last executing test programs: 3.422128802s ago: executing program 3 (id=311): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3e) socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, 0x0, 0x14) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$kcm(0x10, 0xd, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x807, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x3, 0x100000001}, 0x200, 0x0, 0x0, 0x7, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) 2.108384393s ago: executing program 3 (id=319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7069d3c5ca9e3b21cc6d"], 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400e3ffb7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00ffffffb07b26b9b224aae6ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)}, 0x20000004) r6 = socket$kcm(0x2, 0x2, 0x0) close(r6) setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) recvmsg(r6, &(0x7f0000000c80)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000580)=""/208, 0xd0}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000900)=""/22, 0x16}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000a80)=""/228, 0xe4}], 0x5, &(0x7f0000000c00)=""/107, 0x6b}, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r9 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)}, 0x900000000000000) socket$kcm(0xa, 0x2, 0x0) 1.972865647s ago: executing program 1 (id=320): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022000b48f1f403c5c0de7af90124fc60", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1.654883208s ago: executing program 3 (id=324): socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200240, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000400)=0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10004, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90424fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x8001, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={r8}, 0x4) r9 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(r9, 0x29, 0x3b, 0x0, 0x0) 1.535870251s ago: executing program 1 (id=326): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000050000000001"], 0xfdef) 1.423225735s ago: executing program 1 (id=327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x7, r1}, 0x38) 1.377660136s ago: executing program 0 (id=328): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41b2cc32b38d3440c6942cb76cab30000000000000000000200000000000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.350161677s ago: executing program 3 (id=329): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000740)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0015400600000003080000004dcf5c0468c18ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a502581ccca9e020000000100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a00"/216, 0xd8}], 0x1}, 0x30008850) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.331266698s ago: executing program 1 (id=330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91102c000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x83d00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000e00)='\\h', 0x2}], 0x1, &(0x7f00000002c0)=ANY=[], 0x4}, 0x8840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000ff0f000000000000000000000000000095000000000000004daa0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01", 0x57}], 0x1}, 0xff0f000020000080) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00'}) perf_event_open(0x0, 0x0, 0x9, r1, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xa5, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f00000004c0), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="ea00000000000000dfff00"/20, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0200"/28], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x3, 0x1, 0xbd12, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700), &(0x7f0000000780)=[0x0], 0x0, 0xaa, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r5], 0x0, 0x5e, 0x0, 0x1}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r7, @ANYRES32=r1, @ANYBLOB="ff0157a30000000035be99bc8acec7f723407cdb89919beffc61434d74c4e2dbf31e7ccc193f9623306edc6f27961e5827b2e0cec73563adc6b8d6ca80cba4c6e5975dc1a408a362616aff48c914dfdbc709082dc2f66468674032c53a736b23eaea988ff94c37998dd95be3a3640c9e52d99730bae8c3015a81dbce1bcbc254f15478faa5a231750b5fe443a34a278ad88b566be2c8f9bf68", @ANYBLOB="954211e49bb2a65e6e83b2c1325f6616801729bf5cedb06d8a0c81ce10436feafa700bf51e3e10037a10d460fc31cb9abc310f91d962bdf87b6c578beb30372557c8e3b15b8a4ba44031d225720be34a6be0f04ef21f18a1b453b5580eb635082a60599b59f54cc598110db25f7f14aa47330238232f9376616e750694d0ebe36a4bbbb6ac397dd454ce1718c2da3e7628d1b0df5d3a735440ea8329782281158dc6fda633c5bc68a13354811b9f009103064600e1cb8f7533619de1f6eb74b5928eda9569abfa723db1113c50fe", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES64=r4], 0x20) 1.27758508s ago: executing program 0 (id=331): socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000006007000000071c05"], 0x30}, 0x40880) 1.170433393s ago: executing program 0 (id=332): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112b9000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 981.487289ms ago: executing program 2 (id=333): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x1, 0x106) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 876.358062ms ago: executing program 0 (id=334): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x5209188a11074b59) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fc"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2019c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6a7, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x4c, &(0x7f0000000500), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x255e35d075133d71, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000700)=[{&(0x7f0000000740)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000d6000000000000809508007b0000000085000000130000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x4}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) 762.151786ms ago: executing program 2 (id=335): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe8000000000000c875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4) 658.911809ms ago: executing program 2 (id=336): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fec0000000070000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 472.745246ms ago: executing program 2 (id=337): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900110000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d700000010"], 0x10b8}, 0x8000) 433.671716ms ago: executing program 1 (id=338): socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200240, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000400)=0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10004, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90424fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x8001, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={r8}, 0x4) r9 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x6, &(0x7f0000000040), 0x3) setsockopt$sock_attach_bpf(r9, 0x29, 0x3b, 0x0, 0x0) 392.745928ms ago: executing program 2 (id=339): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x4000000000, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x102, 0x0, &(0x7f0000000280)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 318.254ms ago: executing program 3 (id=340): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x9}, @jmp={0x5, 0x1, 0x9, 0xb, 0x5, 0x40}, @call={0x85, 0x0, 0x0, 0x7c}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x6, 0x3d, &(0x7f00000001c0)=""/61, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x10, 0x1ea, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000280)=[{0x3, 0x3, 0x9, 0x2}, {0x1, 0x5, 0x5, 0x3}, {0x1, 0x5, 0x6, 0x2}, {0x2, 0x3, 0x8, 0x6}, {0x4, 0x3, 0x0, 0x4}, {0x4, 0x5, 0x1, 0x9}, {0x5, 0x5, 0x1ff, 0xb}, {0x4, 0x3, 0xc, 0xa}], 0x10, 0x4}, 0x94) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r1, r2, 0x0, r3}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020234000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000010200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 