last executing test programs: 8.456549481s ago: executing program 0 (id=2100): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0xc}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10004) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) 7.472993317s ago: executing program 0 (id=2110): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x3, 0x10) close(r0) perf_event_open(&(0x7f0000000380)={0xd3a445e383d2ddad, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x5342c94458d0f707, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x1, @perf_bp={0x0, 0x5}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.720460337s ago: executing program 0 (id=2124): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xb}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) unlink(&(0x7f0000000140)='./cgroup\x00') r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x22, &(0x7f0000000280), 0x4) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/167, 0xa7}, 0x2002) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r7, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000000c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x20040800) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f00000001c0)="fe24f0b066eb5f3c9f0fb785c424ade0e4fdcaf95df68c1ff6bafc530fc85b1de500f3a13893a62d0b7dab693219a9419c773e8b650e581d9ba8764bf465855f5b3305655c57162ac5a3bff44b06bf65b2a655fa9a9fb1680f1d80d7d50831f4cca3de335f569a4f24e8d21f32bef2287bce033310a6bee2e86e49a9", &(0x7f00000002c0)=""/132}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90524fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89f6, &(0x7f0000000900)={'sit0\x00', @random="3f40230c1100"}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) close(0x3) 4.680262189s ago: executing program 3 (id=2125): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x88e0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[], 0x6a) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$kcm(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)="97b0", 0x2}], 0x1}, 0x10) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1650}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x3, 0x8, 0x8, 0x4b9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x800000f, 0xffffffffffffffff, 0x3) 3.589420401s ago: executing program 3 (id=2128): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0xfffffffffffffdf3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0xa}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90524fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004000020020000800100002000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1e}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x26}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r4}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0xf19e35bfff2f5816}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f00000001c0)='./file0\x00', r8}, 0x18) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x29, 0x5, 0x0) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0xffe3}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) 3.323994403s ago: executing program 0 (id=2129): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="3200000000000000000000000300009fa9ccd0fd6c50fac1f25a1298bf7798c50002d3bc298bc35c91d1fa4889979f0e6e3fb876e34a8b7f5a05ba93c159c586f94658442fd16e700896d3af110c168fcf05535bab17a71a3adcf275a83dfb676ff8d221a3cd6e29d59c16dbf08bbab17d7bb2dff40d343bfb4dbd", @ANYRES32=r1, @ANYBLOB="5c7b02466c85b564170b4ed55747a5e46337b849987e3081f2a81e98ff59f0d0a1d11e3874cc6fb054b7905b7cae9cb4e8ad3a0a9e88d5f9bb82d54bb0af857b4866a8", @ANYBLOB="0100000003000000040000001000"/28], 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'bridge0\x00', 0x2}) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='syzkaller\x00') ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) 3.316835053s ago: executing program 1 (id=2130): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x828, 0x0, 0x10000, 0x0, 0x80000001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0xb7}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110670000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) socket$kcm(0x22, 0x3, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0xffffffffffffffee, 0x83, 0x1, 0x0, 0x0, 0x0, 0x6, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x1041, 0x6, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) close(r1) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f00000000c0), &(0x7f0000000440)=r1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) 3.103942043s ago: executing program 3 (id=2132): socket$kcm(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400efb20d5700000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r1, &(0x7f00000002c0)="fe366aee", 0x0}, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7fffffffffffffff) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xfffffffffffffdaf) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x136) r2 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x1, @perf_bp={&(0x7f0000000980), 0x4}, 0x0, 0x0, 0x8, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad95a1c57a05f4f979ea13201bafe4f0f6ea508000000a0c548552b5708005647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177dc46c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6fe2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679043e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e77124d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21579fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b1a4090631e1b9e16587bb5f721303e6b89e5c54d680ac66d09af0a1f5b83e69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868ffd08cd0e05023f4d8f95712207450e39a7550f42419bf30b31cac3fa1404e449c1cee0fff0d86a98dc9bf38a1e0b4fa5225dae5e781b43545b51681b2158f41bab16f8a7df758b00ffa6e8522bd83e320ff897f177367278a1f0cdbde082d9983308b40c39740b6fd1ba4aa10c3a19c7374278d00"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff5f}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r2, 0x12) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x8802, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.920221722s ago: executing program 0 (id=2133): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x9d, 0x0, 0x81, 0x0, 0x0, 0x8, 0x401, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x8000, 0x1ff, 0x0, 0x8, 0x4, 0x9, 0x10, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r0, @ANYBLOB="0000000078000000000000000000030000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x19, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5249, 0x0, 0x0, 0x0, 0xb3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x7, 0x4, 0x3, 0xffffffffffffffcf, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.480055713s ago: executing program 1 (id=2135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x203ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000480)="586775fb9901db49815172c1f747d4b7f006cde302a9915d508a026726989f48e7d7a4f8ad25e0ba2080b91f0aa200a8337d1018b387d7cc57c2e4413b4a82788410d3e411cb0ca1efa96a886164d6c1f974cae23a3ebab481e5e42c99e6882ea35031d7f412f72150c3299311a83bb1e39af73c0c2350f08b8912c23c75902ac99f982b1ca770", 0x3}, 0x23) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000", @ANYRESHEX=r1, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x1000005, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xf}, 0x10}, 0x94) 2.393714037s ago: executing program 3 (id=2136): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x88e0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x6a) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$kcm(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)="97b0", 0x2}], 0x1}, 0x10) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1650}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x3, 0x8, 0x8, 0x4b9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x800000f, 0xffffffffffffffff, 0x3) 2.167929648s ago: executing program 1 (id=2137): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000016c0)=""/257, 0x101}, {&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000047c0)=""/4042, 0xfca}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000000640)=""/149, 0x95}, {&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000001800)=""/224, 0xe0}, {&(0x7f0000001900)=""/166, 0xa6}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000002a80)=""/102, 0x66}, {&(0x7f0000000040)=""/100, 0x64}], 0xc}, 0x2000) recvmsg$kcm(r2, &(0x7f0000000700)={0x0, 0xa00, 0x0, 0x0, 0x0, 0x900}, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = syz_clone(0x40010000, &(0x7f0000000340)="0cdd07505a40b99f0800bcee6c99370b6733fa96071ab20accde1c3a6b40e4a6c972c9419a767671da331a073be6d7e18dcb2c15417c7e2b73805599d28fdb76f8f22358cd425f5037f1c578d718e0a3af758a3d57e2e4eb17da17cd4d4222bc09755cfcc84c2fc770872bd80bc5293822838963e043e23c8d7d541428ad16ab5ffd64", 0x83, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="34c61563b5f7f2c0ffc05b5a983cee1117e74d26b36e5a3614ce6c2774d75b30e7a93e697e630bc263295e9af6086c8e59bc9ed644bc49e9449333125ce4e9e41475894a23a669411aec725309386e3565ef46049417ab064c7c1cba3339379a2f236d640ac25a20ff51d97620462ef389017ccd766d1cf5641a79fbcf47b130313458b85da07a479399662dec0b510c98e52b7ad94d559cc4ef017c734ac946412feb6d5b07326ca121b32ac128618a347adc9e8fd49a46920e713542bf49") r4 = perf_event_open$cgroup(&(0x7f0000000580)={0x2, 0x80, 0xbd, 0x8, 0x2, 0x0, 0x0, 0x7, 0x2, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000540)}, 0x10c241, 0x3, 0x4, 0x8, 0x7, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={r3, r4, 0x0, 0x4, &(0x7f0000000600)='[:^\x00'}, 0x30) 1.657035872s ago: executing program 1 (id=2139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x3f}, 0x94) socket$kcm(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x5, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r2, r2, 0x24, 0x4, 0x0, @void, @value=r1, @void, @void, r5}, 0x20) setsockopt$sock_attach_bpf(r3, 0x84, 0xd, &(0x7f0000000000), 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.279517839s ago: executing program 3 (id=2140): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000eb00000f10000000000000630008000000000095f8aad862000000928eb311a9ba4c38b539b778829b569e5b468b4c53db3f7ac9bc09236ced48406ba735a5a110a5121c8369c038dc56e6bc1875cceae7ccb46cba30367a0cfe1f5ab6abae43bec5ef0727bfa5532d53"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x22) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x7}}, @fwd={0xe}]}, {0x0, [0x5f, 0x30, 0x1e, 0x0, 0x5f, 0x2e, 0x0, 0x30, 0x5f, 0x30]}}, &(0x7f0000000300)=""/246, 0x48, 0xf6, 0x1, 0x200}, 0x28) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80000000}, [@exit, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x62, &(0x7f0000000140)=""/98, 0x40f00, 0xb, '\x00', r0, @sock_ops=0x3, r1, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000480)=[r4], &(0x7f00000004c0)=[{0x4, 0x5, 0x7, 0x7}, {0x1, 0x3, 0x4, 0x2}, {0x0, 0x1, 0xf, 0x2}, {0x2, 0x4, 0x6, 0x9474df998a913010}, {0x2, 0x3, 0xd, 0x8543372db8b6b459}, {0x1, 0x2, 0xf, 0x7}, {0x3, 0x5, 0xe, 0x2}, {0x0, 0x5, 0x5, 0x1}, {0x2, 0x5, 0xf}], 0x10, 0xc}, 0x94) 1.207818543s ago: executing program 1 (id=2141): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x440, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0a00fe00ffffffdb03000040000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) getpid() r0 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000011000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001b2c8a89de0778ebc5b4d1d40f3f7d71d2c50000000038f4b5ecdb9f182440b0f0397ab3f4af7dfb577bff27da742afbe8edaa94e2400fa2d3b8551733e182317775179b4463345eaeea6446b6c6e5b27b0e3eb775a5bd72749401eccac1a7c74a8814b9ae9a048e6d"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x6}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000a00fe05000000", 0x25}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1ab2b2b6f2dcd0b5b5935c360149c52fd45fec45f0cf2728205888adff194e419157", 0x8a}], 0x2, 0x0, 0x0, 0x7400}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="180000006fcdc4f436ce2df80000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010040f8ffffffb702000008000000b703000000000000850000000600000018010000646c6c2500000000002000207b1af8ff0000003832fbc7cae2c9f80007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r5, r3, 0x8, 0x10, 0x0, @void, @value=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x13, 0x4, 0xaee, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.026592381s ago: executing program 2 (id=2142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001004900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000090000000000000000000000791071915e00007f0b395d9743a5136608000000000095000000000000007f3ede10aaa59f421f36516b48b24a81068241043e655efc901c1e5820b559f925a00b3ada14ce60520ef788173affe9cbea809912f8f209fcbbd014d6a77d4e79218de9c59c022862fce21b34e91a5103f131a34695447ce81bc2c8f904a6066546574c86a06c84ad7c6ac844dde873578e1f798aa4f05fa0219a739891fcc59014652796fdfd0117413233f1068dfa96fdc94919067e6cf93ceea1c7dd6f308187baa2573680a3ec570433c661d3593761e9d216da68532585e0034d9d548f9ec875d0bfe4f96e88aa0ac2d59374d5cfeba42fce"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000005000000731123000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRES16=r0, @ANYRESHEX=r0], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94) 926.954166ms ago: executing program 2 (id=2143): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000f"], 0x0, 0x44}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050001000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000008f21f8ff00000000bfa200000000000007020000f8ffffffb70300000800150000b704000000000000850000000300000195000000000000006066d486070f16efdbc69303352293510cd7047f122c8843925c8356eda1e6d19e311ce95d7808d5cb602bfcde94f78ab1132909ba3672a047f09c4a5cea421a5106dae5ec32ee127e422d788d80ae9c35df8309ff7f00001c00f3475a959fe06cd1a6516259e772860f657c984a49366fdfe041df999d1512d1153f4ca5a3e1bce8"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000040), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 856.11137ms ago: executing program 1 (id=2144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xa, 0x4, 0x8, 0xf, 0x102}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r0}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f0000000140)="6177af87ca7aa6f1fa2b353f7251655e7cac479d5b77665a212cf968884a229d638f7b5aee078ebf81415f2030abfa9ddd0c70cedf92fba49c587ed4080e5481cab284558824f96219c70be504a8ab1aaec49b5ae55bf11838f6f21045c3d004310c53a3bf432f4a56639365c2c9b5a6602fa267d7bca34dd1038df29996c88d03c7a6", &(0x7f0000000280)=""/179}, 0x20) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async, rerun: 64) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x20128000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) (async, rerun: 32) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x5411, 0x0) 781.479083ms ago: executing program 2 (id=2145): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@map, 0xffffffffffffffff, 0x7}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd0000010064000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 558.501204ms ago: executing program 2 (id=2146): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x8}, 0x19510, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) recvmsg$kcm(r1, 0x0, 0x10021) socket$kcm(0x10, 0x2, 0x0) socketpair(0x0, 0x80000, 0x7, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="140000001d000b63d25a80648c2594f90524fc60a5b15ee4ee87c1ea085845bda7d3616ea050ec7ce5e948e4e3c3588f93beb078d33a167eaaeacf45853b5f8fd2c573", 0x43}], 0x1, 0x0, 0x0, 0x4000}, 0x4004000) 224.03416ms ago: executing program 2 (id=2147): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x4098, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705021d59feff00060000", 0xb}], 0x1}, 0x0) sendmsg$inet(r0, 0x0, 0x20000080) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x78) 193.720511ms ago: executing program 3 (id=2148): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0xb1850, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x88e0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x6a) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$kcm(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)="97b0", 0x2}], 0x1}, 0x10) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1650}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x3, 0x8, 0x8, 0x4b9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x800000f, 0xffffffffffffffff, 0x3) 61.215787ms ago: executing program 0 (id=2149): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71183d000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="312d380aad"], 0x31) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00( \x00\x00\x00', @ANYRES8=r4], 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r9, &(0x7f0000000180)}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf}, 0x18) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000340)={0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4c20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0x24006990) 0s ago: executing program 2 (id=2150): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe800000000000"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000003dfd040008001e000000400000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0xa}, 0x1040, 0x4, 0x4, 0x0, 0x2, 0x2, 0xffff, 0x0, 0xfffffffa, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{}, &(0x7f0000001140), &(0x7f00000011c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x6c030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0x3) kernel console output (not intermixed with test programs): E with no NLM_F_CREATE or NLM_F_REPLACE [ 176.985990][ T7305] IPv6: NLM_F_CREATE should be set when creating new route [ 176.993364][ T7305] IPv6: NLM_F_CREATE should be set when creating new route [ 177.000717][ T7305] IPv6: NLM_F_CREATE should be set when creating new route [ 177.020476][ T7308] netlink: 'syz.0.372': attribute type 39 has an invalid length. [ 177.202459][ T7307] netlink: 'syz.0.372': attribute type 9 has an invalid length. [ 177.216454][ T7307] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.372'. [ 177.532989][ T7324] netlink: 'syz.2.378': attribute type 1 has an invalid length. [ 177.553721][ T7324] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.378'. [ 177.799868][ T7336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.381'. [ 