1423.505688][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.513404][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.624049][T28861] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1423.904743][T28861] CPU: 1 PID: 28861 Comm: syz.2.5969 Not tainted syzkaller #0 [ 1423.912307][T28861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1423.922423][T28861] Call Trace: [ 1423.925749][T28861] [ 1423.928723][T28861] dump_stack_lvl+0x18c/0x250 [ 1423.933461][T28861] ? show_regs_print_info+0x20/0x20 [ 1423.938806][T28861] ? load_image+0x420/0x420 [ 1423.943463][T28861] sysfs_warn_dup+0x8e/0xa0 [ 1423.948007][T28861] sysfs_do_create_link_sd+0xc0/0x110 [ 1423.953421][T28861] device_add_class_symlinks+0x1cf/0x240 [ 1423.959116][T28861] device_add+0x507/0xc20 [ 1423.963508][T28861] wiphy_register+0x1dad/0x2ae0 [ 1423.968435][T28861] ? cfg80211_event_work+0x40/0x40 [ 1423.973587][T28861] ? minstrel_ht_alloc+0x88a/0x990 [ 1423.978768][T28861] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1423.984904][T28861] ieee80211_register_hw+0x3464/0x4250 [ 1423.990453][T28861] ? ieee80211_tasklet_handler+0x20/0x20 [ 1423.996126][T28861] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1424.002046][T28861] ? __debug_object_init+0xec/0x450 [ 1424.007449][T28861] ? __asan_memset+0x22/0x40 [ 1424.012084][T28861] ? __hrtimer_init+0x186/0x270 [ 1424.016958][T28861] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1424.022733][T28861] ? mac80211_hwsim_free+0x220/0x220 [ 1424.028036][T28861] ? rcu_is_watching+0x15/0xb0 [ 1424.032920][T28861] ? kstrndup+0xbd/0x140 [ 1424.037297][T28861] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1424.042449][T28861] ? __nla_validate+0x50/0x50 [ 1424.047167][T28861] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1424.053536][T28861] ? __nla_parse+0x40/0x50 [ 1424.057972][T28861] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1424.064330][T28861] genl_family_rcv_msg_doit+0x211/0x310 [ 1424.069892][T28861] ? end_current_label_crit_section+0x170/0x170 [ 1424.076165][T28861] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1424.082107][T28861] ? bpf_lsm_capable+0x9/0x10 [ 1424.086822][T28861] ? security_capable+0x89/0xb0 [ 1424.091703][T28861] genl_rcv_msg+0x619/0x7a0 [ 1424.096248][T28861] ? genl_bind+0x360/0x360 [ 1424.100685][T28861] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1424.107149][T28861] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1424.113762][T28861] ? ref_tracker_free+0x690/0x840 [ 1424.118819][T28861] netlink_rcv_skb+0x241/0x4d0 [ 1424.123660][T28861] ? genl_bind+0x360/0x360 [ 1424.128097][T28861] ? netlink_ack+0x1180/0x1180 [ 1424.132898][T28861] ? __lock_acquire+0x7d40/0x7d40 [ 1424.138043][T28861] ? down_read+0x1ac/0x2e0 [ 1424.142483][T28861] genl_rcv+0x28/0x40 [ 1424.146493][T28861] netlink_unicast+0x751/0x8d0 [ 1424.151295][T28861] netlink_sendmsg+0x8d0/0xbf0 [ 1424.156098][T28861] ? netlink_getsockopt+0x590/0x590 [ 1424.161325][T28861] ? aa_sock_msg_perm+0x94/0x150 [ 1424.166326][T28861] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1424.171633][T28861] ? security_socket_sendmsg+0x80/0xa0 [ 1424.177106][T28861] ? netlink_getsockopt+0x590/0x590 [ 1424.182326][T28861] ____sys_sendmsg+0x5ba/0x960 [ 1424.187117][T28861] ? __asan_memset+0x22/0x40 [ 1424.191832][T28861] ? __sys_sendmsg_sock+0x30/0x30 [ 1424.196962][T28861] ? __import_iovec+0x5f2/0x850 [ 1424.201938][T28861] ? import_iovec+0x73/0xa0 [ 1424.206472][T28861] ___sys_sendmsg+0x2a6/0x360 [ 1424.211266][T28861] ? __sys_sendmsg+0x2a0/0x2a0 [ 1424.216066][T28861] ? trace_call_bpf+0xc3/0x6c0 [ 1424.221058][T28861] __se_sys_sendmsg+0x1c2/0x2b0 [ 1424.225928][T28861] ? __x64_sys_sendmsg+0x80/0x80 [ 1424.231007][T28861] ? trace_sys_enter+0x1f/0x80 [ 1424.235801][T28861] do_syscall_64+0x55/0xa0 [ 1424.240347][T28861] ? clear_bhb_loop+0x40/0x90 [ 1424.245040][T28861] ? clear_bhb_loop+0x40/0x90 [ 1424.249829][T28861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1424.255819][T28861] RIP: 0033:0x7f2f1f79c819 [ 1424.260257][T28861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.280071][T28861] RSP: 002b:00007f2f2057c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1424.288595][T28861] RAX: ffffffffffffffda RBX: 00007f2f1fa16090 RCX: 00007f2f1f79c819 [ 1424.296587][T28861] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1424.304680][T28861] RBP: 00007f2f1f832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1424.312663][T28861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1424.320649][T28861] R13: 00007f2f1fa16128 R14: 00007f2f1fa16090 R15: 00007ffd2cc559f8 [ 1424.328852][T28861] [ 1424.697288][T28881] FAULT_INJECTION: forcing a failure. [ 1424.697288][T28881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.734741][T28881] CPU: 0 PID: 28881 Comm: syz.1.5975 Not tainted syzkaller #0 [ 1424.742296][T28881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1424.747586][T28885] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5976'. [ 1424.752370][T28881] Call Trace: [ 1424.752384][T28881] [ 1424.767811][T28881] dump_stack_lvl+0x18c/0x250 [ 1424.772746][T28881] ? show_regs_print_info+0x20/0x20 [ 1424.778011][T28881] ? load_image+0x420/0x420 [ 1424.782595][T28881] ? __might_fault+0xaa/0x120 [ 1424.787342][T28881] ? __lock_acquire+0x7d40/0x7d40 [ 1424.792436][T28881] should_fail_ex+0x39d/0x4d0 [ 1424.797183][T28881] _copy_from_iter+0x1d9/0x12e0 [ 1424.802099][T28881] ? __might_fault+0xaa/0x120 [ 1424.806911][T28881] ? _copy_from_iter+0x24e/0x12e0 [ 1424.812162][T28881] ? __virt_addr_valid+0x18c/0x540 [ 1424.817310][T28881] ? __lock_acquire+0x7d40/0x7d40 [ 1424.822395][T28881] ? copyout_mc+0x70/0x70 [ 1424.826748][T28881] ? copyout_mc+0x70/0x70 [ 1424.831097][T28881] ? __virt_addr_valid+0x18c/0x540 [ 1424.836231][T28881] ? page_copy_sane+0x16a/0x270 [ 1424.841200][T28881] copy_page_from_iter+0x7b/0x100 [ 1424.846253][T28881] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1424.852095][T28881] unix_stream_sendmsg+0x562/0xbf0 [ 1424.857274][T28881] ? unix_show_fdinfo+0x270/0x270 [ 1424.862320][T28881] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1424.868761][T28881] ? aa_sock_msg_perm+0x94/0x150 [ 1424.873720][T28881] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1424.879022][T28881] ? security_socket_sendmsg+0x80/0xa0 [ 1424.884495][T28881] ? unix_show_fdinfo+0x270/0x270 [ 1424.889628][T28881] ____sys_sendmsg+0x5ba/0x960 [ 1424.894420][T28881] ? __asan_memset+0x22/0x40 [ 1424.899033][T28881] ? __sys_sendmsg_sock+0x30/0x30 [ 1424.904076][T28881] ? __import_iovec+0x5f2/0x850 [ 1424.908963][T28881] ? import_iovec+0x73/0xa0 [ 1424.913483][T28881] ___sys_sendmsg+0x2a6/0x360 [ 1424.918180][T28881] ? __sys_sendmsg+0x2a0/0x2a0 [ 1424.922979][T28881] ? trace_call_bpf+0xc3/0x6c0 [ 1424.927877][T28881] __se_sys_sendmsg+0x1c2/0x2b0 [ 1424.932750][T28881] ? __x64_sys_sendmsg+0x80/0x80 [ 1424.937736][T28881] ? lockdep_hardirqs_on+0x98/0x150 [ 1424.942959][T28881] do_syscall_64+0x55/0xa0 [ 1424.947393][T28881] ? clear_bhb_loop+0x40/0x90 [ 1424.952088][T28881] ? clear_bhb_loop+0x40/0x90 [ 1424.956785][T28881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1424.962705][T28881] RIP: 0033:0x7f740a99c819 [ 1424.967146][T28881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1424.986770][T28881] RSP: 002b:00007f740b8a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1424.995298][T28881] RAX: ffffffffffffffda RBX: 00007f740ac15fa0 RCX: 00007f740a99c819 [ 1425.003375][T28881] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1425.011637][T28881] RBP: 00007f740b8a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.019696][T28881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1425.027687][T28881] R13: 00007f740ac16038 R14: 00007f740ac15fa0 R15: 00007ffe0e955998 [ 1425.035689][T28881] [ 1426.642343][T28914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1427.007774][T28920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5986'. [ 1427.508491][T28927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1427.515890][T28927] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.523231][T28927] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.530835][T28927] IPv6: NLM_F_CREATE should be set when creating new route [ 1428.014234][T28927] netlink: 'syz.4.5989': attribute type 10 has an invalid length. [ 1428.442099][T28942] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5992'. [ 1428.527411][T28942] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5992'. [ 1428.596346][T28943] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5992'. [ 1429.093608][T28955] netlink: 'syz.2.5995': attribute type 3 has an invalid length. [ 1429.177038][T28955] netlink: 189348 bytes leftover after parsing attributes in process `syz.2.5995'. [ 1430.053527][T28971] netlink: 'syz.2.6001': attribute type 28 has an invalid length. [ 1430.119778][T28970] netlink: 'syz.2.6001': attribute type 28 has an invalid length. [ 1430.152670][T28971] netlink: 'syz.2.6001': attribute type 29 has an invalid length. [ 1430.171967][T28970] netlink: 'syz.2.6001': attribute type 29 has an invalid length. [ 1430.213293][T28971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6001'. [ 1430.232832][T28970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6001'. [ 1430.761924][T28982] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1431.620552][T29004] syzkaller0: entered promiscuous mode [ 1431.627161][T29004] syzkaller0: entered allmulticast mode [ 1432.321657][T29015] netlink: 'syz.4.6013': attribute type 10 has an invalid length. [ 1432.361834][T29015] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6013'. [ 1433.866661][T29040] syzkaller0: entered promiscuous mode [ 1433.890027][T29040] syzkaller0: entered allmulticast mode [ 1433.967785][T29047] netlink: 'syz.0.6023': attribute type 4 has an invalid length. [ 1433.988005][T29047] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6023'. [ 1435.736441][T29086] FAULT_INJECTION: forcing a failure. [ 1435.736441][T29086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1435.811817][T29086] CPU: 0 PID: 29086 Comm: syz.0.6032 Not tainted syzkaller #0 [ 1435.819470][T29086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1435.829653][T29086] Call Trace: [ 1435.832976][T29086] [ 1435.835973][T29086] dump_stack_lvl+0x18c/0x250 [ 1435.840699][T29086] ? show_regs_print_info+0x20/0x20 [ 1435.845973][T29086] ? load_image+0x420/0x420 [ 1435.850532][T29086] ? __might_fault+0xaa/0x120 [ 1435.855265][T29086] ? __lock_acquire+0x7d40/0x7d40 [ 1435.860350][T29086] ? __might_fault+0xaa/0x120 [ 1435.865174][T29086] should_fail_ex+0x39d/0x4d0 [ 1435.870025][T29086] _copy_from_iter+0x1d9/0x12e0 [ 1435.874939][T29086] ? __might_fault+0xaa/0x120 [ 1435.879773][T29086] ? _copy_from_iter+0x24e/0x12e0 [ 1435.884958][T29086] ? __virt_addr_valid+0x18c/0x540 [ 1435.890244][T29086] ? __lock_acquire+0x7d40/0x7d40 [ 1435.895315][T29086] ? copyout_mc+0x70/0x70 [ 1435.899696][T29086] ? copyout_mc+0x70/0x70 [ 1435.904079][T29086] ? __virt_addr_valid+0x18c/0x540 [ 1435.909333][T29086] ? page_copy_sane+0x16a/0x270 [ 1435.914227][T29086] copy_page_from_iter+0x7b/0x100 [ 1435.919393][T29086] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1435.925259][T29086] unix_stream_sendmsg+0x562/0xbf0 [ 1435.930514][T29086] ? unix_show_fdinfo+0x270/0x270 [ 1435.935572][T29086] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1435.942030][T29086] ? aa_sock_msg_perm+0x94/0x150 [ 1435.947009][T29086] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1435.952334][T29086] ? security_socket_sendmsg+0x80/0xa0 [ 1435.957822][T29086] ? unix_show_fdinfo+0x270/0x270 [ 1435.962968][T29086] ____sys_sendmsg+0x5ba/0x960 [ 1435.967783][T29086] ? __asan_memset+0x22/0x40 [ 1435.972413][T29086] ? __sys_sendmsg_sock+0x30/0x30 [ 1435.977466][T29086] ? __import_iovec+0x5f2/0x850 [ 1435.982362][T29086] ? import_iovec+0x73/0xa0 [ 1435.987083][T29086] ___sys_sendmsg+0x2a6/0x360 [ 1435.991793][T29086] ? get_pid_task+0x20/0x1e0 [ 1435.996422][T29086] ? __sys_sendmsg+0x2a0/0x2a0 [ 1436.001255][T29086] ? __lock_acquire+0x7d40/0x7d40 [ 1436.006352][T29086] __se_sys_sendmsg+0x1c2/0x2b0 [ 1436.011250][T29086] ? __x64_sys_sendmsg+0x80/0x80 [ 1436.016245][T29086] ? lockdep_hardirqs_on+0x98/0x150 [ 1436.021493][T29086] do_syscall_64+0x55/0xa0 [ 1436.025958][T29086] ? clear_bhb_loop+0x40/0x90 [ 1436.030775][T29086] ? clear_bhb_loop+0x40/0x90 [ 1436.035496][T29086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1436.041515][T29086] RIP: 0033:0x7f893299c819 [ 1436.046087][T29086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.065741][T29086] RSP: 002b:00007f89338c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.074194][T29086] RAX: ffffffffffffffda RBX: 00007f8932c16090 RCX: 00007f893299c819 [ 1436.082284][T29086] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 1436.090392][T29086] RBP: 00007f89338c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.098501][T29086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1436.106510][T29086] R13: 00007f8932c16128 R14: 00007f8932c16090 R15: 00007ffddc966c78 [ 1436.114534][T29086] [ 1436.206084][T29089] netlink: 'syz.4.6034': attribute type 5 has an invalid length. [ 1436.236523][T16094] wlan1: Trigger new scan to find an IBSS to join [ 1436.535860][T29093] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6035'. [ 1436.868906][T29104] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6039'. [ 1436.925351][T29100] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.6036'. [ 1437.054880][T29100] netlink: 'syz.4.6036': attribute type 2 has an invalid length. [ 1438.648997][T29129] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.6045'. [ 1438.925175][T29137] netlink: 'syz.1.6047': attribute type 10 has an invalid length. [ 1439.087470][T29137] hsr_slave_0: left promiscuous mode [ 1439.474713][T16097] wlan1: Trigger new scan to find an IBSS to join [ 1439.612009][T29137] hsr_slave_1: left promiscuous mode [ 1439.657789][T29137] bridge0: port 3(hsr0) entered disabled state [ 1439.854958][T29137] hsr0 (unregistering): left allmulticast mode [ 1439.871683][T29137] bridge0: port 3(hsr0) entered disabled state [ 1440.499436][ T996] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1441.339837][T29180] FAULT_INJECTION: forcing a failure. [ 1441.339837][T29180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.433639][T29180] CPU: 0 PID: 29180 Comm: syz.0.6061 Not tainted syzkaller #0 [ 1441.441180][T29180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1441.451269][T29180] Call Trace: [ 1441.454584][T29180] [ 1441.457557][T29180] dump_stack_lvl+0x18c/0x250 [ 1441.462285][T29180] ? show_regs_print_info+0x20/0x20 [ 1441.467527][T29180] ? load_image+0x420/0x420 [ 1441.472075][T29180] ? __might_fault+0xaa/0x120 [ 1441.476788][T29180] ? __lock_acquire+0x7d40/0x7d40 [ 1441.481859][T29180] should_fail_ex+0x39d/0x4d0 [ 1441.486590][T29180] _copy_from_iter+0x1d9/0x12e0 [ 1441.491491][T29180] ? __might_fault+0xaa/0x120 [ 1441.496205][T29180] ? _copy_from_iter+0x24e/0x12e0 [ 1441.501274][T29180] ? __virt_addr_valid+0x18c/0x540 [ 1441.506425][T29180] ? __lock_acquire+0x7d40/0x7d40 [ 1441.511491][T29180] ? copyout_mc+0x70/0x70 [ 1441.516561][T29180] ? copyout_mc+0x70/0x70 [ 1441.520931][T29180] ? __virt_addr_valid+0x18c/0x540 [ 1441.526177][T29180] ? page_copy_sane+0x16a/0x270 [ 1441.531088][T29180] copy_page_from_iter+0x7b/0x100 [ 1441.536250][T29180] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1441.542119][T29180] unix_stream_sendmsg+0x562/0xbf0 [ 1441.547462][T29180] ? unix_show_fdinfo+0x270/0x270 [ 1441.552972][T29180] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1441.559646][T29180] ? aa_sock_msg_perm+0x94/0x150 [ 1441.564640][T29180] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1441.569982][T29180] ? security_socket_sendmsg+0x80/0xa0 [ 1441.575672][T29180] ? unix_show_fdinfo+0x270/0x270 [ 1441.581100][T29180] ____sys_sendmsg+0x5ba/0x960 [ 1441.586000][T29180] ? __asan_memset+0x22/0x40 [ 1441.590642][T29180] ? __sys_sendmsg_sock+0x30/0x30 [ 1441.595717][T29180] ? __import_iovec+0x5f2/0x850 [ 1441.600786][T29180] ? import_iovec+0x73/0xa0 [ 1441.605458][T29180] ___sys_sendmsg+0x2a6/0x360 [ 