294.925471ms ago: executing program 3 (id=341): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) r4 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='&'], 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4000, r4}, 0x18) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0xf2, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}, 0x10000) sendmsg$kcm(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)="949f", 0x2}], 0x1}, 0x4004000) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) 288.845691ms ago: executing program 0 (id=342): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x118}, 0x0) 109.398647ms ago: executing program 0 (id=343): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000e300000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4022, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x0, 0x9, 0x5, 0x0, 0x11, 0x0, 0x0, 0x4, 0x0, 0x10000}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1049d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002bc0)={0x18, 0xf, &(0x7f0000000280)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x7}, @tail_call, @jmp={0x5, 0x0, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x9, 0x1, 0x9, 0xfffffffffffffffc, 0x4}, @call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000300)='GPL\x00', 0x0, 0x1000, &(0x7f0000001b40)=""/4096, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002b40)={0x3, 0xf, 0x7d, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[0xffffffffffffffff, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x80}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002c80)={r3, r0}, 0xc) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r11}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 50.913959ms ago: executing program 1 (id=344): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10, 0xc8, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800f5ffffff0000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) 0s ago: executing program 2 (id=345): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0xe, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x7}]}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x95d6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffd9e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xb, 0x7f, 0x43595a35, 0x0, 0x1800, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000300)=r11) write$cgroup_devices(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x2, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000880)='syzkaller\x00', 0xff, 0x10, &(0x7f00000008c0)=""/16, 0x40f00, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x7, 0xfd}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x9, 0xc, 0xb}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a00)=[0xffffffffffffffff, r6], &(0x7f0000000a40)=[{0x3, 0x4, 0xf}, {0x1, 0x5, 0xb, 0x9}, {0x0, 0x1, 0x1, 0x8}, {0x2, 0x1, 0xf, 0x4}, {0x5, 0x2, 0x4, 0x4}, {0x5, 0x3, 0x9, 0xc}, {0x2, 0x4, 0xd, 0xa}], 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 64.140287][ T5764] cgroup: Unknown subsys name 'net' [ 64.240869][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.591923][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.973768][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.984570][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.993741][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.001910][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.023873][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.032618][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.040555][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.044745][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.048703][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.075432][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.075724][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.090831][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.098204][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.105580][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.114518][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.121938][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.124232][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.129713][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.143551][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.144095][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.159163][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.166654][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.166909][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.184156][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.563880][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 67.676414][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 67.687366][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 67.726897][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 67.738628][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.746425][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.753693][ T5776] bridge_slave_0: entered allmulticast mode [ 67.760759][ T5776] bridge_slave_0: entered promiscuous mode [ 67.804414][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.811550][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.820980][ T5776] bridge_slave_1: entered allmulticast mode [ 67.827965][ T5776] bridge_slave_1: entered promiscuous mode [ 67.897303][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.908354][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.978429][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.985700][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.992864][ T5778] bridge_slave_0: entered allmulticast mode [ 67.999880][ T5778] bridge_slave_0: entered promiscuous mode [ 68.022052][ T5776] team0: Port device team_slave_0 added [ 68.028806][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.036053][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.043186][ T5778] bridge_slave_1: entered allmulticast mode [ 68.050848][ T5778] bridge_slave_1: entered promiscuous mode [ 68.068350][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.075526][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.082692][ T5777] bridge_slave_0: entered allmulticast mode [ 68.090317][ T5777] bridge_slave_0: entered promiscuous mode [ 68.097942][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.105527][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.112744][ T5777] bridge_slave_1: entered allmulticast mode [ 68.119624][ T5777] bridge_slave_1: entered promiscuous mode [ 68.128205][ T5776] team0: Port device team_slave_1 added [ 68.161575][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.169093][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.176801][ T5779] bridge_slave_0: entered allmulticast mode [ 68.183739][ T5779] bridge_slave_0: entered promiscuous mode [ 68.192006][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.199363][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.206728][ T5779] bridge_slave_1: entered allmulticast mode [ 68.213580][ T5779] bridge_slave_1: entered promiscuous mode [ 68.248720][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.260852][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.299869][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.310695][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.317991][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.344423][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.369719][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.380690][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.392852][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.400688][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.427240][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.447172][ T5778] team0: Port device team_slave_0 added [ 68.455449][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.476747][ T5778] team0: Port device team_slave_1 added [ 68.529766][ T5779] team0: Port device team_slave_0 added [ 68.538492][ T5777] team0: Port device team_slave_0 added [ 68.567870][ T5776] hsr_slave_0: entered