177.859800][ T7337] netlink: 'syz.3.380': attribute type 28 has an invalid length. [ 177.875905][ T7336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.883684][ T7336] IPv6: NLM_F_CREATE should be set when creating new route [ 177.891678][ T7336] IPv6: NLM_F_CREATE should be set when creating new route [ 177.899332][ T7336] IPv6: NLM_F_CREATE should be set when creating new route [ 177.922435][ T7337] netlink: 'syz.3.380': attribute type 29 has an invalid length. [ 177.930338][ T7337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.380'. [ 177.975556][ T7340] netlink: 'syz.1.381': attribute type 9 has an invalid length. [ 178.000906][ T7340] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.381'. [ 178.032907][ T4436] wlan1: Trigger new scan to find an IBSS to join [ 178.056022][ T7343] netlink: 'syz.2.383': attribute type 5 has an invalid length. [ 178.317809][ T7335] syzkaller0: entered promiscuous mode [ 178.327086][ T7335] syzkaller0: entered allmulticast mode [ 178.348606][ T7344] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.383'. [ 178.363011][ T7349] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 178.371214][ T7346] netlink: 'syz.2.383': attribute type 5 has an invalid length. [ 178.384828][ T7345] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.383'. [ 178.394298][ T7349] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.384'. [ 181.296744][ T7401] validate_nla: 6 callbacks suppressed [ 181.296761][ T7401] netlink: 'syz.3.400': attribute type 21 has an invalid length. [ 181.333963][ T7401] __nla_validate_parse: 1 callbacks suppressed [ 181.333979][ T7401] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.400'. [ 182.255412][ T7396] syzkaller0: entered promiscuous mode [ 182.278054][ T7396] syzkaller0: entered allmulticast mode [ 182.344521][ T7410] netlink: 'syz.3.402': attribute type 39 has an invalid length. [ 182.390416][ T7412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.403'. [ 183.105598][ T6483] wlan1: Trigger new scan to find an IBSS to join [ 184.169545][ T6483] wlan1: Creating new IBSS network, BSSID d6:88:90:9e:9c:c1 [ 184.644852][ T7432] netlink: 'syz.3.407': attribute type 3 has an invalid length. [ 184.656120][ T7432] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 184.677019][ T7432] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.407'. [ 184.930034][ T6482] tipc: Subscription rejected, illegal request [ 187.159316][ T7467] netlink: 128 bytes leftover after parsing attributes in process `syz.0.416'. [ 187.170486][ T7467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.627744][ T7478] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.420'. [ 187.678732][ T7478] nbd: must specify a device to reconfigure [ 187.972024][ T7487] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 187.980669][ T7487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.423'. [ 187.999121][ T7487] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 188.011470][ T7487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.260818][ T7492] netlink: 'syz.0.425': attribute type 29 has an invalid length. [ 188.269164][ T7492] netlink: 'syz.0.425': attribute type 29 has an invalid length. [ 188.280352][ T7492] netlink: 'syz.0.425': attribute type 29 has an invalid length. [ 188.825932][ T7525] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.432'. [ 188.890792][ T7522] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.432'. [ 188.962824][ T7522] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.432'. [ 189.038959][ T7521] netlink: 'syz.1.431': attribute type 1 has an invalid length. [ 189.047124][ T7521] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.431'. [ 189.079393][ T7522] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.432'. [ 189.142110][ T7521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.178389][ T7521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.190271][ T7521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.203781][ T7521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.212074][ T7521] batman_adv: batadv0: Removing interface: netdevsim0 [ 189.588212][ T7538] sit0: entered allmulticast mode [ 189.616757][ T7533] sit0: entered promiscuous mode [ 190.467566][ T7551] netlink: 'syz.1.439': attribute type 21 has an invalid length. [ 191.859735][ T7602] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.450'. [ 191.904878][ T7602] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 192.447811][ T7617] netlink: 'syz.1.457': attribute type 3 has an invalid length. [ 192.480195][ T7617] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.457'. [ 193.487015][ T7615] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.456'. [ 193.851898][ T7643] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.465'. [ 193.939038][ T7643] netlink: 196 bytes leftover after parsing attributes in process `syz.0.465'. [ 193.961920][ T7651] netlink: 'syz.3.467': attribute type 2 has an invalid length. [ 193.989072][ T7651] netlink: 'syz.3.467': attribute type 8 has an invalid length. [ 194.002714][ T7651] netlink: 132 bytes leftover after parsing attributes in process `syz.3.467'. [ 194.423338][ T7657] netlink: 'syz.0.470': attribute type 10 has an invalid length. [ 194.442546][ T7657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.470'. [ 194.597951][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606704][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.864161][ T7667] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.473'. [ 194.881625][ T7667] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.473'. [ 194.899894][ T7667] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.473'. [ 194.917997][ T7664] netlink: 830 bytes leftover after parsing attributes in process `syz.1.471'. [ 194.933648][ T7663] netlink: 'syz.1.471': attribute type 10 has an invalid length. [ 194.973967][ T7663] team0: Device hsr_slave_0 failed to register rx_handler [ 195.096344][ T7672] netlink: 'syz.2.474': attribute type 3 has an invalid length. [ 195.381962][ T7680] syzkaller0: entered promiscuous mode [ 195.408419][ T7680] syzkaller0: entered allmulticast mode [ 197.747902][ T7685] sit0: entered allmulticast mode [ 197.772698][ T7684] sit0: entered promiscuous mode [ 197.944220][ T7715] __nla_validate_parse: 31 callbacks suppressed [ 197.944236][ T7715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.487'. [ 198.625457][ T7740] netlink: 'syz.2.496': attribute type 21 has an invalid length. [ 198.642476][ T7740] netlink: 'syz.2.496': attribute type 19 has an invalid length. [ 198.650381][ T7740] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.496'. [ 198.964639][ T7758] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 198.977866][ T7758] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.499'. [ 200.276532][ T7787] netlink: 'syz.2.506': attribute type 29 has an invalid length. [ 200.296723][ T7792] netlink: 'syz.2.506': attribute type 29 has an invalid length. [ 200.306678][ T7790] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.504'. [ 200.346538][ T7790] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 200.373033][ T7787] netlink: 'syz.2.506': attribute type 29 has an invalid length. [ 200.483764][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 200.523008][ T7795] netlink: 128 bytes leftover after parsing attributes in process `syz.0.507'. [ 200.582424][ T7795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.433910][ T7801] netlink: 'syz.1.508': attribute type 22 has an invalid length. [ 201.479290][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 201.511823][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.520554][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.541006][ T7805] bridge0: entered allmulticast mode [ 201.603547][ T7803] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.510'. [ 201.773585][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.780868][ T7808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.788493][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.795736][ T7808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.913094][ T7808] bridge0: entered promiscuous mode [ 202.495326][ T7825] netlink: 22 bytes leftover after parsing attributes in process `syz.3.515'. [ 202.668525][ T7828] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 202.752658][ T7828] veth1_macvtap: left promiscuous mode [ 203.993189][ T7866] netlink: 68 bytes leftover after parsing attributes in process `syz.0.522'. [ 204.572609][ T7878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.525'. [ 205.186248][ T7893] netlink: 'syz.2.529': attribute type 39 has an invalid length. [ 205.355298][ T7893] hsr_slave_1 (unregistering): left promiscuous mode [ 205.509071][ T7900] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 205.947622][ T7900] team0 (unregistering): Port device C removed [ 206.127316][ T7900] team0 (unregistering): Port device team_slave_1 removed [ 206.211774][ T7899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.451368][ T7913] netlink: 'syz.3.535': attribute type 10 has an invalid length. [ 206.519784][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.544268][ T7913] bridge_slave_1: left allmulticast mode [ 206.555955][ T7913] bridge_slave_1: left promiscuous mode [ 206.570450][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.833254][ T7883] Bluetooth: hci3: command 0x0406 tx timeout [ 206.839535][ T7883] Bluetooth: hci0: command 0x0406 tx timeout [ 206.845685][ T7883] Bluetooth: hci1: command 0x0406 tx timeout [ 206.851745][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 207.011995][ T7934] sctp: [Deprecated]: syz.3.540 (pid 7934) Use of int in maxseg socket option. [ 207.011995][ T7934] Use struct sctp_assoc_value instead [ 207.413670][ T7945] netlink: 100 bytes leftover after parsing attributes in process `syz.0.544'. [ 208.320150][ T7973] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 208.448339][ T7973] team0 (unregistering): Port device team_slave_0 removed [ 208.476017][ T7973] team0 (unregistering): Port device team_slave_1 removed [ 208.752258][ T7980] netlink: 'syz.0.562': attribute type 27 has an invalid length. [ 209.055986][ T7984] syzkaller0: entered promiscuous mode [ 209.065506][ T7988] netlink: 'syz.0.557': attribute type 3 has an invalid length. [ 209.072886][ T7984] syzkaller0: entered allmulticast mode [ 209.080932][ T7988] netlink: 'syz.0.557': attribute type 1 has an invalid length. [ 209.089479][ T7988] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.557'. [ 209.099363][ T7986] netlink: 132 bytes leftover after parsing attributes in process `syz.3.556'. [ 209.310020][ T7998] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 209.321030][ T7998] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.559'. [ 209.340002][ T7998] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 212.334328][ T7994] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 212.341873][ T7994] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 212.666862][ T8022] netlink: 'syz.2.566': attribute type 27 has an invalid length. [ 212.735293][ T8026] netlink: 'syz.3.567': attribute type 3 has an invalid length. [ 212.752323][ T8026] netlink: 132 bytes leftover after parsing attributes in process `syz.3.567'. [ 212.774271][ T8028] netlink: 'syz.3.567': attribute type 12 has an invalid length. [ 212.786860][ T8028] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.567'. [ 213.096339][ T8040] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.571'. [ 213.242138][ T8051] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.573'. [ 213.555225][ T8056] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 213.563415][ T8056] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 213.630642][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 53 [ 213.701229][ T8063] netlink: 'syz.2.578': attribute type 21 has an invalid length. [ 213.783385][ T8064] netlink: 'syz.3.577': attribute type 27 has an invalid length. [ 213.871991][ T8067] netlink: 'syz.1.579': attribute type 10 has an invalid length. [ 213.933218][ T8067] syz_tun: entered promiscuous mode [ 213.960612][ T8067] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 214.610860][ T8082] netlink: 164 bytes leftover after parsing attributes in process `syz.1.583'. [ 214.646564][ T8082] netlink: 164 bytes leftover after parsing attributes in process `syz.1.583'. [ 215.385398][ T8100] netlink: 188 bytes leftover after parsing attributes in process `syz.3.588'. [ 215.507547][ T8104] netlink: 'syz.3.588': attribute type 3 has an invalid length. [ 215.570503][ T8104] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.588'. [ 216.223054][ T8120] netlink: 'syz.2.593': attribute type 4 has an invalid length. [ 216.237247][ T8120] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.593'. [ 218.627351][ T8124] netlink: 128 bytes leftover after parsing attributes in process `syz.1.595'. [ 218.655748][ T8124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.817371][ T8122] syzkaller0: entered promiscuous mode [ 218.842722][ T8122] syzkaller0: entered allmulticast mode [ 218.878879][ T8126] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.596'. [ 218.895177][ T8126] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.596'. [ 218.942108][ T8126] tipc: Started in network mode [ 218.955919][ T8126] tipc: Node identity b, cluster identity 57 [ 218.962793][ T8126] tipc: Node number set to 11 [ 223.490483][ T8195] syzkaller0: entered promiscuous mode [ 223.505055][ T8195] syzkaller0: entered allmulticast mode [ 223.606355][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.616168][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.625806][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.635460][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.645245][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.654840][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.664524][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.674335][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.684124][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.693985][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.703284][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.712849][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.722706][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.732036][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.741703][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 223.751080][ T8198] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 225.775424][ T8203] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.618'. [ 226.077836][ T8217] netlink: 'syz.0.619': attribute type 3 has an invalid length. [ 226.088854][ T8217] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.619'. [ 226.801576][ T8216] netlink: 'syz.2.621': attribute type 2 has an invalid length. [ 226.820681][ T8216] netlink: 132 bytes leftover after parsing attributes in process `syz.2.621'. [ 227.416455][ T8238] netlink: 'syz.0.628': attribute type 11 has an invalid length. [ 227.433113][ T8238] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 227.441033][ T8238] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 227.461075][ T8238] netlink: 'syz.0.628': attribute type 2 has an invalid length. [ 227.517800][ T8238] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.628'. [ 227.572546][ T8240] syzkaller0: entered promiscuous mode [ 227.579407][ T8240] syzkaller0: entered allmulticast mode [ 231.885297][ T8257] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 231.914623][ T8257] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.634'. [ 231.936606][ T8257] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 232.066470][ T8259] syzkaller0: entered promiscuous mode [ 232.077511][ T8259] syzkaller0: entered allmulticast mode [ 232.527586][ T8272] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.638'. [ 234.328701][ T8271] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 234.353054][ T8271] team0: Port device netdevsim0 added [ 234.359770][ T8273] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 234.390846][ T8273] team0: Port device netdevsim0 removed [ 234.430346][ T8273] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 234.520105][ T8279] netlink: 'syz.1.641': attribute type 2 has an invalid length. [ 234.538629][ T8279] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 234.693799][ T8281] syzkaller0: entered promiscuous mode [ 234.699380][ T8281] syzkaller0: entered allmulticast mode [ 234.715894][ T8288] netlink: 'syz.2.642': attribute type 21 has an invalid length. [ 236.379322][ T8289] netlink: 'syz.1.645': attribute type 10 has an invalid length. [ 236.387392][ T8289] netlink: 40 bytes leftover after parsing attributes in process `syz.1.645'. [ 236.396450][ T8289] team0: entered promiscuous mode [ 236.401523][ T8289] team_slave_0: entered promiscuous mode [ 236.407780][ T8289] team_slave_1: entered promiscuous mode [ 236.413814][ T8289] team0: entered allmulticast mode [ 236.419160][ T8289] team_slave_0: entered allmulticast mode [ 236.424993][ T8289] team_slave_1: entered allmulticast mode [ 236.431652][ T8289] bridge0: port 3(team0) entered blocking state [ 236.439971][ T8289] bridge0: port 3(team0) entered disabled state [ 236.453867][ T8289] bridge0: port 3(team0) entered blocking state [ 236.460339][ T8289] bridge0: port 3(team0) entered forwarding state [ 236.471911][ T8308] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.651'. [ 236.728272][ T8321] netlink: 'syz.0.652': attribute type 3 has an invalid length. [ 236.736440][ T8321] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.652'. [ 237.394593][ T8341] syzkaller0: entered promiscuous mode [ 237.401294][ T8341] syzkaller0: entered allmulticast mode [ 238.242206][ T8339] syz.1.660 (8339) used greatest stack depth: 18920 bytes left [ 238.500397][ T8353] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.665'. [ 239.024653][ T8345] ±ÿ: renamed from lo (while UP) [ 239.303077][ T8361] can: request_module (can-proto-0) failed. [ 240.110957][ T8385] netlink: 'syz.0.672': attribute type 1 has an invalid length. [ 240.119192][ T8385] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.672'. [ 240.770911][ T8399] syzkaller0: entered promiscuous mode [ 240.782619][ T8399] syzkaller0: entered allmulticast mode [ 244.392097][ T8414] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.680'. [ 245.839467][ T8454] syzkaller0: entered promiscuous mode [ 245.849691][ T8454] syzkaller0: entered allmulticast mode [ 245.868625][ T8455] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.690'. [ 247.745373][ T8471] syzkaller0: entered promiscuous mode [ 247.750931][ T8471] syzkaller0: entered allmulticast mode [ 247.841148][ T8481] netlink: 14 bytes leftover after parsing attributes in process `syz.3.699'. [ 247.945911][ T8481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.975379][ T8481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.993565][ T8481] bond0 (unregistering): Released all slaves [ 250.449548][ T8499] netlink: 'syz.1.703': attribute type 21 has an invalid length. [ 250.575832][ T8511] netlink: 'syz.3.704': attribute type 3 has an invalid length. [ 250.839119][ T8511] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.704'. [ 250.916573][ T8513] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 250.935888][ T8513] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.704'. [ 250.957954][ T8513] netlink: 9 bytes leftover after parsing attributes in process `syz.3.704'. [ 251.395209][ T8518] syzkaller0: entered promiscuous mode [ 251.412665][ T8518] syzkaller0: entered allmulticast mode [ 251.963564][ T8532] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 252.002657][ T8532] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.713'. [ 254.762428][ T8543] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.716'. [ 254.785791][ T8543] netlink: 4292 bytes leftover after parsing attributes in process `syz.0.716'. [ 254.815629][ T8543] netlink: 2 bytes leftover after parsing attributes in process `syz.0.716'. [ 254.835961][ T8543] tc_dump_action: action bad kind [ 254.920171][ T8559] netlink: 180 bytes leftover after parsing attributes in process `syz.3.720'. [ 255.286015][ T8576] netlink: 'syz.1.724': attribute type 21 has an invalid length. [ 255.303341][ T8576] netlink: 'syz.1.724': attribute type 4 has an invalid length. [ 255.321234][ T8576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.724'. [ 255.887879][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.895441][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.900890][ T8590] syzkaller0: entered promiscuous mode [ 255.908359][ T8590] syzkaller0: entered allmulticast mode [ 257.925578][ T8620] netlink: 'syz.2.736': attribute type 10 has an invalid length. [ 257.945534][ T8620] syz_tun: entered promiscuous mode [ 258.478679][ T8650] syzkaller0: entered promiscuous mode [ 258.484311][ T8650] syzkaller0: entered allmulticast mode [ 260.585077][ T8687] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.749'. [ 260.866099][ T8703] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 260.879375][ T8703] netlink: 'syz.2.754': attribute type 4 has an invalid length. [ 260.889038][ T8703] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.754'. [ 260.905021][ T8703] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 260.918254][ T8703] netlink: 'syz.2.754': attribute type 4 has an invalid length. [ 260.926785][ T8703] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.754'. [ 262.372254][ T8741] syzkaller0: entered promiscuous mode [ 262.436043][ T8741] syzkaller0: entered allmulticast mode [ 266.467180][ T8782] netlink: 'syz.0.775': attribute type 10 has an invalid length. [ 266.475430][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.775'. [ 266.498376][ T8782] batman_adv: batadv0: Adding interface: virt_wifi0 [ 266.506848][ T8782] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.543865][ T8782] batman_adv: batadv0: Interface activated: virt_wifi0 [ 266.720889][ T8787] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.776'. [ 266.731311][ T8787] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.776'. [ 266.747112][ T8785] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.776'. [ 267.034308][ T8793] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 267.051069][ T8793] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.778'. [ 267.060728][ T8793] netlink: 1 bytes leftover after parsing attributes in process `syz.0.778'. [ 267.195917][ T8795] syzkaller0: entered promiscuous mode [ 267.207736][ T8795] syzkaller0: entered allmulticast mode [ 267.255486][ T8799] netlink: 'syz.3.780': attribute type 2 has an invalid length. [ 267.283483][ T8797] netlink: 14 bytes leftover after parsing attributes in process `syz.3.780'. [ 269.405054][ T8799] netlink: 'syz.3.780': attribute type 21 has an invalid length. [ 270.471651][ T8846] syzkaller0: entered promiscuous mode [ 270.479804][ T8846] syzkaller0: entered allmulticast mode [ 270.617125][ T8850] netlink: 'syz.0.796': attribute type 12 has an invalid length. [ 270.625764][ T8850] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.796'. [ 272.114101][ T8849] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.796'. [ 272.285463][ T8855] netlink: 'syz.0.798': attribute type 49 has an invalid length. [ 272.871493][ T8875] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.804'. [ 273.017830][ T8876] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 [ 273.150841][ T8879] netlink: 'syz.0.806': attribute type 2 has an invalid length. [ 273.161924][ T8879] netlink: 'syz.0.806': attribute type 11 has an invalid length. [ 273.182540][ T8879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.806'. [ 273.428597][ T8882] syzkaller0: entered promiscuous mode [ 273.445003][ T8882] syzkaller0: entered allmulticast mode [ 277.254840][ T8922] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 277.261905][ T8922] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 277.518631][ T8933] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 277.563787][ T8933] macvlan0: entered promiscuous mode [ 277.618400][ T8933] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 277.749107][ T8941] netlink: 'syz.1.820': attribute type 21 has an invalid length. [ 277.772728][ T8941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.820'. [ 277.787265][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.820'. [ 278.124764][ T8957] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.824'. [ 278.211834][ T8957] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 279.073397][ T8968] syzkaller0: entered promiscuous mode [ 279.078963][ T8968] syzkaller0: entered allmulticast mode [ 281.341250][ T8973] netlink: 'syz.0.828': attribute type 10 has an invalid length. [ 281.349220][ T8973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.828'. [ 281.361632][ T8973] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 281.369061][ T8973] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.400308][ T8973] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 281.770472][ T8985] netlink: 'syz.1.831': attribute type 23 has an invalid length. [ 281.807021][ T8987] C: renamed from team_slave_0 [ 281.823881][ T8985] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.831'. [ 281.877880][ T8987] netlink: 'syz.2.832': attribute type 3 has an invalid length. [ 281.898490][ T8987] netlink: 152 bytes leftover after parsing attributes in process `syz.2.832'. [ 282.266797][ T5782] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 282.401486][ T9007] syzkaller0: entered promiscuous mode [ 282.420466][ T9007] syzkaller0: entered allmulticast mode [ 282.958465][ T9022] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.843'. [ 284.227981][ T9042] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 284.236390][ T9042] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.848'. [ 284.538543][ T9042] netlink: 'syz.2.848': attribute type 17 has an invalid length. [ 284.548066][ T9042] netlink: 'syz.2.848': attribute type 16 has an invalid length. [ 284.557010][ T9042] netlink: 152 bytes leftover after parsing attributes in process `syz.2.848'. [ 285.060450][ T9060] netlink: 208052 bytes leftover after parsing attributes in process `syz.0.855'. [ 285.105575][ T9064] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.852'. [ 285.840681][ T9082] syzkaller0: entered promiscuous mode [ 285.847609][ T9082] syzkaller0: entered allmulticast mode [ 286.274204][ T5782] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 286.283288][ T5782] Bluetooth: hci1: Injecting HCI hardware error event [ 286.291722][ T5085] Bluetooth: hci1: hardware error 0x00 [ 288.277905][ T9094] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 288.310562][ T9118] netlink: 'syz.3.867': attribute type 10 has an invalid length. [ 288.363083][ T5085] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 288.728683][ T9151] netlink: 'syz.2.876': attribute type 7 has an invalid length. [ 289.351184][ T9164] syzkaller0: entered promiscuous mode [ 289.358612][ T9164] syzkaller0: entered allmulticast mode [ 289.947099][ T9184] netlink: 'syz.2.885': attribute type 1 has an invalid length. [ 289.989799][ T9184] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.885'. [ 292.577913][ T9208] netlink: 'syz.2.889': attribute type 46 has an invalid length. [ 292.595098][ T9208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.889'. [ 292.789317][ T9213] syzkaller0: entered promiscuous mode [ 292.795848][ T9213] syzkaller0: entered allmulticast mode [ 293.184617][ T9230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.192204][ T9230] IPv6: NLM_F_CREATE should be set when creating new route [ 293.200126][ T9230] IPv6: NLM_F_CREATE should be set when creating new route [ 293.207786][ T9230] IPv6: NLM_F_CREATE should be set when creating new route [ 293.229945][ T9232] netlink: 'syz.0.900': attribute type 29 has an invalid length. [ 293.241963][ T9234] netlink: 'syz.2.898': attribute type 9 has an invalid length. [ 293.255913][ T9232] netlink: 'syz.0.900': attribute type 29 has an invalid length. [ 293.267792][ T9234] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.898'. [ 293.283132][ T9236] netlink: 'syz.0.900': attribute type 29 has an invalid length. [ 293.368171][ T9235] syzkaller0: entered promiscuous mode [ 293.376321][ T9235] syzkaller0: entered allmulticast mode [ 293.807932][ T9250] netlink: 'syz.0.905': attribute type 28 has an invalid length. [ 293.822579][ T9250] netlink: 'syz.0.905': attribute type 3 has an invalid length. [ 293.840164][ T9250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.905'. [ 294.883896][ T9280] netlink: 'syz.0.915': attribute type 9 has an invalid length. [ 294.922147][ T9280] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.915'. [ 295.596270][ T9264] netlink: 48 bytes leftover after parsing attributes in process `syz.3.909'. [ 295.767380][ T9288] netlink: 132 bytes leftover after parsing attributes in process `syz.3.916'. [ 296.693391][ T9324] syzkaller0: entered promiscuous mode [ 296.710402][ T9324] syzkaller0: entered allmulticast mode [ 299.183124][ T9363] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.939'. [ 299.677477][ T9387] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.945'. [ 299.725410][ T9389] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.945'. [ 300.175368][ T9394] syzkaller0: entered promiscuous mode [ 300.206870][ T9394] syzkaller0: entered allmulticast mode [ 302.216399][ T9407] netlink: 'syz.2.951': attribute type 33 has an invalid length. [ 302.224847][ T9407] netlink: 160 bytes leftover after parsing attributes in process `syz.2.951'. [ 302.591375][ T9420] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 302.602195][ T9420] netlink: 'syz.3.955': attribute type 6 has an invalid length. [ 302.610642][ T9420] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.955'. [ 303.108923][ T9430] netlink: 'syz.1.959': attribute type 5 has an invalid length. [ 303.242087][ T9440] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.961'. [ 303.307021][ T9440] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.961'. [ 303.323554][ T9440] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.961'. [ 303.356420][ T9440] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.961'. [ 303.370186][ T9440] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.961'. [ 303.387589][ T9440] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.961'. [ 303.399934][ T9440] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.961'. [ 303.414197][ T9440] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.961'. [ 303.510177][ T9444] syzkaller0: entered promiscuous mode [ 303.524391][ T9444] syzkaller0: entered allmulticast mode [ 305.809337][ T9495] netlink: 'syz.3.977': attribute type 39 has an invalid length. [ 306.785484][ T9508] syzkaller0: entered promiscuous mode [ 306.804332][ T9508] syzkaller0: entered allmulticast mode [ 306.937924][ T9512] syzkaller0: entered promiscuous mode [ 306.943686][ T9512] syzkaller0: entered allmulticast mode [ 307.638530][ T9519] delete_channel: no stack [ 310.109915][ T9523] __nla_validate_parse: 26 callbacks suppressed [ 310.109931][ T9523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.983'. [ 310.126293][ T9523] : renamed from virt_wifi0 [ 310.137374][ T9524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.983'. [ 310.158885][ T9533] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 310.168696][ T9542] netlink: 'syz.3.988': attribute type 3 has an invalid length. [ 310.178546][ T9542] netlink: 148 bytes leftover after parsing attributes in process `syz.3.988'. [ 310.310838][ T9545] netlink: 'syz.2.989': attribute type 10 has an invalid length. [ 310.637420][ T9553] syzkaller0: entered promiscuous mode [ 310.652810][ T9553] syzkaller0: entered allmulticast mode [ 310.739711][ T9558] net_ratelimit: 3313 callbacks suppressed [ 310.739737][ T9558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.919222][ T9576] netlink: 'syz.2.997': attribute type 3 has an invalid length. [ 311.930857][ T9576] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.997'. [ 312.482088][ T9579] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.997'. [ 312.502461][ T9579] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 312.778995][ T9588] netlink: 'syz.1.999': attribute type 11 has an invalid length. [ 312.788327][ T9586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.800151][ T9588] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.999'. [ 312.826407][ T9588] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 312.854350][ T9588] CPU: 1 PID: 9588 Comm: syz.1.999 Not tainted syzkaller #0 [ 312.861713][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.871822][ T9588] Call Trace: [ 312.875153][ T9588] [ 312.878134][ T9588] dump_stack_lvl+0x18c/0x250 [ 312.882889][ T9588] ? show_regs_print_info+0x20/0x20 [ 312.888143][ T9588] ? load_image+0x420/0x420 [ 312.892717][ T9588] sysfs_warn_dup+0x8e/0xa0 [ 312.897271][ T9588] sysfs_do_create_link_sd+0xc0/0x110 [ 312.902699][ T9588] device_add_class_symlinks+0x1cf/0x240 [ 312.908390][ T9588] device_add+0x4f9/0xc40 [ 312.912796][ T9588] wiphy_register+0x1d99/0x2ac0 [ 312.917728][ T9588] ? cfg80211_event_work+0x40/0x40 [ 312.922889][ T9588] ? minstrel_ht_alloc+0x88a/0x990 [ 312.928057][ T9588] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 312.934191][ T9588] ieee80211_register_hw+0x2dd8/0x3b30 [ 312.939712][ T9588] ? ieee80211_register_hw+0xfb1/0x3b30 [ 312.945320][ T9588] ? ieee80211_tasklet_handler+0x20/0x20 [ 312.951009][ T9588] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 312.956950][ T9588] ? __debug_object_init+0xec/0x450 [ 312.962198][ T9588] ? __asan_memset+0x22/0x40 [ 312.966833][ T9588] ? __hrtimer_init+0x189/0x270 [ 312.971699][ T9588] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 312.977445][ T9588] ? mac80211_hwsim_free+0x220/0x220 [ 312.982750][ T9588] ? rcu_is_watching+0x15/0xb0 [ 312.987557][ T9588] ? kstrndup+0xbd/0x140 [ 312.991850][ T9588] hwsim_new_radio_nl+0xdad/0x1a70 [ 312.997035][ T9588] ? __nla_validate+0x50/0x50 [ 313.001772][ T9588] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 313.008154][ T9588] ? __nla_parse+0x40/0x50 [ 313.012620][ T9588] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 313.019018][ T9588] genl_family_rcv_msg_doit+0x21a/0x310 [ 313.024630][ T9588] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 313.030583][ T9588] ? bpf_lsm_capable+0x9/0x10 [ 313.035272][ T9588] ? security_capable+0x89/0xb0 [ 313.040165][ T9588] genl_rcv_msg+0x611/0x7a0 [ 313.044694][ T9588] ? genl_bind+0x360/0x360 [ 313.049146][ T9588] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 313.055535][ T9588] ? ref_tracker_free+0x686/0x830 [ 313.060609][ T9588] ? __kasan_kmalloc_large+0x8b/0xa0 [ 313.065953][ T9588] netlink_rcv_skb+0x235/0x4c0 [ 313.070765][ T9588] ? genl_bind+0x360/0x360 [ 313.075231][ T9588] ? netlink_ack+0x1160/0x1160 [ 313.080037][ T9588] ? __lock_acquire+0x7d80/0x7d80 [ 313.085179][ T9588] ? down_read+0x1ac/0x2e0 [ 313.089621][ T9588] genl_rcv+0x28/0x40 [ 313.093661][ T9588] netlink_unicast+0x7b1/0x930 [ 313.098484][ T9588] netlink_sendmsg+0x8d0/0xbf0 [ 313.103306][ T9588] ? netlink_getsockopt+0x590/0x590 [ 313.108556][ T9588] ? apparmor_socket_sendmsg+0x8e/0x330 [ 313.114164][ T9588] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 313.119499][ T9588] ? security_socket_sendmsg+0x80/0xa0 [ 313.124978][ T9588] ? netlink_getsockopt+0x590/0x590 [ 313.130192][ T9588] ____sys_sendmsg+0x61b/0x980 [ 313.134985][ T9588] ? __asan_memset+0x22/0x40 [ 313.139609][ T9588] ? __sys_sendmsg_sock+0x30/0x30 [ 313.144684][ T9588] ? __import_iovec+0x5f2/0x850 [ 313.149581][ T9588] ? import_iovec+0x73/0xa0 [ 313.154116][ T9588] ___sys_sendmsg+0x2a6/0x360 [ 313.158846][ T9588] ? __sys_sendmsg+0x2b0/0x2b0 [ 313.163664][ T9588] ? trace_call_bpf+0xc3/0x6c0 [ 313.168463][ T9588] __se_sys_sendmsg+0x1d0/0x2c0 [ 313.173347][ T9588] ? __x64_sys_sendmsg+0x80/0x80 [ 313.178337][ T9588] ? lockdep_hardirqs_on+0x98/0x150 [ 313.183587][ T9588] do_syscall_64+0x55/0xb0 [ 313.188043][ T9588] ? clear_bhb_loop+0x40/0x90 [ 313.192768][ T9588] ? clear_bhb_loop+0x40/0x90 [ 313.197506][ T9588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.203456][ T9588] RIP: 0033:0x7fa3b3d9e159 [ 313.207890][ T9588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.227547][ T9588] RSP: 002b:00007fa3b4d5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.235999][ T9588] RAX: ffffffffffffffda RBX: 00007fa3b4025fa0 RCX: 00007fa3b3d9e159 [ 313.244010][ T9588] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 313.251996][ T9588] RBP: 