1441.610186][T29180] ? get_pid_task+0x20/0x1e0 [ 1441.614836][T29180] ? __sys_sendmsg+0x2a0/0x2a0 [ 1441.619847][T29180] ? __lock_acquire+0x7d40/0x7d40 [ 1441.625107][T29180] __se_sys_sendmsg+0x1c2/0x2b0 [ 1441.630030][T29180] ? __x64_sys_sendmsg+0x80/0x80 [ 1441.635135][T29180] ? lockdep_hardirqs_on+0x98/0x150 [ 1441.640609][T29180] do_syscall_64+0x55/0xa0 [ 1441.645077][T29180] ? clear_bhb_loop+0x40/0x90 [ 1441.649889][T29180] ? clear_bhb_loop+0x40/0x90 [ 1441.654618][T29180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1441.660565][T29180] RIP: 0033:0x7f893299c819 [ 1441.663602][T29166] delete_channel: no stack [ 1441.665001][T29180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.665022][T29180] RSP: 002b:00007f89338e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1441.665046][T29180] RAX: ffffffffffffffda RBX: 00007f8932c15fa0 RCX: 00007f893299c819 [ 1441.683043][T29181] netlink: 'syz.2.6060': attribute type 21 has an invalid length. [ 1441.689711][T29180] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1441.689734][T29180] RBP: 00007f89338e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.689748][T29180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.689760][T29180] R13: 00007f8932c16038 R14: 00007f8932c15fa0 R15: 00007ffddc966c78 [ 1441.689793][T29180] [ 1441.809427][T29181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6060'. [ 1442.995772][T29214] netlink: 'syz.4.6070': attribute type 16 has an invalid length. [ 1443.003667][T29214] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1443.013122][T29209] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6069'. [ 1443.036005][T29214] veth1_macvtap: entered allmulticast mode [ 1443.287717][T29222] FAULT_INJECTION: forcing a failure. [ 1443.287717][T29222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.318569][T29222] CPU: 1 PID: 29222 Comm: syz.0.6073 Not tainted syzkaller #0 [ 1443.326176][T29222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1443.336315][T29222] Call Trace: [ 1443.339837][T29222] [ 1443.342840][T29222] dump_stack_lvl+0x18c/0x250 [ 1443.347726][T29222] ? show_regs_print_info+0x20/0x20 [ 1443.353016][T29222] ? load_image+0x420/0x420 [ 1443.357612][T29222] ? __might_fault+0xaa/0x120 [ 1443.362373][T29222] ? __lock_acquire+0x7d40/0x7d40 [ 1443.367600][T29222] should_fail_ex+0x39d/0x4d0 [ 1443.372653][T29222] _copy_from_iter+0x1d9/0x12e0 [ 1443.377595][T29222] ? __might_fault+0xaa/0x120 [ 1443.382390][T29222] ? _copy_from_iter+0x24e/0x12e0 [ 1443.387492][T29222] ? __virt_addr_valid+0x18c/0x540 [ 1443.392726][T29222] ? __lock_acquire+0x7d40/0x7d40 [ 1443.397865][T29222] ? copyout_mc+0x70/0x70 [ 1443.402320][T29222] ? copyout_mc+0x70/0x70 [ 1443.406741][T29222] ? __virt_addr_valid+0x18c/0x540 [ 1443.411956][T29222] ? page_copy_sane+0x16a/0x270 [ 1443.416863][T29222] copy_page_from_iter+0x7b/0x100 [ 1443.421916][T29222] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1443.427804][T29222] unix_stream_sendmsg+0x562/0xbf0 [ 1443.432982][T29222] ? unix_show_fdinfo+0x270/0x270 [ 1443.438032][T29222] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1443.444476][T29222] ? aa_sock_msg_perm+0x94/0x150 [ 1443.449759][T29222] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1443.455069][T29222] ? security_socket_sendmsg+0x80/0xa0 [ 1443.460543][T29222] ? unix_show_fdinfo+0x270/0x270 [ 1443.465591][T29222] ____sys_sendmsg+0x5ba/0x960 [ 1443.470399][T29222] ? __asan_memset+0x22/0x40 [ 1443.475014][T29222] ? __sys_sendmsg_sock+0x30/0x30 [ 1443.480091][T29222] ? __import_iovec+0x5f2/0x850 [ 1443.485235][T29222] ? import_iovec+0x73/0xa0 [ 1443.489778][T29222] ___sys_sendmsg+0x2a6/0x360 [ 1443.494480][T29222] ? __sys_sendmsg+0x2a0/0x2a0 [ 1443.499298][T29222] ? __lock_acquire+0x7d40/0x7d40 [ 1443.504371][T29222] __se_sys_sendmsg+0x1c2/0x2b0 [ 1443.509345][T29222] ? __x64_sys_sendmsg+0x80/0x80 [ 1443.514315][T29222] ? lockdep_hardirqs_on+0x98/0x150 [ 1443.519543][T29222] do_syscall_64+0x55/0xa0 [ 1443.523977][T29222] ? clear_bhb_loop+0x40/0x90 [ 1443.528672][T29222] ? clear_bhb_loop+0x40/0x90 [ 1443.533388][T29222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1443.539300][T29222] RIP: 0033:0x7f893299c819 [ 1443.543833][T29222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.563470][T29222] RSP: 002b:00007f89338e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1443.571915][T29222] RAX: ffffffffffffffda RBX: 00007f8932c15fa0 RCX: 00007f893299c819 [ 1443.579913][T29222] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1443.587910][T29222] RBP: 00007f89338e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.596075][T29222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.604064][T29222] R13: 00007f8932c16038 R14: 00007f8932c15fa0 R15: 00007ffddc966c78 [ 1443.612078][T29222] [ 1443.814961][ T5777] Bluetooth: hci3: unexpected event 0x08 length: 151 > 4 [ 1443.932961][T29238] netlink: set zone limit has 8 unknown bytes [ 1443.968061][T29238] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6077'. [ 1444.661595][T29250] netlink: 'syz.0.6080': attribute type 153 has an invalid length. [ 1445.298179][T29276] netlink: 'syz.4.6087': attribute type 2 has an invalid length. [ 1445.334535][T29267] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6085'. [ 1445.369813][T29267] veth0_to_bond: entered promiscuous mode [ 1445.688278][ T5777] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 1445.825767][T29283] syzkaller0: left promiscuous mode [ 1445.871246][T29283] syzkaller0: left allmulticast mode [ 1446.014841][T29289] netlink: 'syz.0.6091': attribute type 6 has an invalid length. [ 1446.024448][T29285] cgroup: fork rejected by pids controller in /syz2 [ 1446.198776][T29296] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.6093'. [ 1446.235125][T29296] netlink: zone id is out of range [ 1446.268480][T29296] netlink: zone id is out of range [ 1446.273742][T29296] netlink: zone id is out of range [ 1446.280790][T29296] netlink: zone id is out of range [ 1446.286241][T29296] netlink: zone id is out of range [ 1446.291413][T29296] netlink: zone id is out of range [ 1446.297745][T29296] netlink: zone id is out of range [ 1446.302922][T29296] netlink: zone id is out of range [ 1446.308165][T29296] netlink: zone id is out of range [ 1446.591989][T29399] netlink: 'syz.0.6094': attribute type 9 has an invalid length. [ 1446.826526][T29405] netlink: 'syz.4.6097': attribute type 2 has an invalid length. [ 1446.858335][T29405] netlink: 'syz.4.6097': attribute type 8 has an invalid length. [ 1446.881068][T29405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6097'. [ 1446.912624][T29407] netlink: 'syz.4.6097': attribute type 11 has an invalid length. [ 1447.606555][ T5777] Bluetooth: hci5: unexpected event 0x08 length: 151 > 4 [ 1447.808258][ T996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.068032][ T996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.570707][ T996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.819963][ T996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.863893][T29448] netlink: 'syz.0.6109': attribute type 29 has an invalid length. [ 1449.925101][T29444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6108'. [ 1450.057266][T29448] netlink: 'syz.0.6109': attribute type 29 has an invalid length. [ 1450.357060][T26527] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1450.374678][T26527] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1450.383841][T26527] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1450.394074][T26527] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1450.507941][T26527] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1450.517528][T26527] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1450.909327][T29453] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6110'. [ 1451.233379][T29453] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1451.250273][T29453] CPU: 1 PID: 29453 Comm: syz.1.6110 Not tainted syzkaller #0 [ 1451.257843][T29453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1451.268047][T29453] Call Trace: [ 1451.271382][T29453] [ 1451.274355][T29453] dump_stack_lvl+0x18c/0x250 [ 1451.279114][T29453] ? show_regs_print_info+0x20/0x20 [ 1451.284470][T29453] ? load_image+0x420/0x420 [ 1451.289045][T29453] sysfs_warn_dup+0x8e/0xa0 [ 1451.293606][T29453] sysfs_do_create_link_sd+0xc0/0x110 [ 1451.299035][T29453] device_add_class_symlinks+0x1cf/0x240 [ 1451.304744][T29453] device_add+0x507/0xc20 [ 1451.309245][T29453] wiphy_register+0x1dad/0x2ae0 [ 1451.314271][T29453] ? cfg80211_event_work+0x40/0x40 [ 1451.319472][T29453] ? minstrel_ht_alloc+0x88a/0x990 [ 1451.324645][T29453] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1451.330900][T29453] ieee80211_register_hw+0x3464/0x4250 [ 1451.336634][T29453] ? ieee80211_tasklet_handler+0x20/0x20 [ 1451.342334][T29453] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1451.348317][T29453] ? __debug_object_init+0xec/0x450 [ 1451.353594][T29453] ? __asan_memset+0x22/0x40 [ 1451.358250][T29453] ? __hrtimer_init+0x186/0x270 [ 1451.363165][T29453] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1451.368945][T29453] ? mac80211_hwsim_free+0x220/0x220 [ 1451.374284][T29453] ? rcu_is_watching+0x15/0xb0 [ 1451.379121][T29453] ? kstrndup+0xbd/0x140 [ 1451.383454][T29453] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1451.388680][T29453] ? __nla_validate+0x50/0x50 [ 1451.393424][T29453] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1451.399839][T29453] ? __nla_parse+0x40/0x50 [ 1451.404403][T29453] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1451.410889][T29453] genl_family_rcv_msg_doit+0x211/0x310 [ 1451.416499][T29453] ? end_current_label_crit_section+0x170/0x170 [ 1451.422898][T29453] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1451.428940][T29453] ? bpf_lsm_capable+0x9/0x10 [ 1451.433651][T29453] ? security_capable+0x89/0xb0 [ 1451.438721][T29453] genl_rcv_msg+0x619/0x7a0 [ 1451.443265][T29453] ? genl_bind+0x360/0x360 [ 1451.447723][T29453] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1451.454120][T29453] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1451.460792][T29453] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1451.467669][T29453] netlink_rcv_skb+0x241/0x4d0 [ 1451.472523][T29453] ? genl_bind+0x360/0x360 [ 1451.477014][T29453] ? netlink_ack+0x1180/0x1180 [ 1451.482069][T29453] ? __lock_acquire+0x7d40/0x7d40 [ 1451.487250][T29453] ? net_generic+0x1e/0x240 [ 1451.491884][T29453] ? down_read+0x1ac/0x2e0 [ 1451.496457][T29453] genl_rcv+0x28/0x40 [ 1451.500587][T29453] netlink_unicast+0x751/0x8d0 [ 1451.505458][T29453] netlink_sendmsg+0x8d0/0xbf0 [ 1451.510299][T29453] ? netlink_getsockopt+0x590/0x590 [ 1451.515625][T29453] ? aa_sock_msg_perm+0x94/0x150 [ 1451.520608][T29453] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1451.525914][T29453] ? security_socket_sendmsg+0x80/0xa0 [ 1451.532893][T29453] ? netlink_getsockopt+0x590/0x590 [ 1451.538149][T29453] ____sys_sendmsg+0x5ba/0x960 [ 1451.542978][T29453] ? __asan_memset+0x22/0x40 [ 1451.547638][T29453] ? __sys_sendmsg_sock+0x30/0x30 [ 1451.552718][T29453] ? __import_iovec+0x5f2/0x850 [ 1451.557699][T29453] ? import_iovec+0x73/0xa0 [ 1451.562236][T29453] ___sys_sendmsg+0x2a6/0x360 [ 1451.567052][T29453] ? __sys_sendmsg+0x2a0/0x2a0 [ 1451.572328][T29453] __se_sys_sendmsg+0x1c2/0x2b0 [ 1451.577208][T29453] ? __x64_sys_sendmsg+0x80/0x80 [ 1451.582199][T29453] ? lockdep_hardirqs_on+0x98/0x150 [ 1451.587548][T29453] do_syscall_64+0x55/0xa0 [ 1451.592043][T29453] ? clear_bhb_loop+0x40/0x90 [ 1451.596830][T29453] ? clear_bhb_loop+0x40/0x90 [ 1451.601746][T29453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1451.607866][T29453] RIP: 0033:0x7f740a99c819 [ 1451.612308][T29453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.632133][T29453] RSP: 002b:00007f740b881028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.640608][T29453] RAX: ffffffffffffffda RBX: 00007f740ac16090 RCX: 00007f740a99c819 [ 1451.648608][T29453] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1451.656602][T29453] RBP: 00007f740aa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1451.664602][T29453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.672778][T29453] R13: 00007f740ac16128 R14: 00007f740ac16090 R15: 00007ffe0e955998 [ 1451.680885][T29453] [ 1451.716956][T29473] netlink: 'syz.4.6113': attribute type 27 has an invalid length. [ 1451.755132][T29473] netlink: 'syz.4.6113': attribute type 4 has an invalid length. [ 1451.780686][T29473] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6113'. [ 1452.441595][T29454] chnl_net:caif_netlink_parms(): no params data found [ 1452.554753][T26527] Bluetooth: hci0: command tx timeout [ 1452.813941][T29507] netlink: 'syz.0.6116': attribute type 13 has an invalid length. [ 1452.824895][T29507] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6116'. [ 1453.169603][T29521] netlink: 'syz.0.6120': attribute type 16 has an invalid length. [ 1453.187071][T29521] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6120'. [ 1453.201693][T29454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.216733][T29454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.224229][T29454] bridge_slave_0: entered allmulticast mode [ 1453.234464][T29454] bridge_slave_0: entered promiscuous mode [ 1453.256455][T29524] netlink: 'syz.4.6119': attribute type 21 has an invalid length. [ 1453.352709][T29454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.361085][T29454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.369815][T29454] bridge_slave_1: entered allmulticast mode [ 1453.381476][T29454] bridge_slave_1: entered promiscuous mode [ 1453.481430][T29454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.496314][T29454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.623690][T29454] team0: Port device team_slave_0 added [ 1453.641671][T29454] team0: Port device team_slave_1 added [ 1453.788485][T29454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.817917][T29454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.901644][T29454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.943124][T29454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.974841][T29454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.061886][T29454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.645233][T26527] Bluetooth: hci0: command tx timeout [ 1455.240227][T29560] FAULT_INJECTION: forcing a failure. [ 1455.240227][T29560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.287932][T29560] CPU: 1 PID: 29560 Comm: syz.4.6126 Not tainted syzkaller #0 [ 1455.295583][T29560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1455.305686][T29560] Call Trace: [ 1455.309003][T29560] [ 1455.311968][T29560] dump_stack_lvl+0x18c/0x250 [ 1455.316706][T29560] ? show_regs_print_info+0x20/0x20 [ 1455.321958][T29560] ? load_image+0x420/0x420 [ 1455.326511][T29560] ? __might_fault+0xaa/0x120 [ 1455.331235][T29560] ? __lock_acquire+0x7d40/0x7d40 [ 1455.336317][T29560] should_fail_ex+0x39d/0x4d0 [ 1455.341144][T29560] _copy_from_iter+0x1d9/0x12e0 [ 1455.346052][T29560] ? __might_fault+0xaa/0x120 [ 1455.350780][T29560] ? _copy_from_iter+0x24e/0x12e0 [ 1455.355860][T29560] ? __virt_addr_valid+0x18c/0x540 [ 1455.361044][T29560] ? __lock_acquire+0x7d40/0x7d40 [ 1455.366141][T29560] ? copyout_mc+0x70/0x70 [ 1455.370537][T29560] ? copyout_mc+0x70/0x70 [ 1455.374912][T29560] ? __virt_addr_valid+0x18c/0x540 [ 1455.380081][T29560] ? page_copy_sane+0x16a/0x270 [ 1455.385013][T29560] copy_page_from_iter+0x7b/0x100 [ 1455.390105][T29560] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1455.396079][T29560] unix_stream_sendmsg+0x562/0xbf0 [ 1455.401261][T29560] ? unix_show_fdinfo+0x270/0x270 [ 1455.406331][T29560] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1455.412802][T29560] ? aa_sock_msg_perm+0x94/0x150 [ 1455.417876][T29560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1455.423210][T29560] ? security_socket_sendmsg+0x80/0xa0 [ 1455.428738][T29560] ? unix_show_fdinfo+0x270/0x270 [ 1455.433821][T29560] ____sys_sendmsg+0x5ba/0x960 [ 1455.438640][T29560] ? __asan_memset+0x22/0x40 [ 1455.443286][T29560] ? __sys_sendmsg_sock+0x30/0x30 [ 1455.448352][T29560] ? __import_iovec+0x5f2/0x850 [ 1455.453251][T29560] ? import_iovec+0x73/0xa0 [ 1455.457895][T29560] ___sys_sendmsg+0x2a6/0x360 [ 1455.462615][T29560] ? get_pid_task+0x20/0x1e0 [ 1455.467273][T29560] ? __sys_sendmsg+0x2a0/0x2a0 [ 1455.472121][T29560] ? __lock_acquire+0x7d40/0x7d40 [ 1455.477239][T29560] __se_sys_sendmsg+0x1c2/0x2b0 [ 1455.482154][T29560] ? __x64_sys_sendmsg+0x80/0x80 [ 1455.487351][T29560] ? lockdep_hardirqs_on+0x98/0x150 [ 1455.492614][T29560] do_syscall_64+0x55/0xa0 [ 1455.497075][T29560] ? clear_bhb_loop+0x40/0x90 [ 1455.501854][T29560] ? clear_bhb_loop+0x40/0x90 [ 1455.506578][T29560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1455.512524][T29560] RIP: 0033:0x7f26c619c819 [ 1455.518670][T29560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.539033][T29560] RSP: 002b:00007f26c7117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.547505][T29560] RAX: ffffffffffffffda RBX: 00007f26c6415fa0 RCX: 00007f26c619c819 [ 1455.555529][T29560] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1455.563774][T29560] RBP: 00007f26c7117090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.571786][T29560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1455.579805][T29560] R13: 00007f26c6416038 R14: 00007f26c6415fa0 R15: 00007fffb8e83058 [ 1455.587935][T29560] [ 1455.646148][T29562] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.6127'. [ 1455.677577][T29454] hsr_slave_0: entered promiscuous mode [ 1455.693288][T29562] net_ratelimit: 332 callbacks suppressed [ 1455.693308][T29562] netlink: zone id is out of range [ 1455.705311][T29454] hsr_slave_1: entered promiscuous mode [ 1455.725266][T29562] netlink: zone id is out of range [ 1455.740221][T29562] netlink: zone id is out of range [ 1455.764750][T29562] netlink: zone id is out of range [ 1455.775708][T29562] netlink: zone id is out of range [ 1455.791425][T29562] netlink: zone id is out of range [ 1455.815981][T29562] netlink: zone id is out of range [ 1455.835162][T29562] netlink: zone id is out of range [ 1455.845292][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1455.852882][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.860212][T29562] netlink: zone id is out of range [ 1455.860232][T29562] netlink: zone id is out of range [ 1455.975163][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1455.982974][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.034703][ T996] bridge_slave_0: left allmulticast mode [ 1456.049193][ T996] bridge_slave_0: left promiscuous mode [ 1456.081453][ T996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.527775][ T996] veth1_macvtap: left promiscuous mode [ 1456.541852][ T996] veth0_macvtap: left promiscuous mode [ 1456.566234][ T996] veth1_vlan: left promiscuous mode [ 1456.575295][ T996] veth0_vlan: left promiscuous mode [ 1456.715278][T26527] Bluetooth: hci0: command tx timeout [ 1457.970247][ T996] team0 (unregistering): Port device team_slave_1 removed [ 1458.032961][ T996] team0 (unregistering): Port device team_slave_0 removed [ 1458.089826][ T996] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.150100][ T996] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.216921][ T996] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1458.637606][ T996] .` (unregistering): Released all slaves [ 1458.795047][T26527] Bluetooth: hci0: command tx timeout [ 1458.815969][T29580] netlink: 'syz.0.6130': attribute type 17 has an invalid length. [ 1458.824058][T29580] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6130'. [ 1459.225485][T29600] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6135'. [ 1459.256539][T29601] FAULT_INJECTION: forcing a failure. [ 1459.256539][T29601] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.286173][T29601] CPU: 1 PID: 29601 Comm: syz.1.6136 Not tainted syzkaller #0 [ 1459.293905][T29601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1459.304015][T29601] Call Trace: [ 1459.307350][T29601] [ 1459.310318][T29601] dump_stack_lvl+0x18c/0x250 [ 1459.315062][T29601] ? show_regs_print_info+0x20/0x20 [ 1459.320321][T29601] ? load_image+0x420/0x420 [ 1459.325022][T29601] ? __might_sleep+0xe0/0xe0 [ 1459.329755][T29601] ? __lock_acquire+0x7d40/0x7d40 [ 1459.334939][T29601] should_fail_ex+0x39d/0x4d0 [ 1459.339692][T29601] should_failslab+0x9/0x20 [ 1459.344258][T29601] slab_pre_alloc_hook+0x59/0x310 [ 1459.349355][T29601] kmem_cache_alloc_node+0x60/0x320 [ 1459.354615][T29601] ? __alloc_skb+0x103/0x2c0 [ 1459.359263][T29601] __alloc_skb+0x103/0x2c0 [ 1459.363740][T29601] alloc_skb_with_frags+0xca/0x7b0 [ 1459.368913][T29601] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1459.375569][T29601] ? perf_trace_preemptirq_template+0xac/0x330 [ 1459.381876][T29601] sock_alloc_send_pskb+0x883/0x9a0 [ 1459.387159][T29601] ? sock_kzfree_s+0x50/0x50 [ 1459.391815][T29601] ? __lock_acquire+0x7d40/0x7d40 [ 1459.396898][T29601] ? sk_psock_verdict_data_ready+0x13f/0x520 [ 1459.402962][T29601] ? __receive_sock+0x90/0x90 [ 1459.407696][T29601] ? sk_psock_verdict_data_ready+0x13f/0x520 [ 1459.413819][T29601] ? __receive_sock+0x90/0x90 [ 1459.418558][T29601] ? sk_psock_verdict_data_ready+0x39d/0x520 [ 1459.424594][T29601] unix_stream_sendmsg+0x48b/0xbf0 [ 1459.429773][T29601] ? unix_show_fdinfo+0x270/0x270 [ 1459.434855][T29601] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1459.441599][T29601] ? aa_sock_msg_perm+0x94/0x150 [ 1459.446647][T29601] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1459.452097][T29601] ? security_socket_sendmsg+0x80/0xa0 [ 1459.457803][T29601] ? unix_show_fdinfo+0x270/0x270 [ 1459.462886][T29601] ____sys_sendmsg+0x5ba/0x960 [ 1459.467731][T29601] ? __asan_memset+0x22/0x40 [ 1459.472392][T29601] ? __sys_sendmsg_sock+0x30/0x30 [ 1459.477469][T29601] ? __import_iovec+0x5f2/0x850 [ 1459.482381][T29601] ? import_iovec+0x73/0xa0 [ 1459.487021][T29601] ___sys_sendmsg+0x2a6/0x360 [ 1459.491838][T29601] ? get_pid_task+0x20/0x1e0 [ 1459.496495][T29601] ? __sys_sendmsg+0x2a0/0x2a0 [ 1459.501328][T29601] ? __lock_acquire+0x7d40/0x7d40 [ 1459.506432][T29601] __se_sys_sendmsg+0x1c2/0x2b0 [ 1459.511444][T29601] ? __x64_sys_sendmsg+0x80/0x80 [ 1459.516568][T29601] ? lockdep_hardirqs_on+0x98/0x150 [ 1459.521916][T29601] do_syscall_64+0x55/0xa0 [ 1459.526378][T29601] ? clear_bhb_loop+0x40/0x90 [ 1459.531104][T29601] ? clear_bhb_loop+0x40/0x90 [ 1459.535916][T29601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.542033][T29601] RIP: 0033:0x7f740a99c819 [ 1459.546498][T29601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.566420][T29601] RSP: 002b:00007f740b8a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1459.574980][T29601] RAX: ffffffffffffffda RBX: 00007f740ac15fa0 RCX: 00007f740a99c819 [ 1459.583007][T29601] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1459.591035][T29601] RBP: 00007f740b8a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.599143][T29601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1459.607163][T29601] R13: 00007f740ac16038 R14: 00007f740ac15fa0 R15: 00007ffe0e955998 [ 1459.615309][T29601] [ 1459.714366][T29600] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6135'. [ 1460.038918][T29624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6139'. [ 1460.479180][T29632] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.6140'. [ 1461.248803][T29454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1461.348554][T29454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1461.371182][T29454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1461.433934][T29454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1461.689686][T29659] @0Ù: renamed from bond_slave_1 (while UP) [ 1461.912514][T29454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.989475][T29454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.027323][T16086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.034670][T16086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.116553][T16098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.123816][T16098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.157720][T29454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.283576][T29711] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6151'. [ 1464.483874][T29454] veth0_vlan: entered promiscuous mode [ 1465.798106][T29454] veth1_vlan: entered promiscuous mode [ 1466.012445][T29454] veth0_macvtap: entered promiscuous mode [ 1466.040572][T29454] veth1_macvtap: entered promiscuous mode [ 1466.109170][T29454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.135596][T29454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.162076][T29454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.173158][T29454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.185553][T29454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.327980][T29454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.374975][T29454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.401269][T29454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.425060][T29454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.446819][T29454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.463639][T29454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.486979][T29454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.537287][T29454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.555636][T29454] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.590339][T29454] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.614144][T29454] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.103027][T16098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.138546][T16098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.276030][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.284036][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.487056][T29786] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.6164'. [ 1470.132472][T29811] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.6170'. [ 1470.214812][T29811] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.6170'. [ 1470.337411][T29804] netlink: 'syz.4.6170': attribute type 11 has an invalid length. [ 1470.354636][T29804] netlink: 126332 bytes leftover after parsing attributes in process `syz.4.6170'. [ 1470.515571][T16081] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1471.106942][T29825] delete_channel: no stack [ 1471.924836][T29836] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1471.958445][T29841] C: renamed from team_slave_0 (while UP) [ 1472.333431][T29841] netlink: 'syz.2.6177': attribute type 4 has an invalid length. [ 1472.361377][T29841] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1472.391555][T29841] net_ratelimit: 80 callbacks suppressed [ 1472.391572][T29841] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1472.752187][T29853] netlink: 'syz.1.6183': attribute type 2 has an invalid length. [ 1472.795816][T29853] netlink: 'syz.1.6183': attribute type 2 has an invalid length. [ 1472.813081][T29853] netlink: 198304 bytes leftover after parsing attributes in process `syz.1.6183'. [ 1473.397252][T29870] netlink: 64967 bytes leftover after parsing attributes in process `syz.2.6186'. [ 1473.505552][T29874] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.6187'. [ 1473.836608][T29882] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.6189'. [ 1473.849930][T29880] netlink: 'syz.2.6190': attribute type 21 has an invalid length. [ 1474.460663][T29888] syzkaller0: entered promiscuous mode [ 1474.501412][T29888] syzkaller0: entered allmulticast mode [ 1474.525758][T29894] veth1_macvtap: left promiscuous mode [ 1474.531367][T29894] macsec0: entered allmulticast mode [ 1474.792377][T29895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6191'. [ 1474.814992][T29894] veth1_to_bond: entered promiscuous mode [ 1474.836692][T29894] veth1_to_bond: entered allmulticast mode [ 1478.578250][T29924] netlink: 'syz.4.6200': attribute type 4 has an invalid length. [ 1478.594955][T29924] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6200'. [ 1479.082783][T29934] syzkaller0: entered promiscuous mode [ 1479.104652][T29934] syzkaller0: entered allmulticast mode [ 1480.416706][T29950] netlink: 763 bytes leftover after parsing attributes in process `syz.4.6205'. [ 1481.124816][T29967] netlink: 'syz.0.6214': attribute type 21 has an invalid length. [ 1481.132761][T29967] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6214'. [ 1481.142658][T29967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6214'. [ 1481.604858][T29980] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6218'. [ 1481.625835][T29983] netlink: 'syz.1.6218': attribute type 10 has an invalid length. [ 1482.483441][T30001] netlink: 'syz.0.6223': attribute type 39 has an invalid length. [ 1482.690842][T30001] hsr_slave_1 (unregistering): left promiscuous mode [ 1482.951926][T30011] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.6224'. [ 1482.990820][T29988] netlink: 'syz.2.6219': attribute type 4 has an invalid length. [ 1483.041238][T29988] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6219'. [ 1483.372111][T29988] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1483.849664][T30031] netlink: 'syz.0.6230': attribute type 29 has an invalid length. [ 1483.858610][T30031] netlink: 'syz.0.6230': attribute type 29 has an invalid length. [ 1483.878873][T30032] netlink: 'syz.0.6230': attribute type 29 has an invalid length. [ 1483.905106][T30031] netlink: 'syz.0.6230': attribute type 29 has an invalid length. [ 1484.099223][T30040] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.6233'. [ 1484.879603][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.886089][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.829476][T30067] FAULT_INJECTION: forcing a failure. [ 1485.829476][T30067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1485.923805][T30067] CPU: 0 PID: 30067 Comm: syz.0.6240 Not tainted syzkaller #0 [ 1485.931508][T30067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1485.941969][T30067] Call Trace: [ 1485.945291][T30067] [ 1485.948262][T30067] dump_stack_lvl+0x18c/0x250 [ 1485.953165][T30067] ? show_regs_print_info+0x20/0x20 [ 1485.958412][T30067] ? load_image+0x420/0x420 [ 1485.963042][T30067] ? __might_fault+0xaa/0x120 [ 1485.967761][T30067] ? __lock_acquire+0x7d40/0x7d40 [ 1485.972834][T30067] should_fail_ex+0x39d/0x4d0 [ 1485.977561][T30067] _copy_from_iter+0x1d9/0x12e0 [ 1485.982457][T30067] ? rep_movs_alternative+0x4a/0x90 [ 1485.987695][T30067] ? _copy_from_iter+0x24e/0x12e0 [ 1485.992848][T30067] ? __virt_addr_valid+0x18c/0x540 [ 1485.998022][T30067] ? __lock_acquire+0x7d40/0x7d40 [ 1486.004679][T30067] ? copyout_mc+0x70/0x70 [ 1486.009076][T30067] ? copyout_mc+0x70/0x70 [ 1486.013453][T30067] ? __virt_addr_valid+0x18c/0x540 [ 1486.018613][T30067] ? page_copy_sane+0x16a/0x270 [ 1486.023511][T30067] copy_page_from_iter+0x7b/0x100 [ 1486.028776][T30067] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1486.034636][T30067] unix_stream_sendmsg+0x562/0xbf0 [ 1486.039815][T30067] ? unix_show_fdinfo+0x270/0x270 [ 1486.044869][T30067] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1486.051323][T30067] ? aa_sock_msg_perm+0x94/0x150 [ 1486.056299][T30067] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1486.061635][T30067] ? security_socket_sendmsg+0x80/0xa0 [ 1486.067146][T30067] ? unix_show_fdinfo+0x270/0x270 [ 1486.072234][T30067] ____sys_sendmsg+0x5ba/0x960 [ 1486.077323][T30067] ? __asan_memset+0x22/0x40 [ 1486.081962][T30067] ? __sys_sendmsg_sock+0x30/0x30 [ 1486.087046][T30067] ? __import_iovec+0x5f2/0x850 [ 1486.091983][T30067] ? import_iovec+0x73/0xa0 [ 1486.096556][T30067] ___sys_sendmsg+0x2a6/0x360 [ 1486.101293][T30067] ? get_pid_task+0x20/0x1e0 [ 1486.105971][T30067] ? __sys_sendmsg+0x2a0/0x2a0 [ 1486.110803][T30067] ? __lock_acquire+0x7d40/0x7d40 [ 1486.115993][T30067] __se_sys_sendmsg+0x1c2/0x2b0 [ 1486.120894][T30067] ? __x64_sys_sendmsg+0x80/0x80 [ 1486.125892][T30067] ? lockdep_hardirqs_on+0x98/0x150 [ 1486.131140][T30067] do_syscall_64+0x55/0xa0 [ 1486.135592][T30067] ? clear_bhb_loop+0x40/0x90 [ 1486.140396][T30067] ? clear_bhb_loop+0x40/0x90 [ 1486.145221][T30067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1486.151152][T30067] RIP: 