promiscuous mode [ 68.575784][ T5776] hsr_slave_1: entered promiscuous mode [ 68.584409][ T5779] team0: Port device team_slave_1 added [ 68.591530][ T5777] team0: Port device team_slave_1 added [ 68.600364][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.607621][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.634429][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.687583][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.694703][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.720889][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.771661][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.778752][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.804718][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.817793][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.824997][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.852059][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.876295][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.883279][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.910406][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.923232][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.930365][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.956511][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.034086][ T5778] hsr_slave_0: entered promiscuous mode [ 69.040341][ T5778] hsr_slave_1: entered promiscuous mode [ 69.047495][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.055569][ T5778] Cannot create hsr debugfs directory [ 69.070784][ T5779] hsr_slave_0: entered promiscuous mode [ 69.079838][ T5779] hsr_slave_1: entered promiscuous mode [ 69.086303][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.093857][ T5779] Cannot create hsr debugfs directory [ 69.114743][ T5777] hsr_slave_0: entered promiscuous mode [ 69.121190][ T5777] hsr_slave_1: entered promiscuous mode [ 69.127989][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.135773][ T5777] Cannot create hsr debugfs directory [ 69.205183][ T5780] Bluetooth: hci0: command tx timeout [ 69.208985][ T5785] Bluetooth: hci2: command tx timeout [ 69.216870][ T5784] Bluetooth: hci1: command tx timeout [ 69.284351][ T5784] Bluetooth: hci3: command tx timeout [ 69.494655][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.508880][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.518933][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.530105][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.573578][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.589692][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.601784][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.620903][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.693822][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.720348][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.729765][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.742699][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.829221][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.841068][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.852632][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.870558][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.908074][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.962799][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.973290][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.003111][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.010463][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.036853][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.052272][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.059604][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.086361][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.093492][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.123550][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.130705][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.191130][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.241405][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.285775][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.292927][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.312383][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.319728][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.343401][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.407421][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.467885][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.475388][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.507764][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.515050][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.636072][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.788072][ T5777] veth0_vlan: entered promiscuous mode [ 70.835718][ T5777] veth1_vlan: entered promiscuous mode [ 70.860731][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.981204][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.001093][ T5776] veth0_vlan: entered promiscuous mode [ 71.028893][ T5776] veth1_vlan: entered promiscuous mode [ 71.054663][ T5777] veth0_macvtap: entered promiscuous mode [ 71.091084][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.111948][ T5778] veth0_vlan: entered promiscuous mode [ 71.119400][ T5777] veth1_macvtap: entered promiscuous mode [ 71.138400][ T5776] veth0_macvtap: entered promiscuous mode [ 71.151354][ T5776] veth1_macvtap: entered promiscuous mode [ 71.174907][ T5778] veth1_vlan: entered promiscuous mode [ 71.185599][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.199789][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.230928][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.241989][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.251644][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.260505][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.284167][ T5784] Bluetooth: hci0: command tx timeout [ 71.295202][ T5784] Bluetooth: hci1: command tx timeout [ 71.300673][ T5784] Bluetooth: hci2: command tx timeout [ 71.313617][ T5778] veth0_macvtap: entered promiscuous mode [ 71.325044][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.337060][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.348454][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.364962][ T5784] Bluetooth: hci3: command tx timeout [ 71.391254][ T5778] veth1_macvtap: entered promiscuous mode [ 71.402062][ T5779] veth0_vlan: entered promiscuous mode [ 71.410125][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.420908][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.433499][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.460491][ T5779] veth1_vlan: entered promiscuous mode [ 71.488936][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.498228][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.507396][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.516546][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.560008][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.570107][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.571088][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.582428][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.601236][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.612972][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.625364][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.669557][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.680561][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.691378][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.697985][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.700809][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.717656][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.728793][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.755067][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.767474][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.776880][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.785932][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.797706][ T5779] veth0_macvtap: entered promiscuous mode [ 71.809887][ T5779] veth1_macvtap: entered promiscuous mode [ 71.817656][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.839287][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.896780][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.909351][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.923102][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.935711][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.945805][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.956479][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.969844][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.997804][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.009776][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.022883][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.033631][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.043873][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.054585][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.073294][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.093757][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.110525][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.112098][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.144128][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.152875][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.179581][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.191136][ T5838] Zero length message leads to an empty skb [ 72.237974][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.263677][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.326097][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.334879][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.383746][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.411957][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.442100][ T5838] netlink: 'syz.3.4': attribute type 9 has an invalid length. [ 72.450628][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.451329][ T5838] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4'. [ 72.460342][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.712701][ T5842] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1'. [ 72.760801][ T5840] netlink: 'syz.3.4': attribute type 9 has an invalid length. [ 72.780501][ T5840] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.4'. [ 72.793651][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.820561][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.064032][ C0] hrtimer: interrupt took 120967 ns [ 73.203322][ T5846] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.398263][ T5784] Bluetooth: hci1: command tx timeout [ 73.403731][ T5785] Bluetooth: hci2: command tx timeout [ 73.409383][ T5785] Bluetooth: hci0: command tx timeout [ 73.447888][ T5780] Bluetooth: hci3: command tx timeout [ 73.540367][ T5852] netlink: 'syz.3.6': attribute type 5 has an invalid length. [ 73.627610][ T5855] netlink: 'syz.2.8': attribute type 4 has an invalid length. [ 73.654598][ T5856] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.6'. [ 74.114711][ T5863] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11'. [ 74.423614][ T5868] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.13'. [ 74.604697][ T5869] netlink: 'syz.0.14': attribute type 9 has an invalid length. [ 74.612338][ T5869] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.14'. [ 74.854788][ T5876] netlink: 'syz.0.14': attribute type 9 has an invalid length. [ 74.913435][ T5876] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.14'. [ 75.024596][ T5878] netlink: 'syz.1.16': attribute type 10 has an invalid length. [ 75.181483][ T5883] netlink: set zone limit has 8 unknown bytes [ 75.218681][ T5878] team0: Device vxcan1 is of different type [ 75.280524][ T5881] netlink: 'syz.1.16': attribute type 21 has an invalid length. [ 75.312069][ T5882] netlink: 'syz.1.16': attribute type 21 has an invalid length. [ 75.400646][ T5888] netlink: 'syz.0.18': attribute type 5 has an invalid length. [ 75.430135][ T5878] syz.1.16 (5878) used greatest stack depth: 17576 bytes left [ 75.444055][ T5780] Bluetooth: hci0: command tx timeout [ 75.449667][ T5780] Bluetooth: hci1: command tx timeout [ 75.455226][ T5785] Bluetooth: hci2: command tx timeout [ 75.486880][ T5890] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.18'. [ 75.524737][ T5785] Bluetooth: hci3: command tx timeout [ 76.979451][ T5924] team0: Device vxcan1 is of different type [ 77.053841][ T5930] warning: `syz.3.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.164644][ T5936] macvlan1: entered promiscuous mode [ 77.625204][ T5955] delete_channel: no stack [ 77.790862][ T5960] __nla_validate_parse: 7 callbacks suppressed [ 77.790910][ T5960] netlink: 128 bytes leftover after parsing attributes in process `syz.2.44'. [ 77.855340][ T5960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.997764][ T5968] validate_nla: 6 callbacks suppressed [ 77.997827][ T5968] netlink: 'syz.0.48': attribute type 10 has an invalid length. [ 78.176647][ T5968] team0: Device vxcan1 is of different type [ 78.232476][ T5971] netlink: 'syz.3.49': attribute type 5 has an invalid length. [ 78.242734][ T5973] netlink: 'syz.0.48': attribute type 21 has an invalid length. [ 78.257565][ T5976] netlink: 'syz.0.48': attribute type 21 has an invalid length. [ 78.269798][ T5975] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.49'. [ 78.499901][ T5980] netlink: 'syz.2.51': attribute type 10 has an invalid length. [ 78.573069][ T5980] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 79.247473][ T5997] netlink: 'syz.2.56': attribute type 9 has an invalid length. [ 79.299103][ T5997] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.56'. [ 79.390549][ T6009] netlink: 'syz.0.59': attribute type 21 has an invalid length. [ 79.409385][ T6009] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.515049][ T6007] netlink: 14 bytes leftover after parsing attributes in process `syz.1.58'. [ 79.628741][ T6010] netlink: 'syz.2.56': attribute type 9 has an invalid length. [ 79.640874][ T6014] netlink: 'syz.3.60': attribute type 5 has an invalid length. [ 79.668278][ T6010] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.56'. [ 79.671054][ T6008] delete_channel: no stack [ 79.767000][ T6014] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.60'. [ 79.943070][ T6017] netlink: 14 bytes leftover after parsing attributes in process `syz.0.61'. [ 80.291838][ T6029] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 80.333790][ T6029] team0: Port device wlan1 added [ 80.513133][ T6031] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.66'. [ 80.535720][ T6031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.66'. [ 80.690522][ T6048] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.71'. [ 80.843725][ T6058] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.341221][ T6066] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 81.465503][ T6065] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 81.649740][ T6081] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 82.338303][ T6101] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.538817][ T6100] delete_channel: no stack [ 82.990061][ T6118] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 83.010907][ T6127] validate_nla: 8 callbacks suppressed [ 83.010925][ T6127] netlink: 'syz.3.95': attribute type 5 has an invalid length. [ 83.108831][ T6128] __nla_validate_parse: 6 callbacks suppressed [ 83.108849][ T6128] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.95'. [ 83.348642][ T6139] FAULT_INJECTION: forcing a failure. [ 83.348642][ T6139] name failslab, interval 1, probability 0, space 0, times 1 [ 83.382911][ T6139] CPU: 1 PID: 6139 Comm: syz.3.98 Not tainted syzkaller #0 [ 83.390189][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 83.400364][ T6139] Call Trace: [ 83.403686][ T6139] [ 83.406640][ T6139] dump_stack_lvl+0x18c/0x250 [ 83.411357][ T6139] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.417547][ T6139] ? show_regs_print_info+0x20/0x20 [ 83.422782][ T6139] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.428976][ T6139] ? dump_stack+0x9/0x20 [ 83.433263][ T6139] should_fail_ex+0x39d/0x4d0 [ 83.437992][ T6139] should_failslab+0x9/0x20 [ 83.442533][ T6139] slab_pre_alloc_hook+0x59/0x310 [ 83.447595][ T6139] ? sk_prot_alloc+0xe7/0x210 [ 83.452319][ T6139] ? sk_prot_alloc+0xe7/0x210 [ 83.457126][ T6139] __kmem_cache_alloc_node+0x53/0x250 [ 83.462541][ T6139] ? sk_prot_alloc+0xe7/0x210 [ 83.467432][ T6139] __kmalloc+0xa4/0x230 [ 83.471656][ T6139] sk_prot_alloc+0xe7/0x210 [ 83.476338][ T6139] ? sk_alloc+0x24/0x360 [ 83.480636][ T6139] sk_alloc+0x3a/0x360 [ 83.484767][ T6139] ? bpf_ctx_init+0x163/0x1a0 [ 83.489482][ T6139] ? bpf_prog_test_run_skb+0x279/0x18c0 [ 83.495200][ T6139] bpf_prog_test_run_skb+0x3d1/0x18c0 [ 83.500706][ T6139] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 83.506902][ T6139] ? __fget_files+0x28/0x4b0 [ 83.511526][ T6139] ? __fget_files+0x43d/0x4b0 [ 83.516511][ T6139] ? cpu_online+0x60/0x60 [ 83.520879][ T6139] bpf_prog_test_run+0x321/0x390 [ 83.525875][ T6139] __sys_bpf+0x49d/0x890 [ 83.530151][ T6139] ? bpf_link_show_fdinfo+0x390/0x390 [ 83.535573][ T6139] ? lock_chain_count+0x20/0x20 [ 83.540583][ T6139] __x64_sys_bpf+0x7c/0x90 [ 83.545134][ T6139] do_syscall_64+0x55/0xb0 [ 83.550209][ T6139] ? clear_bhb_loop+0x40/0x90 [ 83.555370][ T6139] ? clear_bhb_loop+0x40/0x90 [ 83.560172][ T6139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.566127][ T6139] RIP: 0033:0x7f04eab9ce59 [ 83.570681][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.591970][ T6139] RSP: 002b:00007f04eb9e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.601115][ T6139] RAX: ffffffffffffffda RBX: 00007f04eae16090 RCX: 00007f04eab9ce59 [ 83.609204][ T6139] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 83.617214][ T6139] RBP: 00007f04eb9e0090 R08: 0000000000000000 R09: 0000000000000000 [ 83.625217][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.633411][ T6139] R13: 00007f04eae16128 R14: 00007f04eae16090 R15: 00007ffce673dc98 [ 83.642042][ T6139] [ 83.701886][ T6143] netlink: 'syz.2.99': attribute type 5 has an invalid length. [ 83.743126][ T6141] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.99'. [ 83.780125][ T6148] IPv6: Can't replace route, no match found [ 84.592815][ T6155] netlink: 'syz.3.103': attribute type 21 has an invalid length. [ 84.628483][ T6155] IPv6: NLM_F_CREATE should be specified when creating new route [ 84.726878][ T6160] netlink: 'syz.2.104': attribute type 5 has an invalid length. [ 84.750408][ T6152] delete_channel: no stack [ 84.759767][ T6160] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.104'. [ 84.893824][ T6170] netlink: 'syz.3.107': attribute type 5 has an invalid length. [ 84.978848][ T6172] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.107'. [ 84.992818][ T6171] netlink: 14 bytes leftover after parsing attributes in process `syz.0.106'. [ 85.553178][ T6176] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.110'. [ 86.241794][ T6193] netlink: 'syz.3.116': attribute type 5 has an invalid length. [ 86.430977][ T6193] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.116'. [ 86.581224][ T6202] netlink: 'syz.1.119': attribute type 5 has an invalid length. [ 86.672663][ T6202] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.119'. [ 86.856991][ T6208] netlink: 188 bytes leftover after parsing attributes in process `syz.3.120'. [ 87.057202][ T28] cfg80211: failed to load regulatory.db [ 87.169168][ T6214] FAULT_INJECTION: forcing a failure. [ 87.169168][ T6214] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.273980][ T6214] CPU: 1 PID: 6214 Comm: syz.3.123 Not tainted syzkaller #0 [ 87.281339][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.291415][ T6214] Call Trace: [ 87.294714][ T6214] [ 87.297655][ T6214] dump_stack_lvl+0x18c/0x250 [ 87.302367][ T6214] ? show_regs_print_info+0x20/0x20 [ 87.307685][ T6214] ? load_image+0x420/0x420 [ 87.312216][ T6214] ? __might_fault+0xaa/0x120 [ 87.316918][ T6214] ? __lock_acquire+0x7d40/0x7d40 [ 87.321949][ T6214] should_fail_ex+0x39d/0x4d0 [ 87.326641][ T6214] _copy_to_user+0x2f/0xa0 [ 87.331080][ T6214] br_dev_siocdevprivate+0x69b/0x1540 [ 87.336452][ T6214] ? do_raw_spin_unlock+0x121/0x230 [ 87.341653][ T6214] ? br_handle_local_finish+0x20/0x20 [ 87.347020][ T6214] ? __mutex_lock+0x956/0xcc0 [ 87.351698][ T6214] ? __mutex_lock+0x4f9/0xcc0 [ 87.356378][ T6214] ? dev_ioctl+0x83c/0x1140 [ 87.360882][ T6214] ? mutex_lock_nested+0x20/0x20 [ 87.365814][ T6214] ? full_name_hash+0x92/0xe0 [ 87.370494][ T6214] ? dev_ifsioc+0x958/0xc40 [ 87.374999][ T6214] dev_ioctl+0x84c/0x1140 [ 87.379338][ T6214] sock_ioctl+0x74c/0x7e0 [ 87.383668][ T6214] ? sock_poll+0x3e0/0x3e0 [ 87.388088][ T6214] ? bpf_lsm_file_ioctl+0x9/0x10 [ 87.393029][ T6214] ? security_file_ioctl+0x80/0xa0 [ 87.398151][ T6214] ? sock_poll+0x3e0/0x3e0 [ 87.402654][ T6214] __se_sys_ioctl+0xfd/0x170 [ 87.407247][ T6214] do_syscall_64+0x55/0xb0 [ 87.411658][ T6214] ? clear_bhb_loop+0x40/0x90 [ 87.416621][ T6214] ? clear_bhb_loop+0x40/0x90 [ 87.421362][ T6214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.427354][ T6214] RIP: 0033:0x7f04eab9ce59 [ 87.431795][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.451439][ T6214] RSP: 002b:00007f04eba01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.459880][ T6214] RAX: ffffffffffffffda RBX: 00007f04eae15fa0 RCX: 00007f04eab9ce59 [ 87.467849][ T6214] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 87.475819][ T6214] RBP: 00007f04eba01090 R08: 0000000000000000 R09: 0000000000000000 [ 87.483788][ T6214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.491756][ T6214] R13: 00007f04eae16038 R14: 00007f04eae15fa0 R15: 00007ffce673dc98 [ 87.499740][ T6214] [ 88.157069][ T6216] netlink: 14 bytes leftover after parsing attributes in process `syz.2.122'. [ 88.196780][ T6231] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.127'. [ 88.462128][ T6233] netlink: 'syz.0.128': attribute type 5 has an invalid length. [ 88.499345][ T6235] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.128'. [ 88.771480][ T6242] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 88.792617][ T6242] netlink: 164 bytes leftover after parsing attributes in process `syz.0.132'. [ 89.628174][ T6267] netlink: 'syz.1.135': attribute type 9 has an invalid length. [ 89.663999][ T6267] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.135'. [ 89.827012][ T6264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.834401][ T6264] IPv6: NLM_F_CREATE should be set when creating new route [ 89.841714][ T6264] IPv6: NLM_F_CREATE should be set when creating new route [ 89.849015][ T6264] IPv6: NLM_F_CREATE should be set when creating new route [ 90.425875][ T6277] netlink: 'syz.0.141': attribute type 5 has an invalid length. [ 90.521144][ T6277] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.141'. [ 92.821213][ T6294] netlink: 14 bytes leftover after parsing attributes in process `syz.3.142'. [ 93.264158][ T6316] netlink: 14 bytes leftover after parsing attributes in process `syz.1.152'. [ 93.419975][ T6321] netlink: 'syz.0.154': attribute type 10 has an invalid length. [ 93.469023][ T6321] team0: Port device wlan1 added [ 93.478310][ T6327] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 93.659545][ T6327] veth0_vlan: left promiscuous mode [ 93.697512][ T6327] veth0_vlan: entered promiscuous mode [ 93.723118][ T6327] team0: Device veth0_vlan failed to register rx_handler [ 94.221627][ T6350] netlink: 'syz.0.165': attribute type 5 has an invalid length. [ 94.328381][ T6350] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.165'. [ 95.197685][ T6367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.776948][ T6379] netlink: 'syz.1.176': attribute type 5 has an invalid length. [ 95.860982][ T6379] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.176'. [ 96.451217][ T6394] veth1_to_bond: entered allmulticast mode [ 96.750543][ T6404] netlink: 'syz.2.184': attribute type 10 has an invalid length. [ 96.917573][ T6404] team0: Device wg1 is of different type [ 96.939501][ T6407] netlink: 'syz.3.185': attribute type 5 has an invalid length. [ 97.025759][ T6409] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.185'. [ 97.204813][ T6415] netlink: 132 bytes leftover after parsing attributes in process `syz.2.187'. [ 