00007fa3b3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 313.260059][ T9588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.268056][ T9588] R13: 00007fa3b4026038 R14: 00007fa3b4025fa0 R15: 00007ffc5d7352a8 [ 313.276086][ T9588] [ 314.034325][ T6232] wlan1: Trigger new scan to find an IBSS to join [ 314.479266][ T9619] syzkaller0: entered promiscuous mode [ 314.487907][ T9619] syzkaller0: entered allmulticast mode [ 314.787285][ T9627] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1008'. [ 317.151538][ T9643] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1011'. [ 317.319367][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.328008][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.448605][ T9651] netlink: 'syz.3.1013': attribute type 13 has an invalid length. [ 318.457773][ T9651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1013'. [ 319.073197][ T6483] wlan1: Trigger new scan to find an IBSS to join [ 319.274264][ T6469] wlan1: Creating new IBSS network, BSSID c6:dc:dd:23:21:f0 [ 319.477801][ T9682] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1019'. [ 319.617512][ T9690] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1021'. [ 319.668925][ T9690] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 319.724015][ T9693] syzkaller0: entered promiscuous mode [ 319.731410][ T9693] syzkaller0: entered allmulticast mode [ 319.859535][ T9694] syzkaller0: entered promiscuous mode [ 319.889688][ T9694] syzkaller0: entered allmulticast mode [ 322.867837][ T9709] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.1025'. [ 327.046173][ T9726] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1028'. [ 327.055669][ T9726] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 327.449144][ T9749] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1035'. [ 327.463930][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 327.778161][ T9756] syzkaller0: entered promiscuous mode [ 327.783799][ T9756] syzkaller0: entered allmulticast mode [ 329.663680][ T9784] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1043'. [ 329.685771][ T9784] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 329.726356][ T9787] netlink: 'syz.1.1044': attribute type 9 has an invalid length. [ 329.729860][ T9785] tap0: tun_chr_ioctl cmd 1074025676 [ 329.762734][ T9787] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1044'. [ 329.778352][ T9785] tap0: owner set to 776 [ 330.058118][ T9801] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1048'. [ 330.381177][ T9811] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1052'. [ 330.446791][ T9813] netlink: 'syz.3.1053': attribute type 12 has an invalid length. [ 330.458942][ T9813] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1053'. [ 330.619307][ T9815] netlink: 'syz.3.1053': attribute type 4 has an invalid length. [ 330.675370][ T9817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.755879][ T9820] netlink: 'syz.3.1055': attribute type 27 has an invalid length. [ 330.779561][ T9820] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1055'. [ 330.831521][ T9822] netlink: 134736 bytes leftover after parsing attributes in process `syz.2.1056'. [ 331.907703][ T9868] netlink: 'syz.0.1069': attribute type 2 has an invalid length. [ 331.916816][ T9868] netlink: 'syz.0.1069': attribute type 8 has an invalid length. [ 331.929247][ T9868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1069'. [ 332.811191][ T9901] syzkaller0: entered promiscuous mode [ 332.846669][ T9901] syzkaller0: entered allmulticast mode [ 336.424789][ T9942] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1090'. [ 336.569919][ T9942] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 336.958354][ T9956] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1092'. [ 337.139238][ T9956] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1092'. [ 337.459716][ T9972] syzkaller0: entered promiscuous mode [ 337.472247][ T9972] syzkaller0: entered allmulticast mode [ 338.175623][ T9998] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 339.917623][ T9983] netlink: 'syz.0.1099': attribute type 21 has an invalid length. [ 339.925924][ T9983] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1099'. [ 339.937864][ T9993] netlink: 'syz.0.1099': attribute type 21 has an invalid length. [ 339.946335][ T9993] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1099'. [ 340.110104][T10021] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1107'. [ 340.401229][T10035] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1112'. [ 340.450034][T10040] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1113'. [ 340.491343][T10040] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 340.518541][ T5085] Bluetooth: hci0: ISO packet for unknown connection handle 55 [ 341.014105][T10056] syzkaller0: entered promiscuous mode [ 341.025019][T10056] syzkaller0: entered allmulticast mode [ 343.517555][T10080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1124'. [ 343.722407][T10107] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1130'. [ 344.072903][T10107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.140031][T10107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.226734][T10107] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 344.254297][T10107] bond0 (unregistering): Released all slaves [ 344.286135][T10109] netlink: 'syz.1.1130': attribute type 23 has an invalid length. [ 344.435860][T10126] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1136'. [ 344.621474][T10127] delete_channel: no stack [ 344.984269][T10141] syzkaller0: entered promiscuous mode [ 345.010010][T10141] syzkaller0: entered allmulticast mode [ 348.284581][T10165] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 348.343517][T10170] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 348.442152][T10172] netlink: 'syz.0.1148': attribute type 17 has an invalid length. [ 348.451290][T10172] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1148'. [ 348.475990][T10172] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 349.528376][T10194] syzkaller0: entered promiscuous mode [ 349.534420][T10194] syzkaller0: entered allmulticast mode [ 349.545205][T10195] syzkaller0: entered promiscuous mode [ 349.551016][T10195] syzkaller0: entered allmulticast mode [ 349.696562][T10206] FAULT_INJECTION: forcing a failure. [ 349.696562][T10206] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 349.710446][T10206] CPU: 0 PID: 10206 Comm: syz.0.1157 Not tainted syzkaller #0 [ 349.717963][T10206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.728039][T10206] Call Trace: [ 349.731336][T10206] [ 349.734295][T10206] dump_stack_lvl+0x18c/0x250 [ 349.739037][T10206] ? show_regs_print_info+0x20/0x20 [ 349.744279][T10206] ? load_image+0x420/0x420 [ 349.748817][T10206] ? __might_fault+0xaa/0x120 [ 349.753515][T10206] ? __lock_acquire+0x7d80/0x7d80 [ 349.758597][T10206] should_fail_ex+0x394/0x4c0 [ 349.763324][T10206] _copy_from_user+0x2f/0xe0 [ 349.767979][T10206] ___sys_sendmsg+0x1c7/0x360 [ 349.772707][T10206] ? get_pid_task+0x20/0x1e0 [ 349.777351][T10206] ? __sys_sendmsg+0x2b0/0x2b0 [ 349.782179][T10206] ? __lock_acquire+0x7d80/0x7d80 [ 349.787264][T10206] __se_sys_sendmsg+0x1d0/0x2c0 [ 349.792173][T10206] ? __x64_sys_sendmsg+0x80/0x80 [ 349.797167][T10206] ? lockdep_hardirqs_on+0x98/0x150 [ 349.802414][T10206] do_syscall_64+0x55/0xb0 [ 349.806874][T10206] ? clear_bhb_loop+0x40/0x90 [ 349.811582][T10206] ? clear_bhb_loop+0x40/0x90 [ 349.816276][T10206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.822229][T10206] RIP: 0033:0x7f7874d9e159 [ 349.826770][T10206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.846413][T10206] RSP: 002b:00007f7872ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.854864][T10206] RAX: ffffffffffffffda RBX: 00007f7875025fa0 RCX: 00007f7874d9e159 [ 349.862877][T10206] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 0000000000000003 [ 349.870878][T10206] RBP: 00007f7872ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.878875][T10206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.886911][T10206] R13: 00007f7875026038 R14: 00007f7875025fa0 R15: 00007ffd42f6ffc8 [ 349.894949][T10206] [ 351.765339][T10230] netlink: 'syz.1.1162': attribute type 11 has an invalid length. [ 351.797952][T10233] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1165'. [ 351.812815][T10233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.838451][T10235] FAULT_INJECTION: forcing a failure. [ 351.838451][T10235] name failslab, interval 1, probability 0, space 0, times 1 [ 351.855058][T10235] CPU: 0 PID: 10235 Comm: syz.0.1166 Not tainted syzkaller #0 [ 351.862575][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.872674][T10235] Call Trace: [ 351.875986][T10235] [ 351.878948][T10235] dump_stack_lvl+0x18c/0x250 [ 351.883674][T10235] ? show_regs_print_info+0x20/0x20 [ 351.888948][T10235] ? load_image+0x420/0x420 [ 351.893504][T10235] ? __lock_acquire+0x7d80/0x7d80 [ 351.898589][T10235] should_fail_ex+0x394/0x4c0 [ 351.903327][T10235] should_failslab+0x9/0x20 [ 351.907879][T10235] slab_pre_alloc_hook+0x59/0x300 [ 351.912969][T10235] ? iovec_from_user+0x87/0x240 [ 351.917883][T10235] ? iovec_from_user+0x87/0x240 [ 351.922781][T10235] __kmem_cache_alloc_node+0x53/0x250 [ 351.928199][T10235] ? iovec_from_user+0x87/0x240 [ 351.933114][T10235] __kmalloc+0xa7/0x240 [ 351.937321][T10235] iovec_from_user+0x87/0x240 [ 351.942047][T10235] __import_iovec+0x13d/0x850 [ 351.946776][T10235] import_iovec+0x73/0xa0 [ 351.951164][T10235] ___sys_sendmsg+0x256/0x360 [ 351.955890][T10235] ? get_pid_task+0x20/0x1e0 [ 351.960543][T10235] ? __sys_sendmsg+0x2b0/0x2b0 [ 351.965373][T10235] ? __lock_acquire+0x7d80/0x7d80 [ 351.970467][T10235] __se_sys_sendmsg+0x1d0/0x2c0 [ 351.975370][T10235] ? __x64_sys_sendmsg+0x80/0x80 [ 351.980373][T10235] ? lockdep_hardirqs_on+0x98/0x150 [ 351.985615][T10235] do_syscall_64+0x55/0xb0 [ 351.990075][T10235] ? clear_bhb_loop+0x40/0x90 [ 351.994795][T10235] ? clear_bhb_loop+0x40/0x90 [ 351.999542][T10235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.005477][T10235] RIP: 0033:0x7f7874d9e159 [ 352.009925][T10235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.029572][T10235] RSP: 002b:00007f7872ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.038035][T10235] RAX: ffffffffffffffda RBX: 00007f7875025fa0 RCX: 00007f7874d9e159 [ 352.046047][T10235] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 0000000000000003 [ 352.054064][T10235] RBP: 00007f7872ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.062080][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.070090][T10235] R13: 00007f7875026038 R14: 00007f7875025fa0 R15: 00007ffd42f6ffc8 [ 352.078129][T10235] [ 353.460090][T10261] syzkaller0: entered promiscuous mode [ 353.465909][T10261] syzkaller0: entered allmulticast mode [ 354.646486][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1175'. [ 355.538364][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1175'. [ 355.826460][T10291] FAULT_INJECTION: forcing a failure. [ 355.826460][T10291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.852636][T10291] CPU: 0 PID: 10291 Comm: syz.1.1177 Not tainted syzkaller #0 [ 355.860192][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.870310][T10291] Call Trace: [ 355.873663][T10291] [ 355.876663][T10291] dump_stack_lvl+0x18c/0x250 [ 355.881435][T10291] ? show_regs_print_info+0x20/0x20 [ 355.886699][T10291] ? load_image+0x420/0x420 [ 355.891256][T10291] ? __lock_acquire+0x7d80/0x7d80 [ 355.896320][T10291] ? snprintf+0xe9/0x140 [ 355.900624][T10291] should_fail_ex+0x394/0x4c0 [ 355.905377][T10291] _copy_to_user+0x2f/0xa0 [ 355.909839][T10291] simple_read_from_buffer+0xe7/0x150 [ 355.915272][T10291] proc_fail_nth_read+0x1e8/0x260 [ 355.920350][T10291] ? proc_fault_inject_write+0x360/0x360 [ 355.926035][T10291] ? fsnotify_perm+0x271/0x5e0 [ 355.930851][T10291] ? proc_fault_inject_write+0x360/0x360 [ 355.936539][T10291] vfs_read+0x298/0x990 [ 355.940755][T10291] ? kernel_read+0x1e0/0x1e0 [ 355.945393][T10291] ? __fget_files+0x28/0x460 [ 355.950028][T10291] ? __fget_files+0x3fc/0x460 [ 355.954790][T10291] ? __fdget_pos+0x2a3/0x330 [ 355.959417][T10291] ? ksys_read+0x74/0x260 [ 355.963800][T10291] ksys_read+0x151/0x260 [ 355.968104][T10291] ? vfs_write+0x9a0/0x9a0 [ 355.972587][T10291] ? lockdep_hardirqs_on+0x98/0x150 [ 355.977835][T10291] do_syscall_64+0x55/0xb0 [ 355.982305][T10291] ? clear_bhb_loop+0x40/0x90 [ 355.987035][T10291] ? clear_bhb_loop+0x40/0x90 [ 355.991769][T10291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.997708][T10291] RIP: 0033:0x7fa3b3d5e98e [ 356.002171][T10291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.021815][T10291] RSP: 002b:00007fa3b4d3bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.030278][T10291] RAX: ffffffffffffffda RBX: 00007fa3b4d3c6c0 RCX: 00007fa3b3d5e98e [ 356.038319][T10291] RDX: 000000000000000f RSI: 00007fa3b4d3c0a0 RDI: 0000000000000004 [ 356.046352][T10291] RBP: 00007fa3b4d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 356.054387][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.062407][T10291] R13: 00007fa3b4026128 R14: 00007fa3b4026090 R15: 00007ffc5d7352a8 [ 356.070477][T10291] [ 356.098678][T10292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1179'. [ 356.110254][T10292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1179'. [ 356.162652][T10293] netlink: 'syz.3.1178': attribute type 3 has an invalid length. [ 356.170854][T10293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1178'. [ 356.976879][T10305] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 357.035260][T10305] macvlan0: entered promiscuous mode [ 357.371843][T10313] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1185'. [ 357.484181][T10313] netlink: 'syz.1.1185': attribute type 10 has an invalid length. [ 357.504091][T10313] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1185'. [ 357.559033][T10313] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 357.588955][T10313] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1185'. [ 357.687784][T10319] syzkaller0: entered promiscuous mode [ 357.693810][T10319] syzkaller0: entered allmulticast mode [ 358.547637][T10341] delete_channel: no stack [ 360.871032][T10378] netlink: 'syz.0.1201': attribute type 10 has an invalid length. [ 360.916351][T10378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1201'. [ 361.844678][T10393] syzkaller0: entered promiscuous mode [ 361.850634][T10393] syzkaller0: entered allmulticast mode [ 364.626434][T10432] netlink: 'syz.3.1215': attribute type 10 has an invalid length. [ 364.660105][T10432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1215'. [ 364.709139][T10432] netlink: 'syz.3.1215': attribute type 10 has an invalid length. [ 364.719505][T10432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1215'. [ 364.756193][T10427] tun0: tun_chr_ioctl cmd 1074812117 [ 365.003953][T10445] netlink: 'syz.2.1221': attribute type 2 has an invalid length. [ 365.032580][T10445] netlink: 'syz.2.1221': attribute type 1 has an invalid length. [ 365.056008][T10445] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1221'. [ 365.115009][T10446] sit0: left promiscuous mode [ 365.197529][T10450] syz.1.1223[10450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.198439][T10450] syz.1.1223[10450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.462937][T10448] syzkaller0: entered promiscuous mode [ 365.496043][T10448] syzkaller0: entered allmulticast mode [ 365.889700][T10466] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1228'. [ 368.232053][T10463] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1226'. [ 368.242899][T10469] netlink: 'syz.2.1226': attribute type 10 has an invalid length. [ 368.250777][T10469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1226'. [ 368.259909][T10469] dummy0: entered promiscuous mode [ 368.265117][T10469] dummy0: entered allmulticast mode [ 368.271079][T10469] bridge0: port 2(dummy0) entered blocking state [ 368.292474][T10469] bridge0: port 2(dummy0) entered disabled state [ 368.301567][T10469] bridge0: port 2(dummy0) entered blocking state [ 368.308086][T10469] bridge0: port 2(dummy0) entered forwarding state [ 368.332432][T10484] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 368.340200][T10484] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1232'. [ 368.541127][T10492] netlink: 'syz.1.1235': attribute type 27 has an invalid length. [ 368.577662][T10492] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1235'. [ 369.371500][T10507] syzkaller0: entered promiscuous mode [ 369.377408][T10507] syzkaller0: entered allmulticast mode [ 369.546103][T10512] syzkaller0: entered promiscuous mode [ 369.572420][T10512] syzkaller0: entered allmulticast mode [ 371.357031][T10532] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1245'. [ 371.538687][T10543] netlink: 'syz.0.1248': attribute type 9 has an invalid length. [ 371.564484][T10543] netlink: 'syz.0.1248': attribute type 23 has an invalid length. [ 371.590629][T10543] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.1248'. [ 371.690099][T10559] netlink: 'syz.0.1248': attribute type 9 has an invalid length. [ 371.710819][T10559] netlink: 'syz.0.1248': attribute type 23 has an invalid length. [ 371.730955][T10559] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.1248'. [ 376.881538][T10613] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1263'. [ 377.035677][T10613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.797151][T10638] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1268'. [ 378.777302][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.783903][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.348483][T10648] syzkaller0: entered promiscuous mode [ 379.375709][T10648] syzkaller0: entered allmulticast mode [ 379.579778][T10665] netlink: 'syz.2.1273': attribute type 3 has an invalid length. [ 379.587899][T10665] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1273'. [ 381.181274][T10643] netlink: 'syz.3.1271': attribute type 10 has an invalid length. [ 381.190066][T10643] veth0_vlan: entered allmulticast mode [ 382.564874][T10697] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1282'. [ 382.682098][T10697] netlink: 'syz.3.1282': attribute type 23 has an invalid length. [ 382.822497][T10707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1286'. [ 