0033:0x7f893299c819 [ 1486.155698][T30067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.175606][T30067] RSP: 002b:00007f89338e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1486.184150][T30067] RAX: ffffffffffffffda RBX: 00007f8932c15fa0 RCX: 00007f893299c819 [ 1486.192245][T30067] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1486.200440][T30067] RBP: 00007f89338e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.208712][T30067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1486.216928][T30067] R13: 00007f8932c16038 R14: 00007f8932c15fa0 R15: 00007ffddc966c78 [ 1486.225538][T30067] [ 1487.697403][T30068] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6234'. [ 1487.869812][T30083] netlink: 'syz.1.6242': attribute type 10 has an invalid length. [ 1487.922238][T30083] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1488.013651][T30068] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1488.043533][T30068] CPU: 1 PID: 30068 Comm: syz.4.6234 Not tainted syzkaller #0 [ 1488.051086][T30068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1488.061196][T30068] Call Trace: [ 1488.064603][T30068] [ 1488.067667][T30068] dump_stack_lvl+0x18c/0x250 [ 1488.072498][T30068] ? show_regs_print_info+0x20/0x20 [ 1488.077750][T30068] ? load_image+0x420/0x420 [ 1488.082316][T30068] sysfs_warn_dup+0x8e/0xa0 [ 1488.086861][T30068] sysfs_do_create_link_sd+0xc0/0x110 [ 1488.092308][T30068] device_add_class_symlinks+0x1cf/0x240 [ 1488.097987][T30068] device_add+0x507/0xc20 [ 1488.102384][T30068] wiphy_register+0x1dad/0x2ae0 [ 1488.107332][T30068] ? cfg80211_event_work+0x40/0x40 [ 1488.112503][T30068] ? minstrel_ht_alloc+0x88a/0x990 [ 1488.117776][T30068] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1488.123907][T30068] ieee80211_register_hw+0x3464/0x4250 [ 1488.129451][T30068] ? ieee80211_tasklet_handler+0x20/0x20 [ 1488.135225][T30068] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1488.141354][T30068] ? __debug_object_init+0xec/0x450 [ 1488.146629][T30068] ? __asan_memset+0x22/0x40 [ 1488.151468][T30068] ? __hrtimer_init+0x186/0x270 [ 1488.156429][T30068] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1488.162240][T30068] ? mac80211_hwsim_free+0x220/0x220 [ 1488.167580][T30068] ? rcu_is_watching+0x15/0xb0 [ 1488.172428][T30068] ? kstrndup+0xbd/0x140 [ 1488.176720][T30068] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1488.181944][T30068] ? __nla_validate+0x50/0x50 [ 1488.186691][T30068] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1488.193109][T30068] ? __nla_parse+0x40/0x50 [ 1488.197793][T30068] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1488.204226][T30068] genl_family_rcv_msg_doit+0x211/0x310 [ 1488.209837][T30068] ? end_current_label_crit_section+0x170/0x170 [ 1488.216241][T30068] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1488.222381][T30068] ? bpf_lsm_capable+0x9/0x10 [ 1488.227265][T30068] ? security_capable+0x89/0xb0 [ 1488.232453][T30068] genl_rcv_msg+0x619/0x7a0 [ 1488.237037][T30068] ? genl_bind+0x360/0x360 [ 1488.241501][T30068] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1488.247888][T30068] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1488.254577][T30068] ? ref_tracker_free+0x690/0x840 [ 1488.259765][T30068] netlink_rcv_skb+0x241/0x4d0 [ 1488.264593][T30068] ? genl_bind+0x360/0x360 [ 1488.269144][T30068] ? netlink_ack+0x1180/0x1180 [ 1488.273987][T30068] ? __lock_acquire+0x7d40/0x7d40 [ 1488.279081][T30068] ? down_read+0x1ac/0x2e0 [ 1488.283558][T30068] genl_rcv+0x28/0x40 [ 1488.287587][T30068] netlink_unicast+0x751/0x8d0 [ 1488.292422][T30068] netlink_sendmsg+0x8d0/0xbf0 [ 1488.297266][T30068] ? netlink_getsockopt+0x590/0x590 [ 1488.302522][T30068] ? aa_sock_msg_perm+0x94/0x150 [ 1488.307514][T30068] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1488.312847][T30068] ? security_socket_sendmsg+0x80/0xa0 [ 1488.318350][T30068] ? netlink_getsockopt+0x590/0x590 [ 1488.323602][T30068] ____sys_sendmsg+0x5ba/0x960 [ 1488.328425][T30068] ? __asan_memset+0x22/0x40 [ 1488.333157][T30068] ? __sys_sendmsg_sock+0x30/0x30 [ 1488.338224][T30068] ? __import_iovec+0x5f2/0x850 [ 1488.343154][T30068] ? import_iovec+0x73/0xa0 [ 1488.347706][T30068] ___sys_sendmsg+0x2a6/0x360 [ 1488.352480][T30068] ? __sys_sendmsg+0x2a0/0x2a0 [ 1488.357367][T30068] __se_sys_sendmsg+0x1c2/0x2b0 [ 1488.362265][T30068] ? __x64_sys_sendmsg+0x80/0x80 [ 1488.367265][T30068] ? lockdep_hardirqs_on+0x98/0x150 [ 1488.372520][T30068] do_syscall_64+0x55/0xa0 [ 1488.376975][T30068] ? clear_bhb_loop+0x40/0x90 [ 1488.381789][T30068] ? clear_bhb_loop+0x40/0x90 [ 1488.386510][T30068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1488.392456][T30068] RIP: 0033:0x7f26c619c819 [ 1488.396913][T30068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.416661][T30068] RSP: 002b:00007f26c70d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1488.425138][T30068] RAX: ffffffffffffffda RBX: 00007f26c6416180 RCX: 00007f26c619c819 [ 1488.433243][T30068] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1488.441438][T30068] RBP: 00007f26c6232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1488.449486][T30068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.457721][T30068] R13: 00007f26c6416218 R14: 00007f26c6416180 R15: 00007fffb8e83058 [ 1488.465765][T30068] [ 1489.305534][T30099] netlink: 'syz.0.6248': attribute type 1 has an invalid length. [ 1489.636792][T30101] delete_channel: no stack [ 1490.631487][T30118] syzkaller0: entered promiscuous mode [ 1490.732590][T30118] syzkaller0: entered allmulticast mode [ 1491.655854][T30125] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6256'. [ 1491.686501][T30125] veth0_to_bond: left promiscuous mode [ 1491.715894][T30129] netlink: 'syz.0.6255': attribute type 21 has an invalid length. [ 1491.723796][T30129] netlink: 'syz.0.6255': attribute type 1 has an invalid length. [ 1491.752952][T30129] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6255'. [ 1491.829406][T30129] syzkaller0: entered promiscuous mode [ 1495.079178][T30142] netlink: 'syz.4.6259': attribute type 21 has an invalid length. [ 1495.090720][T30142] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6259'. [ 1495.099933][T30142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6259'. [ 1495.112018][T30148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6261'. [ 1495.528707][T30159] netlink: 'syz.0.6265': attribute type 29 has an invalid length. [ 1495.717887][T30159] netlink: 'syz.0.6265': attribute type 29 has an invalid length. [ 1495.934962][T30161] netlink: 'syz.0.6265': attribute type 29 has an invalid length. [ 1496.101353][T30159] netlink: 'syz.0.6265': attribute type 1 has an invalid length. [ 1496.154676][T30159] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1497.116014][T30180] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.6272'. [ 1497.383165][T30169] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6267'. [ 1497.964813][T30193] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6275'. [ 1498.070700][T30187] delete_channel: no stack [ 1498.678367][T30204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.357037][T16098] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1503.355940][T30228] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6285'. [ 1503.641785][T30236] netlink: 'syz.0.6287': attribute type 29 has an invalid length. [ 1503.663353][T30236] netlink: 'syz.0.6287': attribute type 29 has an invalid length. [ 1503.677906][T30236] netlink: 'syz.0.6287': attribute type 29 has an invalid length. [ 1503.738663][T30236] netlink: 668 bytes leftover after parsing attributes in process `syz.0.6287'. [ 1503.748640][T30236] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1503.757953][T30236] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1503.927352][T30246] netlink: 'syz.2.6288': attribute type 3 has an invalid length. [ 1503.945249][T30246] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6288'. [ 1508.746703][T30305] netlink: 'syz.2.6305': attribute type 9 has an invalid length. [ 1508.776020][T30305] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6305'. [ 1511.402469][T30323] netlink: 'syz.4.6309': attribute type 3 has an invalid length. [ 1511.446171][T30323] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6309'. [ 1511.514176][T30335] sctp: [Deprecated]: syz.2.6311 (pid 30335) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1511.514176][T30335] Use struct sctp_sack_info instead [ 1511.645474][T30337] netlink: 'syz.1.6312': attribute type 10 has an invalid length. [ 1512.107953][T30346] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6314'. [ 1513.880363][T30344] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6314'. [ 1514.136108][T30358] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1514.268591][T30363] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6319'. [ 1514.452361][T30374] netlink: 'syz.0.6323': attribute type 21 has an invalid length. [ 1514.475225][T30374] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1514.496092][T30374] netlink: 'syz.0.6323': attribute type 5 has an invalid length. [ 1514.533886][T30374] netlink: 'syz.0.6323': attribute type 6 has an invalid length. [ 1514.599764][T30374] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1514.713121][T30381] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6325'. [ 1514.802100][T30385] FAULT_INJECTION: forcing a failure. [ 1514.802100][T30385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.860860][T30385] CPU: 0 PID: 30385 Comm: syz.0.6326 Not tainted syzkaller #0 [ 1514.868417][T30385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1514.878586][T30385] Call Trace: [ 1514.881917][T30385] [ 1514.884866][T30385] dump_stack_lvl+0x18c/0x250 [ 1514.889585][T30385] ? show_regs_print_info+0x20/0x20 [ 1514.895093][T30385] ? load_image+0x420/0x420 [ 1514.899721][T30385] ? __might_fault+0xaa/0x120 [ 1514.904507][T30385] ? __lock_acquire+0x7d40/0x7d40 [ 1514.909567][T30385] should_fail_ex+0x39d/0x4d0 [ 1514.914365][T30385] _copy_from_iter+0x1d9/0x12e0 [ 1514.919241][T30385] ? rep_movs_alternative+0x4a/0x90 [ 1514.924458][T30385] ? _copy_from_iter+0x24e/0x12e0 [ 1514.929691][T30385] ? __virt_addr_valid+0x18c/0x540 [ 1514.934940][T30385] ? __lock_acquire+0x7d40/0x7d40 [ 1514.940013][T30385] ? copyout_mc+0x70/0x70 [ 1514.944393][T30385] ? copyout_mc+0x70/0x70 [ 1514.948773][T30385] ? __virt_addr_valid+0x18c/0x540 [ 1514.953945][T30385] ? page_copy_sane+0x16a/0x270 [ 1514.958840][T30385] copy_page_from_iter+0x7b/0x100 [ 1514.964194][T30385] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1514.970236][T30385] unix_stream_sendmsg+0x562/0xbf0 [ 1514.975476][T30385] ? unix_show_fdinfo+0x270/0x270 [ 1514.980512][T30385] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1514.986951][T30385] ? aa_sock_msg_perm+0x94/0x150 [ 1514.991906][T30385] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1514.997211][T30385] ? security_socket_sendmsg+0x80/0xa0 [ 1515.002775][T30385] ? unix_show_fdinfo+0x270/0x270 [ 1515.007813][T30385] ____sys_sendmsg+0x5ba/0x960 [ 1515.012600][T30385] ? __asan_memset+0x22/0x40 [ 1515.017217][T30385] ? __sys_sendmsg_sock+0x30/0x30 [ 1515.022433][T30385] ? __import_iovec+0x5f2/0x850 [ 1515.027403][T30385] ? import_iovec+0x73/0xa0 [ 1515.032024][T30385] ___sys_sendmsg+0x2a6/0x360 [ 1515.036819][T30385] ? __sys_sendmsg+0x2a0/0x2a0 [ 1515.041638][T30385] ? __lock_acquire+0x7d40/0x7d40 [ 1515.046705][T30385] __se_sys_sendmsg+0x1c2/0x2b0 [ 1515.051574][T30385] ? __x64_sys_sendmsg+0x80/0x80 [ 1515.056550][T30385] ? lockdep_hardirqs_on+0x98/0x150 [ 1515.061778][T30385] do_syscall_64+0x55/0xa0 [ 1515.066212][T30385] ? clear_bhb_loop+0x40/0x90 [ 1515.070922][T30385] ? clear_bhb_loop+0x40/0x90 [ 1515.075715][T30385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1515.081634][T30385] RIP: 0033:0x7f893299c819 [ 1515.086081][T30385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.105701][T30385] RSP: 002b:00007f89338e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1515.114232][T30385] RAX: ffffffffffffffda RBX: 00007f8932c15fa0 RCX: 00007f893299c819 [ 1515.122305][T30385] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1515.130472][T30385] RBP: 00007f89338e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.138546][T30385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1515.146533][T30385] R13: 00007f8932c16038 R14: 00007f8932c15fa0 R15: 00007ffddc966c78 [ 1515.154632][T30385] [ 1515.292967][T30389] netlink: 'syz.1.6327': attribute type 10 has an invalid length. [ 1516.136192][T30414] netlink: 'syz.2.6334': attribute type 17 has an invalid length. [ 1516.144201][T30414] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6334'. [ 1516.262460][T30414] netlink: 'syz.2.6334': attribute type 7 has an invalid length. [ 1517.533558][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1517.541791][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1517.550032][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1518.069853][T30467] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6348'. [ 1518.140477][T30472] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6350'. [ 1519.684972][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1519.691131][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1519.915835][T30487] netlink: 'syz.0.6354': attribute type 3 has an invalid length. [ 1519.927806][T30487] netlink: 'syz.0.6354': attribute type 275 has an invalid length. [ 1520.863724][T30502] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6356'. [ 1521.431699][T30504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6358'. [ 1521.754913][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1521.761239][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1522.102105][T30509] netlink: 'syz.2.6359': attribute type 3 has an invalid length. [ 1522.149880][T30509] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6359'. [ 1523.858657][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1523.866566][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1526.272028][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1526.278344][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1526.284795][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1526.863328][T30536] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6366'. [ 1528.287030][T30556] netlink: 'syz.0.6370': attribute type 1 has an invalid length. [ 1528.324077][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1528.330523][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1528.369181][T30556] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.6370'. [ 1528.376729][T30557] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6370'. [ 1528.402206][T30557] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1529.200770][T30566] mac80211_hwsim hwsim91 wlan1: entered promiscuous mode [ 1529.222747][T30566] mac80211_hwsim hwsim91 wlan1: entered allmulticast mode [ 1530.399605][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1530.406016][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1531.128745][T30603] netlink: 'syz.1.6385': attribute type 64 has an invalid length. [ 1531.261263][T30606] netlink: 'syz.1.6387': attribute type 1 has an invalid length. [ 1531.269867][T30606] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.6387'. [ 1531.291518][T30606] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6387'. [ 1531.306543][T30606] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1531.340353][T30607] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6386'. [ 1531.362126][T30608] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6386'. [ 1532.074769][T30616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6390'. [ 1532.244732][T30625] netlink: 'syz.1.6389': attribute type 10 has an invalid length. [ 1532.485000][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1532.492828][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1532.509305][T30638] netlink: 'syz.2.6397': attribute type 4 has an invalid length. [ 1532.855072][T30638] netlink: 187540 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1533.167037][T30651] netlink: 'syz.2.6398': attribute