97.575518][ T6423] netlink: 'syz.1.192': attribute type 13 has an invalid length. [ 97.583416][ T6423] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.192'. [ 97.606676][ T6426] FAULT_INJECTION: forcing a failure. [ 97.606676][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.625005][ T6423] netlink: 'syz.1.192': attribute type 21 has an invalid length. [ 97.630585][ T6426] CPU: 1 PID: 6426 Comm: syz.3.193 Not tainted syzkaller #0 [ 97.640237][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.650399][ T6426] Call Trace: [ 97.653678][ T6426] [ 97.656703][ T6426] dump_stack_lvl+0x18c/0x250 [ 97.661382][ T6426] ? show_regs_print_info+0x20/0x20 [ 97.666576][ T6426] ? load_image+0x420/0x420 [ 97.671079][ T6426] ? __might_fault+0xaa/0x120 [ 97.675753][ T6426] ? __lock_acquire+0x7d40/0x7d40 [ 97.680892][ T6426] should_fail_ex+0x39d/0x4d0 [ 97.685665][ T6426] _copy_from_user+0x2f/0xe0 [ 97.690343][ T6426] kstrtouint_from_user+0xde/0x170 [ 97.695481][ T6426] ? kstrtol_from_user+0x190/0x190 [ 97.700713][ T6426] proc_fail_nth_write+0x8f/0x250 [ 97.705746][ T6426] ? proc_fail_nth_read+0x260/0x260 [ 97.711057][ T6426] ? proc_fail_nth_read+0x260/0x260 [ 97.716340][ T6426] vfs_write+0x296/0x990 [ 97.720606][ T6426] ? file_end_write+0x250/0x250 [ 97.725467][ T6426] ? __fget_files+0x28/0x4b0 [ 97.730071][ T6426] ? __fget_files+0x28/0x4b0 [ 97.734665][ T6426] ? __fget_files+0x43d/0x4b0 [ 97.739369][ T6426] ? __fdget_pos+0x2a3/0x330 [ 97.743959][ T6426] ? ksys_write+0x75/0x260 [ 97.748392][ T6426] ksys_write+0x150/0x260 [ 97.752720][ T6426] ? __ia32_sys_read+0x90/0x90 [ 97.757529][ T6426] ? lockdep_hardirqs_on+0x98/0x150 [ 97.762727][ T6426] do_syscall_64+0x55/0xb0 [ 97.767142][ T6426] ? clear_bhb_loop+0x40/0x90 [ 97.771817][ T6426] ? clear_bhb_loop+0x40/0x90 [ 97.776494][ T6426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.782396][ T6426] RIP: 0033:0x7f04eab5d68e [ 97.786807][ T6426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.806421][ T6426] RSP: 002b:00007f04eba00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 97.814876][ T6426] RAX: ffffffffffffffda RBX: 00007f04eba016c0 RCX: 00007f04eab5d68e [ 97.822856][ T6426] RDX: 0000000000000001 RSI: 00007f04eba010a0 RDI: 0000000000000005 [ 97.830935][ T6426] RBP: 00007f04eba01090 R08: 0000000000000000 R09: 0000000000000000 [ 97.839017][ T6426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.846989][ T6426] R13: 00007f04eae16038 R14: 00007f04eae15fa0 R15: 00007ffce673dc98 [ 97.854967][ T6426] [ 97.893592][ T6427] veth1_to_bond: entered allmulticast mode [ 97.951469][ T6433] netlink: 'syz.3.196': attribute type 5 has an invalid length. [ 98.018542][ T6434] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.196'. [ 98.454427][ T6452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.205'. [ 98.479113][ T6454] netlink: 'syz.1.206': attribute type 25 has an invalid length. [ 98.487209][ T6454] netlink: 'syz.1.206': attribute type 9 has an invalid length. [ 98.595063][ T6459] netlink: 'syz.2.207': attribute type 5 has an invalid length. [ 98.753798][ T6465] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.207'. [ 98.848882][ T6467] veth1_to_bond: entered allmulticast mode [ 99.164330][ T6483] netlink: 'syz.1.216': attribute type 4 has an invalid length. [ 99.172048][ T6483] netlink: 164 bytes leftover after parsing attributes in process `syz.1.216'. [ 99.566270][ T6496] netlink: 128 bytes leftover after parsing attributes in process `syz.2.220'. [ 99.599246][ T6496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.702255][ T6502] netlink: 48 bytes leftover after parsing attributes in process `syz.1.224'. [ 99.711647][ T6502] macvlan1: entered promiscuous mode [ 100.002964][ T6514] veth1_to_bond: entered allmulticast mode [ 100.343561][ T6521] netlink: 'syz.1.228': attribute type 5 has an invalid length. [ 100.416871][ T6528] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.228'. [ 100.557538][ T6531] delete_channel: no stack [ 100.953097][ T6556] netlink: 'syz.0.237': attribute type 5 has an invalid length. [ 101.215272][ T6562] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.237'. [ 101.234139][ T6564] netlink: 'syz.1.241': attribute type 5 has an invalid length. [ 101.320828][ T6565] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.241'. [ 101.565603][ T6566] delete_channel: no stack [ 101.913150][ T6574] netlink: 'syz.1.245': attribute type 10 has an invalid length. [ 102.143306][ T6584] netlink: 14 bytes leftover after parsing attributes in process `syz.2.249'. [ 102.252719][ T6584] veth0_macvtap: left promiscuous mode [ 102.549862][ T6591] netlink: 'syz.1.251': attribute type 5 has an invalid length. [ 102.570718][ T6593] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.251'. [ 103.025431][ T6613] netlink: 'syz.0.257': attribute type 39 has an invalid length. [ 103.075415][ T6615] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 103.616573][ T6627] netlink: 'syz.3.264': attribute type 5 has an invalid length. [ 103.662313][ T6627] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.264'. [ 103.710059][ T6631] netlink: 14 bytes leftover after parsing attributes in process `syz.1.265'. [ 103.751962][ T6631] veth0_macvtap: left promiscuous mode [ 104.530745][ T6653] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 105.010783][ T6653] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.047938][ T6659] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 105.200615][ T6664] netlink: 'syz.1.274': attribute type 5 has an invalid length. [ 105.281789][ T6664] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.274'. [ 105.563210][ T6680] syz.3.280 uses obsolete (PF_INET,SOCK_PACKET) [ 105.707171][ T6684] netlink: 14 bytes leftover after parsing attributes in process `syz.0.282'. [ 105.728863][ T6684] veth0_macvtap: left promiscuous mode [ 106.100732][ T6697] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.286'. [ 106.103268][ T6696] FAULT_INJECTION: forcing a failure. [ 106.103268][ T6696] name failslab, interval 1, probability 0, space 0, times 0 [ 106.148349][ T6696] CPU: 0 PID: 6696 Comm: syz.3.287 Not tainted syzkaller #0 [ 106.155836][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.165988][ T6696] Call Trace: [ 106.169267][ T6696] [ 106.172200][ T6696] dump_stack_lvl+0x18c/0x250 [ 106.176880][ T6696] ? show_regs_print_info+0x20/0x20 [ 106.182076][ T6696] ? load_image+0x420/0x420 [ 106.186750][ T6696] ? __asan_memset+0x22/0x40 [ 106.191343][ T6696] should_fail_ex+0x39d/0x4d0 [ 106.196023][ T6696] should_failslab+0x9/0x20 [ 106.200528][ T6696] slab_pre_alloc_hook+0x59/0x310 [ 106.205559][ T6696] kmem_cache_alloc+0x5a/0x2d0 [ 106.210320][ T6696] ? slab_build_skb+0x2b/0x3f0 [ 106.215083][ T6696] slab_build_skb+0x2b/0x3f0 [ 106.219677][ T6696] bpf_prog_test_run_skb+0x3ef/0x18c0 [ 106.225061][ T6696] ? __fget_files+0x28/0x4b0 [ 106.229649][ T6696] ? __fget_files+0x43d/0x4b0 [ 106.234331][ T6696] ? cpu_online+0x60/0x60 [ 106.238659][ T6696] bpf_prog_test_run+0x321/0x390 [ 106.243608][ T6696] __sys_bpf+0x49d/0x890 [ 106.247857][ T6696] ? bpf_link_show_fdinfo+0x390/0x390 [ 106.253234][ T6696] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.259397][ T6696] __x64_sys_bpf+0x7c/0x90 [ 106.263810][ T6696] do_syscall_64+0x55/0xb0 [ 106.268230][ T6696] ? clear_bhb_loop+0x40/0x90 [ 106.272912][ T6696] ? clear_bhb_loop+0x40/0x90 [ 106.277580][ T6696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.283484][ T6696] RIP: 0033:0x7f04eab9ce59 [ 106.287896][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.307502][ T6696] RSP: 002b:00007f04eba01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.315910][ T6696] RAX: ffffffffffffffda RBX: 00007f04eae15fa0 RCX: 00007f04eab9ce59 [ 106.323881][ T6696] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 106.331855][ T6696] RBP: 00007f04eba01090 R08: 0000000000000000 R09: 0000000000000000 [ 106.340003][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.347967][ T6696] R13: 00007f04eae16038 R14: 00007f04eae15fa0 R15: 00007ffce673dc98 [ 106.355946][ T6696] [ 106.431774][ T6699] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 106.452245][ T6699] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 106.477386][ T6699] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 106.548820][ T6706] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.288'. [ 106.762775][ T6716] netlink: 'syz.1.295': attribute type 12 has an invalid length. [ 106.777505][ T6716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.295'. [ 106.882169][ T6713] netlink: 128 bytes leftover after parsing attributes in process `syz.3.294'. [ 106.906248][ T6713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.924962][ T6718] netlink: 'syz.2.296': attribute type 21 has an invalid length. [ 106.934328][ T6718] netlink: 128 bytes leftover after parsing attributes in process `syz.2.296'. [ 106.952705][ T6718] netlink: 'syz.2.296': attribute type 4 has an invalid length. [ 106.963443][ T6723] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.297'. [ 107.741171][ T6751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.021135][ T6776] __nla_validate_parse: 5 callbacks suppressed [ 109.021152][ T6776] netlink: 128 bytes leftover after parsing attributes in process `syz.2.316'. [ 109.066247][ T6776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.198955][ T6779] validate_nla: 3 callbacks suppressed [ 109.198971][ T6779] netlink: 'syz.0.317': attribute type 4 has an invalid length. [ 109.225550][ T6779] netlink: 164 bytes leftover after parsing attributes in process `syz.0.317'. [ 109.480603][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 109.631488][ T6797] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.321'. [ 109.812637][ T6799] netlink: 'syz.3.324': attribute type 9 has an invalid length. [ 109.828268][ T6799] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.324'. [ 110.000149][ T6812] netlink: 'syz.3.329': attribute type 21 has an invalid length. [ 110.023865][ T6812] netlink: 156 bytes leftover after parsing attributes in process `syz.3.329'. [ 110.204669][ T6817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.211946][ T6817] IPv6: NLM_F_CREATE should be set when creating new route [ 110.219309][ T6817] IPv6: NLM_F_CREATE should be set when creating new route [ 110.226619][ T6817] IPv6: NLM_F_CREATE should be set when creating new route [ 110.612663][ T6828] netlink: 'syz.0.334': attribute type 10 has an invalid length. [ 110.638105][ T6828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.334'. [ 110.665866][ T6828] ipvlan1: entered promiscuous mode [ 110.699201][ T6828] ipvlan1: entered allmulticast mode [ 110.723429][ T6828] veth0_vlan: entered allmulticast mode [ 110.746126][ T6828] bridge0: port 3(ipvlan1) entered blocking state [ 110.763170][ T6828] bridge0: port 3(ipvlan1) entered disabled state [ 110.786091][ T6828] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 110.959588][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.122051][ T6839] netlink: 'syz.1.338': attribute type 9 has an invalid length. [ 111.134997][ T6839] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.338'. [ 111.273069][ T6852] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.341'. [ 111.358886][ T6851] ================================================================== [ 111.367012][ T6851] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 111.374865][ T6851] Write of size 72 at addr ffff88802256cc90 by task syz.0.343/6851 [ 111.383160][ T6851] [ 111.385528][ T6851] CPU: 1 PID: 6851 Comm: syz.0.343 Not tainted syzkaller #0 [ 111.392828][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 111.402914][ T6851] Call Trace: [ 111.406203][ T6851] [ 111.409136][ T6851] dump_stack_lvl+0x18c/0x250 [ 111.413820][ T6851] ? __lock_acquire+0x7d40/0x7d40 [ 111.418880][ T6851] ? show_regs_print_info+0x20/0x20 [ 111.424094][ T6851] ? load_image+0x420/0x420 [ 111.428688][ T6851] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 111.434153][ T6851] ? __virt_addr_valid+0x18c/0x540 [ 111.439269][ T6851] ? __virt_addr_valid+0x469/0x540 [ 111.444428][ T6851] print_report+0xa8/0x210 [ 111.448851][ T6851] ? __bpf_get_stackid+0x6bf/0x900 [ 111.453968][ T6851] kasan_report+0x117/0x150 [ 111.458474][ T6851] ? __bpf_get_stackid+0x6bf/0x900 [ 111.463676][ T6851] kasan_check_range+0x241/0x290 [ 111.468615][ T6851] ? __bpf_get_stackid+0x6bf/0x900 [ 111.473811][ T6851] __asan_memcpy+0x40/0x70 [ 111.478230][ T6851] __bpf_get_stackid+0x6bf/0x900 [ 111.483174][ T6851] bpf_get_stackid_pe+0x343/0x410 [ 111.488235][ T6851] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 111.493700][ T6851] bpf_overflow_handler+0x43f/0x510 [ 111.498903][ T6851] ? perf_prepare_header+0x1e0/0x1e0 [ 111.504275][ T6851] ? bpf_overflow_handler+0xde/0x510 [ 111.509579][ T6851] ? tp_perf_event_destroy+0x20/0x20 [ 111.514924][ T6851] ? __perf_event_account_interrupt+0x187/0x280 [ 111.521180][ T6851] __perf_event_overflow+0x447/0x630 [ 111.526490][ T6851] perf_swevent_event+0x319/0x570 [ 111.531519][ T6851] ? perf_tp_event+0x1520/0x1520 [ 111.536475][ T6851] ___perf_sw_event+0x4a7/0x730 [ 111.541421][ T6851] ? ___perf_sw_event+0x199/0x730 [ 111.546463][ T6851] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 111.552909][ T6851] ? __lock_acquire+0x1347/0x7d40 [ 111.557952][ T6851] ? rep_movs_alternative+0x4a/0x90 [ 111.563167][ T6851] ? lockdep_hardirqs_on+0x98/0x150 [ 111.568368][ T6851] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 111.574578][ T6851] __perf_sw_event+0x139/0x270 [ 111.579345][ T6851] do_user_addr_fault+0x123e/0x12c0 [ 111.584545][ T6851] ? rcu_is_watching+0x15/0xb0 [ 111.589310][ T6851] exc_page_fault+0x64/0x100 [ 111.593902][ T6851] asm_exc_page_fault+0x26/0x30 [ 111.598850][ T6851] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 111.604661][ T6851] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 111.624269][ T6851] RSP: 0018:ffffc90004e77bd0 EFLAGS: 00050206 [ 111.630332][ T6851] RAX: ffffffff842a7f01 RBX: 000000000000056d RCX: 0000000000000534 [ 111.638298][ T6851] RDX: 0000000000000001 RSI: 0000200000003000 RDI: ffff8880285bd039 [ 111.646268][ T6851] RBP: ffffc90004e77d20 R08: 0000000000000004 R09: 0000000000000005 [ 111.654234][ T6851] R10: dffffc0000000000 R11: ffffed10050b7aad R12: 0000200000003534 [ 111.662222][ T6851] R13: 1ffff920009cefbd R14: ffff8880285bd000 R15: 0000200000002fc7 [ 111.670299][ T6851] ? _copy_from_user+0x41/0xe0 [ 111.675076][ T6851] _copy_from_user+0x8b/0xe0 [ 111.679668][ T6851] generic_map_update_batch+0x59a/0x810 [ 111.685219][ T6851] ? rcu_read_unlock+0xa0/0xa0 [ 111.689986][ T6851] ? __fdget+0x180/0x210 [ 111.694239][ T6851] ? rcu_read_unlock+0xa0/0xa0 [ 111.698997][ T6851] bpf_map_do_batch+0x3d7/0x610 [ 111.703855][ T6851] __sys_bpf+0x381/0x890 [ 111.708366][ T6851] ? bpf_link_show_fdinfo+0x390/0x390 [ 111.713747][ T6851] ? lock_chain_count+0x20/0x20 [ 111.718597][ T6851] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 111.724700][ T6851] __x64_sys_bpf+0x7c/0x90 [ 111.729419][ T6851] do_syscall_64+0x55/0xb0 [ 111.733855][ T6851] ? clear_bhb_loop+0x40/0x90 [ 111.738537][ T6851] ? clear_bhb_loop+0x40/0x90 [ 111.743332][ T6851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.749321][ T6851] RIP: 0033:0x7f869f79ce59 [ 111.753745][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.773443][ T6851] RSP: 002b:00007f86a06f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.781880][ T6851] RAX: ffffffffffffffda RBX: 00007f869fa16090 RCX: 00007f869f79ce59 [ 111.789893][ T6851] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 111.797967][ T6851] RBP: 00007f869f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 111.805970][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.813939][ T6851] R13: 00007f869fa16128 R14: 00007f869fa16090 R15: 00007ffc9c59dcf8 [ 111.821939][ T6851] [ 111.824952][ T6851] [ 111.827383][ T6851] Allocated by task 6851: [ 111.831703][ T6851] kasan_set_track+0x4e/0x70 [ 111.836299][ T6851] __kasan_kmalloc+0x8f/0xa0 [ 111.840889][ T6851] __kmalloc_node+0xb4/0x230 [ 111.845486][ T6851] bpf_map_area_alloc+0x5e/0x110 [ 111.850425][ T6851] prealloc_elems_and_freelist+0x86/0x1c0 [ 111.856142][ T6851] stack_map_alloc+0x33a/0x4c0 [ 111.860906][ T6851] map_create+0x877/0x12f0 [ 111.865319][ T6851] __sys_bpf+0x651/0x890 [ 111.869557][ T6851] __x64_sys_bpf+0x7c/0x90 [ 111.873964][ T6851] do_syscall_64+0x55/0xb0 [ 111.878381][ T6851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.884286][ T6851] [ 111.886701][ T6851] The buggy address belongs to the object at ffff88802256cc80 [ 111.886701][ T6851] which belongs to the cache kmalloc-cg-64 of size 64 [ 111.901197][ T6851] The buggy address is located 16 bytes inside of [ 111.901197][ T6851] allocated 40-byte region [ffff88802256cc80, ffff88802256cca8) [ 111.915181][ T6851] [ 111.917578][ T6851] The buggy address belongs to the physical page: [ 111.924093][ T6851] page:ffffea0000895b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802256cf80 pfn:0x2256c [ 111.935557][ T6851] memcg:ffff88802b596c01 [ 111.939787][ T6851] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 111.947769][ T6851] page_type: 0xffffffff() [ 111.952090][ T6851] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 0000000000000001 [ 111.960668][ T6851] raw: ffff88802256cf80 000000008020001f 00000001ffffffff ffff88802b596c01 [ 111.969277][ T6851] page dumped because: kasan: bad access detected [ 111.975695][ T6851] page_owner tracks the page as allocated [ 111.981574][ T6851] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5777, tgid 5777 (syz-executor), ts 72103605362, free_ts 72069689084 [ 111.999807][ T6851] post_alloc_hook+0x1c1/0x200 [ 112.004664][ T6851] get_page_from_freelist+0x1951/0x19e0 [ 112.010294][ T6851] __alloc_pages+0x1f0/0x460 [ 112.015584][ T6851] alloc_slab_page+0x5d/0x160 [ 112.020259][ T6851] new_slab+0x87/0x2d0 [ 112.024326][ T6851] ___slab_alloc+0xc5d/0x12f0 [ 112.029010][ T6851] __kmem_cache_alloc_node+0x19e/0x250 [ 112.034469][ T6851] __kmalloc_node+0xa4/0x230 [ 112.039146][ T6851] kvmalloc_node+0x70/0x180 [ 112.044086][ T6851] nf_hook_entries_grow+0x27d/0x6d0 [ 112.049925][ T6851] __nf_register_net_hook+0x2c9/0x910 [ 112.055393][ T6851] nf_register_net_hook+0xb2/0x190 [ 112.060525][ T6851] nf_register_net_hooks+0x44/0x1b0 [ 112.065724][ T6851] arpt_register_table+0x5f4/0x720 [ 112.070915][ T6851] arptable_filter_table_init+0x41/0x60 [ 112.076534][ T6851] xt_find_table_lock+0x306/0x3e0 [ 112.081563][ T6851] page last free stack trace: [ 112.086255][ T6851] free_unref_page_prepare+0x7b2/0x8c0 [ 112.091748][ T6851] free_unref_page+0x32/0x2e0 [ 112.096458][ T6851] __unfreeze_partials+0x1cf/0x210 [ 112.101585][ T6851] put_cpu_partial+0x17c/0x250 [ 112.106357][ T6851] __slab_free+0x319/0x400 [ 112.110774][ T6851] qlist_free_all+0x75/0xd0 [ 112.115374][ T6851] kasan_quarantine_reduce+0x143/0x160 [ 112.120845][ T6851] __kasan_slab_alloc+0x22/0x80 [ 112.125786][ T6851] slab_post_alloc_hook+0x6e/0x4b0 [ 112.130907][ T6851] __kmem_cache_alloc_node+0x13a/0x250 [ 112.136455][ T6851] __kmalloc+0xa4/0x230 [ 112.140610][ T6851] kernfs_fop_write_iter+0x159/0x520 [ 112.145897][ T6851] vfs_write+0x46c/0x990 [ 112.150137][ T6851] ksys_write+0x150/0x260 [ 112.154466][ T6851] do_syscall_64+0x55/0xb0 [ 112.158915][ T6851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.164809][ T6851] [ 112.167123][ T6851] Memory state around the buggy address: [ 112.173008][ T6851] ffff88802256cb80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 112.181070][ T6851] ffff88802256cc00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 112.189218][ T6851] >ffff88802256cc80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 112.197355][ T6851] ^ [ 112.202718][ T6851] ffff88802256cd00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 112.210946][ T6851] ffff88802256cd80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 112.219075][ T6851] ================================================================== [ 112.227138][ T6851] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.234347][ T6851] CPU: 1 PID: 6851 Comm: syz.0.343 Not tainted syzkaller #0 [ 112.241624][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.251679][ T6851] Call Trace: [ 112.254957][ T6851] [ 112.257886][ T6851] dump_stack_lvl+0x18c/0x250 [ 112.262576][ T6851] ? show_regs_print_info+0x20/0x20 [ 112.267772][ T6851] ? load_image+0x420/0x420 [ 112.272275][ T6851] panic+0x2dc/0x730 [ 112.276175][ T6851] ? __lock_acquire+0x7d40/0x7d40 [ 112.281199][ T6851] ? bpf_jit_dump+0xd0/0xd0 [ 112.285704][ T6851] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 112.291596][ T6851] ? _raw_spin_unlock+0x40/0x40 [ 112.296451][ T6851] ? __bpf_get_stackid+0x6bf/0x900 [ 112.301581][ T6851] check_panic_on_warn+0x84/0xa0 [ 112.306534][ T6851] ? __bpf_get_stackid+0x6bf/0x900 [ 112.311669][ T6851] end_report+0x6f/0x130 [ 112.315963][ T6851] kasan_report+0x128/0x150 [ 112.320984][ T6851] ? __bpf_get_stackid+0x6bf/0x900 [ 112.326127][ T6851] kasan_check_range+0x241/0x290 [ 112.331080][ T6851] ? __bpf_get_stackid+0x6bf/0x900 [ 112.336196][ T6851] __asan_memcpy+0x40/0x70 [ 112.340615][ T6851] __bpf_get_stackid+0x6bf/0x900 [ 112.345556][ T6851] bpf_get_stackid_pe+0x343/0x410 [ 112.350582][ T6851] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 112.356038][ T6851] bpf_overflow_handler+0x43f/0x510 [ 112.361237][ T6851] ? perf_prepare_header+0x1e0/0x1e0 [ 112.367317][ T6851] ? bpf_overflow_handler+0xde/0x510 [ 112.372617][ T6851] ? tp_perf_event_destroy+0x20/0x20 [ 112.377904][ T6851] ? __perf_event_account_interrupt+0x187/0x280 [ 112.384319][ T6851] __perf_event_overflow+0x447/0x630 [ 112.389606][ T6851] perf_swevent_event+0x319/0x570 [ 112.394630][ T6851] ? perf_tp_event+0x1520/0x1520 [ 112.399595][ T6851] ___perf_sw_event+0x4a7/0x730 [ 112.404534][ T6851] ? ___perf_sw_event+0x199/0x730 [ 112.409556][ T6851] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 112.415977][ T6851] ? __lock_acquire+0x1347/0x7d40 [ 112.421013][ T6851] ? rep_movs_alternative+0x4a/0x90 [ 112.426220][ T6851] ? lockdep_hardirqs_on+0x98/0x150 [ 112.431416][ T6851] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.437573][ T6851] __perf_sw_event+0x139/0x270 [ 112.442422][ T6851] do_user_addr_fault+0x123e/0x12c0 [ 112.447620][ T6851] ? rcu_is_watching+0x15/0xb0 [ 112.452386][ T6851] exc_page_fault+0x64/0x100 [ 112.456978][ T6851] asm_exc_page_fault+0x26/0x30 [ 112.461847][ T6851] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 112.467677][ T6851] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 112.487297][ T6851] RSP: 0018:ffffc90004e77bd0 EFLAGS: 00050206 [ 112.493375][ T6851] RAX: ffffffff842a7f01 RBX: 000000000000056d RCX: 0000000000000534 [ 112.501342][ T6851] RDX: 0000000000000001 RSI: 0000200000003000 RDI: ffff8880285bd039 [ 112.509319][ T6851] RBP: ffffc90004e77d20 R08: 0000000000000004 R09: 0000000000000005 [ 112.517290][ T6851] R10: dffffc0000000000 R11: ffffed10050b7aad R12: 0000200000003534 [ 112.525260][ T6851] R13: 1ffff920009cefbd R14: ffff8880285bd000 R15: 0000200000002fc7 [ 112.533582][ T6851] ? _copy_from_user+0x41/0xe0 [ 112.538472][ T6851] _copy_from_user+0x8b/0xe0 [ 112.543061][ T6851] generic_map_update_batch+0x59a/0x810 [ 112.548614][ T6851] ? rcu_read_unlock+0xa0/0xa0 [ 112.553396][ T6851] ? __fdget+0x180/0x210 [ 112.557638][ T6851] ? rcu_read_unlock+0xa0/0xa0 [ 112.562392][ T6851] bpf_map_do_batch+0x3d7/0x610 [ 112.567244][ T6851] __sys_bpf+0x381/0x890 [ 112.571488][ T6851] ? bpf_link_show_fdinfo+0x390/0x390 [ 112.576864][ T6851] ? lock_chain_count+0x20/0x20 [ 112.581717][ T6851] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 112.587697][ T6851] __x64_sys_bpf+0x7c/0x90 [ 112.592110][ T6851] do_syscall_64+0x55/0xb0 [ 112.596526][ T6851] ? clear_bhb_loop+0x40/0x90 [ 112.601195][ T6851] ? clear_bhb_loop+0x40/0x90 [ 112.605872][ T6851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.611856][ T6851] RIP: 0033:0x7f869f79ce59 [ 112.616267][ T6851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.635960][ T6851] RSP: 002b:00007f86a06f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.644380][ T6851] RAX: ffffffffffffffda RBX: 00007f869fa16090 RCX: 00007f869f79ce59 [ 112.652382][ T6851] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 112.660396][ T6851] RBP: 00007f869f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 112.668451][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.676697][ T6851] R13: 00007f869fa16128 R14: 00007f869fa16090 R15: 00007ffc9c59dcf8 [ 112.684689][ T6851] [ 112.688028][ T6851] Kernel Offset: disabled [ 112.692350][ T6851] Rebooting in 86400 seconds..