382.862725][T10707] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1286'. [ 382.900976][T10708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1286'. [ 383.089685][T10714] syzkaller0: entered promiscuous mode [ 383.122388][T10714] syzkaller0: entered allmulticast mode [ 383.430043][T10727] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1292'. [ 383.441504][T10727] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 386.372057][T10722] delete_channel: no stack [ 389.405036][T10797] syzkaller0: entered promiscuous mode [ 389.422458][T10797] syzkaller0: entered allmulticast mode [ 389.436335][T10798] vcan0: entered allmulticast mode [ 389.467554][T10804] netlink: 'syz.3.1308': attribute type 10 has an invalid length. [ 389.486436][T10804] veth0_macvtap: left promiscuous mode [ 391.627837][T10822] syzkaller0: entered promiscuous mode [ 391.642483][T10822] syzkaller0: entered allmulticast mode [ 391.763996][T10828] netlink: 'syz.0.1315': attribute type 3 has an invalid length. [ 391.771818][T10828] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 391.792360][T10828] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1315'. [ 392.944633][T10841] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1318'. [ 394.582565][T10833] netlink: 'syz.2.1317': attribute type 7 has an invalid length. [ 394.590394][T10833] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1317'. [ 394.647881][T10844] vcan0: entered allmulticast mode [ 394.666785][T10845] netlink: 'syz.1.1320': attribute type 10 has an invalid length. [ 394.680603][T10845] veth0_macvtap: left promiscuous mode [ 394.861985][T10852] syzkaller0: entered promiscuous mode [ 394.867795][T10852] syzkaller0: entered allmulticast mode [ 396.529629][T10870] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1327'. [ 397.322205][T10861] netlink: 'syz.2.1325': attribute type 2 has an invalid length. [ 397.330764][T10864] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1325'. [ 397.354670][T10864] bridge0: port 2(dummy0) entered disabled state [ 397.448022][T10864] bridge0: port 2(dummy0) entered disabled state [ 397.463677][T10865] netlink: 'syz.2.1325': attribute type 17 has an invalid length. [ 397.471595][T10865] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1325'. [ 397.493197][T10865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.520761][T10869] netlink: 'syz.3.1327': attribute type 39 has an invalid length. [ 397.904135][T10870] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1327'. [ 398.023974][T10889] IPv6: NLM_F_CREATE should be specified when creating new route [ 398.056773][T10889] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1330'. [ 398.854501][T10906] syzkaller0: entered promiscuous mode [ 398.860180][T10906] syzkaller0: entered allmulticast mode [ 399.313482][T10917] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1339'. [ 399.433180][T10919] netlink: 'syz.3.1342': attribute type 2 has an invalid length. [ 399.463600][T10919] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 399.529517][T10919] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1342'. [ 400.825405][T10932] netlink: 'syz.1.1345': attribute type 10 has an invalid length. [ 400.833599][T10932] netlink: 'syz.1.1345': attribute type 10 has an invalid length. [ 400.841583][T10932] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1345'. [ 400.851467][T10932] openvswitch: netlink: Message has 4 unknown bytes. [ 401.241112][T10920] sit0: entered allmulticast mode [ 402.079738][T10965] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 402.088539][T10965] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1354'. [ 402.186687][T10971] netlink: 'syz.2.1356': attribute type 10 has an invalid length. [ 402.197377][T10971] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.232531][T10967] delete_channel: no stack [ 402.447626][T10974] syzkaller0: entered promiscuous mode [ 402.456487][T10974] syzkaller0: entered allmulticast mode [ 402.883398][T10989] netlink: 'syz.1.1361': attribute type 10 has an invalid length. [ 402.891866][T10989] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1361'. [ 406.828115][T11032] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 407.248987][T11037] netlink: 'syz.3.1372': attribute type 10 has an invalid length. [ 407.261109][T11037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1372'. [ 407.271910][T11037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.490131][T11043] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 407.576118][T11041] netlink: 'syz.1.1374': attribute type 2 has an invalid length. [ 407.587234][T11041] netlink: 'syz.1.1374': attribute type 8 has an invalid length. [ 407.603767][T11041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1374'. [ 407.644362][T11041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1374'. [ 407.981086][T11062] syzkaller0: entered promiscuous mode [ 407.988117][T11062] syzkaller0: entered allmulticast mode [ 408.313113][T11074] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1383'. [ 408.643556][T11084] netlink: 'syz.0.1386': attribute type 29 has an invalid length. [ 409.995195][T11084] netlink: 'syz.0.1386': attribute type 29 has an invalid length. [ 410.429858][T11116] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1393'. [ 410.439618][T11116] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 410.574761][T11121] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1395'. [ 410.704724][T11121] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1395'. [ 410.715407][T11123] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1395'. [ 410.725642][T11122] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1395'. [ 411.163339][T11130] syzkaller0: entered promiscuous mode [ 411.168897][T11130] syzkaller0: entered allmulticast mode [ 411.176292][T11139] netlink: 'syz.0.1401': attribute type 10 has an invalid length. [ 411.200551][T11139] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1401'. [ 411.382483][T11151] delete_channel: no stack [ 411.396627][T11151] delete_channel: no stack [ 413.568645][T11196] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1414'. [ 413.594933][T11196] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 413.608345][T11196] CPU: 1 PID: 11196 Comm: syz.3.1414 Not tainted syzkaller #0 [ 413.615862][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.625947][T11196] Call Trace: [ 413.629269][T11196] [ 413.632237][T11196] dump_stack_lvl+0x18c/0x250 [ 413.636983][T11196] ? show_regs_print_info+0x20/0x20 [ 413.642243][T11196] ? load_image+0x420/0x420 [ 413.646990][T11196] sysfs_warn_dup+0x8e/0xa0 [ 413.651547][T11196] sysfs_do_create_link_sd+0xc0/0x110 [ 413.656965][T11196] device_add_class_symlinks+0x1cf/0x240 [ 413.662651][T11196] device_add+0x4f9/0xc40 [ 413.667029][T11196] wiphy_register+0x1d99/0x2ac0 [ 413.671967][T11196] ? cfg80211_event_work+0x40/0x40 [ 413.677133][T11196] ? minstrel_ht_alloc+0x88a/0x990 [ 413.682320][T11196] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 413.688452][T11196] ieee80211_register_hw+0x2dd8/0x3b30 [ 413.693976][T11196] ? ieee80211_register_hw+0xfb1/0x3b30 [ 413.699590][T11196] ? ieee80211_tasklet_handler+0x20/0x20 [ 413.705275][T11196] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 413.711213][T11196] ? __debug_object_init+0xec/0x450 [ 413.716459][T11196] ? __asan_memset+0x22/0x40 [ 413.721101][T11196] ? __hrtimer_init+0x189/0x270 [ 413.726004][T11196] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 413.731801][T11196] ? mac80211_hwsim_free+0x220/0x220 [ 413.737137][T11196] ? rcu_is_watching+0x15/0xb0 [ 413.741954][T11196] ? kstrndup+0xbd/0x140 [ 413.746259][T11196] hwsim_new_radio_nl+0xdad/0x1a70 [ 413.751430][T11196] ? __nla_validate+0x50/0x50 [ 413.756172][T11196] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 413.762563][T11196] ? __nla_parse+0x40/0x50 [ 413.767037][T11196] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 413.773436][T11196] genl_family_rcv_msg_doit+0x21a/0x310 [ 413.779056][T11196] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 413.785016][T11196] ? bpf_lsm_capable+0x9/0x10 [ 413.789724][T11196] ? security_capable+0x89/0xb0 [ 413.794623][T11196] genl_rcv_msg+0x611/0x7a0 [ 413.799190][T11196] ? genl_bind+0x360/0x360 [ 413.803680][T11196] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 413.810097][T11196] netlink_rcv_skb+0x235/0x4c0 [ 413.814903][T11196] ? genl_bind+0x360/0x360 [ 413.819369][T11196] ? netlink_ack+0x1160/0x1160 [ 413.824202][T11196] ? __lock_acquire+0x7d80/0x7d80 [ 413.829297][T11196] ? net_generic+0x1e/0x240 [ 413.833854][T11196] ? down_read+0x1ac/0x2e0 [ 413.838328][T11196] genl_rcv+0x28/0x40 [ 413.842359][T11196] netlink_unicast+0x7b1/0x930 [ 413.847179][T11196] netlink_sendmsg+0x8d0/0xbf0 [ 413.851993][T11196] ? netlink_getsockopt+0x590/0x590 [ 413.857236][T11196] ? apparmor_socket_sendmsg+0x8e/0x330 [ 413.862848][T11196] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 413.868179][T11196] ? security_socket_sendmsg+0x80/0xa0 [ 413.873674][T11196] ? netlink_getsockopt+0x590/0x590 [ 413.878920][T11196] ____sys_sendmsg+0x61b/0x980 [ 413.883771][T11196] ? __asan_memset+0x22/0x40 [ 413.888412][T11196] ? __sys_sendmsg_sock+0x30/0x30 [ 413.893480][T11196] ? __import_iovec+0x5f2/0x850 [ 413.898407][T11196] ? import_iovec+0x73/0xa0 [ 413.902980][T11196] ___sys_sendmsg+0x2a6/0x360 [ 413.907719][T11196] ? __sys_sendmsg+0x2b0/0x2b0 [ 413.912589][T11196] __se_sys_sendmsg+0x1d0/0x2c0 [ 413.917494][T11196] ? __x64_sys_sendmsg+0x80/0x80 [ 413.922504][T11196] ? lockdep_hardirqs_on+0x98/0x150 [ 413.927771][T11196] do_syscall_64+0x55/0xb0 [ 413.932232][T11196] ? clear_bhb_loop+0x40/0x90 [ 413.936959][T11196] ? clear_bhb_loop+0x40/0x90 [ 413.941691][T11196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.947638][T11196] RIP: 0033:0x7f1cbfb9e159 [ 413.952096][T11196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.971743][T11196] RSP: 002b:00007f1cc0af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.980190][T11196] RAX: ffffffffffffffda RBX: 00007f1cbfe26090 RCX: 00007f1cbfb9e159 [ 413.988191][T11196] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 413.996200][T11196] RBP: 00007f1cbfc3506b R08: 0000000000000000 R09: 0000000000000000 [ 414.004212][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.012228][T11196] R13: 00007f1cbfe26128 R14: 00007f1cbfe26090 R15: 00007ffc7519f7d8 [ 414.020278][T11196] [ 414.072393][T11205] netlink: 'syz.1.1418': attribute type 29 has an invalid length. [ 414.102352][T11205] netlink: 'syz.1.1418': attribute type 29 has an invalid length. [ 414.120441][T11205] netlink: 'syz.1.1418': attribute type 29 has an invalid length. [ 414.163481][T11205] netlink: 'syz.1.1418': attribute type 29 has an invalid length. [ 414.191146][T11205] netlink: 'syz.1.1418': attribute type 29 has an invalid length. [ 414.268900][T11207] netlink: 'syz.2.1417': attribute type 3 has an invalid length. [ 414.298127][T11210] netlink: 'syz.1.1418': attribute type 29 has an invalid length. [ 414.298357][T11207] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1417'. [ 414.329154][T11211] netlink: 'syz.1.1418': attribute type 29 has an invalid length. [ 414.387645][T11205] netlink: 'syz.1.1418': attribute type 29 has an invalid length. [ 414.562584][T11212] netlink: 'syz.1.1418': attribute type 29 has an invalid length. [ 414.578738][T11222] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1420'. [ 417.657114][T11235] syzkaller0: entered promiscuous mode [ 417.669513][T11235] syzkaller0: entered allmulticast mode [ 417.688919][T11240] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1424'. [ 419.789251][T11268] netlink: 'syz.3.1430': attribute type 10 has an invalid length. [ 419.816279][T11268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1430'. [ 419.916947][T11268] batman_adv: : Adding interface: virt_wifi0 [ 419.938739][T11268] batman_adv: : The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.986516][T11268] batman_adv: : Interface activated: virt_wifi0 [ 420.314074][T11287] netlink: 'syz.0.1437': attribute type 21 has an invalid length. [ 420.322433][T11287] netlink: 'syz.0.1437': attribute type 6 has an invalid length. [ 420.331796][T11287] netlink: 'syz.0.1437': attribute type 1 has an invalid length. [ 421.216464][T11298] netlink: 'syz.3.1439': attribute type 63 has an invalid length. [ 421.257072][T11298] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1439'. [ 421.536946][T11297] syzkaller0: entered promiscuous mode [ 421.552614][T11297] syzkaller0: entered allmulticast mode [ 421.788283][T11315] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1442'. [ 423.412409][T11311] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1442'. [ 423.424818][T11313] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1442'. [ 423.549975][T11317] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1443'. [ 424.243499][T11329] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1447'. [ 424.841963][T11343] netlink: 'syz.3.1451': attribute type 15 has an invalid length. [ 424.871077][T11343] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1451'. [ 425.008978][T11343] netlink: 'syz.3.1451': attribute type 15 has an invalid length. [ 425.066113][T11343] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1451'. [ 425.131196][T11345] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 425.162114][T11345] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 425.191368][T11345] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 425.220829][T11345] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 425.258912][T11345] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 425.302740][T11345] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 425.329962][T11345] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 425.370523][T11345] netlink: 'syz.3.1451': attribute type 10 has an invalid length. [ 425.677933][T11355] syzkaller0: entered promiscuous mode [ 425.684231][T11355] syzkaller0: entered allmulticast mode [ 426.109496][T11364] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1456'. [ 426.120502][T11364] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 427.916387][T11369] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1457'. [ 429.081073][T11400] syzkaller0: entered promiscuous mode [ 429.091287][T11400] syzkaller0: entered allmulticast mode [ 432.273670][T11405] validate_nla: 25 callbacks suppressed [ 432.273691][T11405] netlink: 'syz.3.1469': attribute type 21 has an invalid length. [ 432.301460][T11405] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1469'. [ 432.343101][T11408] sit0: entered promiscuous mode [ 432.455569][T11411] netlink: 'syz.0.1470': attribute type 41 has an invalid length. [ 433.122138][T11419] syz.1.1471 (11419) used greatest stack depth: 17672 bytes left [ 433.448201][T11428] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1474'. [ 433.829508][T11434] netlink: 'syz.3.1477': attribute type 21 has an invalid length. [ 433.846561][T11434] netlink: 'syz.3.1477': attribute type 4 has an invalid length. [ 433.864338][T11434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1477'. [ 434.172884][T11439] syzkaller0: entered promiscuous mode [ 434.188216][T11439] syzkaller0: entered allmulticast mode [ 436.058725][T11440] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 436.068350][T11444] netlink: 'syz.0.1480': attribute type 3 has an invalid length. [ 436.083312][T11444] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1480'. [ 436.095701][T11447] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1482'. [ 436.261784][T11452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1483'. [ 436.279096][T11452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1483'. [ 436.297385][T11452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1483'. [ 436.489117][T11464] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1487'. [ 436.501830][T11464] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 437.159787][T11489] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1492'. [ 437.400419][T11499] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1497'. [ 437.457305][T11493] syzkaller0: entered promiscuous mode [ 437.496303][T11493] syzkaller0: entered allmulticast mode [ 437.523496][T11499] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1497'. [ 439.477474][T11532] netlink: 'syz.3.1506': attribute type 21 has an invalid length. [ 439.742479][T11545] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1510'. [ 439.778215][T11540] netlink: 'syz.2.1509': attribute type 29 has an invalid length. [ 439.827551][T11540] netlink: 'syz.2.1509': attribute type 29 has an invalid length. [ 439.838948][T11544] netlink: 'syz.2.1509': attribute type 29 has an invalid length. [ 440.033665][ T6508] wlan1: Trigger new scan to find an IBSS to join [ 440.205793][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.212217][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.249651][T11558] netlink: set zone limit has 8 unknown bytes [ 440.578904][T11562] syzkaller0: entered promiscuous mode [ 440.598161][T11562] syzkaller0: entered allmulticast mode [ 441.069427][T11577] netlink: 'syz.3.1519': attribute type 3 has an invalid length. [ 441.082608][T11577] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1519'. [ 441.241024][T11581] netlink: 'syz.2.1520': attribute type 10 has an invalid length. [ 441.252363][T11581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1520'. [ 441.263508][T11582] netlink: 'syz.2.1520': attribute type 10 has an invalid length. [ 441.271384][T11582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1520'. [ 442.616440][T11584] netlink: 'syz.3.1521': attribute type 4 has an invalid length. [ 442.632541][T11584] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1521'. [ 442.734753][T11587] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 442.750494][T11587] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1522'. [ 444.043659][ T59] wlan1: Trigger new scan to find an IBSS to join [ 445.765099][ T6510] wlan1: Creating new IBSS network, BSSID b2:33:ac:b7:2b:98 [ 445.801550][T11597] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1526'. [ 445.844681][T11599] netlink: 'syz.2.1527': attribute type 10 has an invalid length. [ 445.853028][T11599] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1527'. [ 445.939204][T11608] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1528'. [ 