type 1 has an invalid length. [ 1533.245318][T30653] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6398'. [ 1533.263887][T30651] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.6398'. [ 1533.293728][T30653] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1533.422199][T30661] netlink: 'syz.0.6402': attribute type 8 has an invalid length. [ 1533.474809][T30661] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.6402'. [ 1533.623278][T30659] mac80211_hwsim hwsim71 wlan1: entered allmulticast mode [ 1533.923374][T30676] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.6407'. [ 1534.481728][T30692] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6410'. [ 1534.566421][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1534.572770][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1534.679214][T30698] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1534.932506][T30702] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 1534.974405][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6414'. [ 1535.016582][T30705] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.6413'. [ 1535.025753][T30702] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 1535.063597][T30702] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 1535.099587][T30702] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 1535.133682][T30702] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 1535.153886][T30702] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 1535.185063][T30702] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 1535.213861][T30702] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 1535.245924][T30702] netlink: 'syz.4.6414': attribute type 1 has an invalid length. [ 1536.634865][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1536.634897][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1536.647967][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1538.763742][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1538.785048][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1539.038771][T30769] validate_nla: 58 callbacks suppressed [ 1539.038793][T30769] netlink: 'syz.4.6430': attribute type 2 has an invalid length. [ 1539.058482][T30769] __nla_validate_parse: 68 callbacks suppressed [ 1539.058502][T30769] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6430'. [ 1539.105034][T30769] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1539.520133][T30774] hsr0: entered promiscuous mode [ 1539.726335][T30774] hsr0: entered allmulticast mode [ 1539.789512][T30774] hsr_slave_0: entered allmulticast mode [ 1539.819596][T30774] hsr_slave_1: entered allmulticast mode [ 1540.607933][T30805] FAULT_INJECTION: forcing a failure. [ 1540.607933][T30805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.635902][T30805] CPU: 1 PID: 30805 Comm: syz.4.6440 Not tainted syzkaller #0 [ 1540.643830][T30805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1540.654036][T30805] Call Trace: [ 1540.657402][T30805] [ 1540.660379][T30805] dump_stack_lvl+0x18c/0x250 [ 1540.665134][T30805] ? show_regs_print_info+0x20/0x20 [ 1540.670397][T30805] ? load_image+0x420/0x420 [ 1540.674969][T30805] ? __might_fault+0xaa/0x120 [ 1540.679693][T30805] ? __lock_acquire+0x7d40/0x7d40 [ 1540.684931][T30805] should_fail_ex+0x39d/0x4d0 [ 1540.689847][T30805] _copy_from_user+0x2f/0xe0 [ 1540.694462][T30805] __sys_bpf+0x23e/0x890 [ 1540.698822][T30805] ? bpf_link_show_fdinfo+0x390/0x390 [ 1540.704246][T30805] ? lock_chain_count+0x20/0x20 [ 1540.709149][T30805] __x64_sys_bpf+0x7c/0x90 [ 1540.713584][T30805] do_syscall_64+0x55/0xa0 [ 1540.718197][T30805] ? clear_bhb_loop+0x40/0x90 [ 1540.722990][T30805] ? clear_bhb_loop+0x40/0x90 [ 1540.727695][T30805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1540.733614][T30805] RIP: 0033:0x7f26c619c819 [ 1540.738140][T30805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.757769][T30805] RSP: 002b:00007f26c7117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1540.766205][T30805] RAX: ffffffffffffffda RBX: 00007f26c6415fa0 RCX: 00007f26c619c819 [ 1540.774207][T30805] RDX: 0000000000000094 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 1540.782342][T30805] RBP: 00007f26c7117090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.790510][T30805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.798496][T30805] R13: 00007f26c6416038 R14: 00007f26c6415fa0 R15: 00007fffb8e83058 [ 1540.806673][T30805] [ 1540.838612][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1540.844978][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1540.845779][T30807] netlink: 'syz.1.6441': attribute type 51 has an invalid length. [ 1540.851035][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1540.883892][T30809] netlink: 'syz.2.6442': attribute type 27 has an invalid length. [ 1540.911595][T30809] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.6442'. [ 1541.986707][T30826] netlink: 'syz.1.6447': attribute type 10 has an invalid length. [ 1541.995534][T30826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6447'. [ 1542.366658][T30834] netlink: 'syz.1.6450': attribute type 21 has an invalid length. [ 1542.434818][T30834] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6450'. [ 1542.588543][T30839] FAULT_INJECTION: forcing a failure. [ 1542.588543][T30839] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.624904][T30839] CPU: 1 PID: 30839 Comm: syz.2.6452 Not tainted syzkaller #0 [ 1542.632567][T30839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1542.642693][T30839] Call Trace: [ 1542.646017][T30839] [ 1542.649072][T30839] dump_stack_lvl+0x18c/0x250 [ 1542.653813][T30839] ? show_regs_print_info+0x20/0x20 [ 1542.659148][T30839] ? load_image+0x420/0x420 [ 1542.663689][T30839] ? __might_sleep+0xe0/0xe0 [ 1542.668381][T30839] ? __lock_acquire+0x7d40/0x7d40 [ 1542.673555][T30839] ? mark_lock+0x94/0x320 [ 1542.677938][T30839] should_fail_ex+0x39d/0x4d0 [ 1542.682761][T30839] should_failslab+0x9/0x20 [ 1542.687332][T30839] slab_pre_alloc_hook+0x59/0x310 [ 1542.692486][T30839] ? __get_vm_area_node+0x125/0x370 [ 1542.697761][T30839] __kmem_cache_alloc_node+0x53/0x250 [ 1542.703182][T30839] ? __get_vm_area_node+0x125/0x370 [ 1542.708531][T30839] kmalloc_node_trace+0x26/0xe0 [ 1542.713458][T30839] __get_vm_area_node+0x125/0x370 [ 1542.718904][T30839] __vmalloc_node_range+0x36e/0x1330 [ 1542.724275][T30839] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1542.729874][T30839] ? mark_lock+0x94/0x320 [ 1542.734247][T30839] ? __lock_acquire+0x1347/0x7d40 [ 1542.739336][T30839] ? verify_lock_unused+0x140/0x140 [ 1542.744694][T30839] ? free_vm_area+0x50/0x50 [ 1542.749248][T30839] ? end_current_label_crit_section+0x170/0x170 [ 1542.755889][T30839] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1542.761483][T30839] __vmalloc+0x7a/0x90 [ 1542.765597][T30839] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1542.771178][T30839] bpf_prog_alloc_no_stats+0x47/0x440 [ 1542.776595][T30839] ? bpf_prog_alloc+0x2b/0x1a0 [ 1542.781397][T30839] bpf_prog_alloc+0x3d/0x1a0 [ 1542.786064][T30839] bpf_prog_load+0x6eb/0x1670 [ 1542.790899][T30839] ? map_freeze+0x420/0x420 [ 1542.795537][T30839] ? __might_fault+0xaa/0x120 [ 1542.800251][T30839] ? __lock_acquire+0x7d40/0x7d40 [ 1542.805311][T30839] ? file_end_write+0x159/0x250 [ 1542.810203][T30839] ? __might_fault+0xaa/0x120 [ 1542.814909][T30839] ? __might_fault+0xc6/0x120 [ 1542.819614][T30839] ? __might_fault+0xaa/0x120 [ 1542.824322][T30839] ? bpf_lsm_bpf+0x9/0x10 [ 1542.828687][T30839] ? security_bpf+0x7e/0xa0 [ 1542.833231][T30839] __sys_bpf+0x5ba/0x890 [ 1542.837597][T30839] ? bpf_link_show_fdinfo+0x390/0x390 [ 1542.843020][T30839] ? lock_chain_count+0x20/0x20 [ 1542.847921][T30839] __x64_sys_bpf+0x7c/0x90 [ 1542.852552][T30839] do_syscall_64+0x55/0xa0 [ 1542.857001][T30839] ? clear_bhb_loop+0x40/0x90 [ 1542.861795][T30839] ? clear_bhb_loop+0x40/0x90 [ 1542.866528][T30839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1542.872477][T30839] RIP: 0033:0x7f721e79c819 [ 1542.876930][T30839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.896578][T30839] RSP: 002b:00007f721f5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1542.905034][T30839] RAX: ffffffffffffffda RBX: 00007f721ea15fa0 RCX: 00007f721e79c819 [ 1542.913036][T30839] RDX: 0000000000000094 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 1542.921042][T30839] RBP: 00007f721f5a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.929040][T30839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.937050][T30839] R13: 00007f721ea16038 R14: 00007f721ea15fa0 R15: 00007fff15e7c248 [ 1542.945212][T30839] [ 1543.011956][T30839] syz.2.6452: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1543.034601][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1543.054738][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1543.131354][T30839] CPU: 1 PID: 30839 Comm: syz.2.6452 Not tainted syzkaller #0 [ 1543.138927][T30839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1543.149035][T30839] Call Trace: [ 1543.152438][T30839] [ 1543.155403][T30839] dump_stack_lvl+0x18c/0x250 [ 1543.160138][T30839] ? show_regs_print_info+0x20/0x20 [ 1543.165387][T30839] ? load_image+0x420/0x420 [ 1543.170031][T30839] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1543.176497][T30839] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1543.183044][T30839] warn_alloc+0x246/0x340 [ 1543.187426][T30839] ? __get_vm_area_node+0x125/0x370 [ 1543.192669][T30839] ? zone_watermark_ok_safe+0x230/0x230 [ 1543.198273][T30839] ? rcu_is_watching+0x15/0xb0 [ 1543.203111][T30839] ? __get_vm_area_node+0x356/0x370 [ 1543.208489][T30839] __vmalloc_node_range+0x393/0x1330 [ 1543.213842][T30839] ? mark_lock+0x94/0x320 [ 1543.218340][T30839] ? __lock_acquire+0x1347/0x7d40 [ 1543.223412][T30839] ? verify_lock_unused+0x140/0x140 [ 1543.228768][T30839] ? free_vm_area+0x50/0x50 [ 1543.233417][T30839] ? end_current_label_crit_section+0x170/0x170 [ 1543.239942][T30839] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1543.245540][T30839] __vmalloc+0x7a/0x90 [ 1543.249646][T30839] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1543.255234][T30839] bpf_prog_alloc_no_stats+0x47/0x440 [ 1543.260647][T30839] ? bpf_prog_alloc+0x2b/0x1a0 [ 1543.265448][T30839] bpf_prog_alloc+0x3d/0x1a0 [ 1543.270073][T30839] bpf_prog_load+0x6eb/0x1670 [ 1543.274865][T30839] ? map_freeze+0x420/0x420 [ 1543.279508][T30839] ? __might_fault+0xaa/0x120 [ 1543.284322][T30839] ? __lock_acquire+0x7d40/0x7d40 [ 1543.289469][T30839] ? file_end_write+0x159/0x250 [ 1543.294456][T30839] ? __might_fault+0xaa/0x120 [ 1543.299164][T30839] ? __might_fault+0xc6/0x120 [ 1543.304111][T30839] ? __might_fault+0xaa/0x120 [ 1543.308891][T30839] ? bpf_lsm_bpf+0x9/0x10 [ 1543.313241][T30839] ? security_bpf+0x7e/0xa0 [ 1543.317764][T30839] __sys_bpf+0x5ba/0x890 [ 1543.322032][T30839] ? bpf_link_show_fdinfo+0x390/0x390 [ 1543.327630][T30839] ? lock_chain_count+0x20/0x20 [ 1543.332590][T30839] __x64_sys_bpf+0x7c/0x90 [ 1543.337023][T30839] do_syscall_64+0x55/0xa0 [ 1543.341460][T30839] ? clear_bhb_loop+0x40/0x90 [ 1543.346182][T30839] ? clear_bhb_loop+0x40/0x90 [ 1543.350878][T30839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1543.356789][T30839] RIP: 0033:0x7f721e79c819 [ 1543.361517][T30839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.381156][T30839] RSP: 002b:00007f721f5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1543.389699][T30839] RAX: ffffffffffffffda RBX: 00007f721ea15fa0 RCX: 00007f721e79c819 [ 1543.397691][T30839] RDX: 0000000000000094 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 1543.405677][T30839] RBP: 00007f721f5a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.413664][T30839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.421682][T30839] R13: 00007f721ea16038 R14: 00007f721ea15fa0 R15: 00007fff15e7c248 [ 1543.429712][T30839] [ 1543.528578][T30839] Mem-Info: [ 1543.531779][T30839] active_anon:10006 inactive_anon:0 isolated_anon:0 [ 1543.531779][T30839] active_file:18707 inactive_file:40500 isolated_file:0 [ 1543.531779][T30839] unevictable:768 dirty:88 writeback:0 [ 1543.531779][T30839] slab_reclaimable:11023 slab_unreclaimable:100392 [ 1543.531779][T30839] mapped:30886 shmem:2687 pagetables:657 [ 1543.531779][T30839] sec_pagetables:0 bounce:0 [ 1543.531779][T30839] kernel_misc_reclaimable:0 [ 1543.531779][T30839] free:1320436 free_pcp:7022 free_cma:0 [ 1543.663632][T30839] Node 0 active_anon:40524kB inactive_anon:0kB active_file:74828kB inactive_file:161800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124144kB dirty:352kB writeback:0kB shmem:9812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:2628kB sec_pagetables:0kB all_unreclaimable? no [ 1543.790980][T30844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6454'. [ 1543.821505][T30839] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1543.879403][T30829] macsec0: entered promiscuous mode [ 1543.914984][T30829] macsec0: entered allmulticast mode [ 1543.923874][T30839] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1544.051871][T30839] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1544.095156][T30839] Node 0 DMA32 free:1368404kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:42084kB inactive_anon:0kB active_file:74828kB inactive_file:160976kB unevictable:1536kB writepending:352kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:9628kB local_pcp:7872kB free_cma:0kB [ 1544.274594][T30839] lowmem_reserve[]: 0 0 0 0 0 [ 1544.279529][T30839] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1544.486727][T30839] lowmem_reserve[]: 0 0 0 0 0 [ 1544.491778][T30839] Node 1 Normal free:3895956kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17580kB local_pcp:11020kB free_cma:0kB [ 1544.675307][T30839] lowmem_reserve[]: 0 0 0 0 0 [ 1544.680156][T30839] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1544.774555][T30839] Node 0 DMA32: 491*4kB (UE) 1*8kB (U) 1034*16kB (UME) 1406*32kB (UME) 1742*64kB (UME) 1124*128kB (UME) 744*256kB (UME) 536*512kB (UME) 291*1024kB (UME) 74*2048kB (UME) 32*4096kB (UM) = 1364372kB [ 1544.894630][T30839] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1544.924793][T30839] Node 1 Normal: 99*4kB (UME) 51*8kB (UME) 35*16kB (UME) 72*32kB (UME) 23*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3895956kB [ 1544.946881][T30839] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1544.980280][T30839] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1545.017173][T30839] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1545.059100][T30839] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1545.118222][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1545.125725][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1545.154617][T30839] 64032 total pagecache pages [ 1545.160399][T30839] 0 pages in swap cache [ 1545.184656][T30839] Free swap = 124996kB [ 1545.194245][T30839] Total swap = 124996kB [ 1545.202590][T30839] 2097051 pages RAM [ 1545.211369][T30839] 0 pages HighMem/MovableOnly [ 1545.217009][T30839] 416926 pages reserved [ 1545.221435][T30839] 0 pages cma reserved [ 1546.493080][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.504621][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.285802][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1547.292315][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1547.574671][T30890] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6468'. [ 1547.594679][T30890] tc_dump_action: action bad kind [ 1547.889660][T30894] netlink: 'syz.1.6470': attribute type 10 has an invalid length. [ 1547.922232][T30894] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6470'. [ 1547.935122][T30894] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1548.607738][T30894] batman_adv: batadv0: Removing interface: veth0_vlan [ 1549.355367][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1549.412536][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1549.451094][T30914] syzkaller0: entered promiscuous mode [ 1549.471057][T30914] syzkaller0: entered allmulticast mode [ 1551.435678][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1551.435836][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1553.228343][T30939] mac80211_hwsim