446.053591][T11611] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1530'. [ 446.072855][T11611] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1530'. [ 446.376126][T11621] syzkaller0: entered promiscuous mode [ 446.381796][T11621] syzkaller0: entered allmulticast mode [ 446.518047][T11632] sctp: [Deprecated]: syz.0.1536 (pid 11632) Use of int in maxseg socket option. [ 446.518047][T11632] Use struct sctp_assoc_value instead [ 448.479464][T11632] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1536'. [ 448.499519][T11632] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 448.642147][T11654] netlink: 'syz.0.1542': attribute type 3 has an invalid length. [ 448.660640][T11651] sock: sock_timestamping_bind_phc: sock not bind to device [ 448.672866][T11654] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1542'. [ 448.687176][T11655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1540'. [ 448.732628][T11655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1540'. [ 448.754138][T11649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1540'. [ 448.772308][T11652] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1540'. [ 449.003635][T11658] netlink: 'syz.0.1542': attribute type 39 has an invalid length. [ 449.033646][T11664] netlink: 'syz.0.1542': attribute type 39 has an invalid length. [ 449.464711][T11674] netlink: 'syz.3.1546': attribute type 17 has an invalid length. [ 449.486366][T11674] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 450.515895][T11687] delete_channel: no stack [ 450.820093][T11712] netlink: 'syz.0.1555': attribute type 28 has an invalid length. [ 450.851285][T11712] netlink: 'syz.0.1555': attribute type 29 has an invalid length. [ 450.874908][T11712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1555'. [ 457.004443][T11805] netlink: set zone limit has 8 unknown bytes [ 457.578775][T11819] netlink: 'syz.0.1586': attribute type 9 has an invalid length. [ 457.595511][T11819] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1586'. [ 457.641027][T11823] netlink: 'syz.2.1587': attribute type 2 has an invalid length. [ 457.991747][T11842] netlink: 'syz.0.1593': attribute type 2 has an invalid length. [ 458.148829][T11849] netlink: 'syz.0.1595': attribute type 64 has an invalid length. [ 458.184458][T11849] netlink: 'syz.0.1595': attribute type 64 has an invalid length. [ 458.201697][T11848] netlink: 'syz.0.1595': attribute type 64 has an invalid length. [ 458.211029][T11848] netlink: 'syz.0.1595': attribute type 64 has an invalid length. [ 458.219312][T11848] netlink: 'syz.0.1595': attribute type 64 has an invalid length. [ 458.227418][T11848] netlink: 'syz.0.1595': attribute type 64 has an invalid length. [ 458.236353][T11848] netlink: 'syz.0.1595': attribute type 64 has an invalid length. [ 458.472082][T11860] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1599'. [ 458.503025][T11860] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1599'. [ 459.064996][T11875] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1605'. [ 459.097700][T11873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.106031][T11873] IPv6: NLM_F_CREATE should be set when creating new route [ 459.129262][T11875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1605'. [ 459.264878][T11885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1609'. [ 459.464505][T11895] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1610'. [ 459.474169][T11895] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1610'. [ 460.558389][T11909] syzkaller0: entered promiscuous mode [ 460.571808][T11909] syzkaller0: entered allmulticast mode [ 460.905569][T11922] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1619'. [ 462.369899][T11919] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1618'. [ 462.406669][T11922] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 462.661407][T11934] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1623'. [ 463.414495][T11956] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1628'. [ 465.374156][T11982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1635'. [ 466.087690][T12006] validate_nla: 33 callbacks suppressed [ 466.087707][T12006] netlink: 'syz.1.1640': attribute type 10 has an invalid length. [ 466.140907][T12006] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1640'. [ 466.156522][T12008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1641'. [ 466.532834][T12015] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 466.778658][T12012] syzkaller0: entered promiscuous mode [ 466.788855][T12012] syzkaller0: entered allmulticast mode [ 466.798118][T12014] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 468.664305][T12039] netlink: 'syz.2.1646': attribute type 10 has an invalid length. [ 468.673895][T12043] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1646'. [ 468.945703][T12064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.959800][T12064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.986670][T12064] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.226554][T12071] syzkaller0: entered promiscuous mode [ 469.233059][T12071] syzkaller0: entered allmulticast mode [ 470.868919][T12087] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1659'. [ 470.897707][T12087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.944418][T12086] tap0: tun_chr_ioctl cmd 1074025676 [ 470.950353][T12086] tap0: owner set to 776 [ 470.981972][T12091] veth0_vlan: entered allmulticast mode [ 471.084954][T12091] veth0_vlan: left promiscuous mode [ 471.114647][T12091] veth0_vlan: entered promiscuous mode [ 471.868048][T12125] syzkaller0: entered promiscuous mode [ 471.877922][T12125] syzkaller0: entered allmulticast mode [ 472.331494][T12137] netlink: 'syz.2.1673': attribute type 16 has an invalid length. [ 472.348598][T12137] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1673'. [ 472.922608][T12159] syzkaller0: entered promiscuous mode [ 472.929523][T12159] syzkaller0: entered allmulticast mode [ 475.222047][T12180] netlink: 'syz.1.1683': attribute type 64 has an invalid length. [ 475.867420][T12218] syzkaller0: entered promiscuous mode [ 475.878116][T12218] syzkaller0: entered allmulticast mode [ 477.703537][T12226] : port 1(hsr0) entered blocking state [ 477.709969][T12226] : port 1(hsr0) entered disabled state [ 477.716349][T12226] hsr0: entered allmulticast mode [ 477.721419][T12226] hsr_slave_0: entered allmulticast mode [ 477.732663][T12226] hsr_slave_1: entered allmulticast mode [ 477.740341][T12226] hsr0: entered promiscuous mode [ 477.759463][T12228] : port 1(hsr0) entered blocking state [ 477.765325][T12228] : port 1(hsr0) entered forwarding state [ 478.088314][T12246] netlink: 'syz.3.1696': attribute type 10 has an invalid length. [ 478.238366][T12252] tc_dump_action: action bad kind [ 478.303304][T12252] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1698'. [ 478.320144][T12252] netlink: zone id is out of range [ 478.326307][T12252] netlink: zone id is out of range [ 478.331687][T12252] netlink: zone id is out of range [ 478.346346][T12252] netlink: zone id is out of range [ 478.351695][T12252] netlink: zone id is out of range [ 478.357855][T12252] netlink: zone id is out of range [ 478.372504][T12252] netlink: zone id is out of range [ 478.380165][T12252] netlink: zone id is out of range [ 478.386257][T12252] netlink: zone id is out of range [ 478.391802][T12252] netlink: zone id is out of range [ 478.628263][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1702'. [ 478.777062][T12268] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1702'. [ 479.520531][T12267] syzkaller0: entered promiscuous mode [ 479.526148][T12267] syzkaller0: entered allmulticast mode [ 479.998739][T12286] netlink: 'syz.1.1707': attribute type 29 has an invalid length. [ 481.222713][T12275] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1705'. [ 481.231995][T12276] netlink: 'syz.3.1705': attribute type 21 has an invalid length. [ 481.241960][T12286] netlink: 'syz.1.1707': attribute type 29 has an invalid length. [ 481.513536][ T5085] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 482.348837][T12316] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.1714'. [ 484.275536][T12360] syzkaller0: entered promiscuous mode [ 484.281179][T12360] syzkaller0: entered allmulticast mode [ 487.105061][T12380] tap0: tun_chr_ioctl cmd 1074025677 [ 487.111107][T12380] tap0: linktype set to 804 [ 487.632564][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 490.493988][ T5085] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 490.697733][T12407] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1738'. [ 491.936879][T12409] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 491.959963][T12409] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 491.980904][T12414] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 492.012388][T12414] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 492.269263][T12419] syzkaller0: entered promiscuous mode [ 492.290366][T12419] syzkaller0: entered allmulticast mode [ 492.512616][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 492.529346][T12433] netlink: 'syz.3.1746': attribute type 11 has an invalid length. [ 492.537699][T12433] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 492.570137][T12433] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 492.602476][T12433] netlink: 'syz.3.1746': attribute type 2 has an invalid length. [ 492.623573][T12433] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.1746'. [ 494.920216][T12437] netlink: 'syz.1.1749': attribute type 2 has an invalid length. [ 494.928154][T12437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1749'. [ 495.777025][T12469] TCP: TCP_TX_DELAY enabled [ 498.097379][T12468] delete_channel: no stack [ 498.953454][T12498] syzkaller0: left promiscuous mode [ 498.959985][T12498] syzkaller0: left allmulticast mode [ 500.393450][T12517] netlink: 'syz.1.1767': attribute type 1 has an invalid length. [ 500.401267][T12517] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1767'. [ 500.684438][T12529] syzkaller0: entered promiscuous mode [ 500.690114][T12529] syzkaller0: entered allmulticast mode [ 501.643221][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.649667][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.193939][T12543] delete_channel: no stack [ 504.207211][T12537] syzkaller0: entered promiscuous mode [ 504.215044][T12537] syzkaller0: entered allmulticast mode [ 504.585221][T12569] delete_channel: no stack [ 504.590342][T12569] delete_channel: no stack [ 507.136622][T12569] netlink: 13991 bytes leftover after parsing attributes in process `syz.0.1778'. [ 507.150302][T12588] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1780'. [ 507.208539][T12592] netlink: 'syz.3.1780': attribute type 3 has an invalid length. [ 507.235321][T12592] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1780'. [ 507.250331][T12599] netlink: 'syz.1.1782': attribute type 13 has an invalid length. [ 507.262392][T12599] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.1782'. [ 507.347247][T12603] netlink: 'syz.2.1784': attribute type 3 has an invalid length. [ 507.365423][T12601] syzkaller0: entered promiscuous mode [ 507.368467][T12603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1784'. [ 507.393150][T12601] syzkaller0: entered allmulticast mode [ 509.359849][T12620] delete_channel: no stack [ 510.401552][T12648] netlink: 'syz.2.1791': attribute type 10 has an invalid length. [ 510.775092][T12666] netlink: 'syz.0.1796': attribute type 4 has an invalid length. [ 510.798888][T12666] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1796'. [ 510.826908][T12658] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1796'. [ 511.323253][T12678] netlink: 'syz.1.1801': attribute type 10 has an invalid length. [ 511.760743][T12676] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.1800'. [ 511.800787][T12681] netlink: 'syz.0.1800': attribute type 21 has an invalid length. [ 511.814196][T12681] netlink: 'syz.0.1800': attribute type 25 has an invalid length. [ 511.832961][T12681] netlink: 'syz.0.1800': attribute type 27 has an invalid length. [ 511.852567][T12681] netlink: 'syz.0.1800': attribute type 28 has an invalid length. [ 511.870060][T12688] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1803'. [ 512.046003][T12695] syzkaller0: entered promiscuous mode [ 512.067540][T12695] syzkaller0: entered allmulticast mode [ 515.748612][T12707] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.1807'. [ 515.765852][T12708] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.1807'. [ 516.449314][T12739] validate_nla: 2 callbacks suppressed [ 516.449330][T12739] netlink: 'syz.2.1815': attribute type 29 has an invalid length. [ 516.536517][T12739] netlink: 'syz.2.1815': attribute type 29 has an invalid length. [ 516.557428][T12743] netlink: 'syz.2.1815': attribute type 29 has an invalid length. [ 518.270098][T12752] syzkaller0: entered promiscuous mode [ 518.298400][T12752] syzkaller0: entered allmulticast mode [ 519.459662][T12767] netlink: 'syz.1.1823': attribute type 3 has an invalid length. [ 519.468005][T12767] netlink: 'syz.1.1823': attribute type 1 has an invalid length. [ 519.495411][T12767] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1823'. [ 520.911758][T12758] netlink: 'syz.2.1821': attribute type 10 has an invalid length. [ 520.920443][T12758] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1821'. [ 520.931535][T12758] hsr0: entered promiscuous mode [ 520.937468][T12758] bridge0: port 2(hsr0) entered blocking state [ 520.944312][T12758] bridge0: port 2(hsr0) entered disabled state [ 520.950740][T12758] hsr0: entered allmulticast mode [ 520.972253][T12758] hsr_slave_0: entered allmulticast mode [ 521.002448][T12766] netlink: 'syz.1.1823': attribute type 10 has an invalid length. [ 523.247837][T12813] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1831'. [ 523.522174][T12817] syzkaller0: entered promiscuous mode [ 523.551973][T12817] syzkaller0: entered allmulticast mode [ 523.559636][T12819] netlink: 'syz.0.1833': attribute type 39 has an invalid length. [ 525.984791][T12855] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1843'. [ 527.803951][T12851] tap0: tun_chr_ioctl cmd 1074025692 [ 527.809469][T12852] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1841'. [ 527.819063][T12852] net_ratelimit: 331 callbacks suppressed [ 527.819075][T12852] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 527.861488][T12855] netlink: 22808 bytes leftover after parsing attributes in process `syz.0.1843'. [ 529.071309][T12889] syzkaller0: entered promiscuous mode [ 529.122451][T12889] syzkaller0: entered allmulticast mode [ 531.021867][T12914] netlink: 'syz.3.1861': attribute type 10 has an invalid length. [ 531.202055][T12922] netlink: 127924 bytes leftover after parsing attributes in process `syz.1.1863'. [ 531.216446][T12922] netlink: 16384 bytes leftover after parsing attributes in process `syz.1.1863'. [ 531.285512][T12920] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 531.291074][T12920] dvmrp1: persist disabled [ 531.542039][T12924] delete_channel: no stack [ 531.891687][T12941] syzkaller0: entered promiscuous mode [ 531.911673][T12941] syzkaller0: entered allmulticast mode [ 535.710196][T12965] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1874'. [ 536.533238][T12987] syzkaller0: entered promiscuous mode [ 536.539023][T12987] syzkaller0: entered allmulticast mode [ 538.384939][T12994] netlink: 'syz.2.1884': attribute type 2 has an invalid length. [ 538.761239][T13018] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1892'. [ 538.781120][T13018] openvswitch: netlink: Key type 29 is not supported [ 539.071390][T13029] netlink: 'syz.3.1895': attribute type 10 has an invalid length. [ 539.089357][T13022] delete_channel: no stack [ 539.192337][T13033] netlink: 'syz.1.1897': attribute type 13 has an invalid length. [ 539.200356][T13033] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1897'. [ 539.346556][T13035] syzkaller0: entered promiscuous mode [ 539.353054][T13035] syzkaller0: entered allmulticast mode [ 539.365731][T13040] netlink: 'syz.3.1900': attribute type 21 has an invalid length. [ 539.375976][T13040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1900'. [ 539.416649][T13045] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1899'. [ 539.494106][T13043] netlink: 126572 bytes leftover after parsing attributes in process `syz.1.1901'. [ 541.806510][T13062] netlink: 'syz.2.1905': attribute type 39 has an invalid length. [ 542.017357][T13069] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1907'. [ 542.290794][T13070] delete_channel: no stack [ 542.495964][T13077] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1918'. [ 542.874295][T13093] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1911'. [ 542.889327][T13085] syzkaller0: entered promiscuous mode [ 542.902718][T13085] syzkaller0: entered allmulticast mode [ 542.942451][T13089] netlink: 'syz.1.1912': attribute type 21 has an invalid length. [ 542.964256][T13088] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1913'. [ 543.027698][T13089] netlink: 'syz.1.1912': attribute type 1 has an invalid length. [ 543.040066][T13088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.061694][T13089] netlink: 'syz.1.1912': attribute type 3 has an invalid length. [ 543.106469][T13089] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1912'. [ 545.688359][T13106] netlink: 'syz.3.1916': attribute type 29 has an invalid length. [ 545.781700][T13106] netlink: 'syz.3.1916': attribute type 29 has an invalid length. [ 545.897187][T13111] netlink: 'syz.0.1919': attribute type 29 has an invalid length. [ 545.926482][T13111] netlink: 'syz.0.1919': attribute type 29 has an invalid length. [ 546.000117][T13117] netlink: 'syz.3.1921': attribute type 21 has an invalid length. [ 546.008648][T13117] netlink: 'syz.3.1921': attribute type 4 has an invalid length. [ 546.017039][T13117] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1921'. [ 546.042539][T13115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1920'. [ 546.281322][T13125] netlink: 161340 bytes leftover after parsing attributes in process `syz.1.1924'. [ 546.461428][T13133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1926'. [ 546.498998][T13134] netlink: 'syz.1.1925': attribute type 13 has an invalid length. [ 546.507899][T13134] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1925'. [ 546.611766][T13134] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1925'. [ 546.677648][T13141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.810521][T13145] syzkaller0: entered promiscuous mode [ 546.819130][T13145] syzkaller0: entered allmulticast mode [ 550.546365][T13183] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1937'. [ 550.565120][T13183] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1937'. [ 550.578074][T13183] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1937'. [ 550.589231][T13186] netlink: 'syz.2.1940': attribute type 10 has an invalid length. [ 550.728319][T13192] netlink: 'syz.1.1942': attribute type 10 has an invalid length. [ 550.751806][T13190] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 551.340929][T13198] syzkaller0: entered promiscuous mode [ 551.355317][T13198] syzkaller0: entered allmulticast mode [ 554.168458][T13229] netlink: 'syz.0.1952': attribute type 21 has an invalid length. [ 554.182450][T13229] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1952'. [ 554.200254][T13229] netlink: 'syz.0.1952': attribute type 10 has an invalid length. [ 555.032473][T13241] syzkaller0: entered promiscuous mode [ 555.038020][T13241] syzkaller0: entered allmulticast mode [ 555.212609][T13250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.566665][T13258] netlink: 'syz.0.1960': attribute type 10 has an invalid length. [ 555.604691][T13258] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1960'. [ 556.191867][T13267] netlink: 'syz.1.1959': attribute type 21 has an invalid length. [ 556.592812][T13275] netlink: 'syz.1.1964': attribute type 13 has an invalid length. [ 556.606242][T13275] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1964'. [ 557.185962][T13275] erspan0: refused to change device tx_queue_len [ 557.423699][T13282] syzkaller0: entered promiscuous mode [ 557.437922][T13282] syzkaller0: entered allmulticast mode [ 557.439453][T13289] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1969'. [ 557.470946][T13289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1969'. [ 559.748464][T13300] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1970'. [ 561.223693][T13330] sit0: entered promiscuous mode [ 561.998334][T13338] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1980'. [ 562.453273][T13354] netlink: 'syz.0.1983': attribute type 29 has an invalid length. [ 562.524072][T13354] netlink: 'syz.0.1983': attribute type 29 has an invalid length. [ 562.589672][T13356] netlink: 'syz.0.1983': attribute type 29 has an invalid length. [ 562.615351][T13357] netlink: 'syz.0.1983': attribute type 29 has an invalid length. [ 562.754507][T13359] syzkaller0: entered promiscuous mode [ 562.760050][T13359] syzkaller0: entered allmulticast mode [ 563.083679][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.094827][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.221862][T13380] FAULT_INJECTION: forcing a failure. [ 564.221862][T13380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.235597][T13380] CPU: 0 PID: 13380 Comm: syz.1.1988 Not tainted syzkaller #0 [ 564.243116][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.253235][T13380] Call Trace: [ 564.256549][T13380] [ 564.259517][T13380] dump_stack_lvl+0x18c/0x250 [ 564.264351][T13380] ? show_regs_print_info+0x20/0x20 [ 564.269607][T13380] ? load_image+0x420/0x420 [ 564.274164][T13380] ? __might_fault+0xaa/0x120 [ 564.278930][T13380] ? __lock_acquire+0x7d80/0x7d80 [ 564.283984][T13380] should_fail_ex+0x394/0x4c0 [ 564.288702][T13380] _copy_from_user+0x2f/0xe0 [ 564.293324][T13380] kstrtouint_from_user+0xde/0x170 [ 564.298466][T13380] ? kstrtol_from_user+0x190/0x190 [ 564.303618][T13380] proc_fail_nth_write+0x8f/0x250 [ 564.308719][T13380] ? proc_fail_nth_read+0x260/0x260 [ 564.313947][T13380] ? proc_fail_nth_read+0x260/0x260 [ 564.319174][T13380] vfs_write+0x299/0x9a0 [ 564.323481][T13380] ? file_end_write+0x250/0x250 [ 564.328358][T13380] ? __fget_files+0x28/0x460 [ 564.332976][T13380] ? __fget_files+0x3fc/0x460 [ 564.337682][T13380] ? __fdget_pos+0x2a3/0x330 [ 564.342296][T13380] ? ksys_write+0x74/0x260 [ 564.346762][T13380] ksys_write+0x151/0x260 [ 564.351122][T13380] ? __ia32_sys_read+0x90/0x90 [ 564.355918][T13380] ? lockdep_hardirqs_on+0x98/0x150 [ 564.361202][T13380] do_syscall_64+0x55/0xb0 [ 564.365643][T13380] ? clear_bhb_loop+0x40/0x90 [ 564.370413][T13380] ? clear_bhb_loop+0x40/0x90 [ 564.375121][T13380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.381050][T13380] RIP: 0033:0x7fa3b3d5e98e [ 564.385485][T13380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.405109][T13380] RSP: 002b:00007fa3b4cd8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.413553][T13380] RAX: ffffffffffffffda RBX: 00007fa3b4cd96c0 RCX: 00007fa3b3d5e98e [ 564.421564][T13380] RDX: 0000000000000001 RSI: 00007fa3b4cd90a0 RDI: 0000000000000007 [ 564.429567][T13380] RBP: 00007fa3b4cd9090 R08: 0000000000000000 R09: 0000000000000000 [ 564.437563][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.445550][T13380] R13: 00007fa3b40263f8 R14: 00007fa3b4026360 R15: 00007ffc5d7352a8 [ 564.453563][T13380] [ 565.279079][T13354] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 565.284803][T13354] dvmrp1: persist disabled [ 565.294045][T13357] netlink: 'syz.0.1983': attribute type 29 has an invalid length. [ 565.746686][T13390] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1992'. [ 566.221100][T13405] netlink: 'syz.3.1996': attribute type 27 has an invalid length. [ 566.252606][T13405] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1996'. [ 568.479559][T13435] syzkaller0: entered promiscuous mode [ 568.485257][T13435] syzkaller0: entered allmulticast mode [ 571.160003][T13450] netlink: 'syz.1.2004': attribute type 10 has an invalid length. [ 571.182868][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.191972][T13450] bridge_slave_1: left allmulticast mode [ 571.198862][T13450] bridge_slave_1: left promiscuous mode [ 571.214470][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.418908][T13467] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2009'. [ 571.610521][T13473] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.2010'. [ 571.711531][T13477] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 571.732641][T13477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2011'. [ 571.799007][T13477] batman_adv: batadv0: Adding interface:  [ 571.816839][T13477] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.880175][T13477] batman_adv: batadv0: Interface activated:  [ 572.029023][T13480] netlink: 'syz.2.2011': attribute type 2 has an invalid length. [ 572.059874][T13480] netlink: 'syz.2.2011': attribute type 8 has an invalid length. [ 572.103354][T13480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2011'. [ 572.246858][T13485] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 572.595913][T13497] netlink: 'syz.3.2016': attribute type 10 has an invalid length. [ 572.872724][T13508] netlink: 'syz.0.2019': attribute type 10 has an invalid length. [ 572.975811][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.997985][T13508] bridge_slave_1: left allmulticast mode [ 573.005650][T13508] bridge_slave_1: left promiscuous mode [ 573.021415][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.084501][T13508] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 574.401470][T13547] netlink: 'syz.3.2027': attribute type 4 has an invalid length. [ 574.456581][T13547] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2027'. [ 574.569798][T13555] syz.2.2029 (13555) used obsolete PPPIOCDETACH ioctl [ 575.312804][T13569] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2033'. [ 575.578907][T13576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2036'. [ 575.983116][T13597] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.2041'. [ 576.784481][T13614] netlink: 'syz.2.2044': attribute type 3 has an invalid length. [ 576.812531][T13614] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2044'. [ 576.896395][T13620] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 577.951164][T13651] netlink: 'syz.0.2052': attribute type 8 has an invalid length. [ 577.956889][T13657] netlink: 'syz.0.2052': attribute type 8 has an invalid length. [ 577.960068][T13651] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2052'. [ 577.982353][T13657] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2052'. [ 578.059542][T13647] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2051'. [ 578.125384][T13657] netlink: 'syz.0.2052': attribute type 10 has an invalid length. [ 578.142735][T13651] netlink: 'syz.0.2052': attribute type 10 has an invalid length. [ 578.212441][T13657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2052'. [ 578.221896][T13651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2052'. [ 579.123623][T13676] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.2058'. [ 579.377634][T13683] netlink: 'syz.0.2060': attribute type 3 has an invalid length. [ 579.402347][T13683] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 579.410211][T13683] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 579.445831][T13683] netlink: 'syz.0.2060': attribute type 2 has an invalid length. [ 579.474766][T13683] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.2060'. [ 579.547071][T13686] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2061'. [ 580.640357][T13718] netlink: 'syz.2.2070': attribute type 21 has an invalid length. [ 580.674570][T13718] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2070'. [ 581.712031][T13736] syzkaller0: entered promiscuous mode [ 581.727203][T13736] syzkaller0: entered allmulticast mode [ 581.820670][T13741] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 581.840006][T13741] CPU: 0 PID: 13741 Comm: syz.1.2077 Not tainted syzkaller #0 [ 581.847572][T13741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.857679][T13741] Call Trace: [ 581.861008][T13741] [ 581.863992][T13741] dump_stack_lvl+0x18c/0x250 [ 581.868748][T13741] ? show_regs_print_info+0x20/0x20 [ 581.874019][T13741] ? load_image+0x420/0x420 [ 581.878605][T13741] sysfs_warn_dup+0x8e/0xa0 [ 581.883182][T13741] sysfs_do_create_link_sd+0xc0/0x110 [ 581.888620][T13741] device_add_class_symlinks+0x1cf/0x240 [ 581.894369][T13741] device_add+0x4f9/0xc40 [ 581.898762][T13741] wiphy_register+0x1d99/0x2ac0 [ 581.903817][T13741] ? cfg80211_event_work+0x40/0x40 [ 581.909000][T13741] ? minstrel_ht_alloc+0x88a/0x990 [ 581.914237][T13741] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 581.920432][T13741] ieee80211_register_hw+0x2dd8/0x3b30 [ 581.926030][T13741] ? ieee80211_register_hw+0xfb1/0x3b30 [ 581.931647][T13741] ? ieee80211_tasklet_handler+0x20/0x20 [ 581.937340][T13741] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 581.943803][T13741] ? __debug_object_init+0xec/0x450 [ 581.949077][T13741] ? __asan_memset+0x22/0x40 [ 581.953733][T13741] ? __hrtimer_init+0x189/0x270 [ 581.958620][T13741] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 581.964420][T13741] ? mac80211_hwsim_free+0x220/0x220 [ 581.969737][T13741] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 581.975062][T13741] hwsim_new_radio_nl+0xdad/0x1a70 [ 581.980215][T13741] ? __nla_validate+0x50/0x50 [ 581.984939][T13741] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 581.991333][T13741] ? __nla_parse+0x40/0x50 [ 581.995793][T13741] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 582.002245][T13741] genl_family_rcv_msg_doit+0x21a/0x310 [ 582.007832][T13741] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 582.013775][T13741] ? bpf_lsm_capable+0x9/0x10 [ 582.018511][T13741] ? security_capable+0x89/0xb0 [ 582.023447][T13741] genl_rcv_msg+0x611/0x7a0 [ 582.028011][T13741] ? genl_bind+0x360/0x360 [ 582.032474][T13741] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 582.038857][T13741] netlink_rcv_skb+0x235/0x4c0 [ 582.043668][T13741] ? genl_bind+0x360/0x360 [ 582.048128][T13741] ? netlink_ack+0x1160/0x1160 [ 582.052935][T13741] ? __lock_acquire+0x7d80/0x7d80 [ 582.057993][T13741] ? net_generic+0x1e/0x240 [ 582.062541][T13741] ? down_read+0x1ac/0x2e0 [ 582.066987][T13741] genl_rcv+0x28/0x40 [ 582.070998][T13741] netlink_unicast+0x7b1/0x930 [ 582.075809][T13741] netlink_sendmsg+0x8d0/0xbf0 [ 582.080614][T13741] ? netlink_getsockopt+0x590/0x590 [ 582.085843][T13741] ? apparmor_socket_sendmsg+0x8e/0x330 [ 582.091454][T13741] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 582.096775][T13741] ? security_socket_sendmsg+0x80/0xa0 [ 582.102265][T13741] ? netlink_getsockopt+0x590/0x590 [ 582.107507][T13741] ____sys_sendmsg+0x61b/0x980 [ 582.112398][T13741] ? __asan_memset+0x22/0x40 [ 582.117021][T13741] ? __sys_sendmsg_sock+0x30/0x30 [ 582.122076][T13741] ? __import_iovec+0x5f2/0x850 [ 582.126970][T13741] ? import_iovec+0x73/0xa0 [ 582.131515][T13741] ___sys_sendmsg+0x2a6/0x360 [ 582.136234][T13741] ? __sys_sendmsg+0x2b0/0x2b0 [ 582.141090][T13741] __se_sys_sendmsg+0x1d0/0x2c0 [ 582.145975][T13741] ? __x64_sys_sendmsg+0x80/0x80 [ 582.150961][T13741] ? lockdep_hardirqs_on+0x98/0x150 [ 582.156202][T13741] do_syscall_64+0x55/0xb0 [ 582.160650][T13741] ? clear_bhb_loop+0x40/0x90 [ 582.165358][T13741] ? clear_bhb_loop+0x40/0x90 [ 582.170075][T13741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.176009][T13741] RIP: 0033:0x7fa3b3d9e159 [ 582.180460][T13741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.200096][T13741] RSP: 002b:00007fa3b4d5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.208552][T13741] RAX: ffffffffffffffda RBX: 00007fa3b4025fa0 RCX: 00007fa3b3d9e159 [ 582.216568][T13741] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 582.224577][T13741] RBP: 00007fa3b3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 582.232587][T13741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.240591][T13741] R13: 00007fa3b4026038 R14: 00007fa3b4025fa0 R15: 00007ffc5d7352a8 [ 582.248615][T13741] [ 582.447120][T13748] syzkaller0: entered promiscuous mode [ 582.464604][T13748] syzkaller0: entered allmulticast mode [ 582.972039][T13765] validate_nla: 2 callbacks suppressed [ 582.972059][T13765] netlink: 'syz.1.2084': attribute type 12 has an invalid length. [ 583.002411][T13765] __nla_validate_parse: 4 callbacks suppressed [ 583.002427][T13765] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2084'. [ 585.377494][ T5085] Bluetooth: hci2: ISO packet for unknown connection handle 21 [ 587.071233][T13774] netlink: 'syz.1.2086': attribute type 2 has an invalid length. [ 587.079406][T13774] netlink: 'syz.1.2086': attribute type 8 has an invalid length. [ 587.087946][T13774] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2086'. [ 587.099711][T13775] netlink: 'syz.1.2086': attribute type 2 has an invalid length. [ 587.112126][T13775] netlink: 'syz.1.2086': attribute type 8 has an invalid length. [ 587.120267][T13775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2086'. [ 587.250468][T13784] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2089'. [ 587.343800][T13783] delete_channel: no stack [ 587.382944][T13790] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2091'. [ 587.457540][T13790] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 587.531710][T13790] CPU: 0 PID: 13790 Comm: syz.3.2091 Not tainted syzkaller #0 [ 587.539261][T13790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.549371][T13790] Call Trace: [ 587.552747][T13790] [ 587.555728][T13790] dump_stack_lvl+0x18c/0x250 [ 587.560497][T13790] ? show_regs_print_info+0x20/0x20 [ 587.565765][T13790] ? load_image+0x420/0x420 [ 587.570343][T13790] sysfs_warn_dup+0x8e/0xa0 [ 587.574891][T13790] sysfs_do_create_link_sd+0xc0/0x110 [ 587.580306][T13790] device_add_class_symlinks+0x1cf/0x240 [ 587.585993][T13790] device_add+0x4f9/0xc40 [ 587.590368][T13790] wiphy_register+0x1d99/0x2ac0 [ 587.595280][T13790] ? cfg80211_event_work+0x40/0x40 [ 587.600432][T13790] ? minstrel_ht_alloc+0x88a/0x990 [ 587.605585][T13790] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 587.611683][T13790] ieee80211_register_hw+0x2dd8/0x3b30 [ 587.617201][T13790] ? ieee80211_register_hw+0xfb1/0x3b30 [ 587.622797][T13790] ? ieee80211_tasklet_handler+0x20/0x20 [ 587.628468][T13790] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 587.634423][T13790] ? __debug_object_init+0xec/0x450 [ 587.639677][T13790] ? __asan_memset+0x22/0x40 [ 587.644318][T13790] ? __hrtimer_init+0x189/0x270 [ 587.649206][T13790] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 587.654990][T13790] ? mac80211_hwsim_free+0x220/0x220 [ 587.660305][T13790] ? rcu_is_watching+0x15/0xb0 [ 587.665106][T13790] ? kstrndup+0xbd/0x140 [ 587.669433][T13790] hwsim_new_radio_nl+0xdad/0x1a70 [ 587.674592][T13790] ? __nla_validate+0x50/0x50 [ 587.679326][T13790] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 587.685706][T13790] ? __nla_parse+0x40/0x50 [ 587.690168][T13790] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 587.696597][T13790] genl_family_rcv_msg_doit+0x21a/0x310 [ 587.702201][T13790] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 587.708151][T13790] ? bpf_lsm_capable+0x9/0x10 [ 587.712854][T13790] ? security_capable+0x89/0xb0 [ 587.717750][T13790] genl_rcv_msg+0x611/0x7a0 [ 587.722299][T13790] ? genl_bind+0x360/0x360 [ 587.726752][T13790] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 587.733117][T13790] ? lockdep_hardirqs_on+0x98/0x150 [ 587.738377][T13790] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 587.744628][T13790] netlink_rcv_skb+0x235/0x4c0 [ 587.749439][T13790] ? genl_bind+0x360/0x360 [ 587.753909][T13790] ? netlink_ack+0x1160/0x1160 [ 587.758728][T13790] ? __lock_acquire+0x7d80/0x7d80 [ 587.763793][T13790] ? net_generic+0x1e/0x240 [ 587.768348][T13790] ? down_read+0x1ac/0x2e0 [ 587.772799][T13790] genl_rcv+0x28/0x40 [ 587.776815][T13790] netlink_unicast+0x7b1/0x930 [ 587.781617][T13790] netlink_sendmsg+0x8d0/0xbf0 [ 587.786415][T13790] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 587.792654][T13790] ? netlink_getsockopt+0x590/0x590 [ 587.797890][T13790] ? apparmor_socket_sendmsg+0x8e/0x330 [ 587.803563][T13790] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 587.808881][T13790] ? security_socket_sendmsg+0x80/0xa0 [ 587.814370][T13790] ? netlink_getsockopt+0x590/0x590 [ 587.819596][T13790] ____sys_sendmsg+0x61b/0x980 [ 587.824413][T13790] ? __asan_memset+0x22/0x40 [ 587.829042][T13790] ? __sys_sendmsg_sock+0x30/0x30 [ 587.834105][T13790] ? __import_iovec+0x5f2/0x850 [ 587.839006][T13790] ? import_iovec+0x73/0xa0 [ 587.843559][T13790] ___sys_sendmsg+0x2a6/0x360 [ 587.848277][T13790] ? __sys_sendmsg+0x2b0/0x2b0 [ 587.853100][T13790] ? ktime_get+0x7f/0x280 [ 587.857495][T13790] __se_sys_sendmsg+0x1d0/0x2c0 [ 587.862385][T13790] ? __x64_sys_sendmsg+0x80/0x80 [ 587.867369][T13790] ? lockdep_hardirqs_on+0x98/0x150 [ 587.872600][T13790] do_syscall_64+0x55/0xb0 [ 587.877050][T13790] ? clear_bhb_loop+0x40/0x90 [ 587.881850][T13790] ? clear_bhb_loop+0x40/0x90 [ 587.886565][T13790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.892534][T13790] RIP: 0033:0x7f1cbfb9e159 [ 587.897076][T13790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.916711][T13790] RSP: 002b:00007f1cc0b12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.925164][T13790] RAX: ffffffffffffffda RBX: 00007f1cbfe25fa0 RCX: 00007f1cbfb9e159 [ 587.933176][T13790] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 587.941185][T13790] RBP: 00007f1cbfc3506b R08: 0000000000000000 R09: 0000000000000000 [ 587.949177][T13790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.957256][T13790] R13: 00007f1cbfe26038 R14: 00007f1cbfe25fa0 R15: 00007ffc7519f7d8 [ 587.965275][T13790] [ 588.072037][T13792] netlink: 'syz.1.2097': attribute type 39 has an invalid length. [ 588.694455][T13823] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2100'. [ 589.316044][T13839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.505760][T13844] syzkaller0: entered promiscuous mode [ 589.511420][T13844] syzkaller0: entered allmulticast mode [ 592.735527][T13906] netlink: 'syz.2.2127': attribute type 29 has an invalid length. [ 592.754372][T13904] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.2126'. [ 592.768952][T13902] netlink: 'syz.0.2124': attribute type 4 has an invalid length. [ 592.797300][T13904] openvswitch: netlink: Flow key attr not present in new flow. [ 592.823393][T13902] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2124'. [ 592.838760][T13907] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2127'. [ 592.917123][T13907] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2127'. [ 593.119746][T13906] netlink: 'syz.2.2127': attribute type 29 has an invalid length. [ 593.618355][T13913] netlink: 'syz.3.2128': attribute type 4 has an invalid length. [ 593.645128][T13913] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2128'. [ 593.786090][T13915] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 593.840471][T13915] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 593.851084][T13921] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 593.875363][T13915] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 593.897466][T13915] netlink: 'syz.0.2129': attribute type 29 has an invalid length. [ 593.929514][T13917] netlink: 'syz.1.2130': attribute type 4 has an invalid length. [ 593.951371][T13917] netlink: 'syz.1.2130': attribute type 10 has an invalid length. [ 593.972948][T13917] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2130'. [ 595.058245][T13956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2137'. [ 595.094417][T13956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2137'. [ 595.133283][T13947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2137'. [ 595.158931][T13957] netlink: 'syz.1.2137': attribute type 2 has an invalid length. [ 595.178972][T13957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2137'. [ 595.200140][T13950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2137'. [ 595.483927][T13959] sctp: [Deprecated]: syz.1.2139 (pid 13959) Use of int in maxseg socket option. [ 595.483927][T13959] Use struct sctp_assoc_value instead [ 596.283350][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'. [ 597.058665][T13996] ================================================================== [ 597.066812][T13996] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 597.074674][T13996] Write of size 72 at addr ffff88802f900990 by task syz.2.2150/13996 [ 597.082776][T13996] [ 597.085143][T13996] CPU: 1 PID: 13996 Comm: syz.2.2150 Not tainted syzkaller #0 [ 597.092643][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.102738][T13996] Call Trace: [ 597.106060][T13996] [ 597.109027][T13996] dump_stack_lvl+0x18c/0x250 [ 597.113762][T13996] ? read_lock_is_recursive+0x20/0x20 [ 597.119183][T13996] ? show_regs_print_info+0x20/0x20 [ 597.124437][T13996] ? load_image+0x420/0x420 [ 597.128986][T13996] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 597.134494][T13996] ? __virt_addr_valid+0x10c/0x380 [ 597.139697][T13996] ? __virt_addr_valid+0x10c/0x380 [ 597.144863][T13996] ? __virt_addr_valid+0x10c/0x380 [ 597.150037][T13996] print_report+0xa8/0x210 [ 597.154527][T13996] ? __bpf_get_stackid+0x6c7/0x900 [ 597.159687][T13996] kasan_report+0x117/0x150 [ 597.164237][T13996] ? __bpf_get_stackid+0x6c7/0x900 [ 597.169410][T13996] kasan_check_range+0x241/0x290 [ 597.174407][T13996] ? __bpf_get_stackid+0x6c7/0x900 [ 597.179610][T13996] __asan_memcpy+0x40/0x70 [ 597.184207][T13996] __bpf_get_stackid+0x6c7/0x900 [ 597.189308][T13996] bpf_get_stackid_pe+0x343/0x410 [ 597.194409][T13996] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 597.199925][T13996] bpf_overflow_handler+0x1fc/0x510 [ 597.205188][T13996] ? bpf_overflow_handler+0xde/0x510 [ 597.210550][T13996] ? tp_perf_event_destroy+0x20/0x20 [ 597.215886][T13996] ? perf_trace_preemptirq_template+0x144/0x330 [ 597.222214][T13996] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 597.229466][T13996] ? __perf_event_account_interrupt+0x187/0x280 [ 597.235764][T13996] __perf_event_overflow+0x461/0x660 [ 597.241116][T13996] perf_swevent_event+0x319/0x570 [ 597.246207][T13996] ? perf_tp_event+0x1550/0x1550 [ 597.251207][T13996] ___perf_sw_event+0x4ab/0x730 [ 597.256113][T13996] ? ___perf_sw_event+0x19e/0x730 [ 597.261182][T13996] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 597.267648][T13996] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 597.273418][T13996] ? rep_movs_alternative+0x4a/0x90 [ 597.278683][T13996] ? lockdep_hardirqs_on+0x98/0x150 [ 597.283932][T13996] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.290151][T13996] __perf_sw_event+0x139/0x270 [ 597.294978][T13996] do_user_addr_fault+0x1242/0x12d0 [ 597.300234][T13996] ? rcu_is_watching+0x15/0xb0 [ 597.305049][T13996] exc_page_fault+0x64/0x100 [ 597.309688][T13996] asm_exc_page_fault+0x26/0x30 [ 597.314587][T13996] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 597.320456][T13996] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 597.340143][T13996] RSP: 0018:ffffc90003917bd0 EFLAGS: 00050206 [ 597.346267][T13996] RAX: ffffffff84342b01 RBX: 000000000000056d RCX: 00000000000004ed [ 597.354281][T13996] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff888142738080 [ 597.362302][T13996] RBP: ffffc90003917d20 R08: 0000000000000004 R09: 0000000000000005 [ 597.370325][T13996] R10: dffffc0000000000 R11: ffffed10284e70ad R12: 00002000000024ed [ 597.378353][T13996] R13: 1ffff92000722fbd R14: ffff888142738000 R15: 0000200000001f80 [ 597.386378][T13996] ? rcuref_put_slowpath+0x101/0x150 [ 597.391730][T13996] _copy_from_user+0x8b/0xe0 [ 597.396393][T13996] generic_map_update_batch+0x58c/0x800 [ 597.401998][T13996] ? rcu_read_unlock+0xa0/0xa0 [ 597.406810][T13996] ? __fdget+0x180/0x210 [ 597.411132][T13996] ? rcu_read_unlock+0xa0/0xa0 [ 597.415950][T13996] bpf_map_do_batch+0x3f2/0x600 [ 597.420857][T13996] ? bpf_lsm_key_free+0x10/0x10 [ 597.425768][T13996] __sys_bpf+0x381/0x890 [ 597.430063][T13996] ? bpf_link_show_fdinfo+0x560/0x560 [ 597.435490][T13996] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 597.441714][T13996] __x64_sys_bpf+0x7c/0x90 [ 597.446186][T13996] do_syscall_64+0x55/0xb0 [ 597.450664][T13996] ? clear_bhb_loop+0x40/0x90 [ 597.455475][T13996] ? clear_bhb_loop+0x40/0x90 [ 597.460220][T13996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.466270][T13996] RIP: 0033:0x7febe059e159 [ 597.470734][T13996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.490488][T13996] RSP: 002b:00007febe14f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.498955][T13996] RAX: ffffffffffffffda RBX: 00007febe0825fa0 RCX: 00007febe059e159 [ 597.507107][T13996] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 597.515130][T13996] RBP: 00007febe063506b R08: 0000000000000000 R09: 0000000000000000 [ 597.523150][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.531172][T13996] R13: 00007febe0826038 R14: 00007febe0825fa0 R15: 00007fff2ec33e88 [ 597.539220][T13996] [ 597.542276][T13996] [ 597.544633][T13996] Allocated by task 13996: [ 597.549074][T13996] kasan_set_track+0x4e/0x70 [ 597.553716][T13996] __kasan_kmalloc+0x8f/0xa0 [ 597.558352][T13996] __kmalloc_node+0xb6/0x240 [ 597.563002][T13996] bpf_map_area_alloc+0x5e/0x110 [ 597.568002][T13996] prealloc_elems_and_freelist+0x86/0x1c0 [ 597.573777][T13996] stack_map_alloc+0x32b/0x4b0 [ 597.578587][T13996] map_create+0x877/0x12f0 [ 597.583049][T13996] __sys_bpf+0x651/0x890 [ 597.587345][T13996] __x64_sys_bpf+0x7c/0x90 [ 597.591808][T13996] do_syscall_64+0x55/0xb0 [ 597.596274][T13996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.602311][T13996] [ 597.604670][T13996] Last potentially related work creation: [ 597.610595][T13996] kasan_save_stack+0x3e/0x60 [ 597.615332][T13996] __kasan_record_aux_stack+0xaf/0xc0 [ 597.620757][T13996] call_rcu+0x153/0x900 [ 597.624963][T13996] nf_unregister_net_hooks+0xcb/0x130 [ 597.630497][T13996] nf_defrag_ipv6_disable+0x95/0xe0 [ 597.635813][T13996] nf_ct_netns_put+0x375/0x520 [ 597.640617][T13996] nf_conncount_destroy+0x41/0x150 [ 597.645857][T13996] ovs_ct_exit_finish+0xa5/0x210 [ 597.650889][T13996] ovs_exit_net+0xed/0x7a0 [ 597.655401][T13996] setup_net+0x7e5/0xa20 [ 597.659745][T13996] copy_net_ns+0x361/0x530 [ 597.664369][T13996] create_new_namespaces+0x3ce/0x700 [ 597.669714][T13996] copy_namespaces+0x42a/0x4a0 [ 597.674528][T13996] copy_process+0x16f6/0x3da0 [ 597.679240][T13996] kernel_clone+0x24b/0x8a0 [ 597.683784][T13996] __x64_sys_clone+0x1b7/0x230 [ 597.688611][T13996] do_syscall_64+0x55/0xb0 [ 597.693073][T13996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.699062][T13996] [ 597.701426][T13996] The buggy address belongs to the object at ffff88802f900980 [ 597.701426][T13996] which belongs to the cache kmalloc-cg-64 of size 64 [ 597.715705][T13996] The buggy address is located 16 bytes inside of [ 597.715705][T13996] allocated 40-byte region [ffff88802f900980, ffff88802f9009a8) [ 597.729738][T13996] [ 597.732106][T13996] The buggy address belongs to the physical page: [ 597.738564][T13996] page:ffffea0000be4000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802f900780 pfn:0x2f900 [ 597.750074][T13996] memcg:ffff88807ddaa401 [ 597.754351][T13996] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 597.762294][T13996] page_type: 0xffffffff() [ 597.766683][T13996] raw: 00fff00000000800 ffff888017c4da00 ffffea0000ae0700 dead000000000003 [ 597.775314][T13996] raw: ffff88802f900780 000000008020001e 00000001ffffffff ffff88807ddaa401 [ 597.783935][T13996] page dumped because: kasan: bad access detected [ 597.790395][T13996] page_owner tracks the page as allocated [ 597.796148][T13996] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5774, tgid 5774 (syz-executor), ts 87915864773, free_ts 87914593175 [ 597.814441][T13996] post_alloc_hook+0x1c1/0x200 [ 597.819272][T13996] get_page_from_freelist+0x2181/0x22a0 [ 597.824865][T13996] __alloc_pages+0x1f0/0x460 [ 597.829506][T13996] alloc_slab_page+0x5d/0x180 [ 597.834238][T13996] new_slab+0x87/0x2d0 [ 597.838355][T13996] ___slab_alloc+0xc5c/0x12f0 [ 597.843075][T13996] __kmem_cache_alloc_node+0x11f/0x250 [ 597.848611][T13996] kmalloc_trace+0x2a/0xe0 [ 597.853087][T13996] alloc_fdtable+0xca/0x2c0 [ 597.857644][T13996] dup_fd+0x747/0xa20 [ 597.861686][T13996] copy_files+0xaf/0x110 [ 597.865974][T13996] copy_process+0x157d/0x3da0 [ 597.870729][T13996] kernel_clone+0x24b/0x8a0 [ 597.875277][T13996] __x64_sys_clone+0x1b7/0x230 [ 597.880094][T13996] do_syscall_64+0x55/0xb0 [ 597.884563][T13996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.890514][T13996] page last free stack trace: [ 597.895220][T13996] free_unref_page_prepare+0x7d7/0x8f0 [ 597.900726][T13996] free_unref_page+0x32/0x2e0 [ 597.905451][T13996] __slab_free+0x35a/0x400 [ 597.909917][T13996] qlist_free_all+0x75/0xd0 [ 597.914479][T13996] kasan_quarantine_reduce+0x143/0x160 [ 597.919991][T13996] __kasan_slab_alloc+0x22/0x80 [ 597.924890][T13996] slab_post_alloc_hook+0x6a/0x4d0 [ 597.930057][T13996] kmem_cache_alloc+0x17e/0x2c0 [ 597.934968][T13996] vm_area_dup+0x27/0x270 [ 597.939341][T13996] copy_mm+0x11a6/0x1e30 [ 597.943627][T13996] copy_process+0x16c9/0x3da0 [ 597.948449][T13996] kernel_clone+0x24b/0x8a0 [ 597.953109][T13996] __x64_sys_clone+0x1b7/0x230 [ 597.958030][T13996] do_syscall_64+0x55/0xb0 [ 597.962497][T13996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.968441][T13996] [ 597.970801][T13996] Memory state around the buggy address: [ 597.976462][T13996] ffff88802f900880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 597.984564][T13996] ffff88802f900900: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 597.992666][T13996] >ffff88802f900980: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 598.000758][T13996] ^ [ 598.006167][T13996] ffff88802f900a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 598.014264][T13996] ffff88802f900a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 598.022543][T13996] ================================================================== [ 598.030668][T13996] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 598.037899][T13996] CPU: 1 PID: 13996 Comm: syz.2.2150 Not tainted syzkaller #0 [ 598.045398][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.055575][T13996] Call Trace: [ 598.058893][T13996] [ 598.061854][T13996] dump_stack_lvl+0x18c/0x250 [ 598.066601][T13996] ? show_regs_print_info+0x20/0x20 [ 598.071858][T13996] ? load_image+0x420/0x420 [ 598.076421][T13996] panic+0x2ca/0x720 [ 598.080361][T13996] ? __lock_acquire+0x7d80/0x7d80 [ 598.085439][T13996] ? bpf_jit_dump+0xd0/0xd0 [ 598.090067][T13996] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 598.096021][T13996] ? _raw_spin_unlock+0x40/0x40 [ 598.100920][T13996] ? __bpf_get_stackid+0x6c7/0x900 [ 598.106187][T13996] check_panic_on_warn+0x84/0xa0 [ 598.111182][T13996] ? __bpf_get_stackid+0x6c7/0x900 [ 598.116343][T13996] end_report+0x6f/0x130 [ 598.120635][T13996] kasan_report+0x128/0x150 [ 598.125188][T13996] ? __bpf_get_stackid+0x6c7/0x900 [ 598.130357][T13996] kasan_check_range+0x241/0x290 [ 598.135346][T13996] ? __bpf_get_stackid+0x6c7/0x900 [ 598.140512][T13996] __asan_memcpy+0x40/0x70 [ 598.145000][T13996] __bpf_get_stackid+0x6c7/0x900 [ 598.150000][T13996] bpf_get_stackid_pe+0x343/0x410 [ 598.155086][T13996] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 598.160599][T13996] bpf_overflow_handler+0x1fc/0x510 [ 598.165874][T13996] ? bpf_overflow_handler+0xde/0x510 [ 598.171217][T13996] ? tp_perf_event_destroy+0x20/0x20 [ 598.176565][T13996] ? perf_trace_preemptirq_template+0x144/0x330 [ 598.182869][T13996] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 598.190123][T13996] ? __perf_event_account_interrupt+0x187/0x280 [ 598.197556][T13996] __perf_event_overflow+0x461/0x660 [ 598.202907][T13996] perf_swevent_event+0x319/0x570 [ 598.207985][T13996] ? perf_tp_event+0x1550/0x1550 [ 598.213077][T13996] ___perf_sw_event+0x4ab/0x730 [ 598.217997][T13996] ? ___perf_sw_event+0x19e/0x730 [ 598.223122][T13996] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 598.229589][T13996] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 598.235371][T13996] ? rep_movs_alternative+0x4a/0x90 [ 598.240642][T13996] ? lockdep_hardirqs_on+0x98/0x150 [ 598.245892][T13996] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.252208][T13996] __perf_sw_event+0x139/0x270 [ 598.257024][T13996] do_user_addr_fault+0x1242/0x12d0 [ 598.262279][T13996] ? rcu_is_watching+0x15/0xb0 [ 598.267095][T13996] exc_page_fault+0x64/0x100 [ 598.271738][T13996] asm_exc_page_fault+0x26/0x30 [ 598.276646][T13996] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 598.282509][T13996] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 598.302178][T13996] RSP: 0018:ffffc90003917bd0 EFLAGS: 00050206 [ 598.308295][T13996] RAX: ffffffff84342b01 RBX: 000000000000056d RCX: 00000000000004ed [ 598.316315][T13996] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff888142738080 [ 598.324387][T13996] RBP: ffffc90003917d20 R08: 0000000000000004 R09: 0000000000000005 [ 598.332399][T13996] R10: dffffc0000000000 R11: ffffed10284e70ad R12: 00002000000024ed [ 598.340420][T13996] R13: 1ffff92000722fbd R14: ffff888142738000 R15: 0000200000001f80 [ 598.348473][T13996] ? rcuref_put_slowpath+0x101/0x150 [ 598.353837][T13996] _copy_from_user+0x8b/0xe0 [ 598.358455][T13996] generic_map_update_batch+0x58c/0x800 [ 598.364042][T13996] ? rcu_read_unlock+0xa0/0xa0 [ 598.368837][T13996] ? __fdget+0x180/0x210 [ 598.373114][T13996] ? rcu_read_unlock+0xa0/0xa0 [ 598.377917][T13996] bpf_map_do_batch+0x3f2/0x600 [ 598.382800][T13996] ? bpf_lsm_key_free+0x10/0x10 [ 598.387684][T13996] __sys_bpf+0x381/0x890 [ 598.391957][T13996] ? bpf_link_show_fdinfo+0x560/0x560 [ 598.397366][T13996] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.403573][T13996] __x64_sys_bpf+0x7c/0x90 [ 598.408024][T13996] do_syscall_64+0x55/0xb0 [ 598.412471][T13996] ? clear_bhb_loop+0x40/0x90 [ 598.417209][T13996] ? clear_bhb_loop+0x40/0x90 [ 598.421929][T13996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.427855][T13996] RIP: 0033:0x7febe059e159 [ 598.432298][T13996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.451946][T13996] RSP: 002b:00007febe14f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.460388][T13996] RAX: ffffffffffffffda RBX: 00007febe0825fa0 RCX: 00007febe059e159 [ 598.468385][T13996] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 598.476378][T13996] RBP: 00007febe063506b R08: 0000000000000000 R09: 0000000000000000 [ 598.484377][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.492369][T13996] R13: 00007febe0826038 R14: 00007febe0825fa0 R15: 00007fff2ec33e88 [ 598.500373][T13996] [ 598.504015][T13996] Kernel Offset: disabled [ 598.508358][T13996] Rebooting in 86400 seconds..