hwsim71 wlan1: entered promiscuous mode [ 1553.514995][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1553.521305][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1553.591696][T30951] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.6486'. [ 1554.864511][T30970] netlink: 'syz.1.6493': attribute type 10 has an invalid length. [ 1554.971690][T30977] netlink: 'syz.4.6495': attribute type 3 has an invalid length. [ 1554.992957][T30977] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6495'. [ 1555.021847][T30970] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1555.595063][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1555.607300][T30995] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1555.615095][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1555.682291][T30998] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.6500'. [ 1555.731171][T31000] netlink: 'syz.0.6502': attribute type 29 has an invalid length. [ 1555.746115][T31000] netlink: 'syz.0.6502': attribute type 29 has an invalid length. [ 1556.845999][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6509'. [ 1556.876388][T31028] netlink: 'syz.2.6508': attribute type 41 has an invalid length. [ 1556.893667][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6509'. [ 1557.001214][T31025] netlink: 33 bytes leftover after parsing attributes in process `syz.1.6509'. [ 1557.046200][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6509'. [ 1557.076249][T31025] netlink: 33 bytes leftover after parsing attributes in process `syz.1.6509'. [ 1557.109190][T31028] netlink: 'syz.2.6508': attribute type 41 has an invalid length. [ 1557.317572][T16086] wlan1: Trigger new scan to find an IBSS to join [ 1557.519831][T31043] netlink: 'syz.0.6512': attribute type 1 has an invalid length. [ 1557.531279][T31043] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.6512'. [ 1557.681491][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1557.685444][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1557.694002][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1559.754958][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1559.779406][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1560.807753][T31100] netlink: 'syz.4.6527': attribute type 21 has an invalid length. [ 1560.844760][T31100] netlink: 'syz.4.6527': attribute type 10 has an invalid length. [ 1560.852751][T31100] netlink: 'syz.4.6527': attribute type 12 has an invalid length. [ 1560.891275][T31100] netlink: 'syz.4.6527': attribute type 13 has an invalid length. [ 1560.910414][T31100] netlink: 'syz.4.6527': attribute type 14 has an invalid length. [ 1560.922498][T31100] netlink: 'syz.4.6527': attribute type 15 has an invalid length. [ 1560.976377][T31100] netlink: 'syz.4.6527': attribute type 16 has an invalid length. [ 1560.994062][T31100] netlink: 'syz.4.6527': attribute type 19 has an invalid length. [ 1561.002304][T31100] netlink: 'syz.4.6527': attribute type 21 has an invalid length. [ 1561.012345][T31100] netlink: 'syz.4.6527': attribute type 22 has an invalid length. [ 1561.020749][T31100] netlink: 12226 bytes leftover after parsing attributes in process `syz.4.6527'. [ 1561.032957][T31098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6528'. [ 1561.127771][T31098] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.6528'. [ 1561.207071][T16098] wlan1: Trigger new scan to find an IBSS to join [ 1561.834674][T26527] Bluetooth: hci5: command 0x0406 tx timeout [ 1561.864629][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1562.245525][ T996] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1562.909322][T31123] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6535'. [ 1562.949753][T14439] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1562.974421][T14439] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1562.987043][T14439] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1563.004083][ T996] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.019028][T14439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1563.028541][T14439] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1563.039458][T14439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1563.132606][T31122] hsr_slave_1 (unregistering): left promiscuous mode [ 1563.223607][ T996] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.547295][ T996] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.683279][T31145] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6540'. [ 1563.900675][ T996] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.915518][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1563.922073][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1564.117647][T31151] bond_slave_1: entered promiscuous mode [ 1564.141377][T31151] bond_slave_1: entered allmulticast mode [ 1564.273586][T31127] chnl_net:caif_netlink_parms(): no params data found [ 1564.796035][T31127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.820155][T31127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.832590][T31127] bridge_slave_0: entered allmulticast mode [ 1564.840669][T31127] bridge_slave_0: entered promiscuous mode [ 1564.853460][T31127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.861631][T31127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.874890][T31127] bridge_slave_1: entered allmulticast mode [ 1564.893040][T31127] bridge_slave_1: entered promiscuous mode [ 1565.421418][T14439] Bluetooth: hci1: command tx timeout [ 1565.632302][T31191] C: renamed from team_slave_0 [ 1565.764745][T31191] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6549'. [ 1565.801014][T31196] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.6550'. [ 1565.968331][T31127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1565.994784][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1565.999970][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1566.019658][T31127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.688629][T31127] team0: Port device team_slave_0 added [ 1566.937033][T31127] team0: Port device team_slave_1 added [ 1567.349261][T31127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.377976][T31127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.416454][T31127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.434801][T14439] Bluetooth: hci1: command tx timeout [ 1567.672242][T31127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.717143][T31127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.764250][T31127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.955887][T31240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6561'. [ 1567.966666][T31238] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6560'. [ 1567.981381][T31238] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.6560'. [ 1567.992650][T31238] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6560'. [ 1568.073799][T31236] validate_nla: 7 callbacks suppressed [ 1568.074023][T31236] netlink: 'syz.2.6559': attribute type 29 has an invalid length. [ 1568.075376][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1568.115229][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1568.214723][T31242] netlink: 'syz.2.6559': attribute type 2 has an invalid length. [ 1568.243327][T31242] netlink: 'syz.2.6559': attribute type 8 has an invalid length. [ 1568.271079][T31242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6559'. [ 1568.294459][T31236] netlink: 'syz.2.6559': attribute type 29 has an invalid length. [ 1568.390283][T31127] hsr_slave_0: entered promiscuous mode [ 1568.450701][T31127] hsr_slave_1: entered promiscuous mode [ 1568.464395][T31127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1568.477373][T31127] Cannot create hsr debugfs directory [ 1568.939042][T31267] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6566'. [ 1569.514737][T14439] Bluetooth: hci1: command tx timeout [ 1570.155935][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1570.164681][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1570.171329][T31290] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6571'. [ 1570.182881][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1570.834351][T31303] netlink: 'syz.0.6574': attribute type 64 has an invalid length. [ 1571.594726][T14439] Bluetooth: hci1: command tx timeout [ 1572.175724][T31303] netlink: 'syz.0.6574': attribute type 64 has an invalid length. [ 1572.209777][T31304] netlink: 'syz.0.6574': attribute type 64 has an invalid length. [ 1572.234788][ T5777] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1572.247238][ T5777] Bluetooth: hci5: command 0x0406 tx timeout [ 1572.570706][T31317] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6578'. [ 1572.798369][T31317] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6578'. [ 1573.125296][T31127] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1573.161614][T31127] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1573.189001][T31127] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1573.203828][ T996] hsr_slave_0: left promiscuous mode [ 1573.211115][ T996] hsr_slave_1: left promiscuous mode [ 1573.222035][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.230027][ T996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.238452][ T996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.246383][ T996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.254437][ T996] bridge_slave_1: left allmulticast mode [ 1573.260289][ T996] bridge_slave_1: left promiscuous mode [ 1573.266407][ T996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.287166][ T996] veth1_macvtap: left promiscuous mode [ 1573.292719][ T996] veth0_macvtap: left promiscuous mode [ 1573.976983][ T996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1573.986045][ T996] bond_slave_1 (unregistering): left promiscuous mode [ 1573.995210][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 1574.061987][ T996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.071331][ T996] bond_slave_0 (unregistering): left promiscuous mode [ 1574.314713][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1574.425058][ T996] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1574.433854][ T996] bridge0 (unregistering): left promiscuous mode [ 1574.440720][ T996] bond0 (unregistering): Released all slaves [ 1574.570203][T31127] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1574.849364][T31127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.957777][T31127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.189731][T16094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.197213][T16094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.238116][T16094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.245512][T16094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.331778][T31127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1576.384123][T31371] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6585'. [ 1576.398401][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1576.496446][T31373] netlink: 56783 bytes leftover after parsing attributes in process `syz.2.6585'. [ 1577.081016][T31127] veth0_vlan: entered promiscuous mode [ 1577.124288][T31127] veth1_vlan: entered promiscuous mode [ 1577.323009][T31127] veth0_macvtap: entered promiscuous mode [ 1577.392762][T31127] veth1_macvtap: entered promiscuous mode [ 1577.583178][T31127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.594356][T31127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.618849][T31397] netlink: 'syz.0.6587': attribute type 28 has an invalid length. [ 1577.629009][T31127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.660658][T31397] netlink: 'syz.0.6587': attribute type 29 has an invalid length. [ 1577.689940][T31127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.711467][T31397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6587'. [ 1577.752028][T31127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1578.521539][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1579.454839][T31399] IPv6: Can't replace route, no match found [ 1579.514034][T31127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.558580][T31127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.604666][T31127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.644543][T31127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.682049][T31127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.734552][T31127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.759015][T31127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.817138][T31127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.861080][T31127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.880540][T31127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.903930][T31127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.014734][T31416] netlink: 'syz.0.6592': attribute type 21 has an invalid length. [ 1580.555629][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1580.778237][T16094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.865237][T31435] netlink: 'syz.1.6595': attribute type 4 has an invalid length. [ 1580.884908][T16094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.910231][T31435] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6595'. [ 1581.003970][T16094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.040498][T16094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.277045][T31475] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1582.385377][T31475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1582.634850][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1582.882332][T31480] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.6607'. [ 1583.307333][T31487] FAULT_INJECTION: forcing a failure. [ 1583.307333][T31487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.418928][T31487] CPU: 1 PID: 31487 Comm: syz.0.6609 Not tainted syzkaller #0 [ 1583.426479][T31487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1583.436591][T31487] Call Trace: [ 1583.439929][T31487] [ 1583.443043][T31487] dump_stack_lvl+0x18c/0x250 [ 1583.447893][T31487] ? show_regs_print_info+0x20/0x20 [ 1583.453167][T31487] ? load_image+0x420/0x420 [ 1583.457804][T31487] ? __might_fault+0xaa/0x120 [ 1583.463114][T31487] ? __lock_acquire+0x7d40/0x7d40 [ 1583.468764][T31487] should_fail_ex+0x39d/0x4d0 [ 1583.473569][T31487] _copy_from_user+0x2f/0xe0 [ 1583.478273][T31487] __sys_bpf+0x23e/0x890 [ 1583.482544][T31487] ? bpf_link_show_fdinfo+0x390/0x390 [ 1583.487969][T31487] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1583.494228][T31487] __x64_sys_bpf+0x7c/0x90 [ 1583.498686][T31487] do_syscall_64+0x55/0xa0 [ 1583.503228][T31487] ? clear_bhb_loop+0x40/0x90 [ 1583.508098][T31487] ? clear_bhb_loop+0x40/0x90 [ 1583.512832][T31487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.518777][T31487] RIP: 0033:0x7f893299c819 [ 1583.523235][T31487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.543055][T31487] RSP: 002b:00007f89338e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1583.551591][T31487] RAX: ffffffffffffffda RBX: 00007f8932c15fa0 RCX: 00007f893299c819 [ 1583.559577][T31487] RDX: 0000000000000094 RSI: 0000200000000d00 RDI: 0000000000000005 [ 1583.567566][T31487] RBP: 00007f89338e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.575634][T31487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.583714][T31487] R13: 00007f8932c16038 R14: 00007f8932c15fa0 R15: 00007ffddc966c78 [ 1583.591921][T31487] [ 1583.926841][T31496] netlink: 'syz.0.6612': attribute type 41 has an invalid length. [ 1583.975550][T31496] netlink: 'syz.0.6612': attribute type 27 has an invalid length. [ 1583.995451][T31496] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.6612'. [ 1584.007981][T31500] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6611'. [ 1584.025908][T31497] netlink: 'syz.0.6612': attribute type 5 has an invalid length. [ 1584.715391][T14439] Bluetooth: hci5: command 0x0406 tx timeout [ 1585.096417][T31517] netlink: 'syz.1.6616': attribute type 1 has an invalid length. [ 1585.104328][T31517] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6616'. [ 1585.561924][T31533] netlink: 'syz.1.6621': attribute type 27 has an invalid length. [ 1585.589923][T31533] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6621'. [ 1585.788796][T31525] FAULT_INJECTION: forcing a failure. [ 1585.788796][T31525] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.806902][T31525] CPU: 0 PID: 31525 Comm: syz.0.6620 Not tainted syzkaller #0 [ 1585.814439][T31525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1585.824636][T31525] Call Trace: [ 1585.827964][T31525] [ 1585.830941][T31525] dump_stack_lvl+0x18c/0x250 [ 1585.835777][T31525] ? show_regs_print_info+0x20/0x20 [ 1585.841202][T31525] ? load_image+0x420/0x420 [ 1585.845733][T31525] ? __might_sleep+0xe0/0xe0 [ 1585.850353][T31525] ? __lock_acquire+0x7d40/0x7d40 [ 1585.855404][T31525] should_fail_ex+0x39d/0x4d0 [ 1585.860125][T31525] should_failslab+0x9/0x20 [ 1585.864665][T31525] slab_pre_alloc_hook+0x59/0x310 [ 1585.869715][T31525] ? verify_lock_unused+0x140/0x140 [ 1585.874945][T31525] ? __get_vm_area_node+0x125/0x370 [ 1585.880193][T31525] __kmem_cache_alloc_node+0x53/0x250 [ 1585.885634][T31525] ? __get_vm_area_node+0x125/0x370 [ 1585.890958][T31525] kmalloc_node_trace+0x26/0xe0 [ 1585.895842][T31525] __get_vm_area_node+0x125/0x370 [ 1585.900904][T31525] __vmalloc_node_range+0x36e/0x1330 [ 1585.906229][T31525] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1585.911889][T31525] ? trace_call_bpf+0xc3/0x6c0 [ 1585.916700][T31525] ? free_vm_area+0x50/0x50 [ 1585.921310][T31525] ? perf_trace_lock_acquire+0x104/0x410 [ 1585.926964][T31525] ? end_current_label_crit_section+0x170/0x170 [ 1585.933316][T31525] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1585.938903][T31525] __vmalloc+0x7a/0x90 [ 1585.942997][T31525] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1585.948564][T31525] bpf_prog_alloc_no_stats+0x47/0x440 [ 1585.954299][T31525] ? bpf_prog_alloc+0x2b/0x1a0 [ 1585.959087][T31525] bpf_prog_alloc+0x3d/0x1a0 [ 1585.963698][T31525] bpf_prog_load+0x6eb/0x1670 [ 1585.968404][T31525] ? map_freeze+0x420/0x420 [ 1585.973103][T31525] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1585.979382][T31525] ? lockdep_hardirqs_on+0x98/0x150 [ 1585.984600][T31525] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1585.990781][T31525] ? __sys_bpf+0x5a5/0x890 [ 1585.995256][T31525] __sys_bpf+0x5ba/0x890 [ 1585.999516][T31525] ? bpf_link_show_fdinfo+0x390/0x390 [ 1586.004925][T31525] ? lock_chain_count+0x20/0x20 [ 1586.009789][T31525] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1586.015807][T31525] __x64_sys_bpf+0x7c/0x90 [ 1586.020261][T31525] do_syscall_64+0x55/0xa0 [ 1586.024691][T31525] ? clear_bhb_loop+0x40/0x90 [ 1586.029389][T31525] ? clear_bhb_loop+0x40/0x90 [ 1586.034274][T31525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1586.040186][T31525] RIP: 0033:0x7f893299c819 [ 1586.044622][T31525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.064335][T31525] RSP: 002b:00007f89338e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1586.072777][T31525] RAX: ffffffffffffffda RBX: 00007f8932c15fa0 RCX: 00007f893299c819 [ 1586.081040][T31525] RDX: 0000000000000094 RSI: 0000200000000d00 RDI: 0000000000000005 [ 1586.089032][T31525] RBP: 00007f89338e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.097018][T31525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.105096][T31525] R13: 00007f8932c16038 R14: 00007f8932c15fa0 R15: 00007ffddc966c78 [ 1586.113098][T31525] [ 1586.393559][T31525] syz.0.6620: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1586.410333][T31525] CPU: 0 PID: 31525 Comm: syz.0.6620 Not tainted syzkaller #0 [ 1586.417909][T31525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1586.428099][T31525] Call Trace: [ 1586.431491][T31525] [ 1586.434553][T31525] dump_stack_lvl+0x18c/0x250 [ 1586.439395][T31525] ? show_regs_print_info+0x20/0x20 [ 1586.444668][T31525] ? load_image+0x420/0x420 [ 1586.449216][T31525] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1586.455670][T31525] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1586.462221][T31525] warn_alloc+0x246/0x340 [ 1586.466626][T31525] ? zone_watermark_ok_safe+0x230/0x230 [ 1586.472336][T31525] ? __get_vm_area_node+0x356/0x370 [ 1586.477581][T31525] __vmalloc_node_range+0x393/0x1330 [ 1586.483005][T31525] ? trace_call_bpf+0xc3/0x6c0 [ 1586.487944][T31525] ? free_vm_area+0x50/0x50 [ 1586.492471][T31525] ? perf_trace_lock_acquire+0x104/0x410 [ 1586.498168][T31525] ? end_current_label_crit_section+0x170/0x170 [ 1586.504549][T31525] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1586.510158][T31525] __vmalloc+0x7a/0x90 [ 1586.514258][T31525] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1586.519843][T31525] bpf_prog_alloc_no_stats+0x47/0x440 [ 1586.525241][T31525] ? bpf_prog_alloc+0x2b/0x1a0 [ 1586.530237][T31525] bpf_prog_alloc+0x3d/0x1a0 [ 1586.534944][T31525] bpf_prog_load+0x6eb/0x1670 [ 1586.539649][T31525] ? map_freeze+0x420/0x420 [ 1586.544350][T31525] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1586.550543][T31525] ? lockdep_hardirqs_on+0x98/0x150 [ 1586.555850][T31525] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1586.562119][T31525] ? __sys_bpf+0x5a5/0x890 [ 1586.566563][T31525] __sys_bpf+0x5ba/0x890 [ 1586.570832][T31525] ? bpf_link_show_fdinfo+0x390/0x390 [ 1586.576239][T31525] ? lock_chain_count+0x20/0x20 [ 1586.581103][T31525] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1586.587115][T31525] __x64_sys_bpf+0x7c/0x90 [ 1586.592019][T31525] do_syscall_64+0x55/0xa0 [ 1586.596458][T31525] ? clear_bhb_loop+0x40/0x90 [ 1586.601256][T31525] ? clear_bhb_loop+0x40/0x90 [ 1586.606047][T31525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1586.612056][T31525] RIP: 0033:0x7f893299c819 [ 1586.616490][T31525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.636214][T31525] RSP: 002b:00007f89338e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1586.645041][T31525] RAX: ffffffffffffffda RBX: 00007f8932c15fa0 RCX: 00007f893299c819 [ 1586.653130][T31525] RDX: 0000000000000094 RSI: 0000200000000d00 RDI: 0000000000000005 [ 1586.661141][T31525] RBP: 00007f89338e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.669392][T31525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.677377][T31525] R13: 00007f8932c16038 R14: 00007f8932c15fa0 R15: 00007ffddc966c78 [ 1586.685389][T31525] [ 1586.694438][T31525] Mem-Info: [ 1586.697774][T31525] active_anon:8610 inactive_anon:0 isolated_anon:0 [ 1586.697774][T31525] active_file:18707 inactive_file:40520 isolated_file:0 [ 1586.697774][T31525] unevictable:768 dirty:145 writeback:0 [ 1586.697774][T31525] slab_reclaimable:11031 slab_unreclaimable:97603 [ 1586.697774][T31525] mapped:29897 shmem:1361 pagetables:631 [ 1586.697774][T31525] sec_pagetables:0 bounce:0 [ 1586.697774][T31525] kernel_misc_reclaimable:0 [ 1586.697774][T31525] free:1317009 free_pcp:14024 free_cma:0 [ 1586.905094][T31525] Node 0 active_anon:34640kB inactive_anon:0kB active_file:74828kB inactive_file:161880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119288kB dirty:580kB writeback:0kB shmem:4208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11492kB pagetables:2624kB sec_pagetables:0kB all_unreclaimable? no [ 1586.971240][T31525] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1586.986880][T31545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1587.045277][T31525] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.125714][T31525] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1587.147277][T31525] Node 0 DMA32 free:1355704kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:37300kB inactive_anon:0kB active_file:74928kB inactive_file:161056kB unevictable:1536kB writepending:676kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:37172kB local_pcp:17364kB free_cma:0kB [ 1587.217365][T31525] lowmem_reserve[]: 0 0 0 0 0 [ 1587.298512][T31525] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1587.335394][T31525] lowmem_reserve[]: 0 0 0 0 0 [ 1587.340230][T31525] Node 1 Normal free:3895956kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17580kB local_pcp:11020kB free_cma:0kB [ 1587.412535][T31552] tap3: tun_chr_ioctl cmd 1074025677 [ 1587.427746][T31552] tap3: linktype set to 778 [ 1587.444704][T31525] lowmem_reserve[]: 0 0 0 0 0 [ 1587.450111][T31525] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1587.505538][T31525] Node 0 DMA32: 1*4kB (E) 2*8kB (UE) 904*16kB (UME) 667*32kB (ME) 1741*64kB (UME) 1146*128kB (UME) 753*256kB (UM) 540*512kB (UME) 295*1024kB (UME) 74*2048kB (UME) 32*4096kB (UM) = 1347892kB [ 1587.534711][T31525] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1587.571481][T31525] Node 1 Normal: 99*4kB (UME) 51*8kB (UME) 35*16kB (UME) 72*32kB (UME) 23*64kB (UME) 7*128kB (UME) 1*256kB (M) 1*512kB (E) 0*1024kB 1*2048kB (E) 949*4096kB (M) = 3895956kB [ 1587.597322][T31525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1587.610792][T31525] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1587.620744][T31525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1587.631333][T31525] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1587.641415][T31525] 63930 total pagecache pages [ 1587.646590][T31525] 0 pages in swap cache [ 1587.650876][T31525] Free swap = 124996kB [ 1587.657000][T31525] Total swap = 124996kB [ 1587.661310][T31525] 2097051 pages RAM [ 1587.665853][T31525] 0 pages HighMem/MovableOnly [ 1587.670782][T31525] 416926 pages reserved [ 1587.679380][T31525] 0 pages cma reserved [ 1588.033603][T31568] netlink: 'syz.1.6631': attribute type 39 has an invalid length. [ 1588.107180][T31569] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6630'. [ 1588.194867][T31561] netlink: 'syz.1.6631': attribute type 39 has an invalid length. [ 1588.664121][T31580] netlink: 'syz.0.6636': attribute type 10 has an invalid length. [ 1589.689846][T31580] veth1_macvtap: left promiscuous mode [ 1590.019718][T31598] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.6640'. [ 1591.309702][T31617] netlink: 'syz.4.6644': attribute type 21 has an invalid length. [ 1591.418477][T31617] netlink: 'syz.4.6644': attribute type 10 has an invalid length. [ 1591.448591][T31617] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6644'. [ 1592.285142][T16097] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1593.662704][T31654] netlink: 'syz.4.6653': attribute type 29 has an invalid length. [ 1593.680447][T31654] netlink: 'syz.4.6653': attribute type 29 has an invalid length. [ 1593.700999][T31654] netlink: 'syz.4.6653': attribute type 29 has an invalid length. [ 1593.715397][T31654] netlink: 'syz.4.6653': attribute type 10 has an invalid length. [ 1593.731091][T31654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6653'. [ 1593.763242][T31654] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1593.775813][T31656] netlink: 'syz.1.6654': attribute type 27 has an invalid length. [ 1593.895829][T31656] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.6654'. [ 1593.983227][T31659] IPv6: NLM_F_CREATE should be specified when creating new route [ 1593.983351][T31659] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6655'. [ 1596.500405][T31682] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1597.735659][T31691] delete_channel: no stack [ 1597.799063][T31691] delete_channel: no stack [ 1600.788358][T31752] netlink: 'syz.0.6682': attribute type 3 has an invalid length. [ 1600.854625][T31752] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6682'. [ 1601.675871][T31769] netlink: 'syz.2.6684': attribute type 39 has an invalid length. [ 1602.866461][T31792] netlink: 'syz.1.6690': attribute type 3 has an invalid length. [ 1603.098187][T31799] netlink: 'syz.4.6693': attribute type 3 has an invalid length. [ 1603.147109][T31799] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6693'. [ 1603.334799][T31798] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6693'. [ 1606.983843][T31853] netlink: 'syz.4.6707': attribute type 27 has an invalid length. [ 1607.088548][T31853] netlink: 'syz.4.6707': attribute type 4 has an invalid length. [ 1607.204560][T31853] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6707'. [ 1608.445024][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.452487][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.004817][T31875] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1611.385153][T31912] netlink: 'syz.2.6723': attribute type 10 has an invalid length. [ 1613.782532][T31953] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.6735'. [ 1613.816269][T31953] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.6735'. [ 1614.247163][T31962] netlink: 'syz.1.6739': attribute type 7 has an invalid length. [ 1615.516565][T31983] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6744'. [ 1615.538802][T31984] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.6744'. [ 1616.372622][T31996] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6748'. [ 1616.552761][T32001] netlink: 'syz.2.6750': attribute type 10 has an invalid length. [ 1616.582493][T32001] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1619.224192][T32033] netlink: 'syz.4.6758': attribute type 9 has an invalid length. [ 1619.284777][T32033] netlink: 391 bytes leftover after parsing attributes in process `syz.4.6758'. [ 1620.192124][T32057] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.6766'. [ 1620.237507][T32057] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.6766'. [ 1621.720004][T32096] netlink: 'syz.1.6776': attribute type 3 has an invalid length. [ 1621.886014][T32095] netlink: 'syz.2.6775': attribute type 10 has an invalid length. [ 1621.894114][T32095] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.6775'. [ 1621.927330][T32096] netlink: 'syz.1.6776': attribute type 1 has an invalid length. [ 1622.064727][T32096] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.6776'. [ 1622.174127][T32100] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.6777'. [ 1622.319320][T32102] netlink: 'syz.4.6778': attribute type 27 has an invalid length. [ 1622.334839][T32102] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.6778'. [ 1622.511492][T32107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6779'. [ 1623.404851][T16081] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1624.362677][T32136] netlink: 'syz.1.6787': attribute type 10 has an invalid length. [ 1624.389481][T32136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6787'. [ 1624.454632][T32136] netlink: 'syz.1.6787': attribute type 10 has an invalid length. [ 1624.514413][T32136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6787'. [ 1625.781458][T32157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6793'. [ 1627.040777][T32196] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1627.077492][T32196] C: entered allmulticast mode [ 1627.083283][T32196] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1627.145133][T32197] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1627.184762][T32197] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1628.277768][T32215] netlink: 'syz.0.6808': attribute type 27 has an invalid length. [ 1628.313570][T32215] netlink: 'syz.0.6808': attribute type 4 has an invalid length. [ 1628.357308][T32215] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6808'. [ 1628.414714][T32219] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.6808'. [ 1629.878034][T32241] netlink: 'syz.0.6814': attribute type 27 has an invalid length. [ 1629.953242][T32241] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6814'. [ 1630.889573][T32249] netlink: 'syz.1.6817': attribute type 21 has an invalid length. [ 1631.332467][T32272] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6823'. [ 1631.724351][T32280] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6824'. [ 1632.510985][T32288] IPv6: Can't replace route, no match found [ 1632.525956][T32287] netlink: 'syz.4.6825': attribute type 10 has an invalid length. [ 1632.607685][T32287] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6825'. [ 1632.661541][T32287] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1634.136673][T32315] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6832'. [ 1635.008926][T32336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1635.018907][T32336] IPv6: NLM_F_CREATE should be set when creating new route [ 1635.031883][T32336] IPv6: NLM_F_CREATE should be set when creating new route [ 1635.043766][T32336] IPv6: NLM_F_CREATE should be set when creating new route [ 1635.439010][T32338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6836'. [ 1635.997681][T32352] syz.4.6839[32352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1636.117558][T32350] netlink: 'syz.4.6839': attribute type 10 has an invalid length. [ 1636.877992][T32350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1636.888985][T32350] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1641.195483][T32397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1641.202781][T32397] IPv6: NLM_F_CREATE should be set when creating new route [ 1643.837921][T32437] tap0: tun_chr_ioctl cmd 1074025680 [ 1645.064551][T32442] netlink: 'syz.1.6863': attribute type 21 has an invalid length. [ 1645.487051][T32457] netlink: 197544 bytes leftover after parsing attributes in process `syz.0.6867'. [ 1647.036699][T32483] netlink: 'syz.0.6876': attribute type 8 has an invalid length. [ 1647.652238][T32495] ================================================================== [ 1647.660478][T32495] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 1647.668426][T32495] Write of size 72 at addr ffff88801fbf4190 by task syz.1.6879/32495 [ 1647.676527][T32495] [ 1647.678970][T32495] CPU: 0 PID: 32495 Comm: syz.1.6879 Not tainted syzkaller #0 [ 1647.686545][T32495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1647.696620][T32495] Call Trace: [ 1647.700025][T32495] [ 1647.703267][T32495] dump_stack_lvl+0x18c/0x250 [ 1647.708098][T32495] ? __lock_acquire+0x7d40/0x7d40 [ 1647.713175][T32495] ? show_regs_print_info+0x20/0x20 [ 1647.718495][T32495] ? load_image+0x420/0x420 [ 1647.723169][T32495] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1647.728703][T32495] ? __virt_addr_valid+0x18c/0x540 [ 1647.733883][T32495] ? __virt_addr_valid+0x469/0x540 [ 1647.739062][T32495] print_report+0xa8/0x210 [ 1647.743536][T32495] ? __bpf_get_stackid+0x6bf/0x900 [ 1647.748791][T32495] kasan_report+0x117/0x150 [ 1647.753435][T32495] ? __bpf_get_stackid+0x6bf/0x900 [ 1647.758611][T32495] kasan_check_range+0x241/0x290 [ 1647.763702][T32495] ? __bpf_get_stackid+0x6bf/0x900 [ 1647.768870][T32495] __asan_memcpy+0x40/0x70 [ 1647.773330][T32495] __bpf_get_stackid+0x6bf/0x900 [ 1647.778409][T32495] bpf_get_stackid_pe+0x343/0x410 [ 1647.783497][T32495] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 1647.789006][T32495] bpf_overflow_handler+0x1fc/0x510 [ 1647.794272][T32495] ? bpf_overflow_handler+0xde/0x510 [ 1647.799615][T32495] ? tp_perf_event_destroy+0x20/0x20 [ 1647.804951][T32495] ? perf_trace_preemptirq_template+0xac/0x330 [ 1647.811207][T32495] ? __perf_event_account_interrupt+0x187/0x280 [ 1647.817595][T32495] __perf_event_overflow+0x447/0x630 [ 1647.823042][T32495] perf_swevent_event+0x319/0x570 [ 1647.828128][T32495] ? perf_tp_event+0x1520/0x1520 [ 1647.833132][T32495] ___perf_sw_event+0x4a7/0x730 [ 1647.838130][T32495] ? ___perf_sw_event+0x199/0x730 [ 1647.843202][T32495] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1647.849670][T32495] ? __lock_acquire+0x1347/0x7d40 [ 1647.854745][T32495] ? rep_movs_alternative+0x13/0x90 [ 1647.860011][T32495] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1647.866043][T32495] ? lock_chain_count+0x20/0x20 [ 1647.870949][T32495] __perf_sw_event+0x139/0x270 [ 1647.875772][T32495] do_user_addr_fault+0x123e/0x12c0 [ 1647.881031][T32495] ? rcu_is_watching+0x15/0xb0 [ 1647.885937][T32495] exc_page_fault+0x64/0x100 [ 1647.890579][T32495] asm_exc_page_fault+0x26/0x30 [ 1647.895471][T32495] RIP: 0010:rep_movs_alternative+0x13/0x90 [ 1647.901320][T32495] Code: b6 48 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 [ 1647.920973][T32495] RSP: 0018:ffffc900100cfd50 EFLAGS: 00050202 [ 1647.927105][T32495] RAX: ffffffff842a1e01 RBX: 0000000000000004 RCX: 0000000000000004 [ 1647.935119][T32495] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900100cfdc0 [ 1647.943110][T32495] RBP: ffffc900100cfe38 R08: 0000000000000003 R09: 0000000000000004 [ 1647.951101][T32495] R10: dffffc0000000000 R11: fffff52002019fb8 R12: 0000000000000004 [ 1647.959089][T32495] R13: 0000000000000004 R14: ffffc900100cfdc0 R15: 0000000000000000 [ 1647.967083][T32495] ? _copy_from_user+0x11/0xe0 [ 1647.971877][T32495] _copy_from_user+0x8b/0xe0 [ 1647.976487][T32495] udp_lib_setsockopt+0x200/0x8a0 [ 1647.981540][T32495] ? udp_destroy_sock+0x2c0/0x2c0 [ 1647.986581][T32495] ? __fget_files+0x28/0x4b0 [ 1647.991214][T32495] ? __fget_files+0x28/0x4b0 [ 1647.995831][T32495] udp_setsockopt+0x77/0xb0 [ 1648.000350][T32495] ? udp_set_csum+0x6f0/0x6f0 [ 1648.005131][T32495] ? sock_common_recvmsg+0x190/0x190 [ 1648.010442][T32495] do_sock_setsockopt+0x175/0x1a0 [ 1648.015479][T32495] ? __fdget+0x180/0x210 [ 1648.019739][T32495] __x64_sys_setsockopt+0x182/0x200 [ 1648.024960][T32495] do_syscall_64+0x55/0xa0 [ 1648.029399][T32495] ? clear_bhb_loop+0x40/0x90 [ 1648.034088][T32495] ? clear_bhb_loop+0x40/0x90 [ 1648.038786][T32495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1648.044703][T32495] RIP: 0033:0x7f740a99c819 [ 1648.049128][T32495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.068752][T32495] RSP: 002b:00007f740b881028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1648.077287][T32495] RAX: ffffffffffffffda RBX: 00007f740ac16090 RCX: 00007f740a99c819 [ 1648.085269][T32495] RDX: 0000000000000021 RSI: 0000000000000011 RDI: 000000000000000d [ 1648.093259][T32495] RBP: 00007f740aa32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1648.101242][T32495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1648.109225][T32495] R13: 00007f740ac16128 R14: 00007f740ac16090 R15: 00007ffe0e955998 [ 1648.117233][T32495] [ 1648.120264][T32495] [ 1648.122777][T32495] Allocated by task 32495: [ 1648.127196][T32495] kasan_set_track+0x4e/0x70 [ 1648.131806][T32495] __kasan_kmalloc+0x8f/0xa0 [ 1648.136418][T32495] __kmalloc_node+0xb4/0x230 [ 1648.141119][T32495] bpf_map_area_alloc+0x5e/0x110 [ 1648.146076][T32495] prealloc_elems_and_freelist+0x86/0x1c0 [ 1648.151805][T32495] stack_map_alloc+0x33a/0x4c0 [ 1648.156588][T32495] map_create+0x877/0x12f0 [ 1648.161021][T32495] __sys_bpf+0x651/0x890 [ 1648.165358][T32495] __x64_sys_bpf+0x7c/0x90 [ 1648.169878][T32495] do_syscall_64+0x55/0xa0 [ 1648.174388][T32495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1648.181336][T32495] [ 1648.183666][T32495] Last potentially related work creation: [ 1648.189391][T32495] kasan_save_stack+0x3e/0x60 [ 1648.194098][T32495] __kasan_record_aux_stack+0xaf/0xc0 [ 1648.199486][T32495] call_rcu+0x153/0x950 [ 1648.203672][T32495] nf_unregister_net_hooks+0xcb/0x130 [ 1648.209177][T32495] cleanup_net+0x70a/0xbb0 [ 1648.213618][T32495] process_scheduled_works+0xa5d/0x15d0 [ 1648.219190][T32495] worker_thread+0xa55/0xfc0 [ 1648.223868][T32495] kthread+0x2fa/0x390 [ 1648.227950][T32495] ret_from_fork+0x48/0x80 [ 1648.232379][T32495] ret_from_fork_asm+0x11/0x20 [ 1648.237240][T32495] [ 1648.239571][T32495] Second to last potentially related work creation: [ 1648.246192][T32495] kasan_save_stack+0x3e/0x60 [ 1648.250887][T32495] __kasan_record_aux_stack+0xaf/0xc0 [ 1648.256290][T32495] call_rcu+0x153/0x950 [ 1648.260481][T32495] nf_unregister_net_hooks+0xcb/0x130 [ 1648.265997][T32495] nf_ct_netns_put+0x36d/0x520 [ 1648.270952][T32495] nf_conncount_destroy+0x41/0x150 [ 1648.276190][T32495] ovs_ct_exit+0x9c/0x200 [ 1648.280533][T32495] ovs_exit_net+0xed/0x7a0 [ 1648.285054][T32495] cleanup_net+0x70a/0xbb0 [ 1648.289506][T32495] process_scheduled_works+0xa5d/0x15d0 [ 1648.295152][T32495] worker_thread+0xa55/0xfc0 [ 1648.299756][T32495] kthread+0x2fa/0x390 [ 1648.303827][T32495] ret_from_fork+0x48/0x80 [ 1648.308380][T32495] ret_from_fork_asm+0x11/0x20 [ 1648.313157][T32495] [ 1648.315487][T32495] The buggy address belongs to the object at ffff88801fbf4180 [ 1648.315487][T32495] which belongs to the cache kmalloc-cg-64 of size 64 [ 1648.329823][T32495] The buggy address is located 16 bytes inside of [ 1648.329823][T32495] allocated 40-byte region [ffff88801fbf4180, ffff88801fbf41a8) [ 1648.343888][T32495] [ 1648.346311][T32495] The buggy address belongs to the physical page: [ 1648.352728][T32495] page:ffffea00007efd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1fbf4 [ 1648.362975][T32495] memcg:ffff888031b87e01 [ 1648.367217][T32495] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1648.374764][T32495] page_type: 0xffffffff() [ 1648.379100][T32495] raw: 00fff00000000800 ffff888017c4da00 ffffea0001d35740 dead000000000004 [ 1648.387737][T32495] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888031b87e01 [ 1648.396341][T32495] page dumped because: kasan: bad access detected [ 1648.402763][T32495] page_owner tracks the page as allocated [ 1648.408481][T32495] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 7792, tgid 7791 (syz.2.509), ts 199680072126, free_ts 199619414415 [ 1648.426641][T32495] post_alloc_hook+0x1c1/0x200 [ 1648.431616][T32495] get_page_from_freelist+0x1951/0x19e0 [ 1648.437267][T32495] __alloc_pages+0x1f0/0x460 [ 1648.441862][T32495] alloc_slab_page+0x5d/0x160 [ 1648.446653][T32495] new_slab+0x87/0x2d0 [ 1648.450756][T32495] ___slab_alloc+0xc5d/0x12f0 [ 1648.455484][T32495] __kmem_cache_alloc_node+0x19e/0x250 [ 1648.461070][T32495] __kmalloc_node+0xa4/0x230 [ 1648.465691][T32495] kvmalloc_node+0x70/0x180 [ 1648.470207][T32495] __nf_hook_entries_try_shrink+0x310/0x6d0 [ 1648.476131][T32495] __nf_unregister_net_hook+0x4e1/0x6e0 [ 1648.481706][T32495] nf_unregister_net_hooks+0xcb/0x130 [ 1648.487109][T32495] nf_ct_netns_put+0x36d/0x520 [ 1648.491891][T32495] nf_conncount_destroy+0x41/0x150 [ 1648.497015][T32495] ovs_ct_exit+0x9c/0x200 [ 1648.501370][T32495] ovs_exit_net+0xed/0x7a0 [ 1648.505805][T32495] page last free stack trace: [ 1648.510480][T32495] free_unref_page_prepare+0x7b2/0x8c0 [ 1648.515954][T32495] free_unref_page+0x32/0x2e0 [ 1648.520729][T32495] __unfreeze_partials+0x1cf/0x210 [ 1648.525850][T32495] put_cpu_partial+0x17c/0x250 [ 1648.530618][T32495] __slab_free+0x319/0x400 [ 1648.535066][T32495] qlist_free_all+0x75/0xd0 [ 1648.539586][T32495] kasan_quarantine_reduce+0x143/0x160 [ 1648.545062][T32495] __kasan_slab_alloc+0x22/0x80 [ 1648.549970][T32495] slab_post_alloc_hook+0x6e/0x4b0 [ 1648.555185][T32495] kmem_cache_alloc+0x11a/0x2d0 [ 1648.560045][T32495] getname_flags+0xbb/0x500 [ 1648.564564][T32495] vfs_fstatat+0x111/0x1b0 [ 1648.568989][T32495] __x64_sys_newfstatat+0x149/0x1f0 [ 1648.574287][T32495] do_syscall_64+0x55/0xa0 [ 1648.578722][T32495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1648.584890][T32495] [ 1648.587313][T32495] Memory state around the buggy address: [ 1648.592947][T32495] ffff88801fbf4080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1648.601108][T32495] ffff88801fbf4100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1648.609356][T32495] >ffff88801fbf4180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1648.617419][T32495] ^ [ 1648.622796][T32495] ffff88801fbf4200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1648.630865][T32495] ffff88801fbf4280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1648.639031][T32495] ================================================================== [ 1648.647100][T32495] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1648.654302][T32495] CPU: 0 PID: 32495 Comm: syz.1.6879 Not tainted syzkaller #0 [ 1648.661861][T32495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1648.671929][T32495] Call Trace: [ 1648.675217][T32495] [ 1648.678163][T32495] dump_stack_lvl+0x18c/0x250 [ 1648.682866][T32495] ? show_regs_print_info+0x20/0x20 [ 1648.688089][T32495] ? load_image+0x420/0x420 [ 1648.692616][T32495] panic+0x2dc/0x730 [ 1648.696543][T32495] ? __lock_acquire+0x7d40/0x7d40 [ 1648.701590][T32495] ? bpf_jit_dump+0xd0/0xd0 [ 1648.706109][T32495] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1648.712140][T32495] ? _raw_spin_unlock+0x40/0x40 [ 1648.717127][T32495] ? __bpf_get_stackid+0x6bf/0x900 [ 1648.722263][T32495] check_panic_on_warn+0x84/0xa0 [ 1648.727220][T32495] ? __bpf_get_stackid+0x6bf/0x900 [ 1648.732344][T32495] end_report+0x6f/0x130 [ 1648.736597][T32495] kasan_report+0x128/0x150 [ 1648.741116][T32495] ? __bpf_get_stackid+0x6bf/0x900 [ 1648.746247][T32495] kasan_check_range+0x241/0x290 [ 1648.751284][T32495] ? __bpf_get_stackid+0x6bf/0x900 [ 1648.756494][T32495] __asan_memcpy+0x40/0x70 [ 1648.760925][T32495] __bpf_get_stackid+0x6bf/0x900 [ 1648.765879][T32495] bpf_get_stackid_pe+0x343/0x410 [ 1648.771014][T32495] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 1648.776506][T32495] bpf_overflow_handler+0x1fc/0x510 [ 1648.781987][T32495] ? bpf_overflow_handler+0xde/0x510 [ 1648.787289][T32495] ? tp_perf_event_destroy+0x20/0x20 [ 1648.792695][T32495] ? perf_trace_preemptirq_template+0xac/0x330 [ 1648.798876][T32495] ? __perf_event_account_interrupt+0x187/0x280 [ 1648.805133][T32495] __perf_event_overflow+0x447/0x630 [ 1648.810442][T32495] perf_swevent_event+0x319/0x570 [ 1648.815487][T32495] ? perf_tp_event+0x1520/0x1520 [ 1648.820537][T32495] ___perf_sw_event+0x4a7/0x730 [ 1648.825768][T32495] ? ___perf_sw_event+0x199/0x730 [ 1648.830804][T32495] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1648.837237][T32495] ? __lock_acquire+0x1347/0x7d40 [ 1648.842273][T32495] ? rep_movs_alternative+0x13/0x90 [ 1648.847495][T32495] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1648.853483][T32495] ? lock_chain_count+0x20/0x20 [ 1648.858348][T32495] __perf_sw_event+0x139/0x270 [ 1648.863128][T32495] do_user_addr_fault+0x123e/0x12c0 [ 1648.868341][T32495] ? rcu_is_watching+0x15/0xb0 [ 1648.873124][T32495] exc_page_fault+0x64/0x100 [ 1648.877736][T32495] asm_exc_page_fault+0x26/0x30 [ 1648.882598][T32495] RIP: 0010:rep_movs_alternative+0x13/0x90 [ 1648.888440][T32495] Code: b6 48 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 [ 1648.908077][T32495] RSP: 0018:ffffc900100cfd50 EFLAGS: 00050202 [ 1648.914175][T32495] RAX: ffffffff842a1e01 RBX: 0000000000000004 RCX: 0000000000000004 [ 1648.922157][T32495] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900100cfdc0 [ 1648.930145][T32495] RBP: ffffc900100cfe38 R08: 0000000000000003 R09: 0000000000000004 [ 1648.938215][T32495] R10: dffffc0000000000 R11: fffff52002019fb8 R12: 0000000000000004 [ 1648.946286][T32495] R13: 0000000000000004 R14: ffffc900100cfdc0 R15: 0000000000000000 [ 1648.954275][T32495] ? _copy_from_user+0x11/0xe0 [ 1648.959157][T32495] _copy_from_user+0x8b/0xe0 [ 1648.963766][T32495] udp_lib_setsockopt+0x200/0x8a0 [ 1648.968813][T32495] ? udp_destroy_sock+0x2c0/0x2c0 [ 1648.973859][T32495] ? __fget_files+0x28/0x4b0 [ 1648.978470][T32495] ? __fget_files+0x28/0x4b0 [ 1648.983778][T32495] udp_setsockopt+0x77/0xb0 [ 1648.988303][T32495] ? udp_set_csum+0x6f0/0x6f0 [ 1648.992993][T32495] ? sock_common_recvmsg+0x190/0x190 [ 1648.998301][T32495] do_sock_setsockopt+0x175/0x1a0 [ 1649.003425][T32495] ? __fdget+0x180/0x210 [ 1649.007683][T32495] __x64_sys_setsockopt+0x182/0x200 [ 1649.012892][T32495] do_syscall_64+0x55/0xa0 [ 1649.017318][T32495] ? clear_bhb_loop+0x40/0x90 [ 1649.022010][T32495] ? clear_bhb_loop+0x40/0x90 [ 1649.026849][T32495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1649.032760][T32495] RIP: 0033:0x7f740a99c819 [ 1649.037194][T32495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1649.056984][T32495] RSP: 002b:00007f740b881028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1649.065410][T32495] RAX: ffffffffffffffda RBX: 00007f740ac16090 RCX: 00007f740a99c819 [ 1649.073396][T32495] RDX: 0000000000000021 RSI: 0000000000000011 RDI: 000000000000000d [ 1649.081387][T32495] RBP: 00007f740aa32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1649.089370][T32495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1649.098314][T32495] R13: 00007f740ac16128 R14: 00007f740ac16090 R15: 00007ffe0e955998 [ 1649.106306][T32495] [ 1649.109462][T32495] Kernel Offset: disabled [ 1649.113789][T32495] Rebooting in 86400 seconds..